Informationsarchiv.net > Foren-Übersicht > Computerprobleme > Online- und PC-Sicherheit
Warum kostenlos registrieren?

Nur als registriertes Mitglied hast Du vollen Zugriff auf alle Funktionen unserer Website. So kannst Du eigene Fragen stellen und hast die volle Übersicht über neue interessante Themen im Forum.
Jetzt kostenlos registrieren.

Login


O4 - HKLM\..\Run: [snpstd] C:\WINNT\vsnpstd.exe

Warnungen vor Sicherheitslücken und Hilfe beim Enfernen von Viren, Würmern und Trojanern.
Antwort erstellen

O4 - HKLM\..\Run: [snpstd] C:\WINNT\vsnpstd.exe

Beitragvon Nikita am 13.06.2005, 13:21

Von: fossibaer98
An: Nikita
Verfasst am: So Jun 12, 2005 2:18 pm
Titel: Re: Internet sau-langsam Nachricht zitieren
Hallo! Prima! Danke erstmal! Falls Du heute noch was findest wärs toll ansonsten bin ich die nächste Woche in Hamburg und kann dann erst wieder nächsten Samstag was tun.
Ciao
Frank


Logfile of HijackThis v1.99.1
Scan saved at 15:13:28, on 12.06.2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\csrss.exe
C:\WINNT\SYSTEM32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\Programme\Panda Software\Panda Titanium Antivirus 2005\PavProt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\Drivers\trcboot.exe
C:\Programme\IBM\Personal Communications\PCS_AGNT.EXE
C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
D:\Programme\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
C:\WINNT\System32\svchost.exe
C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
C:\Programme\Danware Data\NetOp Remote Control\HOST\NHOSTSVC.EXE
C:\WINNT\system32\nvsvc32.exe
C:\WINNT\system32\oodag.exe
C:\Programme\Panda Software\Panda Titanium Antivirus 2005\PavFnSvr.exe
C:\Programme\Panda Software\Panda Titanium Antivirus 2005\Pavkre.exe
C:\Programme\Danware Data\NetOp Remote Control\HOST\NHSTW32.EXE
C:\Programme\Danware Data\NetOp Remote Control\HOST\nldrw32.exe
C:\Programme\Gemeinsame Dateien\Panda Software\PavShld\pavprsrv.exe
C:\Programme\Panda Software\Panda Titanium Antivirus 2005\pavsrv50.exe
C:\Programme\Panda Software\Panda Titanium Antivirus 2005\AVENGINE.EXE
D:\Programme\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
C:\Programme\PowerISDNMonitor\Wrapper.exe
C:\Programme\Panda Software\Panda Titanium Antivirus 2005\prevsrv.exe
C:\Programme\Panda Software\Panda Titanium Antivirus 2005\PsImSvc.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\SYSTEM32\java.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\vmnat.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\System32\vmnetdhcp.exe
C:\WINNT\system32\Drivers\ldlcserv.exe
C:\WINNT\Explorer.EXE
C:\Programme\Panda Software\Panda Titanium Antivirus 2005\APVXDWIN.EXE
C:\Programme\Acronis\TrueImage\TrueImageMonitor.exe
C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe
C:\programme\onlineeye pro\onlineeye.exe
C:\WINNT\vsnpstd.exe
C:\WINNT\system32\stisvc.exe
C:\Programme\IBM\Personal Communications\tpam.exe
C:\Programme\Microsoft ActiveSync\WCESCOMM.EXE
C:\WINNT\system32\ctfmon.exe
C:\Programme\Internet Download Manager\IDMan.exe
D:\Programme\Microsoft AntiSpyware\gcasDtServ.exe
C:\Programme\FRITZ!\FriFax32.exe
C:\Programme\SDMD\OLWorkgroupFolders\OLWServer.exe
C:\Programme\Clipboard Magic\ClipboardMagic.exe
C:\Programme\Panda Software\Panda Titanium Antivirus 2005\WebProxy.exe
D:\Programme\klickTel\klickTel Juli 2003\pimktel.exe
C:\Programme\Picasa2\PicasaMediaDetector.exe
C:\Programme\Microsoft Office\Office10\OUTLOOK.EXE
C:\Programme\Acronis\TrueImage\TrueImageService.exe
C:\Programme\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = file:///C:/Dokumente%20und%20Einstellungen/Frank%20Gerz/Eigene%20Dateien/bookmark.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = file:///C:/Dokumente%20und%20Einstellungen/Frank%20Gerz/Eigene%20Dateien/bookmark.htm
F2 - REG:system.ini: UserInit=C:\WINNT\regedit /s C:\pav.reg,C:\WINNT\system32\userinit.exe,
O1 - Hosts: 64.91.255.87 www.dcsresearch.com
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Programme\Internet Download Manager\IDMIECC.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: PreispiratenSearchURL - {0B660087-931C-4056-A04F-0423890E40B6} - C:\Programme\Preispiraten\Preispiraten2\PPSearchURL.dll
