Warum kostenlos registrieren?

Nur als registriertes Mitglied hast Du vollen Zugriff auf alle Funktionen unserer Website. So kannst Du eigene Fragen stellen und hast die volle Übersicht über neue interessante Themen im Forum.
Jetzt kostenlos registrieren.

Login


Abstürze und langsames System

Alles über Betriebssysteme, Anwenderprogramme und andere Software-Probleme.

Abstürze und langsames System

Beitragvon luke123 am 12.06.2005, 20:06

Ich hab ein Problem. Wenn ich den arbeitsplatz öffne, dauert es dann immer mindestens 2 minuten bis die festplatten, etc. angezeigt werden. auch in anderen fenstern kommt das öfters vor (meist kürzer als 2 minuten manchmel hängt das system). schuld daran, wie ich herausgefunden habe, ist eine der svchost.exe. beende ich diese nämlich, will windows zwar den pc herunterfahren, das mit dem arbeitspaltz funktioniert aber dann. ich weiß das viele andere dienste von dieser svchost.exe abhänig sind. ich könnte sie zwar in den diensten deaktivieren, möchte aber nicht auf die dienste verzichten die von dieser svchost.exe abhängig sind. aktuelle antiviren und antispyware, etc. programme habe ich schon benutzt. kann mir jemand helffen?
luke123
Moderator
 
Beiträge: 2741
Registriert: 12.06.2005, 20:01
Wohnort: 93073 Neutraubling


Beitragvon Holy Marcell am 12.06.2005, 20:34

Damit dir geholfen werden kann, brauchen wir zunächst mal ein HijackThis-log.
  1. erstelle einen Ordner Hijack This irgendwo auf deiner Festplatte (HijackThis muß nicht installiert werden, aber es braucht einen eigenen Ordner, damit es Backups erstellen kann)
  2. lad dir HijackThis z.B. hier runter -->
    http://www.downloads.subratam.org/hijackthis.zip
  3. speicher die Hijack This.zip, und entpacke sie anschließend in deinen HijackThis-Ordner
  4. führe das Programm aus, (einfach Doppelklick auf die EXE),
  5. drücke Do a system scan and save a logfile
  6. speicher das logfile
  7. das gespeicherte logfile öffnet sich automatisch im Text-Editor , markiere alles (mit „Bearbeiten --> alles markieren“ oder über „Strg + A“), und kopiere es (mit „Rechtsklick --> Kopieren“ oder über "Strg + C")
  8. schreibe eine Antwort in deinem eigenen Beitrag (klick „post reply“) und füge das komplette logfile in deine Antwort ein (mit „Rechtsklick --> Einfügen“ oder über „Strg + V“), dann können die Experten dir sagen, was Sache ist.
oder lies dir die Anleitung hier mal durch -->
http://yourhighness.eddys-domain.de/hijackthis.html
Created by Miezmutz
Holy Marcell
 

Beitragvon luke123 am 13.06.2005, 15:13

Logfile of HijackThis v1.99.1
Scan saved at 15:12:19, on 13.06.2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\RunDll32.exe
C:\Programme\Microsoft Hardware\Keyboard\type32.exe
C:\Programme\Microsoft Hardware\Mouse\point32.exe
C:\WINDOWS\system32\config\svchost.exe
C:\Programme\Ahead\InCD\InCD.exe
C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe
C:\Programme\AVPersonal\AVGNT.EXE
C:\Programme\Eraser\eraser.exe
C:\Programme\E-Color\Registration\SonnReg.exe
C:\Program Files\E-Color\E-Color Indicator\TICIcon.exe
C:\Programme\AVPersonal\AVGUARD.EXE
C:\Programme\AVPersonal\AVWUPSRV.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Gemeinsame Dateien\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\System32\UAService7.exe
C:\Programme\RealVNC\WinVNC\WinVNC.exe
C:\WINDOWS\explorer.exe
C:\Programme\ICQLite\ICQLite.exe
C:\Programme\Netscape\Netscape\Netscp.exe
C:\Dokumente und Einstellungen\Christian Müller\Desktop\Hijack This\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = C:\WINDOWS\_hp.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.de/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = C:\WINDOWS\_hp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = C:\WINDOWS\_hp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = C:\WINDOWS\_sp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = C:\WINDOWS\_hp.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = C:\WINDOWS\_sp.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,(Default) = C:\WINDOWS\_sp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,(Default) = C:\WINDOWS\_sp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = C:\WINDOWS\_hp.html
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQToolbar\toolbaru.dll
O1 - Hosts: 3466709097 auto.search.msn.com
O1 - Hosts: 3466709097 sea.search.msn.com
O1 - Hosts: 3466709097 search.msn.com
O1 - Hosts: 3466709097 sitefinder.verisign.com
O1 - Hosts: 3466709097 www.your.com your.com
O1 - Hosts: 3466709097 com.org
O1 - Hosts: 3466690378 ad.doubleclick.net
O1 - Hosts: 3466690378 view.atdmt.com
O1 - Hosts: 3466690378 click.atdmt.com
O1 - Hosts: 3466690378 leader.linkexchange.com
O2 - BHO: DownloadRedirect Class - {00000000-6CB0-410C-8C3D-8FA8D2011D0A} - C:\Programme\iMesh\iMesh5\iMeshBHO.dll (file missing)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: bho2gr Class - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Programme\GetRight\xx2gr.dll
O2 - BHO: Idea2 SidebarBrowserMonitor Class - {45AD732C-2CE2-4666-B366-B2214AD57A49} - C:\Programme\Desktop Sidebar\sbhelp.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programme\google\googletoolbar2.dll
O3 - Toolbar: The Simple Toolbar Search - {A6790AA5-C6C7-4BCF-A46D-0FDAC4EA99EB} - C:\WINDOWS\System32\el43vp5fpr.dll (file missing)
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQToolbar\toolbaru.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programme\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [IntelliType] "C:\Programme\Microsoft Hardware\Keyboard\type32.exe"
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [ICQ Lite] C:\Programme\ICQLite\ICQLite.exe -minimize
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Service Process] C:\WINDOWS\system32\config\svchost.exe
O4 - HKLM\..\Run: [InCD] C:\Programme\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AVGCtrl] "C:\Programme\AVPersonal\AVGNT.EXE" /min
O4 - HKCU\..\Run: [Eraser] C:\Programme\Eraser\eraser.exe -hide
O4 - HKCU\..\Run: [NBJ] "C:\Programme\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\RunOnce: [ICQ Lite] C:\Programme\ICQLite\ICQLite.exe -trayboot
O4 - Startup: E-Color.lnk = C:\Programme\E-Color\Registration\SonnReg.exe
O4 - Startup: E-Color Indicator.lnk = C:\Program Files\E-Color\E-Color Indicator\TICIcon.exe
O8 - Extra context menu item: &Google Search - res://c:\programme\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Google-Suche - res://C:\Programme\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Programme\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: &Ins Deutsche übersetzen - res://C:\Programme\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Download with GetRight - C:\Programme\GetRight\GRdownload.htm
O8 - Extra context menu item: Im Cache gespeicherte Seite - res://c:\programme\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~1\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Open with GetRight Browser - C:\Programme\GetRight\GRbrowse.htm
O8 - Extra context menu item: Subscribe in Desktop Sidebar - res://C:\Programme\Desktop Sidebar\sbhelp.dll/menuhandler.html
O8 - Extra context menu item: Verweisseiten - res://c:\programme\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Ähnliche Seiten - res://c:\programme\google\GoogleToolbar2.dll/cmsimilar.html
O9 - Extra button: Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} - C:\Programme\Desktop Sidebar\sbhelp.dll
O9 - Extra 'Tools' menuitem: Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} - C:\Programme\Desktop Sidebar\sbhelp.dll
O9 - Extra button: The Simple Toolbar - {A26ABCF0-1C8F-46e7-A67C-0489DC21B9CC} - C:\WINDOWS\System32\el43vp5fpr.dll (file missing)
O9 - Extra 'Tools' menuitem: The Simple Toolbar - {A26ABCF0-1C8F-46e7-A67C-0489DC21B9CC} - C:\WINDOWS\System32\el43vp5fpr.dll (file missing)
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: eBay - Homepage - {EF79EAC5-3452-4E02-B8BD-BA4C89F1AC7A} - C:\PROGRAMME\IRFANVIEW\Ebay\Ebay.htm
O9 - Extra button: Klicke hier um das Projekt xp-AntiSpy zu unterstützen - {298F2FF7-6720-4854-BDBE-06DC7B02A71E} - C:\Programme\xp-AntiSpy\sponsoring\sponsor.html (HKCU)
O9 - Extra 'Tools' menuitem: Unterstützung für xp-AntiSpy - {298F2FF7-6720-4854-BDBE-06DC7B02A71E} - C:\Programme\xp-AntiSpy\sponsoring\sponsor.html (HKCU)
O16 - DPF: {53B8B406-42E4-4DD3-96E7-9DEC8CEB3DD8} (ICQVideoControl Class) - http://xtraz.icq.com/xtraz/activex/ICQVideoControl.cab
O16 - DPF: {8FA9D107-547B-4DBC-9D88-FABD891EDB0A} (shizmoo Class) - http://playroom.icq.com/odyssey_web11.cab
O16 - DPF: {AE1C01E3-0283-11D3-9B3F-00C04F8EF466} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {B942A249-D1E7-4C11-98AE-FCB76B08747F} (RealArcadeRdxIE Class) - http://games-dl.real.com/gameconsole/Bu ... eRdxIE.cab
O16 - DPF: {D67AC55A-B750-41A4-BEE6-020E017A7996} (IEPlugIn Class) - http://install.cokemusic.de/client/pc/M ... loader.exe
O16 - DPF: {FB48C7B0-EB66-4BE6-A1C5-9DDF3C37249A} (MCSendMessageHandler Class) - http://xtraz.icq.com/xtraz/activex/MISBH.cab
O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\Programme\AVPersonal\AVGUARD.EXE
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Programme\AVPersonal\AVWUPSRV.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - C:\Programme\Ahead\InCD\InCDsrv.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Programme\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: StyleXPService - Unknown owner - C:\Programme\TGTSoft\StyleXP\StyleXPService.exe (file missing)
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Programme\Gemeinsame Dateien\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\System32\UAService7.exe
O23 - Service: VNC Server (winvnc) - Unknown owner - C:\Programme\RealVNC\WinVNC\WinVNC.exe" -service (file missing)

so das wärs
luke123
Moderator
 
Beiträge: 2741
Registriert: 12.06.2005, 20:01
Wohnort: 93073 Neutraubling

Beitragvon Holy Marcell am 13.06.2005, 15:47

Ok du machst einen erneuten scan und versiehst folgende einträge mit einem Häkchen um danach auf Fix Checked zu klicken:

O1 - Hosts: 3466709097 auto.search.msn.com

O1 - Hosts: 3466709097 sea.search.msn.com

O1 - Hosts: 3466709097 search.msn.com

O1 - Hosts: 3466709097 sitefinder.verisign.com

O1 - Hosts: 3466709097 www.your.com your.com

O1 - Hosts: 3466709097 com.org

O1 - Hosts: 3466690378 ad.doubleclick.net

O1 - Hosts: 3466690378 view.atdmt.com

O1 - Hosts: 3466690378 click.atdmt.com

O1 - Hosts: 3466690378 leader.linkexchange.com

O2 - BHO: DownloadRedirect Class - {00000000-6CB0-410C-8C3D-8FA8D2011D0A} - C:\Programme\iMesh\iMesh5\iMeshBHO.dll (file missing)

O3 - Toolbar: The Simple Toolbar Search - {A6790AA5-C6C7-4BCF-A46D-0FDAC4EA99EB} - C:\WINDOWS\System32\el43vp5fpr.dll (file missing)

O4 - HKLM\..\Run: [Service Process] C:\WINDOWS\system32\config\svchost.exe

so das wars fürs erste das system ist so verseucht das ich mal nikita bescheid sagen werde.

Ich verabschiede mich:
Holy Marcell
 

Beitragvon luke123 am 16.06.2005, 21:33

Hi nochmal,
ich will wirklich nicht drängeln und ich weiß das ihr viel zu tun habt, aber ich brauche so schnell wie möglcih eine lösung für das problem. bitte nehmt es mir nicht übel. vielen dank und liebe grüße.

luke123
luke123
Moderator
 
Beiträge: 2741
Registriert: 12.06.2005, 20:01
Wohnort: 93073 Neutraubling

Beitragvon Nikita am 20.06.2005, 09:49

Hallo@luke123

Fixe mit dem HijackThis:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = C:\WINDOWS\_hp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = C:\WINDOWS\_hp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = C:\WINDOWS\_hp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = C:\WINDOWS\_sp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = C:\WINDOWS\_hp.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = C:\WINDOWS\_sp.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,(Default) = C:\WINDOWS\_sp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,(Default) = C:\WINDOWS\_sp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = C:\WINDOWS\_hp.html

O1 - Hosts: 3466709097 auto.search.msn.com
O1 - Hosts: 3466709097 sea.search.msn.com
O1 - Hosts: 3466709097 search.msn.com
O1 - Hosts: 3466709097 sitefinder.verisign.com
O1 - Hosts: 3466709097 www.your.com your.com
O1 - Hosts: 3466709097 com.org
O1 - Hosts: 3466690378 ad.doubleclick.net
O1 - Hosts: 3466690378 view.atdmt.com
O1 - Hosts: 3466690378 click.atdmt.com
O1 - Hosts: 3466690378 leader.linkexchange.com