O2 - BHO: FlpLauncher Class - {4401FDC3-7996-4774-8D2B-C1AE9CD6CC25} - C:\Programme\E-Book Systems\FlipAlbum 6 Pro\FpLaunch.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: WsftpBrowserHelper Class - {601ED020-FB6C-11D3-87D8-0050DA59922B} - C:\Programme\WS_FTP Pro\wsbho2k0.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programme\google\googletoolbar1.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Programme\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: metaspinner media GmbH - {D3AA56A9-8137-4950-A6F9-D0190A82AF2A} - C:\Programme\Preispiraten\Preispiraten2\IEButtonPPInterface.dll
O3 - Toolbar: ReGet Bar - {17939A30-18E2-471E-9D3A-56DD725F1215} - (no file)
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programme\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programme\google\googletoolbar1.dll
O4 - HKLM\..\Run: [APVXDWIN] "C:\Programme\Panda Software\Panda Titanium Antivirus 2005\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Programme\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [Acronis True Image Monitor] "C:\Programme\Acronis\TrueImage\TrueImageMonitor.exe"
O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe"
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [OnlineTime] "c:\programme\onlineeye pro\onlineeye.exe"
O4 - HKLM\..\Run: [snpstd] C:\WINNT\vsnpstd.exe
O4 - HKLM\..\Run: [RealTray] C:\Programme\Real\RealOne Player\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Daily Weather Forecast] C:\Programme\Daily Weather Forecast\weather.exe
O4 - HKLM\..\Run: [gcasServ] "D:\Programme\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [Tpam.exe] C:\Programme\IBM\Personal Communications\tpam.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Programme\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [ctfmon.exe] ctfmon.exe
O4 - HKCU\..\Run: [IDMan] C:\Programme\Internet Download Manager\IDMan.exe /onboot
O4 - Startup: Clipboard Magic.lnk = C:\Programme\Clipboard Magic\ClipboardMagic.exe
O4 - Startup: Microsoft Outlook starten.lnk = C:\Programme\Microsoft Office\Office10\OUTLOOK.EXE
O4 - Startup: Verknüpfung mit pimktel.exe.lnk = D:\Programme\klickTel\klickTel Juli 2003\pimktel.exe
O4 - Global Startup: Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: FRITZ!fax.lnk = C:\Programme\FRITZ!\FriFax32.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: OLWServer.lnk = C:\Programme\SDMD\OLWorkgroupFolders\OLWServer.exe
O8 - Extra context menu item: &Google Search - res://C:\Programme\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Preispiratensuche nach markiertem Text - C:\\Programme\\Preispiraten\\Preispiraten2\\preispiraten.html
O8 - Extra context menu item: Download All Links with IDM - C:\Programme\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download with IDM - C:\Programme\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Enqueue in Star Downloader - C:\PROGRA~1\STARDO~1\sdieenq.htm
O8 - Extra context menu item: Im Cache gespeicherte Seite - res://C:\Programme\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Verweisseiten - res://C:\Programme\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Ähnliche Seiten - res://C:\Programme\Google\GoogleToolbar1.dll/cmsimilar.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\system32\msjava.dll
O9 - Extra button: Preispiraten 2.5 - {2638A03E-1669-43BE-8119-B47087629A7F} - C:\Programme\Preispiraten\Preispiraten2\preispiraten2ie.exe
O9 - Extra button: Mobilen Favoriten erstellen - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Programme\Microsoft ActiveSync\inetrepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Programme\Microsoft ActiveSync\inetrepl.dll
O9 - Extra 'Tools' menuitem: Mobilen Favoriten erstellen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Programme\Microsoft ActiveSync\inetrepl.dll
O9 - Extra button: Recherche-Assistent - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Encarta Researcher\EROPROJ.DLL
O10 - Unknown file in Winsock LSP: c:\winnt\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\idmmbc.dll
O16 - DPF: ADVFN 4v4 - http://www.advfn.com/p.php?pid=loadercab
O16 - DPF: ADVFN US - http://usa.advfn.com/advfn_us8.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid= ... lcid=0x409
O16 - DPF: {3FE0A418-A61F-401B-8C4F-DEAA62C7CEEC} (Chartist25 Control) - http://www.tradesignal.com/wpa/tsb/2.6. ... -6-2-2.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex ... -0-3-9.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3EA852E4-1362-4F36-8583-4C23550043C4}: NameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{5835A0F1-9B63-4CE4-86CA-88FD21A45F4F}: NameServer = 192.168.120.252,192.168.120.253
O17 - HKLM\System\CCS\Services\Tcpip\..\{D87E5999-1385-4FFF-9C82-71D7DFE6E17F}: NameServer = 192.168.1.1
O20 - Winlogon Notify: atmgrtok - atmgrtok.dll (file missing)
O20 - Winlogon Notify: pcsinst - C:\WINNT\SYSTEM32\pcsinst.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe Active File Monitor (AdobeActiveFileMonitor) - Unknown owner - D:\Programme\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
O23 - Service: AppnNode - IBM Corporation - C:\WINNT\system32\Drivers\appnnode.exe
O23 - Service: AVM FRITZ!web Routing Service (de_serv) - AVM Berlin - C:\Programme\Gemeinsame Dateien\AVM\de_serv.exe
O23 - Service: Verwaltungsdienst für die Verwaltung logischer Datenträger (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: IBM Enterprise Extender (ldlcserv) - IBM Corporation - C:\WINNT\system32\Drivers\ldlcserv.exe
O23 - Service: Rational ClearQuest Mail Service (MailService) - Unknown owner - D:\Programme\Rational\ClearQuest\mailservice.exe (file missing)
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Programme\Gemeinsame Dateien\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: MySQL - Unknown owner - C:\mysql\bin\mysqld.exe
O23 - Service: NetOp Helper ver. 7.01 (2002018) (NetOp Host for NT Service) - Danware Data A/S - C:\Programme\Danware Data\NetOp Remote Control\HOST\NHOSTSVC.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINNT\system32\oodag.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Programme\Gemeinsame Dateien\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software - C:\Programme\Panda Software\Panda Titanium Antivirus 2005\PavFnSvr.exe
O23 - Service: Panda Pavkre (Pavkre) - Panda Software - C:\Programme\Panda Software\Panda Titanium Antivirus 2005\Pavkre.exe
O23 - Service: Panda PavProt (PavProt) - Panda Software - C:\Programme\Panda Software\Panda Titanium Antivirus 2005\PavProt.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Programme\Gemeinsame Dateien\Panda Software\PavShld\pavprsrv.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - C:\Programme\Panda Software\Panda Titanium Antivirus 2005\pavsrv50.exe
O23 - Service: Photoshop Elements Device Connect (PhotoshopElementsDeviceConnect) - Unknown owner - D:\Programme\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
O23 - Service: PowerISDNMonitor - Unknown owner - C:\Programme\PowerISDNMonitor\Wrapper.exe
O23 - Service: Panda Preventium+ Service (PREVSRV) - Panda Software - C:\Programme\Panda Software\Panda Titanium Antivirus 2005\prevsrv.exe
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software Internacional - C:\Programme\Panda Software\Panda Titanium Antivirus 2005\PsImSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Programme\Gemeinsame Dateien\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Programme\Gemeinsame Dateien\Sony Shared\AVLib\SSScsiSV.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: IBM Tracefunktion (TrcBoot) - IBM Corporation - C:\WINNT\system32\Drivers\trcboot.exe
O23 - Service: VMware Authorization Service (VMAuthdService) - Unknown owner - D:\Programme\VMware\VMware Workstation\vmware-authd.exe (file missing)
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\WINNT\System32\vmnetdhcp.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\WINNT\System32\vmnat.exe
Zuletzt geändert von Nikita am 13.06.2005, 13:35, insgesamt 1-mal geändert.
Nikita
Moderator
 