O2 - BHO: DownloadRedirect Class - {00000000-6CB0-410C-8C3D-8FA8D2011D0A} - C:\Programme\iMesh\iMesh5\iMeshBHO.dll (file missing)
O2 - BHO: bho2gr Class - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Programme\GetRight\xx2gr.dll
O2 - BHO: Idea2 SidebarBrowserMonitor Class - {45AD732C-2CE2-4666-B366-B2214AD57A49} - C:\Programme\Desktop Sidebar\sbhelp.dll
O3 - Toolbar: The Simple Toolbar Search - {A6790AA5-C6C7-4BCF-A46D-0FDAC4EA99EB} - C:\WINDOWS\System32\el43vp5fpr.dll (file missing)
O4 - HKLM\..\Run: [Service Process] C:\WINDOWS\system32\config\svchost.exe
O8 - Extra context menu item: Download with GetRight - C:\Programme\GetRight\GRdownload.htm
O8 - Extra context menu item: Open with GetRight Browser - C:\Programme\GetRight\GRbrowse.htm
O8 - Extra context menu item: Subscribe in Desktop Sidebar - res://C:\Programme\Desktop Sidebar\sbhelp.dll/menuhandler.html
O9 - Extra button: Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} - C:\Programme\Desktop Sidebar\sbhelp.dll
O9 - Extra 'Tools' menuitem: Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} - C:\Programme\Desktop Sidebar\sbhelp.dll
O9 - Extra button: The Simple Toolbar - {A26ABCF0-1C8F-46e7-A67C-0489DC21B9CC} - C:\WINDOWS\System32\el43vp5fpr.dll (file missing)
O9 - Extra 'Tools' menuitem: The Simple Toolbar - {A26ABCF0-1C8F-46e7-A67C-0489DC21B9CC} - C:\WINDOWS\System32\el43vp5fpr.dll (file missing)
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Klicke hier um das Projekt xp-AntiSpy zu unterstützen - {298F2FF7-6720-4854-BDBE-06DC7B02A71E} - C:\Programme\xp-AntiSpy\sponsoring\sponsor.html (HKCU)
O9 - Extra 'Tools' menuitem: Unterstützung für xp-AntiSpy - {298F2FF7-6720-4854-BDBE-06DC7B02A71E} - C:\Programme\xp-AntiSpy\sponsoring\sponsor.html (HKCU)
O16 - DPF: {D67AC55A-B750-41A4-BEE6-020E017A7996} (IEPlugIn Class) - http://install.cokemusic.de/client/pc/M ... loader.exe

PC neustarten


•KillBox
http://bilder.informationsarchiv.net/Ni ... illBox.zip
Anleitung: (bebildert)
http://nikita.eddys-domain.de/killbox.html

•Delete File on Reboot <--anhaken

und klicke auf das rote Kreuz,
wenn gefragt wird, ob "Do you want to reboot? "----> klicke auf "no",und kopiere das naechste rein, erst beim letzten auf "yes"


C:\WINDOWS\_hp.html
C:\WINDOWS\_sp.html
C:\Programme\Desktop Sidebar\sbhelp.dll
C:\Programme\Desktop Sidebar\sidebar.exe
C:\WINDOWS\System32\el43vp5fpr.dll
C:\WINDOWS\system32\config\svchost.exe

PC neustarten

C:\Programme\Desktop Sidebar <--loeschen

CCleaner--> loesche alle *temp-Datein
http://nikita.eddys-domain.de/IE.html

Bild

arbeite das bitte ab:
http://nikita.eddys-domain.de/escan.html
Nikita
Moderator
 
Beiträge: 11478
Registriert: 07.12.2003, 16:53
Wohnort: Lissabon

Beitragvon luke123 am 20.06.2005, 19:26

eine frage noch: wie lange ist das den, dieses logfile, nur so lang wie auf der internetseit beschrieben oder kann das auch um einiges länger sein? den: will ich das logfile mit escan öffnen hängt sich das programm auf. ich hab es mit einem texteditor geöffnet aber da werden alle gescannten dateien angezeigt. was kann ich tun?
luke123
Moderator
 
Beiträge: 2741
Registriert: 12.06.2005, 20:01
Wohnort: 93073 Neutraubling

Beitragvon luke123 am 20.06.2005, 19:27

also das mit dem arbeitsplatz(siehe erster eintrag) funktioniert jetzt.
luke123
Moderator
 
Beiträge: 2741
Registriert: 12.06.2005, 20:01
Wohnort: 93073 Neutraubling

Beitragvon luke123 am 20.06.2005, 19:29

aber ich weiß nicht, ob das alles ist, bzw. ob du noch weitere vorschläge hast
luke123
Moderator
 
Beiträge: 2741
Registriert: 12.06.2005, 20:01
Wohnort: 93073 Neutraubling

Beitragvon Nikita am 21.06.2005, 16:54

Deaktivieren Wiederherstellung
«XP
Arbeitsplatz-->rechtsklick, dann auf Eigenschaften--->Reiter Systemwiederherstellung--->Häkchen setzen bei Systemwiederherstellung auf allen Laufwerken deaktivieren.

http://nikita.eddys-domain.de/Systemwie ... llung.html
deaktiviere die Systemwiederherstellung, dann scanne noch mal...dann ist das Log vom escan nicht mehr so lang ;)

dann poste mir alles, was angezeigt wird+


Start--> Ausfuehren--> cmd--> kopiere nur die Eintraege der letzten 50 Tage raus

einzeln reinkopieren: (dann oeffnet sich der Editor ...poste alles, was dort angezeigt wird)

cd\
cd %windir%\system32
dir /a:-d /o:-d > %systemdrive%\system32.txt
start %systemdrive%\system32.txt
cls
exit

cd\
cd %temp%\
dir /a:-d /o:-d > %systemdrive%\systemtemp.txt
start %systemdrive%\systemtemp.txt
cls
exit

cd\
cd %windir%
dir /a:-d /o:-d > %systemdrive%\system.txt
start %systemdrive%\system.txt
cls
exit

cd\
dir /a:-d /o:-d > %systemdrive%\sys.txt
start %systemdrive%\sys.txt
cls
exit
Nikita
Moderator
 
Beiträge: 11478
Registriert: 07.12.2003, 16:53
Wohnort: Lissabon

Beitragvon luke123 am 22.06.2005, 20:27

das mit escan ging jetzt, das sind die einträge aus dem logfile:


--------------------------------------------------
-------------------- INFECTED --------------------
--------------------------------------------------

1: Mon Jun 20 18:28:39 2005 => System found infected with BearShare Spyware/Adware ({558ec983-bedb-9168-b2de-31dbf0ee543e})! Action taken: No Action Taken.
2: Mon Jun 20 18:28:39 2005 => System found infected with IstBAR Spyware/Adware ({5F1ABCDB-A875-46C1-8345-B72A4567E486})! Action taken: No Action Taken.
3: Mon Jun 20 18:30:40 2005 => System found infected with CWS.smartsearch Spyware/Adware (C:\WINDOWS\Start.exe)! Action taken: No Action Taken.
4: Mon Jun 20 18:31:55 2005 => File C:\WINDOWS\odbc.hta infected by "Trojan.VBS.StartPage.x" Virus! Action Taken: No Action Taken.
5: Mon Jun 20 18:44:51 2005 => File C:\WINDOWS\odbc.hta infected by "Trojan.VBS.StartPage.x" Virus! Action Taken: No Action Taken.
6: Mon Jun 20 18:49:32 2005 => Scanning Folder: C:\Programme\AVPersonal\INFECTED\*.*

--------------------------------------------------
--------------------- TAGGED ---------------------
--------------------------------------------------

1: Mon Jun 20 18:27:59 2005 => File C:\Programme\RealVNC\WinVNC\WinVNC.exe tagged as not-a-virus:RemoteAdmin.Win32.WinVNC-based.c. No Action Taken.
2: Mon Jun 20 18:31:50 2005 => File C:\WINDOWS\NDNuninstall5_48.exe tagged as "not-a-virus:AdWare.NewDotNet". Action Taken: No Action Taken.
3: Mon Jun 20 18:31:51 2005 => File C:\WINDOWS\NDNuninstall5_64.exe tagged as "not-a-virus:AdWare.NewDotNet". Action Taken: No Action Taken.
4: Mon Jun 20 18:31:53 2005 => File C:\WINDOWS\NDNuninstall6_22.exe tagged as "not-a-virus:AdWare.NewDotNet". Action Taken: No Action Taken.
5: Mon Jun 20 18:31:55 2005 => File C:\WINDOWS\NDNuninstall6_38.exe tagged as "not-a-virus:AdWare.NewDotNet". Action Taken: No Action Taken.
6: Mon Jun 20 18:44:00 2005 => File C:\WINDOWS\NDNuninstall5_48.exe tagged as "not-a-virus:AdWare.NewDotNet". Action Taken: No Action Taken.
7: Mon Jun 20 18:44:16 2005 => File C:\WINDOWS\NDNuninstall5_64.exe tagged as "not-a-virus:AdWare.NewDotNet". Action Taken: No Action Taken.
8: Mon Jun 20 18:44:49 2005 => File C:\WINDOWS\NDNuninstall6_22.exe tagged as "not-a-virus:AdWare.NewDotNet". Action Taken: No Action Taken.
9: Mon Jun 20 18:44:55 2005 => File C:\WINDOWS\NDNuninstall6_38.exe tagged as "not-a-virus:AdWare.NewDotNet". Action Taken: No Action Taken.
10: Mon Jun 20 18:47:07 2005 => File C:\Programme\Gemeinsame Dateien\Ulead Systems\DVD\ulStreamCache.dll tagged as "not-a-virus:AdWare.Castrul.a". Action Taken: No Action Taken.
11: Mon Jun 20 18:53:50 2005 => File C:\Programme\Temp\vnc-3.3.7-x86_win32.exe tagged as not-a-virus:RemoteAdmin.Win32.WinVNC-based.c. No Action Taken.
12: Mon Jun 20 18:58:47 2005 => File C:\Programme\RealVNC\WinVNC\othread2.dll tagged as not-a-virus:RemoteAdmin.Win32.WinVNC-based.c. No Action Taken.
13: Mon Jun 20 18:58:47 2005 => File C:\Programme\RealVNC\WinVNC\vnchooks.dll tagged as not-a-virus:RemoteAdmin.Win32.WinVNC-based.c. No Action Taken.
14: Mon Jun 20 19:06:52 2005 => File C:\Dokumente und Einstellungen\Christian Müller\Eigene Dateien\Ordner für schnelle Aufbewahrungen\Installationsdateien\cspy.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
15: Mon Jun 20 19:09:34 2005 => File C:\System Volume Information\_restore{B02E6CA5-F232-48FA-AE67-C28623F55825}\RP95\A0089178.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
16: Mon Jun 20 19:09:36 2005 => File C:\System Volume Information\_restore{B02E6CA5-F232-48FA-AE67-C28623F55825}\RP96\A0089193.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
17: Mon Jun 20 19:12:10 2005 => File C:\System Volume Information\_restore{B02E6CA5-F232-48FA-AE67-C28623F55825}\RP109\A0121777.exe tagged as not-a-virus:Tool.Win32.PrcView.3725. No Action Taken.
18: Mon Jun 20 19:13:13 2005 => File C:\System Volume Information\_restore{B02E6CA5-F232-48FA-AE67-C28623F55825}\RP113\A0136138.EXE tagged as not-a-virus:RemoteAdmin.Win32.WinVNC-based.c. No Action Taken.
19: Mon Jun 20 19:13:13 2005 => File C:\System Volume Information\_restore{B02E6CA5-F232-48FA-AE67-C28623F55825}\RP113\A0136139.DLL tagged as not-a-virus:RemoteAdmin.Win32.WinVNC-based.c. No Action Taken.
20: Mon Jun 20 19:13:13 2005 => File C:\System Volume Information\_restore{B02E6CA5-F232-48FA-AE67-C28623F55825}\RP113\A0136140.DLL tagged as not-a-virus:RemoteAdmin.Win32.WinVNC-based.c. No Action Taken.
21: Mon Jun 20 19:13:14 2005 => File C:\System Volume Information\_restore{B02E6CA5-F232-48FA-AE67-C28623F55825}\RP113\A0137144.dll tagged as "not-a-virus:Porn-Tool.Win32.EghtmlDialer". Action Taken: No Action Taken.

--------------------------------------------------
--------------------- ERRORS ---------------------
--------------------------------------------------