Beiträge: 11478
Registriert: 07.12.2003, 16:53
Wohnort: Lissabon
Nach oben

Beitragvon Nikita am 13.06.2005, 13:30

•LSPfix.exe
http://www.spychecker.com/program/lspfix.html

hake an: "I know what Im doing"-->Remove
und loesche die Idmmbc.dll
(eventuell musst du die dll von links nach rechts bringen)

Lade: rkfiles.zip
http://bilder.informationsarchiv.net/Ni ... kfiles.zip
-->entpacken-->
gehe in den abgesicherten Modus
http://www.tu-berlin.de/www/software/vi ... mode.shtml
-->Doppelklick(Ausfuehren)-->rkfiles.bat--> warten bis sich
das DOS-Fenster schliesst--->poste C:\log.txt


•KillBox
http://bilder.informationsarchiv.net/Ni ... illBox.zip
Anleitung: (bebildert)
http://nikita.eddys-domain.de/killbox.html

•Delete File on Reboot <--anhaken

und klicke auf das rote Kreuz,
wenn gefragt wird, ob "Do you want to reboot? "----> klicke auf "no",und kopiere das naechste rein, erst beim letzten auf "yes"

C:\pav.reg
C:\WINNT\vsnpstd.exe


PC neustarten


#öffne das HijackThis-->> Button "scan" -->> Häkchen setzen -->> Button "Fix checked" -->> PC neustarten

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = file:///C:/Dokumente%20und%20Einstellungen/Frank%20Gerz/Eigene%20Dateien/bookmar k.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = file:///C:/Dokumente%20und%20Einstellungen/Frank%20Gerz/Eigene%20Dateien/bookmar k.htm
F2 - REG:system.ini: UserInit=C:\WINNT\regedit /s C:\pav.reg,C:\WINNT\system32\userinit.exe,
O3 - Toolbar: ReGet Bar - {17939A30-18E2-471E-9D3A-56DD725F1215} - (no file)
O4 - HKLM\..\Run: [Daily Weather Forecast] C:\Programme\Daily Weather Forecast\weather.exe
O4 - HKLM\..\Run: [snpstd] C:\WINNT\vsnpstd.exe
O20 - Winlogon Notify: atmgrtok - atmgrtok.dll (file missing)


PC neustarten

deinstllieren:Daily Weather Forecast]


arbeite das Punkt fuer Punkt ab und poste ALLES
http://nikita.eddys-domain.de/L2mfix.html


mache onlinescans + berichte
http://nikita.eddys-domain.de/onlinescan.html
Nikita
Moderator
 
Beiträge: 11478
Registriert: 07.12.2003, 16:53
Wohnort: Lissabon
Nach oben

Habs durch

Beitragvon fossibaer98 am 18.06.2005, 17:41

So Prima, hab mal alles gemacht:
Hier die Logs:
C:\Programme\hijackthis

PLEASE NOTE THAT ALL FILES FOUND BY THIS METHOD ARE NOT BAD FILES, THERE MIGHT BE LEGIT FILES LISTED AND PLEASE BE CAREFUL WHILE FIXING. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE.
Files Found in system Folder............
------------------------
C:\WINNT\system32\atl70.pdb: dwProvSpec2
C:\WINNT\system32\atl70.pdb: dwProvSpec2

Files Found in all users startup Folder............
------------------------
Files Found in all users windows Folder............
------------------------
Finished
bye