1: Mon Jun 20 18:27:45 2005 => ERROR!!! Invalid Entry {88895560-9AA2-1069-930E-00AA0030EBC8} = blank (in key SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved). No Action Taken.
2: Mon Jun 20 18:27:48 2005 => ERROR!!! Invalid Entry {8BEBB290-52D0-11D0-B7F4-00C04FD706EC} = blank (in key SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved). No Action Taken.
3: Mon Jun 20 18:27:48 2005 => ERROR!!! Invalid Entry {8DE56A0D-E58B-41FE-9F80-3563CDCB2C22} = blank (in key SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved). No Action Taken.
4: Mon Jun 20 18:27:51 2005 => ERROR!!! Invalid Entry StubPath = RunDLL setupx.dll,InstallHinfSection PowerCfg.user 0 powercfg.inf (in key SOFTWARE\Microsoft\Active Setup\Installed Components\{CA0A4247-44BE-11d1-A005-00805F8ABE06}). No Action Taken.
5: Mon Jun 20 18:27:51 2005 => ERROR!!! Invalid Entry POINTER = point32.exe (in key SOFTWARE\Microsoft\Windows\CurrentVersion\Run). No Action Taken.
6: Mon Jun 20 18:28:05 2005 => ERROR!!! Invalid Entry System32\drivers\A4SII300.SYS in SYSTEM\CurrentControlSet\Services\A4SII300...
7: Mon Jun 20 18:28:07 2005 => ERROR!!! Invalid Entry \??\C:\DOKUME~1\CHRIST~1\LOKALE~1\Temp\cdrmkaun.sys in SYSTEM\CurrentControlSet\Services\cdrmkaun...
8: Mon Jun 20 18:28:09 2005 => ERROR!!! Invalid Entry \??\C:\Dokumente und Einstellungen\Christian Müller\Eigene Dateien\Diagnose\FreshIO.sys in SYSTEM\CurrentControlSet\Services\FreshIO...
9: Mon Jun 20 18:28:36 2005 => ERROR!!! Invalid Entry "C:\Programme\TGTSoft\StyleXP\StyleXPService.exe" in SYSTEM\CurrentControlSet\Services\StyleXPService...
10: Mon Jun 20 18:28:37 2005 => ERROR!!! Invalid Entry System32\DRIVERS\V2210vid.sys in SYSTEM\CurrentControlSet\Services\V2210VID...
11: Mon Jun 20 18:30:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "Software\Microsoft\Windows\CurrentVersion\ModuleUsage\C:\WINDOWS\Downloaded Program Files\hrtbeat.ocx". Action Taken: No Action Taken.
12: Mon Jun 20 18:30:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "Software\Microsoft\Windows\CurrentVersion\ModuleUsage\C:\WINDOWS\Downloaded Program Files\RealArcadeRdxIE.dll". Action Taken: No Action Taken.
13: Mon Jun 20 18:30:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "Software\Microsoft\Windows\CurrentVersion\ModuleUsage\C:\WINDOWS\Downloaded Program Files\zsetup.exe". Action Taken: No Action Taken.
14: Mon Jun 20 18:30:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "Software\Microsoft\Windows\CurrentVersion\ModuleUsage\C:\WINDOWS\SYSTEM\danim.dll". Action Taken: No Action Taken.
15: Mon Jun 20 18:30:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "Software\Microsoft\Windows\CurrentVersion\ModuleUsage\C:\WINDOWS\SYSTEM\ddrawex.dll". Action Taken: No Action Taken.
16: Mon Jun 20 18:30:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "Software\Microsoft\Windows\CurrentVersion\ModuleUsage\C:\WINDOWS\SYSTEM\quartz.dll". Action Taken: No Action Taken.
17: Mon Jun 20 18:30:45 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Spiele". Action Taken: No Action Taken.
18: Mon Jun 20 18:30:52 2005 => Entry "HKCR\CLSID\{0037AC54-E32B-4ACA-9864-09F869AA82FE}" refers to invalid object "blank". Action Taken: No Action Taken.
19: Mon Jun 20 18:30:52 2005 => Entry "HKCR\CLSID\{00DA9282-7664-406e-9E8B-54C75BF77A32}" refers to invalid object "blank". Action Taken: No Action Taken.
20: Mon Jun 20 18:30:52 2005 => Entry "HKCR\CLSID\{01452A41-2ED8-11D3-B81F-00105A09BB78}" refers to invalid object "blank". Action Taken: No Action Taken.
21: Mon Jun 20 18:30:52 2005 => Entry "HKCR\CLSID\{0261FB55-B136-4ACE-A810-351168CE50C5}" refers to invalid object "blank". Action Taken: No Action Taken.
22: Mon Jun 20 18:30:52 2005 => Entry "HKCR\CLSID\{03F14321-8FED-4CBC-B01A-4B57FC199062}" refers to invalid object "blank". Action Taken: No Action Taken.
23: Mon Jun 20 18:30:52 2005 => Entry "HKCR\CLSID\{04ace0a7-1fa8-11d0-aa22-00a0c911f471}" refers to invalid object "blank". Action Taken: No Action Taken.
24: Mon Jun 20 18:30:52 2005 => Entry "HKCR\CLSID\{04F0A7D0-FBC7-4213-AF0C-E51B6A68BEDD}" refers to invalid object "blank". Action Taken: No Action Taken.
25: Mon Jun 20 18:30:53 2005 => Entry "HKCR\CLSID\{0575E54E-B93F-49d2-A2A3-A3EF453F6908}" refers to invalid object "blank". Action Taken: No Action Taken.
26: Mon Jun 20 18:30:53 2005 => Entry "HKCR\CLSID\{05e9ba8a-4bcb-42fe-969a-2b99abef3107}" refers to invalid object "V2210DEX.AX". Action Taken: No Action Taken.
27: Mon Jun 20 18:30:53 2005 => Entry "HKCR\CLSID\{07EC48A8-8C2D-4925-8C10-77B175C9AE10}" refers to invalid object "blank". Action Taken: No Action Taken.
28: Mon Jun 20 18:30:53 2005 => Entry "HKCR\CLSID\{080061C7-035A-6F5F-3EB3-A53D8D5E1B64}" refers to invalid object "blank". Action Taken: No Action Taken.
29: Mon Jun 20 18:30:53 2005 => Entry "HKCR\CLSID\{09060AEA-5036-4664-A18F-0DBC3DABE042}" refers to invalid object "blank". Action Taken: No Action Taken.
30: Mon Jun 20 18:30:53 2005 => Entry "HKCR\CLSID\{0944D16C-D0F4-4389-982A-A085595A9EB3}" refers to invalid object "blank". Action Taken: No Action Taken.
31: Mon Jun 20 18:30:53 2005 => Entry "HKCR\CLSID\{09FD7C6D-688E-4561-BD63-4512D97134CA}" refers to invalid object "blank". Action Taken: No Action Taken.
32: Mon Jun 20 18:30:53 2005 => Entry "HKCR\CLSID\{0A346871-C8AA-4D8D-B665-4906C9BF371C}" refers to invalid object "blank". Action Taken: No Action Taken.
33: Mon Jun 20 18:30:53 2005 => Entry "HKCR\CLSID\{0A7D1D59-0CFD-494F-B0F8-E36F77008E39}" refers to invalid object "blank". Action Taken: No Action Taken.
34: Mon Jun 20 18:30:54 2005 => Entry "HKCR\CLSID\{0BE9D669-1D67-49C0-913D-1D26EEB9C2C8}" refers to invalid object "blank". Action Taken: No Action Taken.
35: Mon Jun 20 18:30:54 2005 => Entry "HKCR\CLSID\{0C0F3D02-6175-433c-BEAF-BD69D39956F1}" refers to invalid object "blank". Action Taken: No Action Taken.
36: Mon Jun 20 18:30:54 2005 => Entry "HKCR\CLSID\{0E1BEBA1-F026-11D2-94CD-0080488345E8}" refers to invalid object "blank". Action Taken: No Action Taken.
37: Mon Jun 20 18:30:54 2005 => Entry "HKCR\CLSID\{0EFC5A84-7F47-4EE7-BFFB-E81290541844}" refers to invalid object "blank". Action Taken: No Action Taken.
38: Mon Jun 20 18:30:54 2005 => Entry "HKCR\CLSID\{11C012C1-5563-11D3-8D66-00AA00A01893}" refers to invalid object "blank". Action Taken: No Action Taken.
39: Mon Jun 20 18:30:54 2005 => Entry "HKCR\CLSID\{11C012C2-5563-11D3-8D66-00AA00A01893}" refers to invalid object "blank". Action Taken: No Action Taken.
40: Mon Jun 20 18:30:54 2005 => Entry "HKCR\CLSID\{13F0E6C1-C604-11D3-AEE5-00600857EED8}" refers to invalid object "blank". Action Taken: No Action Taken.
41: Mon Jun 20 18:30:55 2005 => Entry "HKCR\CLSID\{1440AD10-6AA8-11D1-B6F9-00A024DDAFD1}" refers to invalid object "blank". Action Taken: No Action Taken.
42: Mon Jun 20 18:30:55 2005 => Entry "HKCR\CLSID\{1549B05E-8C89-4BDB-8692-7382CF45EB83}" refers to invalid object "blank". Action Taken: No Action Taken.
43: Mon Jun 20 18:30:55 2005 => Entry "HKCR\CLSID\{1609A56F-AEE2-4410-A334-956353F4B50E}" refers to invalid object "blank". Action Taken: No Action Taken.
44: Mon Jun 20 18:30:55 2005 => Entry "HKCR\CLSID\{171ACBFA-AE5C-4f35-82BE-8FF53C980A3E}" refers to invalid object "blank". Action Taken: No Action Taken.
45: Mon Jun 20 18:30:55 2005 => Entry "HKCR\CLSID\{1954E92A-6AB0-4259-97B1-AB0312693869}" refers to invalid object "blank". Action Taken: No Action Taken.
46: Mon Jun 20 18:30:55 2005 => Entry "HKCR\CLSID\{19613D01-8583-11d4-B328-30584DC10000}" refers to invalid object "blank". Action Taken: No Action Taken.
47: Mon Jun 20 18:30:55 2005 => Entry "HKCR\CLSID\{198C4AAF-527C-4DEE-9D76-7F94FC2B3D34}" refers to invalid object "blank". Action Taken: No Action Taken.
48: Mon Jun 20 18:30:55 2005 => Entry "HKCR\CLSID\{1B53F360-9A1B-1069-930C-00AA0030EBC8}" refers to invalid object "blank". Action Taken: No Action Taken.
49: Mon Jun 20 18:30:55 2005 => Entry "HKCR\CLSID\{1B5C8171-1341-46ac-893E-A0459A6C4C85}" refers to invalid object "blank". Action Taken: No Action Taken.
50: Mon Jun 20 18:30:56 2005 => Entry "HKCR\CLSID\{1C9920E5-7623-4AAF-936B-A14BCAB742EC}" refers to invalid object "blank". Action Taken: No Action Taken.
51: Mon Jun 20 18:30:56 2005 => Entry "HKCR\CLSID\{1DAF6B78-4A6E-4B99-8862-1277D6801E9F}" refers to invalid object "blank". Action Taken: No Action Taken.
52: Mon Jun 20 18:30:56 2005 => Entry "HKCR\CLSID\{1E2FB626-16C0-44a9-B623-E3A43CD15585}" refers to invalid object "blank". Action Taken: No Action Taken.
53: Mon Jun 20 18:30:56 2005 => Entry "HKCR\CLSID\{1E83C701-DAC9-11D2-A9CA-00AA00C7EF04}" refers to invalid object "blank". Action Taken: No Action Taken.
54: Mon Jun 20 18:30:56 2005 => Entry "HKCR\CLSID\{213D8FC5-28F3-4083-A83E-1E72F892363C}" refers to invalid object "blank". Action Taken: No Action Taken.
55: Mon Jun 20 18:30:56 2005 => Entry "HKCR\CLSID\{2147059B-0BCB-11d4-919A-00AA00A0188E}" refers to invalid object "blank". Action Taken: No Action Taken.
56: Mon Jun 20 18:30:57 2005 => Entry "HKCR\CLSID\{22956D2B-4D2A-4102-9783-F277674214E1}" refers to invalid object "blank". Action Taken: No Action Taken.
57: Mon Jun 20 18:30:57 2005 => Entry "HKCR\CLSID\{22B4D07F-42F4-4B81-A403-F57AA90A645C}" refers to invalid object "blank". Action Taken: No Action Taken.
58: Mon Jun 20 18:30:57 2005 => Entry "HKCR\CLSID\{23FADC13-56BC-426d-933B-2C79B539DD87}" refers to invalid object "blank". Action Taken: No Action Taken.
59: Mon Jun 20 18:30:57 2005 => Entry "HKCR\CLSID\{243B51DA-6060-4DD5-AD1B-2F45D4464415}" refers to invalid object "blank". Action Taken: No Action Taken.
60: Mon Jun 20 18:30:57 2005 => Entry "HKCR\CLSID\{247161C5-995C-4097-9FF4-655DC6D12DB5}" refers to invalid object "blank". Action Taken: No Action Taken.
61: Mon Jun 20 18:30:57 2005 => Entry "HKCR\CLSID\{26436CAF-CA34-11D4-9772-0050046C5995}" refers to invalid object "blank". Action Taken: No Action Taken.
62: Mon Jun 20 18:30:57 2005 => Entry "HKCR\CLSID\{26559D11-2D30-44b5-9076-24D6B330FD16}" refers to invalid object "blank". Action Taken: No Action Taken.
63: Mon Jun 20 18:30:57 2005 => Entry "HKCR\CLSID\{27DB6B94-6FC5-436B-8D79-4CA395A6EEB0}" refers to invalid object "blank". Action Taken: No Action Taken.
64: Mon Jun 20 18:30:57 2005 => Entry "HKCR\CLSID\{2A38D126-F81D-4F43-ADAE-00FCA2C09FDF}" refers to invalid object "blank". Action Taken: No Action Taken.
65: Mon Jun 20 18:30:57 2005 => Entry "HKCR\CLSID\{2B037F7D-475D-423c-A570-E609519EA9C7}" refers to invalid object "blank". Action Taken: No Action Taken.
66: Mon Jun 20 18:30:57 2005 => Entry "HKCR\CLSID\{2BE4D150-6F2E-4B3A-B0BD-E880917238DC}" refers to invalid object "blank". Action Taken: No Action Taken.
67: Mon Jun 20 18:30:57 2005 => Entry "HKCR\CLSID\{2BE4D158-6F2E-4B3A-B0BD-E880917238DC}" refers to invalid object "blank". Action Taken: No Action Taken.
68: Mon Jun 20 18:30:57 2005 => Entry "HKCR\CLSID\{2BE4D159-6F2E-4B3A-B0BD-E880917238DC}" refers to invalid object "blank". Action Taken: No Action Taken.
69: Mon Jun 20 18:30:57 2005 => Entry "HKCR\CLSID\{2BE4D15B-6F2E-4B3A-B0BD-E880917238DC}" refers to invalid object "blank". Action Taken: No Action Taken.
70: Mon Jun 20 18:30:57 2005 => Entry "HKCR\CLSID\{2BE4D160-6F2E-4B3A-B0BD-E880917238DC}" refers to invalid object "blank". Action Taken: No Action Taken.
71: Mon Jun 20 18:30:57 2005 => Entry "HKCR\CLSID\{2BE4D168-6F2E-4B3A-B0BD-E880917238DC}" refers to invalid object "blank". Action Taken: No Action Taken.
72: Mon Jun 20 18:30:57 2005 => Entry "HKCR\CLSID\{2BE4D169-6F2E-4B3A-B0BD-E880917238DC}" refers to invalid object "blank". Action Taken: No Action Taken.
73: Mon Jun 20 18:30:57 2005 => Entry "HKCR\CLSID\{2BE4D170-6F2E-4B3A-B0BD-E880917238DC}" refers to invalid object "blank". Action Taken: No Action Taken.
74: Mon Jun 20 18:30:57 2005 => Entry "HKCR\CLSID\{2BE4D178-6F2E-4B3A-B0BD-E880917238DC}" refers to invalid object "blank". Action Taken: No Action Taken.
75: Mon Jun 20 18:30:57 2005 => Entry "HKCR\CLSID\{2C6F7E96-73BC-47A5-9F51-B67F0BAFE24D}" refers to invalid object "blank". Action Taken: No Action Taken.
76: Mon Jun 20 18:30:57 2005 => Entry "HKCR\CLSID\{2CAC3C3F-348E-4d8a-95D5-B4094A96E09F}" refers to invalid object "blank". Action Taken: No Action Taken.
77: Mon Jun 20 18:30:57 2005 => Entry "HKCR\CLSID\{2D31C3FC-3392-4A11-A08B-5E0142EAEA7D}" refers to invalid object "blank". Action Taken: No Action Taken.
78: Mon Jun 20 18:30:57 2005 => Entry "HKCR\CLSID\{2E56954E-EB75-4E72-B5FA-7785215CD351}" refers to invalid object "blank". Action Taken: No Action Taken.
79: Mon Jun 20 18:30:58 2005 => Entry "HKCR\CLSID\{301BD8E1-1CEB-11D3-A9CA-00AA00C7EF04}" refers to invalid object "blank". Action Taken: No Action Taken.
80: Mon Jun 20 18:30:58 2005 => Entry "HKCR\CLSID\{30BADD8D-9A06-469e-8D65-66A27997C375}" refers to invalid object "blank". Action Taken: No Action Taken.
81: Mon Jun 20 18:30:58 2005 => Entry "HKCR\CLSID\{31C39BAE-7203-4CDA-8EB0-481221EF49F2}" refers to invalid object "blank". Action Taken: No Action Taken.
82: Mon Jun 20 18:30:58 2005 => Entry "HKCR\CLSID\{32DF5D99-5C14-4555-8F54-7DA229612340}" refers to invalid object "blank". Action Taken: No Action Taken.
83: Mon Jun 20 18:30:58 2005 => Entry "HKCR\CLSID\{3389FF40-0468-11D6-8C58-00E0293197BC}" refers to invalid object "blank". Action Taken: No Action Taken.
84: Mon Jun 20 18:30:58 2005 => Entry "HKCR\CLSID\{3389FF41-0468-11D6-8C58-00E0293197BC}" refers to invalid object "blank". Action Taken: No Action Taken.
85: Mon Jun 20 18:30:58 2005 => Entry "HKCR\CLSID\{3389FF45-0468-11d6-8C58-00E0293197BC}" refers to invalid object "blank". Action Taken: No Action Taken.
86: Mon Jun 20 18:30:58 2005 => Entry "HKCR\CLSID\{3389FF46-0468-11d6-8C58-00E0293197BC}" refers to invalid object "blank". Action Taken: No Action Taken.
87: Mon Jun 20 18:30:58 2005 => Entry "HKCR\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}" refers to invalid object "blank". Action Taken: No Action Taken.
88: Mon Jun 20 18:30:58 2005 => Entry "HKCR\CLSID\{361C2BC2-C035-11d2-99DC-00AA00AE68A1}" refers to invalid object "blank". Action Taken: No Action Taken.
89: Mon Jun 20 18:30:58 2005 => Entry "HKCR\CLSID\{366D9D8B-454A-4EA9-921D-7C1127BBE481}" refers to invalid object "blank". Action Taken: No Action Taken.
90: Mon Jun 20 18:30:58 2005 => Entry "HKCR\CLSID\{3831331E-0D11-4716-871D-68F3B11D23C9}" refers to invalid object "blank". Action Taken: No Action Taken.
91: Mon Jun 20 18:30:58 2005 => Entry "HKCR\CLSID\{3923BC46-4AFC-4A76-9311-04922948E784}" refers to invalid object "blank". Action Taken: No Action Taken.
92: Mon Jun 20 18:30:59 2005 => Entry "HKCR\CLSID\{3C74D128-AB84-47E2-B0F7-2650D36A65D4}" refers to invalid object "blank". Action Taken: No Action Taken.
93: Mon Jun 20 18:30:59 2005 => Entry "HKCR\CLSID\{3D10228D-AA29-4108-9583-780807C02499}" refers to invalid object "blank". Action Taken: No Action Taken.
94: Mon Jun 20 18:30:59 2005 => Entry "HKCR\CLSID\{3D913321-08E4-11D6-8AB3-0050BF127F63}" refers to invalid object "blank". Action Taken: No Action Taken.
95: Mon Jun 20 18:30:59 2005 => Entry "HKCR\CLSID\{3DCD2BC5-8489-48AE-891F-90C8B2F19F56}" refers to invalid object "blank". Action Taken: No Action Taken.
96: Mon Jun 20 18:30:59 2005 => Entry "HKCR\CLSID\{3E94BF61-487B-11D4-AEE9-00600857EED8}" refers to invalid object "blank". Action Taken: No Action Taken.
97: Mon Jun 20 18:30:59 2005 => Entry "HKCR\CLSID\{3F91A88E-6F0E-4744-9CB1-5635FC25762E}" refers to invalid object "blank". Action Taken: No Action Taken.
98: Mon Jun 20 18:30:59 2005 => Entry "HKCR\CLSID\{40AF8200-4E6E-11D4-878D-00C0F6B0D1A7}" refers to invalid object "blank". Action Taken: No Action Taken.
99: Mon Jun 20 18:30:59 2005 => Entry "HKCR\CLSID\{40AF8201-4E6E-11D4-878D-00C0F6B0D1A7}" refers to invalid object "blank". Action Taken: No Action Taken.
100: Mon Jun 20 18:30:59 2005 => Entry "HKCR\CLSID\{4178CE3B-11B1-46DD-A36D-BBCD36A5425A}" refers to invalid object "blank". Action Taken: No Action Taken.
101: Mon Jun 20 18:30:59 2005 => Entry "HKCR\CLSID\{41918F20-ADF0-4FF6-882E-A6DBAD1A8C06}" refers to invalid object "blank". Action Taken: No Action Taken.
102: Mon Jun 20 18:30:59 2005 => Entry "HKCR\CLSID\{41918F28-ADF0-4FF6-882E-A6DBAD1A8C06}" refers to invalid object "blank". Action Taken: No Action Taken.
103: Mon Jun 20 18:30:59 2005 => Entry "HKCR\CLSID\{41918F30-ADF0-4FF6-882E-A6DBAD1A8C06}" refers to invalid object "blank". Action Taken: No Action Taken.
104: Mon Jun 20 18:30:59 2005 => Entry "HKCR\CLSID\{41918F38-ADF0-4FF6-882E-A6DBAD1A8C06}" refers to invalid object "blank". Action Taken: No Action Taken.
105: Mon Jun 20 18:30:59 2005 => Entry "HKCR\CLSID\{41918F40-ADF0-4FF6-882E-A6DBAD1A8C06}" refers to invalid object "blank". Action Taken: No Action Taken.
106: Mon Jun 20 18:30:59 2005 => Entry "HKCR\CLSID\{41918F48-ADF0-4FF6-882E-A6DBAD1A8C06}" refers to invalid object "blank". Action Taken: No Action Taken.
107: Mon Jun 20 18:30:59 2005 => Entry "HKCR\CLSID\{420790e7-ccd6-4224-bf2b-b6d166c22268}" refers to invalid object "V2210DEX.AX". Action Taken: No Action Taken.
108: Mon Jun 20 18:30:59 2005 => Entry "HKCR\CLSID\{42AB8D08-F741-4166-8A0D-3C1A50B43F93}" refers to invalid object "blank". Action Taken: No Action Taken.
109: Mon Jun 20 18:30:59 2005 => Entry "HKCR\CLSID\{43918f8f-f3be-4760-b4bb-6c89d9d91487}" refers to invalid object "blank". Action Taken: No Action Taken.
110: Mon Jun 20 18:30:59 2005 => Entry "HKCR\CLSID\{447AC255-CE81-43AD-9827-AFDDB1561B07}" refers to invalid object "blank". Action Taken: No Action Taken.
111: Mon Jun 20 18:30:59 2005 => Entry "HKCR\CLSID\{44b09a5f-5dee-4539-8001-d4b2d45c2876}" refers to invalid object "blank". Action Taken: No Action Taken.
112: Mon Jun 20 18:30:59 2005 => Entry "HKCR\CLSID\{4516E9A3-6F9B-11D0-B4D0-00A0C911E8B6}" refers to invalid object "blank". Action Taken: No Action Taken.
113: Mon Jun 20 18:31:00 2005 => Entry "HKCR\CLSID\{45C4D3A9-2DF2-40c5-B899-4AA364A1EEE0}" refers to invalid object "blank". Action Taken: No Action Taken.
114: Mon Jun 20 18:31:00 2005 => Entry "HKCR\CLSID\{488D7011-052F-4DB0-BCAD-CAC77BAE35C3}" refers to invalid object "blank". Action Taken: No Action Taken.
115: Mon Jun 20 18:31:00 2005 => Entry "HKCR\CLSID\{49F70113-F8B1-4B54-9C04-6DE722505FD9}" refers to invalid object "blank". Action Taken: No Action Taken.
116: Mon Jun 20 18:31:00 2005 => Entry "HKCR\CLSID\{4B8CD4EB-C54F-4D2B-93D5-5DCA2DD8C90C}" refers to invalid object "blank". Action Taken: No Action Taken.
117: Mon Jun 20 18:31:00 2005 => Entry "HKCR\CLSID\{4BF99846-EC85-48B5-97C0-A9A704E63D09}" refers to invalid object "blank". Action Taken: No Action Taken.
118: Mon Jun 20 18:31:00 2005 => Entry "HKCR\CLSID\{4C569E1A-D6D3-4c2e-967A-8B7B2DD32D9C}" refers to invalid object "blank". Action Taken: No Action Taken.
119: Mon Jun 20 18:31:00 2005 => Entry "HKCR\CLSID\{4C58EB04-7B72-4D3D-A36E-66167A99BC31}" refers to invalid object "blank". Action Taken: No Action Taken.
120: Mon Jun 20 18:31:00 2005 => Entry "HKCR\CLSID\{4CD3D79F-483E-11D3-9479-00AA006C473C}" refers to invalid object "blank". Action Taken: No Action Taken.
121: Mon Jun 20 18:31:00 2005 => Entry "HKCR\CLSID\{4DD3BAF5-7579-11D1-B1C6-006097176556}" refers to invalid object "blank". Action Taken: No Action Taken.
122: Mon Jun 20 18:31:00 2005 => Entry "HKCR\CLSID\{4E1F2CF1-F017-4c79-A870-FF9C6A6353C6}" refers to invalid object "blank". Action Taken: No Action Taken.
123: Mon Jun 20 18:31:00 2005 => Entry "HKCR\CLSID\{4EE0B011-604C-47F3-8F2B-39F79640B85E}" refers to invalid object "blank". Action Taken: No Action Taken.
124: Mon Jun 20 18:31:00 2005 => Entry "HKCR\CLSID\{4FED19D5-CD87-459E-97E6-566BA0E2C67F}" refers to invalid object "blank". Action Taken: No Action Taken.
125: Mon Jun 20 18:31:00 2005 => Entry "HKCR\CLSID\{50D994ED-8834-11D3-8BBE-0000E85F332D}" refers to invalid object "blank". Action Taken: No Action Taken.
126: Mon Jun 20 18:31:01 2005 => Entry "HKCR\CLSID\{51B11710-3098-4431-BDD0-DA62FB306010}" refers to invalid object "blank". Action Taken: No Action Taken.
127: Mon Jun 20 18:31:01 2005 => Entry "HKCR\CLSID\{52C01A76-19E2-4A50-AE8A-38FFBCCF9182}" refers to invalid object "blank". Action Taken: No Action Taken.
128: Mon Jun 20 18:31:01 2005 => Entry "HKCR\CLSID\{54702E50-7AC5-4D09-AF00-C30084627A5F}" refers to invalid object "blank". Action Taken: No Action Taken.
129: Mon Jun 20 18:31:01 2005 => Entry "HKCR\CLSID\{54D24045-4A5E-4009-9DA5-6EEE0F2D062C}" refers to invalid object "blank". Action Taken: No Action Taken.
130: Mon Jun 20 18:31:01 2005 => Entry "HKCR\CLSID\{55790121-F35C-11D2-A9CA-00AA00C7EF04}" refers to invalid object "blank". Action Taken: No Action Taken.
131: Mon Jun 20 18:31:01 2005 => Entry "HKCR\CLSID\{56336BCA-3D8A-11d6-A00B-0050DA18DE71}" refers to invalid object "blank". Action Taken: No Action Taken.
132: Mon Jun 20 18:31:01 2005 => Entry "HKCR\CLSID\{574B4740-A328-42D6-A8E2-3F7C2F9D429C}" refers to invalid object "blank". Action Taken: No Action Taken.
133: Mon Jun 20 18:31:01 2005 => Entry "HKCR\CLSID\{575416D8-8A60-4DC0-B745-BC119B3CFCA7}" refers to invalid object "blank". Action Taken: No Action Taken.
134: Mon Jun 20 18:31:01 2005 => Entry "HKCR\CLSID\{5910C506-4206-4a71-BC81-D9CC2D9FC42F}" refers to invalid object "blank". Action Taken: No Action Taken.
135: Mon Jun 20 18:31:01 2005 => Entry "HKCR\CLSID\{5954EA75-9BFA-461A-BD34-CEA3A861FF19}" refers to invalid object "blank". Action Taken: No Action Taken.
136: Mon Jun 20 18:31:01 2005 => Entry "HKCR\CLSID\{59850403-6664-101B-B21C-00AA004BA90B}" refers to invalid object "blank". Action Taken: No Action Taken.
137: Mon Jun 20 18:31:01 2005 => Entry "HKCR\CLSID\{59850404-6664-101B-B21C-00AA004BA90B}" refers to invalid object "blank". Action Taken: No Action Taken.
138: Mon Jun 20 18:31:01 2005 => Entry "HKCR\CLSID\{59C2F1C5-627A-41aa-8B09-54F3463998A6}" refers to invalid object "blank". Action Taken: No Action Taken.
139: Mon Jun 20 18:31:01 2005 => Entry "HKCR\CLSID\{5A5ECA97-4FB6-4a36-801B-39A7DAD0930E}" refers to invalid object "blank". Action Taken: No Action Taken.
140: Mon Jun 20 18:31:01 2005 => Entry "HKCR\CLSID\{5AD31A03-9136-4C8E-AAA8-121B20B5EA66}" refers to invalid object "blank". Action Taken: No Action Taken.
141: Mon Jun 20 18:31:01 2005 => Entry "HKCR\CLSID\{5BC16715-1680-42CE-B3BC-84645AF8D340}" refers to invalid object "blank". Action Taken: No Action Taken.
142: Mon Jun 20 18:31:02 2005 => Entry "HKCR\CLSID\{5E35D25A-E088-48C5-A229-804306F9DEEF}" refers to invalid object "blank". Action Taken: No Action Taken.
143: Mon Jun 20 18:31:02 2005 => Entry "HKCR\CLSID\{5E44E225-A408-11CF-B581-008029601108}" refers to invalid object "blank". Action Taken: No Action Taken.
144: Mon Jun 20 18:31:02 2005 => Entry "HKCR\CLSID\{5EAA54AB-6601-40E4-A13F-01559500D2C7}" refers to invalid object "blank". Action Taken: No Action Taken.
145: Mon Jun 20 18:31:02 2005 => Entry "HKCR\CLSID\{5F752827-675A-445A-B5F5-5A3BF9F49D06}" refers to invalid object "blank". Action Taken: No Action Taken.
146: Mon Jun 20 18:31:02 2005 => Entry "HKCR\CLSID\{6067B4A1-BB79-4437-9AA0-220621C7FFDC}" refers to invalid object "blank". Action Taken: No Action Taken.
147: Mon Jun 20 18:31:02 2005 => Entry "HKCR\CLSID\{617BBD67-3049-4bb3-89EB-9B3F6EB6A2D5}" refers to invalid object "blank". Action Taken: No Action Taken.
148: Mon Jun 20 18:31:02 2005 => Entry "HKCR\CLSID\{623A8448-B8F7-46B6-9BF9-1D4214DA09CE}" refers to invalid object "blank". Action Taken: No Action Taken.
149: Mon Jun 20 18:31:02 2005 => Entry "HKCR\CLSID\{633c4ed4-70d6-4b15-8829-64e2b6b93b7d}" refers to invalid object "V2210DEX.AX". Action Taken: No Action Taken.
150: Mon Jun 20 18:31:02 2005 => Entry "HKCR\CLSID\{640B1717-3BB0-44C4-86A2-46AA68A975C6}" refers to invalid object "blank". Action Taken: No Action Taken.
151: Mon Jun 20 18:31:02 2005 => Entry "HKCR\CLSID\{64D24359-F22F-49B3-B220-95816BAFFD86}" refers to invalid object "blank". Action Taken: No Action Taken.
152: Mon Jun 20 18:31:02 2005 => Entry "HKCR\CLSID\{65B28ABC-DE95-11D0-B605-00A0C92B5010}" refers to invalid object "blank". Action Taken: No Action Taken.
153: Mon Jun 20 18:31:02 2005 => Entry "HKCR\CLSID\{65DE8817-44C0-4707-B769-25FD835FF17D}" refers to invalid object "blank". Action Taken: No Action Taken.
154: Mon Jun 20 18:31:02 2005 => Entry "HKCR\CLSID\{6693E0A2-106C-4546-96A2-2AE522699F2F}" refers to invalid object "blank". Action Taken: No Action Taken.
155: Mon Jun 20 18:31:02 2005 => Entry "HKCR\CLSID\{680B32A1-496E-11d3-8C81-0050040BE7E0}" refers to invalid object "blank". Action Taken: No Action Taken.
156: Mon Jun 20 18:31:02 2005 => Entry "HKCR\CLSID\{6872DA05-71F2-46AA-8041-28A8C9D5BE63}" refers to invalid object "blank". Action Taken: No Action Taken.
157: Mon Jun 20 18:31:02 2005 => Entry "HKCR\CLSID\{6A10A80B-D0F7-4380-BD8D-285728A1142D}" refers to invalid object "blank". Action Taken: No Action Taken.
158: Mon Jun 20 18:31:03 2005 => Entry "HKCR\CLSID\{6A94C2E3-3430-4728-A92C-B91C20AA57F0}" refers to invalid object "blank". Action Taken: No Action Taken.
159: Mon Jun 20 18:31:03 2005 => Entry "HKCR\CLSID\{6B1E11AC-BF5C-4CF5-9DC9-F81F715EB790}" refers to invalid object "blank". Action Taken: No Action Taken.
160: Mon Jun 20 18:31:03 2005 => Entry "HKCR\CLSID\{6BC38BF4-E84D-46E1-920B-42D31AEA617E}" refers to invalid object "blank". Action Taken: No Action Taken.
161: Mon Jun 20 18:31:03 2005 => Entry "HKCR\CLSID\{6C753DB7-827E-11d4-9A3C-0001029E5D32}" refers to invalid object "blank". Action Taken: No Action Taken.
162: Mon Jun 20 18:31:03 2005 => Entry "HKCR\CLSID\{6D43FD33-70D0-4B54-9AD8-08C3BB635B31}" refers to invalid object "blank". Action Taken: No Action Taken.
163: Mon Jun 20 18:31:03 2005 => Entry "HKCR\CLSID\{6DC615A1-432E-4d53-9519-CDF7ABF4AC31}" refers to invalid object "blank". Action Taken: No Action Taken.
164: Mon Jun 20 18:31:03 2005 => Entry "HKCR\CLSID\{6E9E4041-F093-11D3-AEE6-00600857EED8}" refers to invalid object "blank". Action Taken: No Action Taken.
165: Mon Jun 20 18:31:03 2005 => Entry "HKCR\CLSID\{6EB833C3-EE51-443d-BBA1-9CAEA9EE8D23}" refers to invalid object "blank". Action Taken: No Action Taken.
166: Mon Jun 20 18:31:03 2005 => Entry "HKCR\CLSID\{6ED74AE3-8066-4385-AABA-243E033F75A3}" refers to invalid object "blank". Action Taken: No Action Taken.
167: Mon Jun 20 18:31:03 2005 => Entry "HKCR\CLSID\{6F911DE8-3C2A-4F38-8557-9562F8947C19}" refers to invalid object "blank". Action Taken: No Action Taken.
168: Mon Jun 20 18:31:03 2005 => Entry "HKCR\CLSID\{72FD14B2-466F-4733-9DD3-FCE5BA316731}" refers to invalid object "blank". Action Taken: No Action Taken.
169: Mon Jun 20 18:31:03 2005 => Entry "HKCR\CLSID\{74AF2A47-8E95-4AF2-A743-0FFFCB2DB06E}" refers to invalid object "blank". Action Taken: No Action Taken.
170: Mon Jun 20 18:31:04 2005 => Entry "HKCR\CLSID\{75524892-A663-4c7c-94A5-91917098E451}" refers to invalid object "blank". Action Taken: No Action Taken.
171: Mon Jun 20 18:31:04 2005 => Entry "HKCR\CLSID\{762EC429-1A5D-4AB8-844A-9A552E1241DA}" refers to invalid object "blank". Action Taken: No Action Taken.
172: Mon Jun 20 18:31:04 2005 => Entry "HKCR\CLSID\{77829F14-D911-40FF-A2F0-D11DB8D6D0BC}" refers to invalid object "blank". Action Taken: No Action Taken.
173: Mon Jun 20 18:31:04 2005 => Entry "HKCR\CLSID\{78DFCA43-85AF-4C5E-B218-4B734DE96A28}" refers to invalid object "blank". Action Taken: No Action Taken.
174: Mon Jun 20 18:31:04 2005 => Entry "HKCR\CLSID\{7993FB10-F4FE-462C-B2AC-C3B684CD64AD}" refers to invalid object "blank". Action Taken: No Action Taken.
175: Mon Jun 20 18:31:04 2005 => Entry "HKCR\CLSID\{79A00FA1-C577-11D4-AEEC-00600857EED8}" refers to invalid object "blank". Action Taken: No Action Taken.
176: Mon Jun 20 18:31:04 2005 => Entry "HKCR\CLSID\{7A09E350-2590-4dca-8D23-77AC5D3D0E4E}" refers to invalid object "blank". Action Taken: No Action Taken.
177: Mon Jun 20 18:31:04 2005 => Entry "HKCR\CLSID\{7AA13921-FC82-11D2-A9CA-00AA00C7EF04}" refers to invalid object "blank". Action Taken: No Action Taken.
178: Mon Jun 20 18:31:04 2005 => Entry "HKCR\CLSID\{7B4934ED-7C02-4CCB-A187-475311C6FBC7}" refers to invalid object "blank". Action Taken: No Action Taken.