Logfile of HijackThis v1.99.1
Scan saved at 17:23:43, on 18.06.2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\csrss.exe
C:\WINNT\SYSTEM32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\Programme\Panda Software\Panda Titanium Antivirus 2005\PavProt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\Drivers\trcboot.exe
C:\Programme\IBM\Personal Communications\PCS_AGNT.EXE
C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
D:\Programme\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINNT\System32\svchost.exe
C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
C:\Programme\Danware Data\NetOp Remote Control\HOST\NHOSTSVC.EXE
C:\WINNT\system32\nvsvc32.exe
C:\WINNT\system32\oodag.exe
C:\Programme\Panda Software\Panda Titanium Antivirus 2005\PavFnSvr.exe
C:\Programme\Panda Software\Panda Titanium Antivirus 2005\Pavkre.exe
C:\WINNT\regedit.exe
C:\WINNT\Explorer.EXE
C:\Programme\Panda Software\Panda Titanium Antivirus 2005\APVXDWIN.EXE
C:\Programme\Acronis\TrueImage\TrueImageMonitor.exe
C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe
C:\programme\onlineeye pro\onlineeye.exe
C:\Programme\Gemeinsame Dateien\Panda Software\PavShld\pavprsrv.exe
C:\Programme\QuickTime\qttask.exe
C:\Programme\Panda Software\Panda Titanium Antivirus 2005\pavsrv50.exe
C:\Programme\IBM\Personal Communications\tpam.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Programme\Microsoft ActiveSync\WCESCOMM.EXE
C:\Programme\Panda Software\Panda Titanium Antivirus 2005\AVENGINE.EXE
C:\WINNT\system32\ctfmon.exe
C:\Programme\Internet Download Manager\IDMan.exe
C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe
D:\Programme\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
C:\Programme\FRITZ!\FriFax32.exe
C:\Programme\PowerISDNMonitor\Wrapper.exe
C:\Programme\SDMD\OLWorkgroupFolders\OLWServer.exe
C:\Programme\Clipboard Magic\ClipboardMagic.exe
C:\Programme\Microsoft Office\Office10\OUTLOOK.EXE
C:\Programme\Panda Software\Panda Titanium Antivirus 2005\prevsrv.exe
D:\Programme\klickTel\klickTel Juli 2003\pimktel.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Center\UsrPrmpt.exe
C:\Programme\Panda Software\Panda Titanium Antivirus 2005\PsImSvc.exe
D:\Programme\Microsoft AntiSpyware\gcasDtServ.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\vmnat.exe
C:\Programme\Panda Software\Panda Titanium Antivirus 2005\WebProxy.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\System32\vmnetdhcp.exe
C:\WINNT\SYSTEM32\java.exe
C:\WINNT\system32\Drivers\ldlcserv.exe
C:\Programme\Danware Data\NetOp Remote Control\HOST\NHSTW32.EXE
C:\Programme\Danware Data\NetOp Remote Control\HOST\nldrw32.exe
C:\Programme\Opera\Opera.exe
C:\Programme\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = file:///C:/Dokumente%20und%20Einstellungen/Frank%20Gerz/Eigene%20Dateien/bookmark.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = file:///C:/Dokumente%20und%20Einstellungen/Frank%20Gerz/Eigene%20Dateien/bookmark.htm
F2 - REG:system.ini: UserInit=C:\WINNT\regedit /s C:\pav.reg,C:\WINNT\system32\userinit.exe,
O1 - Hosts: 64.91.255.87 www.dcsresearch.com
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Programme\Internet Download Manager\IDMIECC.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: PreispiratenSearchURL - {0B660087-931C-4056-A04F-0423890E40B6} - C:\Programme\Preispiraten\Preispiraten2\PPSearchURL.dll
O2 - BHO: FlpLauncher Class - {4401FDC3-7996-4774-8D2B-C1AE9CD6CC25} - C:\Programme\E-Book Systems\FlipAlbum 6 Pro\FpLaunch.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: WsftpBrowserHelper Class - {601ED020-FB6C-11D3-87D8-0050DA59922B} - C:\Programme\WS_FTP Pro\wsbho2k0.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programme\google\googletoolbar1.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Programme\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: metaspinner media GmbH - {D3AA56A9-8137-4950-A6F9-D0190A82AF2A} - C:\Programme\Preispiraten\Preispiraten2\IEButtonPPInterface.dll
O3 - Toolbar: ReGet Bar - {17939A30-18E2-471E-9D3A-56DD725F1215} - (no file)
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programme\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programme\google\googletoolbar1.dll
O4 - HKLM\..\Run: [APVXDWIN] "C:\Programme\Panda Software\Panda Titanium Antivirus 2005\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Programme\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [Acronis True Image Monitor] "C:\Programme\Acronis\TrueImage\TrueImageMonitor.exe"
O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe"
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [OnlineTime] "c:\programme\onlineeye pro\onlineeye.exe"
O4 - HKLM\..\Run: [snpstd] C:\WINNT\vsnpstd.exe
O4 - HKLM\..\Run: [RealTray] C:\Programme\Real\RealOne Player\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Daily Weather Forecast] C:\Programme\Daily Weather Forecast\weather.exe
O4 - HKLM\..\Run: [gcasServ] "D:\Programme\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [Tpam.exe] C:\Programme\IBM\Personal Communications\tpam.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Programme\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [ctfmon.exe] ctfmon.exe
O4 - HKCU\..\Run: [IDMan] C:\Programme\Internet Download Manager\IDMan.exe /onboot
O4 - Startup: Clipboard Magic.lnk = C:\Programme\Clipboard Magic\ClipboardMagic.exe
O4 - Startup: Microsoft Outlook starten.lnk = C:\Programme\Microsoft Office\Office10\OUTLOOK.EXE
O4 - Startup: Verknüpfung mit pimktel.exe.lnk = D:\Programme\klickTel\klickTel Juli 2003\pimktel.exe