179: Mon Jun 20 18:31:04 2005 => Entry "HKCR\CLSID\{7C069D00-777A-11D3-AEE3-00600857EED8}" refers to invalid object "blank". Action Taken: No Action Taken.
180: Mon Jun 20 18:31:04 2005 => Entry "HKCR\CLSID\{7D9A5E44-9382-4CF8-9D05-26FE6FAAE831}" refers to invalid object "blank". Action Taken: No Action Taken.
181: Mon Jun 20 18:31:04 2005 => Entry "HKCR\CLSID\{7FDAB2BC-4288-4b03-BE6D-F445B10CE2D6}" refers to invalid object "blank". Action Taken: No Action Taken.
182: Mon Jun 20 18:31:04 2005 => Entry "HKCR\CLSID\{812DCEE3-2E39-47de-97F8-DBC1C85CC83C}" refers to invalid object "blank". Action Taken: No Action Taken.
183: Mon Jun 20 18:31:04 2005 => Entry "HKCR\CLSID\{82EC37B7-0E29-4692-A7DA-CF139EF9373F}" refers to invalid object "blank". Action Taken: No Action Taken.
184: Mon Jun 20 18:31:05 2005 => Entry "HKCR\CLSID\{83734BA7-B179-43cb-BDDB-70C6F097413E}" refers to invalid object "blank". Action Taken: No Action Taken.
185: Mon Jun 20 18:31:05 2005 => Entry "HKCR\CLSID\{83B23CBF-40DF-4363-B5A8-01972E31B952}" refers to invalid object "blank". Action Taken: No Action Taken.
186: Mon Jun 20 18:31:05 2005 => Entry "HKCR\CLSID\{83D4679F-B6D7-11D2-BF36-00C04FB90A03}" refers to invalid object "blank". Action Taken: No Action Taken.
187: Mon Jun 20 18:31:05 2005 => Entry "HKCR\CLSID\{8532DECB-E102-48A8-BE72-DADC2B02C49F}" refers to invalid object "blank". Action Taken: No Action Taken.
188: Mon Jun 20 18:31:05 2005 => Entry "HKCR\CLSID\{855AA851-E2F5-4742-B778-89BF8DC0CA3F}" refers to invalid object "blank". Action Taken: No Action Taken.
189: Mon Jun 20 18:31:05 2005 => Entry "HKCR\CLSID\{85A58E81-A757-11d4-A67E-504CBDA7E58A}" refers to invalid object "blank". Action Taken: No Action Taken.
190: Mon Jun 20 18:31:05 2005 => Entry "HKCR\CLSID\{85A58E82-A757-11d4-A67E-504CBDA7E58A}" refers to invalid object "blank". Action Taken: No Action Taken.
191: Mon Jun 20 18:31:05 2005 => Entry "HKCR\CLSID\{86FC1FD1-BCF3-11D1-B76F-58BB04C10000}" refers to invalid object "blank". Action Taken: No Action Taken.
192: Mon Jun 20 18:31:05 2005 => Entry "HKCR\CLSID\{86FC1FD3-BCF3-11D1-B76F-58BB04C10000}" refers to invalid object "blank". Action Taken: No Action Taken.
193: Mon Jun 20 18:31:05 2005 => Entry "HKCR\CLSID\{87B5C7B7-C3ED-466c-A9A3-2DB953479A07}" refers to invalid object "blank". Action Taken: No Action Taken.
194: Mon Jun 20 18:31:05 2005 => Entry "HKCR\CLSID\{88895560-9AA2-1069-930E-00AA0030EBC8}" refers to invalid object "blank". Action Taken: No Action Taken.
195: Mon Jun 20 18:31:05 2005 => Entry "HKCR\CLSID\{89C31EC0-E2B3-11d3-8CC4-0050040BE7E0}" refers to invalid object "blank". Action Taken: No Action Taken.
196: Mon Jun 20 18:31:05 2005 => Entry "HKCR\CLSID\{8A4B99CF-4AA2-4BDE-8244-F661FBD24306}" refers to invalid object "blank". Action Taken: No Action Taken.
197: Mon Jun 20 18:31:05 2005 => Entry "HKCR\CLSID\{8A4D3EDC-13A4-11D1-9A22-00C04FC2D6C1}" refers to invalid object "blank". Action Taken: No Action Taken.
198: Mon Jun 20 18:31:05 2005 => Entry "HKCR\CLSID\{8A70ECD0-1CEF-46A6-99D5-24E56FFEAAA0}" refers to invalid object "blank". Action Taken: No Action Taken.
199: Mon Jun 20 18:31:05 2005 => Entry "HKCR\CLSID\{8A964910-8580-11d4-B328-30584DC10000}" refers to invalid object "blank". Action Taken: No Action Taken.
200: Mon Jun 20 18:31:05 2005 => Entry "HKCR\CLSID\{8BEBB290-52D0-11D0-B7F4-00C04FD706EC}" refers to invalid object "blank". Action Taken: No Action Taken.
201: Mon Jun 20 18:31:05 2005 => Entry "HKCR\CLSID\{8D0AB116-6BD1-4153-8F3F-800730FED516}" refers to invalid object "blank". Action Taken: No Action Taken.
202: Mon Jun 20 18:31:05 2005 => Entry "HKCR\CLSID\{8D52AA2E-40BE-46D7-8F36-DB7B0F636824}" refers to invalid object "blank". Action Taken: No Action Taken.
203: Mon Jun 20 18:31:05 2005 => Entry "HKCR\CLSID\{8DE56A0D-E58B-41FE-9F80-3563CDCB2C22}" refers to invalid object "blank". Action Taken: No Action Taken.
204: Mon Jun 20 18:31:06 2005 => Entry "HKCR\CLSID\{8E5B11C1-5C6D-11D3-A9CA-005004429289}" refers to invalid object "blank". Action Taken: No Action Taken.
205: Mon Jun 20 18:31:06 2005 => Entry "HKCR\CLSID\{8EEF9744-17C2-4F98-947E-99AC3F41B812}" refers to invalid object "blank". Action Taken: No Action Taken.
206: Mon Jun 20 18:31:06 2005 => Entry "HKCR\CLSID\{8F5B024F-C572-4A6E-96BB-5DEAE3494211}" refers to invalid object "blank". Action Taken: No Action Taken.
207: Mon Jun 20 18:31:06 2005 => Entry "HKCR\CLSID\{8FA9D107-547B-4DBC-9D88-FABD891EDB0A}" refers to invalid object "blank". Action Taken: No Action Taken.
208: Mon Jun 20 18:31:06 2005 => Entry "HKCR\CLSID\{903E45EC-B813-4571-A445-2C5B146C565E}" refers to invalid object "blank". Action Taken: No Action Taken.
209: Mon Jun 20 18:31:06 2005 => Entry "HKCR\CLSID\{911A99A6-2D4A-423B-A4F2-2F9F43F1F66D}" refers to invalid object "blank". Action Taken: No Action Taken.
210: Mon Jun 20 18:31:06 2005 => Entry "HKCR\CLSID\{913226A2-A42B-468A-AD3F-89604756D123}" refers to invalid object "blank". Action Taken: No Action Taken.
211: Mon Jun 20 18:31:06 2005 => Entry "HKCR\CLSID\{91A16ED4-6F9B-11D0-B4D0-00A0C911E8B6}" refers to invalid object "blank". Action Taken: No Action Taken.
212: Mon Jun 20 18:31:06 2005 => Entry "HKCR\CLSID\{923894f3-0d17-48dd-bddc-81193388cb07}" refers to invalid object "V2210DEX.AX". Action Taken: No Action Taken.
213: Mon Jun 20 18:31:06 2005 => Entry "HKCR\CLSID\{92FA2C24-253C-11d2-90FB-006008A1F441}" refers to invalid object "a3dapi.dll". Action Taken: No Action Taken.
214: Mon Jun 20 18:31:06 2005 => Entry "HKCR\CLSID\{95F57411-9A21-4846-B131-450ADBEAE753}" refers to invalid object "blank". Action Taken: No Action Taken.
215: Mon Jun 20 18:31:06 2005 => Entry "HKCR\CLSID\{9869EFB4-18E9-11D3-A837-00104B9E30B5}" refers to invalid object "blank". Action Taken: No Action Taken.
216: Mon Jun 20 18:31:06 2005 => Entry "HKCR\CLSID\{99180163-DA16-101A-935C-444553540000}" refers to invalid object "recncl.dll". Action Taken: No Action Taken.
217: Mon Jun 20 18:31:06 2005 => Entry "HKCR\CLSID\{9A5A8E7C-EC78-4C18-84EA-6789FDB77471}" refers to invalid object "blank". Action Taken: No Action Taken.
218: Mon Jun 20 18:31:06 2005 => Entry "HKCR\CLSID\{9AB4974D-747A-11D5-97A4-0050046C5995}" refers to invalid object "blank". Action Taken: No Action Taken.
219: Mon Jun 20 18:31:06 2005 => Entry "HKCR\CLSID\{9ACC25A1-DAE2-11D2-A9CA-00AA00C7EF04}" refers to invalid object "blank". Action Taken: No Action Taken.
220: Mon Jun 20 18:31:06 2005 => Entry "HKCR\CLSID\{9B07FF66-27F4-4747-9154-E4C134097AAE}" refers to invalid object "blank". Action Taken: No Action Taken.
221: Mon Jun 20 18:31:06 2005 => Entry "HKCR\CLSID\{9B3C9D38-2AB5-41DA-8E64-1128244CB612}" refers to invalid object "blank". Action Taken: No Action Taken.
222: Mon Jun 20 18:31:06 2005 => Entry "HKCR\CLSID\{9B478FE2-EA77-41FA-8677-EAAAA655B42A}" refers to invalid object "blank". Action Taken: No Action Taken.
223: Mon Jun 20 18:31:07 2005 => Entry "HKCR\CLSID\{9DCE3112-0EAE-4024-9C12-C9AECDD8A8D7}" refers to invalid object "blank". Action Taken: No Action Taken.
224: Mon Jun 20 18:31:07 2005 => Entry "HKCR\CLSID\{9f711c60-0668-11d0-94d4-0000c02ba972}" refers to invalid object "blank". Action Taken: No Action Taken.
225: Mon Jun 20 18:31:07 2005 => Entry "HKCR\CLSID\{9FA2F182-CCD6-11D3-B426-005004429289}" refers to invalid object "blank". Action Taken: No Action Taken.
226: Mon Jun 20 18:31:07 2005 => Entry "HKCR\CLSID\{A07A2750-CCDD-11d3-8CBD-0050040BE7E0}" refers to invalid object "blank". Action Taken: No Action Taken.
227: Mon Jun 20 18:31:07 2005 => Entry "HKCR\CLSID\{A192FEF1-EFB5-4677-ACDB-D547BB652F90}" refers to invalid object "blank". Action Taken: No Action Taken.
228: Mon Jun 20 18:31:07 2005 => Entry "HKCR\CLSID\{A2246121-CC0D-11D2-8CE6-0000E84979EE}" refers to invalid object "blank". Action Taken: No Action Taken.
229: Mon Jun 20 18:31:07 2005 => Entry "HKCR\CLSID\{A28512C9-2721-4621-8E08-AF2BDE2AC686}" refers to invalid object "blank". Action Taken: No Action Taken.
230: Mon Jun 20 18:31:07 2005 => Entry "HKCR\CLSID\{A481288F-15E4-4FB9-B1EB-7392CB48C6F0}" refers to invalid object "blank". Action Taken: No Action Taken.
231: Mon Jun 20 18:31:07 2005 => Entry "HKCR\CLSID\{A506EF88-9EFC-4522-BFE1-A8E886A64D80}" refers to invalid object "blank". Action Taken: No Action Taken.
232: Mon Jun 20 18:31:07 2005 => Entry "HKCR\CLSID\{A5704C37-40DA-49EF-904B-97E5F5F9B1C5}" refers to invalid object "blank". Action Taken: No Action Taken.
233: Mon Jun 20 18:31:07 2005 => Entry "HKCR\CLSID\{A64DCF18-1178-11D5-9786-0050046C5995}" refers to invalid object "blank". Action Taken: No Action Taken.
234: Mon Jun 20 18:31:07 2005 => Entry "HKCR\CLSID\{A657CBD6-2388-11d5-A8BE-000102246AAE}" refers to invalid object "blank". Action Taken: No Action Taken.
235: Mon Jun 20 18:31:07 2005 => Entry "HKCR\CLSID\{A6790AA5-C6C7-4BCF-A46D-0FDAC4EA99EB}" refers to invalid object "blank". Action Taken: No Action Taken.
236: Mon Jun 20 18:31:07 2005 => Entry "HKCR\CLSID\{A7E9EBC4-4B2D-44F4-8DDC-28BE73911E0A}" refers to invalid object "blank". Action Taken: No Action Taken.
237: Mon Jun 20 18:31:07 2005 => Entry "HKCR\CLSID\{A880A320-6DFA-47EE-B5F9-6A9481F2605F}" refers to invalid object "blank". Action Taken: No Action Taken.
238: Mon Jun 20 18:31:07 2005 => Entry "HKCR\CLSID\{A880A321-6DFA-47EE-B5F9-6A9481F2605F}" refers to invalid object "blank". Action Taken: No Action Taken.
239: Mon Jun 20 18:31:07 2005 => Entry "HKCR\CLSID\{a88e2dd0-392c-11d3-9bd3-00105aa805c4}" refers to invalid object "blank". Action Taken: No Action Taken.
240: Mon Jun 20 18:31:07 2005 => Entry "HKCR\CLSID\{A8B3948A-5FEF-4eae-9237-FB575428A276}" refers to invalid object "blank". Action Taken: No Action Taken.
241: Mon Jun 20 18:31:07 2005 => Entry "HKCR\CLSID\{A8D3AD02-7508-4004-B2E9-AD33F087F43C}" refers to invalid object "blank". Action Taken: No Action Taken.
242: Mon Jun 20 18:31:07 2005 => Entry "HKCR\CLSID\{A8FA2FDE-BF01-4DD9-AAFF-7BACFDCAE896}" refers to invalid object "blank". Action Taken: No Action Taken.
243: Mon Jun 20 18:31:07 2005 => Entry "HKCR\CLSID\{A92ACF90-B9D1-47DC-BDE0-E00ACEF9460F}" refers to invalid object "blank". Action Taken: No Action Taken.
244: Mon Jun 20 18:31:07 2005 => Entry "HKCR\CLSID\{ABDE1B7C-E4C1-4821-9F47-572CBA4B9CDB}" refers to invalid object "blank". Action Taken: No Action Taken.
245: Mon Jun 20 18:31:08 2005 => Entry "HKCR\CLSID\{AC24DFAA-2346-41ac-9AF0-1E1E814A090C}" refers to invalid object "blank". Action Taken: No Action Taken.
246: Mon Jun 20 18:31:08 2005 => Entry "HKCR\CLSID\{AC2AD0F4-2211-49F2-9985-43742D5F07D0}" refers to invalid object "blank". Action Taken: No Action Taken.
247: Mon Jun 20 18:31:08 2005 => Entry "HKCR\CLSID\{ACC53ACE-954F-4D39-A614-81BC1CB5031B}" refers to invalid object "blank". Action Taken: No Action Taken.
248: Mon Jun 20 18:31:08 2005 => Entry "HKCR\CLSID\{ACFAE296-5936-41ED-AB2B-CD5F3AABCE63}" refers to invalid object "blank". Action Taken: No Action Taken.
249: Mon Jun 20 18:31:08 2005 => Entry "HKCR\CLSID\{AD119551-E651-4587-823E-B0AC997984AD}" refers to invalid object "blank". Action Taken: No Action Taken.
250: Mon Jun 20 18:31:08 2005 => Entry "HKCR\CLSID\{AD25688D-FE9A-4FF3-884C-FA9591377A5C}" refers to invalid object "blank". Action Taken: No Action Taken.
251: Mon Jun 20 18:31:08 2005 => Entry "HKCR\CLSID\{AD2A31FF-6D06-44BD-B36E-2E35BBF2CAAA}" refers to invalid object "blank". Action Taken: No Action Taken.
252: Mon Jun 20 18:31:08 2005 => Entry "HKCR\CLSID\{AE9E6614-8ACD-48be-AD0E-FCD05DC51FAA}" refers to invalid object "blank". Action Taken: No Action Taken.
253: Mon Jun 20 18:31:08 2005 => Entry "HKCR\CLSID\{B0639356-335C-4E47-B63C-12531A7A5206}" refers to invalid object "blank". Action Taken: No Action Taken.
254: Mon Jun 20 18:31:08 2005 => Entry "HKCR\CLSID\{B0693766-5278-4ec6-B9E1-3CE40560EF5A}" refers to invalid object "CaPlgin.ax". Action Taken: No Action Taken.
255: Mon Jun 20 18:31:08 2005 => Entry "HKCR\CLSID\{B1572EA0-7C0C-45db-9E31-C838313244D3}" refers to invalid object "blank". Action Taken: No Action Taken.
256: Mon Jun 20 18:31:08 2005 => Entry "HKCR\CLSID\{B1BA31F0-5EFA-47A7-AC1F-626C4054DB70}" refers to invalid object "blank". Action Taken: No Action Taken.
257: Mon Jun 20 18:31:08 2005 => Entry "HKCR\CLSID\{B333CDB5-5772-11D3-9112-00C04F79C327}" refers to invalid object "blank". Action Taken: No Action Taken.
258: Mon Jun 20 18:31:08 2005 => Entry "HKCR\CLSID\{B45A4A81-86DA-11D1-B706-00A024DDAFD1}" refers to invalid object "blank". Action Taken: No Action Taken.
259: Mon Jun 20 18:31:08 2005 => Entry "HKCR\CLSID\{B45CE74B-1AA5-44f5-A3B6-0A00A46A4789}" refers to invalid object "blank". Action Taken: No Action Taken.
260: Mon Jun 20 18:31:08 2005 => Entry "HKCR\CLSID\{B47CA1C5-643A-45C5-AD9B-D0DF29DDEF60}" refers to invalid object "blank". Action Taken: No Action Taken.
261: Mon Jun 20 18:31:08 2005 => Entry "HKCR\CLSID\{B727C210-2022-11D4-B2C6-0050DA1BD906}" refers to invalid object "blank". Action Taken: No Action Taken.
262: Mon Jun 20 18:31:09 2005 => Entry "HKCR\CLSID\{B727C212-2022-11D4-B2C6-0050DA1BD906}" refers to invalid object "blank". Action Taken: No Action Taken.
263: Mon Jun 20 18:31:09 2005 => Entry "HKCR\CLSID\{B727C217-2022-11D4-B2C6-0050DA1BD906}" refers to invalid object "blank". Action Taken: No Action Taken.
264: Mon Jun 20 18:31:09 2005 => Entry "HKCR\CLSID\{B727C219-2022-11D4-B2C6-0050DA1BD906}" refers to invalid object "blank". Action Taken: No Action Taken.
265: Mon Jun 20 18:31:09 2005 => Entry "HKCR\CLSID\{B727C21B-2022-11D4-B2C6-0050DA1BD906}" refers to invalid object "blank". Action Taken: No Action Taken.
266: Mon Jun 20 18:31:09 2005 => Entry "HKCR\CLSID\{B727C21D-2022-11D4-B2C6-0050DA1BD906}" refers to invalid object "blank". Action Taken: No Action Taken.
267: Mon Jun 20 18:31:09 2005 => Entry "HKCR\CLSID\{B727C220-2022-11D4-B2C6-0050DA1BD906}" refers to invalid object "blank". Action Taken: No Action Taken.
268: Mon Jun 20 18:31:09 2005 => Entry "HKCR\CLSID\{B727C222-2022-11D4-B2C6-0050DA1BD906}" refers to invalid object "blank". Action Taken: No Action Taken.