O4 - Global Startup: Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: FRITZ!fax.lnk = C:\Programme\FRITZ!\FriFax32.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: OLWServer.lnk = C:\Programme\SDMD\OLWorkgroupFolders\OLWServer.exe
O8 - Extra context menu item: &Google Search - res://C:\Programme\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Preispiratensuche nach markiertem Text - C:\\Programme\\Preispiraten\\Preispiraten2\\preispiraten.html
O8 - Extra context menu item: Download All Links with IDM - C:\Programme\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download with IDM - C:\Programme\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Enqueue in Star Downloader - C:\PROGRA~1\STARDO~1\sdieenq.htm
O8 - Extra context menu item: Im Cache gespeicherte Seite - res://C:\Programme\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Verweisseiten - res://C:\Programme\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Ähnliche Seiten - res://C:\Programme\Google\GoogleToolbar1.dll/cmsimilar.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\system32\msjava.dll
O9 - Extra button: Preispiraten 2.5 - {2638A03E-1669-43BE-8119-B47087629A7F} - C:\Programme\Preispiraten\Preispiraten2\preispiraten2ie.exe
O9 - Extra button: Mobilen Favoriten erstellen - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Programme\Microsoft ActiveSync\inetrepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Programme\Microsoft ActiveSync\inetrepl.dll
O9 - Extra 'Tools' menuitem: Mobilen Favoriten erstellen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Programme\Microsoft ActiveSync\inetrepl.dll
O9 - Extra button: Recherche-Assistent - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Encarta Researcher\EROPROJ.DLL
O16 - DPF: ADVFN 4v4 - http://www.advfn.com/p.php?pid=loadercab
O16 - DPF: ADVFN US - http://usa.advfn.com/advfn_us8.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid= ... lcid=0x409
O16 - DPF: {3FE0A418-A61F-401B-8C4F-DEAA62C7CEEC} (Chartist25 Control) - http://www.tradesignal.com/wpa/tsb/2.6. ... -6-2-2.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex ... -0-3-9.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3EA852E4-1362-4F36-8583-4C23550043C4}: NameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{5835A0F1-9B63-4CE4-86CA-88FD21A45F4F}: NameServer = 192.168.120.252,192.168.120.253
O17 - HKLM\System\CCS\Services\Tcpip\..\{D87E5999-1385-4FFF-9C82-71D7DFE6E17F}: NameServer = 192.168.1.1
O20 - Winlogon Notify: atmgrtok - atmgrtok.dll (file missing)
O20 - Winlogon Notify: pcsinst - C:\WINNT\SYSTEM32\pcsinst.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe Active File Monitor (AdobeActiveFileMonitor) - Unknown owner - D:\Programme\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
O23 - Service: AppnNode - IBM Corporation - C:\WINNT\system32\Drivers\appnnode.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVM FRITZ!web Routing Service (de_serv) - AVM Berlin - C:\Programme\Gemeinsame Dateien\AVM\de_serv.exe
O23 - Service: Verwaltungsdienst für die Verwaltung logischer Datenträger (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: IBM Enterprise Extender (ldlcserv) - IBM Corporation - C:\WINNT\system32\Drivers\ldlcserv.exe
O23 - Service: Rational ClearQuest Mail Service (MailService) - Unknown owner - D:\Programme\Rational\ClearQuest\mailservice.exe (file missing)
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Programme\Gemeinsame Dateien\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: MySQL - Unknown owner - C:\mysql\bin\mysqld.exe
O23 - Service: NetOp Helper ver. 7.01 (2002018) (NetOp Host for NT Service) - Danware Data A/S - C:\Programme\Danware Data\NetOp Remote Control\HOST\NHOSTSVC.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINNT\system32\oodag.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Programme\Gemeinsame Dateien\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software - C:\Programme\Panda Software\Panda Titanium Antivirus 2005\PavFnSvr.exe
O23 - Service: Panda Pavkre (Pavkre) - Panda Software - C:\Programme\Panda Software\Panda Titanium Antivirus 2005\Pavkre.exe
O23 - Service: Panda PavProt (PavProt) - Panda Software - C:\Programme\Panda Software\Panda Titanium Antivirus 2005\PavProt.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Programme\Gemeinsame Dateien\Panda Software\PavShld\pavprsrv.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - C:\Programme\Panda Software\Panda Titanium Antivirus 2005\pavsrv50.exe
O23 - Service: Photoshop Elements Device Connect (PhotoshopElementsDeviceConnect) - Unknown owner - D:\Programme\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
O23 - Service: PowerISDNMonitor - Unknown owner - C:\Programme\PowerISDNMonitor\Wrapper.exe
O23 - Service: Panda Preventium+ Service (PREVSRV) - Panda Software - C:\Programme\Panda Software\Panda Titanium Antivirus 2005\prevsrv.exe
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software Internacional - C:\Programme\Panda Software\Panda Titanium Antivirus 2005\PsImSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Programme\Gemeinsame Dateien\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Programme\Gemeinsame Dateien\Sony Shared\AVLib\SSScsiSV.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: IBM Tracefunktion (TrcBoot) - IBM Corporation - C:\WINNT\system32\Drivers\trcboot.exe
O23 - Service: VMware Authorization Service (VMAuthdService) - Unknown owner - D:\Programme\VMware\VMware Workstation\vmware-authd.exe (file missing)
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\WINNT\System32\vmnetdhcp.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\WINNT\System32\vmnat.exe

So nach dem Hijack:

Logfile of HijackThis v1.99.1
Scan saved at 17:38:21, on 18.06.2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\csrss.exe
C:\WINNT\SYSTEM32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\Programme\Panda Software\Panda Titanium Antivirus 2005\PavProt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\Drivers\trcboot.exe
C:\Programme\IBM\Personal Communications\PCS_AGNT.EXE
C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
D:\Programme\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINNT\System32\svchost.exe
C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
C:\Programme\Danware Data\NetOp Remote Control\HOST\NHOSTSVC.EXE
C:\WINNT\system32\nvsvc32.exe
C:\WINNT\system32\oodag.exe
C:\Programme\Panda Software\Panda Titanium Antivirus 2005\PavFnSvr.exe
C:\Programme\Panda Software\Panda Titanium Antivirus 2005\Pavkre.exe
C:\Programme\Danware Data\NetOp Remote Control\HOST\NHSTW32.EXE
C:\Programme\Danware Data\NetOp Remote Control\HOST\nldrw32.exe
C:\Programme\Gemeinsame Dateien\Panda Software\PavShld\pavprsrv.exe
C:\Programme\Panda Software\Panda Titanium Antivirus 2005\pavsrv50.exe
C:\Programme\Panda Software\Panda Titanium Antivirus 2005\AVENGINE.EXE
D:\Programme\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
C:\Programme\PowerISDNMonitor\Wrapper.exe
C:\Programme\Panda Software\Panda Titanium Antivirus 2005\prevsrv.exe
C:\Programme\Panda Software\Panda Titanium Antivirus 2005\PsImSvc.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\SYSTEM32\java.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\vmnat.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\System32\vmnetdhcp.exe
C:\WINNT\system32\Drivers\ldlcserv.exe
C:\WINNT\Explorer.EXE
C:\Programme\Panda Software\Panda Titanium Antivirus 2005\APVXDWIN.EXE
C:\Programme\Acronis\TrueImage\TrueImageMonitor.exe
C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe
C:\programme\onlineeye pro\onlineeye.exe
C:\Programme\QuickTime\qttask.exe
C:\Programme\IBM\Personal Communications\tpam.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Programme\Microsoft ActiveSync\WCESCOMM.EXE
C:\WINNT\system32\ctfmon.exe
C:\Programme\Internet Download Manager\IDMan.exe
C:\Programme\FRITZ!\FriFax32.exe
C:\Programme\SDMD\OLWorkgroupFolders\OLWServer.exe
D:\Programme\Microsoft AntiSpyware\gcasDtServ.exe
C:\Programme\Clipboard Magic\ClipboardMagic.exe
C:\Programme\Microsoft Office\Office10\OUTLOOK.EXE
D:\Programme\klickTel\klickTel Juli 2003\pimktel.exe
C:\Programme\Panda Software\Panda Titanium Antivirus 2005\WebProxy.exe
C:\Programme\Opera\Opera.exe
C:\Programme\Real\RealOne Player\RealPlay.exe
C:\Programme\hijackthis\HijackThis.exe