269: Mon Jun 20 18:31:09 2005 => Entry "HKCR\CLSID\{B832B0AB-A7D3-11D1-97C3-00609706FA0C}" refers to invalid object "blank". Action Taken: No Action Taken.
270: Mon Jun 20 18:31:09 2005 => Entry "HKCR\CLSID\{B843DA96-2B2D-447E-90AB-B92929AA11AF}" refers to invalid object "blank". Action Taken: No Action Taken.
271: Mon Jun 20 18:31:09 2005 => Entry "HKCR\CLSID\{B87799AF-2CE9-4DAA-93CF-65F002035369}" refers to invalid object "blank". Action Taken: No Action Taken.
272: Mon Jun 20 18:31:09 2005 => Entry "HKCR\CLSID\{B9F665CA-BB48-4632-B660-A8D12BE9BA59}" refers to invalid object "blank". Action Taken: No Action Taken.
273: Mon Jun 20 18:31:09 2005 => Entry "HKCR\CLSID\{BA2830A1-A600-4e03-9F4F-2385B74B25D6}" refers to invalid object "blank". Action Taken: No Action Taken.
274: Mon Jun 20 18:31:09 2005 => Entry "HKCR\CLSID\{BBC73C94-337C-43CC-B52C-31EB9FA34013}" refers to invalid object "blank". Action Taken: No Action Taken.
275: Mon Jun 20 18:31:09 2005 => Entry "HKCR\CLSID\{BBE94BFE-3106-42cf-9570-EC4135686DC2}" refers to invalid object "blank". Action Taken: No Action Taken.
276: Mon Jun 20 18:31:09 2005 => Entry "HKCR\CLSID\{BC1C0B16-1D61-4C0F-B539-47B1133FE487}" refers to invalid object "blank". Action Taken: No Action Taken.
277: Mon Jun 20 18:31:09 2005 => Entry "HKCR\CLSID\{BC9AACD8-718A-4823-9D09-6C7B5B46E632}" refers to invalid object "blank". Action Taken: No Action Taken.
278: Mon Jun 20 18:31:09 2005 => Entry "HKCR\CLSID\{BD738EE1-2B1D-11D4-B426-005004429289}" refers to invalid object "blank". Action Taken: No Action Taken.
279: Mon Jun 20 18:31:09 2005 => Entry "HKCR\CLSID\{BE350E78-5CD5-4C8C-B9C7-60339BD43418}" refers to invalid object "blank". Action Taken: No Action Taken.
280: Mon Jun 20 18:31:09 2005 => Entry "HKCR\CLSID\{BF6EA206-9E55-11D1-9DC6-006097C54321}" refers to invalid object "blank". Action Taken: No Action Taken.
281: Mon Jun 20 18:31:09 2005 => Entry "HKCR\CLSID\{BFAE80FB-7E80-4bcd-918A-BEB3C8BFA8FC}" refers to invalid object "blank". Action Taken: No Action Taken.
282: Mon Jun 20 18:31:10 2005 => Entry "HKCR\CLSID\{BFEBDD1E-58DE-451a-B65D-DF5BE730494B}" refers to invalid object "blank". Action Taken: No Action Taken.
283: Mon Jun 20 18:31:10 2005 => Entry "HKCR\CLSID\{C20CC0CA-590E-11D3-9112-00C04F79C327}" refers to invalid object "blank". Action Taken: No Action Taken.
284: Mon Jun 20 18:31:10 2005 => Entry "HKCR\CLSID\{C2FFC87E-9E29-46d7-BDD7-DC7AC366EC68}" refers to invalid object "blank". Action Taken: No Action Taken.
285: Mon Jun 20 18:31:10 2005 => Entry "HKCR\CLSID\{C35E169A-B341-45FB-8BFD-2E2C5CC3B6E8}" refers to invalid object "blank". Action Taken: No Action Taken.
286: Mon Jun 20 18:31:10 2005 => Entry "HKCR\CLSID\{C406F816-318D-4F7D-81CB-BA93CA7B70D5}" refers to invalid object "blank". Action Taken: No Action Taken.
287: Mon Jun 20 18:31:10 2005 => Entry "HKCR\CLSID\{C40B70BA-3881-48ca-A659-ED7EB19EDF52}" refers to invalid object "blank". Action Taken: No Action Taken.
288: Mon Jun 20 18:31:10 2005 => Entry "HKCR\CLSID\{C4C89E0B-8AE1-4B36-B703-752ABD6A0427}" refers to invalid object "blank". Action Taken: No Action Taken.
289: Mon Jun 20 18:31:10 2005 => Entry "HKCR\CLSID\{C8789112-B927-4c81-927F-B09C8A4EBD07}" refers to invalid object "blank". Action Taken: No Action Taken.
290: Mon Jun 20 18:31:10 2005 => Entry "HKCR\CLSID\{C8A4524A-76FF-4676-827E-74942A2A311E}" refers to invalid object "blank". Action Taken: No Action Taken.
291: Mon Jun 20 18:31:10 2005 => Entry "HKCR\CLSID\{C8E53841-6832-4dfe-879F-D613E2BB384B}" refers to invalid object "blank". Action Taken: No Action Taken.
292: Mon Jun 20 18:31:10 2005 => Entry "HKCR\CLSID\{CA5E931D-C53F-40bc-885A-64A52BF89EAB}" refers to invalid object "blank". Action Taken: No Action Taken.
293: Mon Jun 20 18:31:11 2005 => Entry "HKCR\CLSID\{CB1C83B5-8879-4B64-9FF3-3647E418A0CF}" refers to invalid object "blank". Action Taken: No Action Taken.
294: Mon Jun 20 18:31:11 2005 => Entry "HKCR\CLSID\{CBB7B370-2EAD-4090-AB61-166077E84E47}" refers to invalid object "blank". Action Taken: No Action Taken.
295: Mon Jun 20 18:31:11 2005 => Entry "HKCR\CLSID\{CC01B761-A537-11D0-9C71-00AA0058A735}" refers to invalid object "blank". Action Taken: No Action Taken.
296: Mon Jun 20 18:31:11 2005 => Entry "HKCR\CLSID\{CD22797E-D6C0-4140-965B-0132F60C405B}" refers to invalid object "blank". Action Taken: No Action Taken.
297: Mon Jun 20 18:31:11 2005 => Entry "HKCR\CLSID\{CD4292A5-BAFF-47CE-8455-ECB47B7B62A0}" refers to invalid object "blank". Action Taken: No Action Taken.
298: Mon Jun 20 18:31:11 2005 => Entry "HKCR\CLSID\{CD5B74A1-2602-11D4-AEE8-00600857EED8}" refers to invalid object "blank". Action Taken: No Action Taken.
299: Mon Jun 20 18:31:11 2005 => Entry "HKCR\CLSID\{CEFC65D8-66D8-11D1-8D8C-0000F804B057}" refers to invalid object "blank". Action Taken: No Action Taken.
300: Mon Jun 20 18:31:11 2005 => Entry "HKCR\CLSID\{CF3EBABF-3E64-4422-BE23-514BB066ADBE}" refers to invalid object "blank". Action Taken: No Action Taken.
301: Mon Jun 20 18:31:11 2005 => Entry "HKCR\CLSID\{D2AE39EF-965C-4058-A21B-AC0E0673F72D}" refers to invalid object "blank". Action Taken: No Action Taken.
302: Mon Jun 20 18:31:11 2005 => Entry "HKCR\CLSID\{D2F6C408-D12A-42eb-876D-A6E1232C5984}" refers to invalid object "blank". Action Taken: No Action Taken.
303: Mon Jun 20 18:31:11 2005 => Entry "HKCR\CLSID\{D342AB7E-951F-4df1-A1F5-78327F6E2D43}" refers to invalid object "blank". Action Taken: No Action Taken.
304: Mon Jun 20 18:31:12 2005 => Entry "HKCR\CLSID\{D3919B99-5049-4E8D-B949-79ADC2B546EF}" refers to invalid object "blank". Action Taken: No Action Taken.
305: Mon Jun 20 18:31:12 2005 => Entry "HKCR\CLSID\{D3B1DE00-6B94-1069-8754-08002B2BD64F}" refers to invalid object "blank". Action Taken: No Action Taken.
306: Mon Jun 20 18:31:12 2005 => Entry "HKCR\CLSID\{d4387178-98ca-4929-b8e3-a11cd2f333a6}" refers to invalid object "blank". Action Taken: No Action Taken.
307: Mon Jun 20 18:31:12 2005 => Entry "HKCR\CLSID\{D502D4A3-03E6-4EAE-A14E-69606CA63430}" refers to invalid object "blank". Action Taken: No Action Taken.
308: Mon Jun 20 18:31:12 2005 => Entry "HKCR\CLSID\{D5DC4B7F-786B-42b7-B83B-FE1B5FC15E2C}" refers to invalid object "blank". Action Taken: No Action Taken.
309: Mon Jun 20 18:31:12 2005 => Entry "HKCR\CLSID\{D881D0B9-1353-473E-B2D8-82B8917B2DB3}" refers to invalid object "blank". Action Taken: No Action Taken.
310: Mon Jun 20 18:31:12 2005 => Entry "HKCR\CLSID\{D8C67FF7-548E-45fd-9B87-0F77758B6B26}" refers to invalid object "blank". Action Taken: No Action Taken.
311: Mon Jun 20 18:31:12 2005 => Entry "HKCR\CLSID\{DADDCB07-8034-4541-88A1-0B15F05861CA}" refers to invalid object "blank". Action Taken: No Action Taken.
312: Mon Jun 20 18:31:12 2005 => Entry "HKCR\CLSID\{DB5B8C90-7B62-11CF-A9E4-00AA00B676FC}" refers to invalid object "blank". Action Taken: No Action Taken.
313: Mon Jun 20 18:31:12 2005 => Entry "HKCR\CLSID\{DC7E84CA-6E64-43b0-9289-5C109FACA7A0}" refers to invalid object "blank". Action Taken: No Action Taken.
314: Mon Jun 20 18:31:12 2005 => Entry "HKCR\CLSID\{DCBF2508-D78E-4AFB-864E-2A9FAE3C641C}" refers to invalid object "blank". Action Taken: No Action Taken.
315: Mon Jun 20 18:31:12 2005 => Entry "HKCR\CLSID\{DD6A16F9-89FF-496e-8B1B-BEEB2CF21425}" refers to invalid object "blank". Action Taken: No Action Taken.
316: Mon Jun 20 18:31:12 2005 => Entry "HKCR\CLSID\{DED77360-A576-4EAD-961A-6B4BCC3EA9E8}" refers to invalid object "blank". Action Taken: No Action Taken.
317: Mon Jun 20 18:31:12 2005 => Entry "HKCR\CLSID\{DF0AD8E0-F91C-4109-AE46-1EAA5CD8AB08}" refers to invalid object "blank". Action Taken: No Action Taken.
318: Mon Jun 20 18:31:13 2005 => Entry "HKCR\CLSID\{E0163079-9F30-4e27-8978-288E07293A1C}" refers to invalid object "blank". Action Taken: No Action Taken.
319: Mon Jun 20 18:31:13 2005 => Entry "HKCR\CLSID\{E0464881-0B50-11D6-94C6-0050BF555FAC}" refers to invalid object "blank". Action Taken: No Action Taken.
320: Mon Jun 20 18:31:13 2005 => Entry "HKCR\CLSID\{E064A371-4452-45ea-830A-F4873ED32C36}" refers to invalid object "blank". Action Taken: No Action Taken.
321: Mon Jun 20 18:31:13 2005 => Entry "HKCR\CLSID\{E174A401-CBA0-11D3-AEE5-00600857EED8}" refers to invalid object "blank". Action Taken: No Action Taken.
322: Mon Jun 20 18:31:13 2005 => Entry "HKCR\CLSID\{E1E066B3-8E0E-11CF-97F3-00608CC03883}" refers to invalid object "blank". Action Taken: No Action Taken.
323: Mon Jun 20 18:31:13 2005 => Entry "HKCR\CLSID\{E27FC1E5-B5CB-4C3E-8AA6-81C2A4BAC8AF}" refers to invalid object "blank". Action Taken: No Action Taken.
324: Mon Jun 20 18:31:13 2005 => Entry "HKCR\CLSID\{E3029590-7294-11D3-AEE3-00600857EED8}" refers to invalid object "blank". Action Taken: No Action Taken.
325: Mon Jun 20 18:31:13 2005 => Entry "HKCR\CLSID\{E6FA1B8E-5020-4C1A-9EFC-3D5C59722D85}" refers to invalid object "blank". Action Taken: No Action Taken.
326: Mon Jun 20 18:31:13 2005 => Entry "HKCR\CLSID\{E74F4B81-62B2-11D2-A9C9-00AA00C7EF04}" refers to invalid object "blank". Action Taken: No Action Taken.
327: Mon Jun 20 18:31:13 2005 => Entry "HKCR\CLSID\{E7ED526D-EAEC-43c9-B854-07C955AA9511}" refers to invalid object "blank". Action Taken: No Action Taken.
328: Mon Jun 20 18:31:13 2005 => Entry "HKCR\CLSID\{EC22770D-3343-4C56-8A8D-3E560475F655}" refers to invalid object "blank". Action Taken: No Action Taken.
329: Mon Jun 20 18:31:14 2005 => Entry "HKCR\CLSID\{EEDA9AEE-CDDB-46E3-827B-00A0C78ED3F9}" refers to invalid object "blank". Action Taken: No Action Taken.
330: Mon Jun 20 18:31:14 2005 => Entry "HKCR\CLSID\{EFCE30D1-BDDE-47c0-95D7-94F3701CBEF0}" refers to invalid object "blank". Action Taken: No Action Taken.
331: Mon Jun 20 18:31:14 2005 => Entry "HKCR\CLSID\{EFFA3DFE-28B9-4280-8BDF-377EBBEC458E}" refers to invalid object "blank". Action Taken: No Action Taken.
332: Mon Jun 20 18:31:15 2005 => Entry "HKCR\CLSID\{F07D0F4D-AA8A-4489-AA71-34B0B197E8C0}" refers to invalid object "blank". Action Taken: No Action Taken.
333: Mon Jun 20 18:31:15 2005 => Entry "HKCR\CLSID\{F19B8D1A-34A6-4C9F-83BB-4CE80658F499}" refers to invalid object "blank". Action Taken: No Action Taken.
334: Mon Jun 20 18:31:16 2005 => Entry "HKCR\CLSID\{F5E0B5DF-75F0-11D1-B5BB-FAC4D6E6B4D2}" refers to invalid object "blank". Action Taken: No Action Taken.
335: Mon Jun 20 18:31:16 2005 => Entry "HKCR\CLSID\{F802F260-519B-11D1-BB5D-0060974C6013}" refers to invalid object "blank". Action Taken: No Action Taken.
336: Mon Jun 20 18:31:16 2005 => Entry "HKCR\CLSID\{F808DF6F-6049-11D1-BA20-006097D2898E}" refers to invalid object "blank". Action Taken: No Action Taken.
337: Mon Jun 20 18:31:16 2005 => Entry "HKCR\CLSID\{FA5A37B2-4017-11D3-A763-00E018904220}" refers to invalid object "blank". Action Taken: No Action Taken.
338: Mon Jun 20 18:31:16 2005 => Entry "HKCR\CLSID\{FA8EF6A3-CA98-11D4-A110-00105A09BB78}" refers to invalid object "blank". Action Taken: No Action Taken.
339: Mon Jun 20 18:31:16 2005 => Entry "HKCR\CLSID\{FA8EF6A7-CA98-11D4-A110-00105A09BB78}" refers to invalid object "blank". Action Taken: No Action Taken.
340: Mon Jun 20 18:31:16 2005 => Entry "HKCR\CLSID\{FA8EF6A9-CA98-11D4-A110-00105A09BB78}" refers to invalid object "blank". Action Taken: No Action Taken.
341: Mon Jun 20 18:31:16 2005 => Entry "HKCR\CLSID\{FACF11A2-5095-11D3-A9DE-00C0268E5C48}" refers to invalid object "blank". Action Taken: No Action Taken.
342: Mon Jun 20 18:31:17 2005 => Entry "HKCR\CLSID\{fba38bcf-e23d-4979-811e-1326bbadb8c8}" refers to invalid object "blank". Action Taken: No Action Taken.
343: Mon Jun 20 18:31:17 2005 => Entry "HKCR\CLSID\{FC032061-1DF6-11D3-AEE3-00600857EED8}" refers to invalid object "blank". Action Taken: No Action Taken.
344: Mon Jun 20 18:31:17 2005 => Entry "HKCR\CLSID\{FC1CF921-CCE5-11D2-8CE6-0000E84979EE}" refers to invalid object "blank". Action Taken: No Action Taken.
345: Mon Jun 20 18:31:17 2005 => Entry "HKCR\CLSID\{FC41CFC1-4927-11D3-AEE3-00600857EED8}" refers to invalid object "blank". Action Taken: No Action Taken.
346: Mon Jun 20 18:31:17 2005 => Entry "HKCR\CLSID\{FC442681-62F5-11D2-AA0A-0080488345E8}" refers to invalid object "blank". Action Taken: No Action Taken.
347: Mon Jun 20 18:31:17 2005 => Entry "HKCR\CLSID\{FE47CC82-A8B8-4330-8DF9-6947CAEA65E6}" refers to invalid object "blank". Action Taken: No Action Taken.
348: Mon Jun 20 18:31:17 2005 => Entry "HKCR\CLSID\{FEE0D121-1CD3-11D3-A9CA-00AA00C7EF04}" refers to invalid object "blank". Action Taken: No Action Taken.
349: Mon Jun 20 18:31:17 2005 => Entry "HKCR\CLSID\{FEE0D122-1CD3-11D3-A9CA-00AA00C7EF04}" refers to invalid object "blank". Action Taken: No Action Taken.
350: Mon Jun 20 18:31:17 2005 => Entry "HKCR\CLSID\{FF8F1D65-AD2B-47F1-9E71-66B7D35E3852}" refers to invalid object "blank". Action Taken: No Action Taken.
351: Mon Jun 20 18:31:17 2005 => Entry "HKCR\CLSID\{FFCDFA81-2AC5-11D4-AEE8-00600857EED8}" refers to invalid object "blank". Action Taken: No Action Taken.
352: Mon Jun 20 18:31:29 2005 => Entry "HKCR\idea2.SidebarContextMenuHelper" refers to invalid object "{D433EE76-5A0D-49E9-9C90-8FE1C0D483D7}". Action Taken: No Action Taken.
353: Mon Jun 20 18:31:29 2005 => Entry "HKCR\idea2.SidebarContextMenuHelper.1" refers to invalid object "{D433EE76-5A0D-49E9-9C90-8FE1C0D483D7}". Action Taken: No Action Taken.
354: Mon Jun 20 18:31:29 2005 => Entry "HKCR\idea2.SidebarIconHandler" refers to invalid object "{F2185E5D-720E-4956-90D9-75F6AC141575}". Action Taken: No Action Taken.
355: Mon Jun 20 18:31:29 2005 => Entry "HKCR\idea2.SidebarIconHandler.1" refers to invalid object "{F2185E5D-720E-4956-90D9-75F6AC141575}". Action Taken: No Action Taken.
356: Mon Jun 20 18:31:37 2005 => Entry "HKCR\PCDfile" refers to invalid object "{11943940-36DE-11CF-953E-00C0A84029E9}". Action Taken: No Action Taken.
357: Mon Jun 20 18:31:37 2005 => Entry "HKCR\pcxfile" refers to invalid object "{11943940-36DE-11CF-953E-00C0A84029E9}". Action Taken: No Action Taken.
358: Mon Jun 20 18:31:40 2005 => Entry "HKCR\tgafile" refers to invalid object "{11943940-36DE-11CF-953E-00C0A84029E9}". Action Taken: No Action Taken.

--------------------------------------------------
-------- DATEIEN ZUM LÖSCHEN HINZUGEFÜGT ---------
--------------------------------------------------

1: C:\Programme\RealVNC\WinVNC\WinVNC.exe => tagged:RemoteAdmin.Win32.WinVNC-based.c.
2: C:\WINDOWS\odbc.hta => Trojan.VBS.StartPage.x
3: C:\Programme\Temp\vnc-3.3.7-x86_win32.exe => tagged:RemoteAdmin.Win32.WinVNC-based.c.
4: C:\Programme\RealVNC\WinVNC\othread2.dll => tagged:RemoteAdmin.Win32.WinVNC-based.c.
5: C:\Programme\RealVNC\WinVNC\vnchooks.dll => tagged:RemoteAdmin.Win32.WinVNC-based.c.
6: C:\Dokumente und Einstellungen\Christian Müller\Eigene Dateien\Ordner für schnelle Aufbewahrungen\Installationsdateien\cspy.exe => tagged:Tool.Win32.Reboot.
7: C:\System Volume Information\_restore{B02E6CA5-F232-48FA-AE67-C28623F55825}\RP95\A0089178.exe => tagged:Tool.Win32.Reboot.
8: C:\System Volume Information\_restore{B02E6CA5-F232-48FA-AE67-C28623F55825}\RP96\A0089193.exe => tagged:Tool.Win32.Reboot.
9: C:\System Volume Information\_restore{B02E6CA5-F232-48FA-AE67-C28623F55825}\RP109\A0121777.exe => tagged:Tool.Win32.PrcView.3725.
10: C:\System Volume Information\_restore{B02E6CA5-F232-48FA-AE67-C28623F55825}\RP113\A0136138.EXE => tagged:RemoteAdmin.Win32.WinVNC-based.c.
11: C:\System Volume Information\_restore{B02E6CA5-F232-48FA-AE67-C28623F55825}\RP113\A0136139.DLL => tagged:RemoteAdmin.Win32.WinVNC-based.c.
12: C:\System Volume Information\_restore{B02E6CA5-F232-48FA-AE67-C28623F55825}\RP113\A0136140.DLL => tagged:RemoteAdmin.Win32.WinVNC-based.c.

--------------------------------------------------
-------------------- Statistik -------------------
--------------------------------------------------

Mon Jun 20 19:18:19 2005 => Total Objects Scanned: 110464
Mon Jun 20 19:18:19 2005 => Total Virus(es) Found: 31
Mon Jun 20 19:18:20 2005 => Total Errors: 358
Mon Jun 20 19:18:20 2005 => Virus Database Date: 2005/06/20
Mon Jun 20 19:18:20 2005 => Virus Database Count: 135541
Mon Jun 20 19:18:25 2005 => Total Objects Scanned: 110464
Mon Jun 20 19:18:25 2005 => Total Virus(es) Found: 31
Mon Jun 20 19:18:25 2005 => Total Errors: 358
luke123
Moderator
 
Beiträge: 2741
Registriert: 12.06.2005, 20:01
Wohnort: 93073 Neutraubling

Beitragvon Nikita am 23.06.2005, 12:52

loesche mit der killbox:

C:\WINDOWS\odbc.hta
C:\WINDOWS\NDNuninstall5_48.exe
C:\WINDOWS\NDNuninstall5_64.exe
C:\WINDOWS\NDNuninstall6_22.exe
C:\WINDOWS\NDNuninstall6_38.exe
C:\Programme\Gemeinsame Dateien\Ulead Systems\DVD\ulStreamCache.dll

PC neustarten

mit der killbox:
# man kann die temporären Dateien löschen (Tools -- Delete Temp Files)
http://nikita.eddys-domain.de/killbox.html

arbeite das bitte ab:
http://nikita.eddys-domain.de/L2mfix.html
Nikita
Moderator
 
Beiträge: 11478
Registriert: 07.12.2003, 16:53
Wohnort: Lissabon

Beitragvon luke123 am 24.06.2005, 16:18

Hallo, hier das erste logfile von L2mfix:

L2MFIX find log 1.02b
These are the registry keys present
**********************************************************************************
Winlogon/notify:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
"DLLName"="Ati2evxx.dll"
"Asynchronous"=dword:00000000
"Impersonate"=dword:00000001
"Lock"="AtiLockEvent"
"Logoff"="AtiLogoffEvent"
"Logon"="AtiLogonEvent"
"Disconnect"="AtiDisConnectEvent"
"Reconnect"="AtiReConnectEvent"
"Safe"=dword:00000000
"Shutdown"="AtiShutdownEvent"
"StartScreenSaver"="AtiStartScreenSaverEvent"
"StartShell"="AtiStartShellEvent"
"Startup"="AtiStartupEvent"
"StopScreenSaver"="AtiStopScreenSaverEvent"
"Unlock"="AtiUnLockEvent"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
"Asynchronous"=dword:00000000
"Impersonate"=dword:00000000
"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,33,00,32,00,2e,00,64,00,6c,00,\
6c,00,00,00
"Logoff"="ChainWlxLogoffEvent"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
"Asynchronous"=dword:00000000
"Impersonate"=dword:00000000
"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,6e,00,65,00,74,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Logoff"="CryptnetWlxLogoffEvent"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
"DLLName"="cscdll.dll"
"Logon"="WinlogonLogonEvent"
"Logoff"="WinlogonLogoffEvent"
"ScreenSaver"="WinlogonScreenSaverEvent"
"Startup"="WinlogonStartupEvent"
"Shutdown"="WinlogonShutdownEvent"
"StartShell"="WinlogonStartShellEvent"
"Impersonate"=dword:00000000
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
"DLLName"="wlnotify.dll"
"Logon"="SCardStartCertProp"
"Logoff"="SCardStopCertProp"
"Lock"="SCardSuspendCertProp"
"Unlock"="SCardResumeCertProp"
"Enabled"=dword:00000001
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
"Asynchronous"=dword:00000000
"DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Impersonate"=dword:00000000
"StartShell"="SchedStartShell"
"Logoff"="SchedEventLogOff"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
"Logoff"="WLEventLogoff"
"Impersonate"=dword:00000000
"Asynchronous"=dword:00000001
"DllName"=hex(2):73,00,63,00,6c,00,67,00,6e,00,74,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
"DLLName"="WlNotify.dll"
"Lock"="SensLockEvent"
"Logon"="SensLogonEvent"
"Logoff"="SensLogoffEvent"
"Safe"=dword:00000001
"MaxWait"=dword:00000258
"StartScreenSaver"="SensStartScreenSaverEvent"
"StopScreenSaver"="SensStopScreenSaverEvent"
"Startup"="SensStartupEvent"
"Shutdown"="SensShutdownEvent"
"StartShell"="SensStartShellEvent"
"PostShell"="SensPostShellEvent"
"Disconnect"="SensDisconnectEvent"
"Reconnect"="SensReconnectEvent"
"Unlock"="SensUnlockEvent"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
"Asynchronous"=dword:00000000
"DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Impersonate"=dword:00000000
"Logoff"="TSEventLogoff"
"Logon"="TSEventLogon"
"PostShell"="TSEventPostShell"
"Shutdown"="TSEventShutdown"
"StartShell"="TSEventStartShell"
"Startup"="TSEventStartup"
"MaxWait"=dword:00000258
"Reconnect"="TSEventReconnect"
"Disconnect"="TSEventDisconnect"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
"DLLName"="wlnotify.dll"
"Logon"="RegisterTicketExpiredNotificationEvent"
"Logoff"="UnregisterTicketExpiredNotificationEvent"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001

**********************************************************************************
useragent:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform]

**********************************************************************************
Shell Extension key:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
"{00022613-0000-0000-C000-000000000046}"="Eigenschaften f
luke123
Moderator
 
Beiträge: 2741
Registriert: 12.06.2005, 20:01
Wohnort: 93073 Neutraubling

Beitragvon Nikita am 25.06.2005, 00:56

Fixe mit dem HijackThis: (muss nicht im autostart sein)


O2 - BHO: DownloadRedirect Class - {00000000-6CB0-410C-8C3D-8FA8D2011D0A} - C:\Programme\iMesh\iMesh5\iMeshBHO.dll
O2 - BHO: iMeshBar BHO - {5345A7A1-805A-4923-B505-86B2FEBA3FE0} - C:\Programme\iMeshBar\bar\13.bin\IMESHBAR.DLL
O3 - Toolbar: iMeshBar - {5345A7A9-805A-4923-B505-86B2FEBA3FE0} - C:\Programme\iMeshBar\bar\13.bin\IMESHBAR.DLL
O4 - HKLM\..\Run: [second] C:\Programme\Christian M
Nikita
Moderator
 
Beiträge: 11478
Registriert: 07.12.2003, 16:53
Wohnort: Lissabon



Ähnliche Themen