O1 - Hosts: 64.91.255.87 www.dcsresearch.com
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Programme\Internet Download Manager\IDMIECC.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: PreispiratenSearchURL - {0B660087-931C-4056-A04F-0423890E40B6} - C:\Programme\Preispiraten\Preispiraten2\PPSearchURL.dll
O2 - BHO: FlpLauncher Class - {4401FDC3-7996-4774-8D2B-C1AE9CD6CC25} - C:\Programme\E-Book Systems\FlipAlbum 6 Pro\FpLaunch.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: WsftpBrowserHelper Class - {601ED020-FB6C-11D3-87D8-0050DA59922B} - C:\Programme\WS_FTP Pro\wsbho2k0.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programme\google\googletoolbar1.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Programme\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: metaspinner media GmbH - {D3AA56A9-8137-4950-A6F9-D0190A82AF2A} - C:\Programme\Preispiraten\Preispiraten2\IEButtonPPInterface.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programme\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programme\google\googletoolbar1.dll
O4 - HKLM\..\Run: [APVXDWIN] "C:\Programme\Panda Software\Panda Titanium Antivirus 2005\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Programme\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [Acronis True Image Monitor] "C:\Programme\Acronis\TrueImage\TrueImageMonitor.exe"
O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe"
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [OnlineTime] "c:\programme\onlineeye pro\onlineeye.exe"
O4 - HKLM\..\Run: [RealTray] C:\Programme\Real\RealOne Player\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [gcasServ] "D:\Programme\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [Tpam.exe] C:\Programme\IBM\Personal Communications\tpam.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Programme\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [ctfmon.exe] ctfmon.exe
O4 - HKCU\..\Run: [IDMan] C:\Programme\Internet Download Manager\IDMan.exe /onboot
O4 - Startup: Clipboard Magic.lnk = C:\Programme\Clipboard Magic\ClipboardMagic.exe
O4 - Startup: Microsoft Outlook starten.lnk = C:\Programme\Microsoft Office\Office10\OUTLOOK.EXE
O4 - Startup: Verknüpfung mit pimktel.exe.lnk = D:\Programme\klickTel\klickTel Juli 2003\pimktel.exe
O4 - Global Startup: Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: FRITZ!fax.lnk = C:\Programme\FRITZ!\FriFax32.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: OLWServer.lnk = C:\Programme\SDMD\OLWorkgroupFolders\OLWServer.exe
O8 - Extra context menu item: &Google Search - res://C:\Programme\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Preispiratensuche nach markiertem Text - C:\\Programme\\Preispiraten\\Preispiraten2\\preispiraten.html
O8 - Extra context menu item: Download All Links with IDM - C:\Programme\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download with IDM - C:\Programme\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Enqueue in Star Downloader - C:\PROGRA~1\STARDO~1\sdieenq.htm
O8 - Extra context menu item: Im Cache gespeicherte Seite - res://C:\Programme\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Verweisseiten - res://C:\Programme\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Ähnliche Seiten - res://C:\Programme\Google\GoogleToolbar1.dll/cmsimilar.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\system32\msjava.dll
O9 - Extra button: Preispiraten 2.5 - {2638A03E-1669-43BE-8119-B47087629A7F} - C:\Programme\Preispiraten\Preispiraten2\preispiraten2ie.exe
O9 - Extra button: Mobilen Favoriten erstellen - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Programme\Microsoft ActiveSync\inetrepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Programme\Microsoft ActiveSync\inetrepl.dll
O9 - Extra 'Tools' menuitem: Mobilen Favoriten erstellen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Programme\Microsoft ActiveSync\inetrepl.dll
O9 - Extra button: Recherche-Assistent - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Encarta Researcher\EROPROJ.DLL
O16 - DPF: ADVFN 4v4 - http://www.advfn.com/p.php?pid=loadercab
O16 - DPF: ADVFN US - http://usa.advfn.com/advfn_us8.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid= ... lcid=0x409
O16 - DPF: {3FE0A418-A61F-401B-8C4F-DEAA62C7CEEC} (Chartist25 Control) - http://www.tradesignal.com/wpa/tsb/2.6. ... -6-2-2.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex ... -0-3-9.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3EA852E4-1362-4F36-8583-4C23550043C4}: NameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{5835A0F1-9B63-4CE4-86CA-88FD21A45F4F}: NameServer = 192.168.120.252,192.168.120.253
O17 - HKLM\System\CCS\Services\Tcpip\..\{D87E5999-1385-4FFF-9C82-71D7DFE6E17F}: NameServer = 192.168.1.1
O20 - Winlogon Notify: pcsinst - C:\WINNT\SYSTEM32\pcsinst.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe Active File Monitor (AdobeActiveFileMonitor) - Unknown owner - D:\Programme\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
O23 - Service: AppnNode - IBM Corporation - C:\WINNT\system32\Drivers\appnnode.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVM FRITZ!web Routing Service (de_serv) - AVM Berlin - C:\Programme\Gemeinsame Dateien\AVM\de_serv.exe
O23 - Service: Verwaltungsdienst für die Verwaltung logischer Datenträger (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: IBM Enterprise Extender (ldlcserv) - IBM Corporation - C:\WINNT\system32\Drivers\ldlcserv.exe
O23 - Service: Rational ClearQuest Mail Service (MailService) - Unknown owner - D:\Programme\Rational\ClearQuest\mailservice.exe (file missing)
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Programme\Gemeinsame Dateien\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: MySQL - Unknown owner - C:\mysql\bin\mysqld.exe
O23 - Service: NetOp Helper ver. 7.01 (2002018) (NetOp Host for NT Service) - Danware Data A/S - C:\Programme\Danware Data\NetOp Remote Control\HOST\NHOSTSVC.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINNT\system32\oodag.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Programme\Gemeinsame Dateien\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software - C:\Programme\Panda Software\Panda Titanium Antivirus 2005\PavFnSvr.exe
O23 - Service: Panda Pavkre (Pavkre) - Panda Software - C:\Programme\Panda Software\Panda Titanium Antivirus 2005\Pavkre.exe
O23 - Service: Panda PavProt (PavProt) - Panda Software - C:\Programme\Panda Software\Panda Titanium Antivirus 2005\PavProt.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Programme\Gemeinsame Dateien\Panda Software\PavShld\pavprsrv.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - C:\Programme\Panda Software\Panda Titanium Antivirus 2005\pavsrv50.exe
O23 - Service: Photoshop Elements Device Connect (PhotoshopElementsDeviceConnect) - Unknown owner - D:\Programme\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
O23 - Service: PowerISDNMonitor - Unknown owner - C:\Programme\PowerISDNMonitor\Wrapper.exe
O23 - Service: Panda Preventium+ Service (PREVSRV) - Panda Software - C:\Programme\Panda Software\Panda Titanium Antivirus 2005\prevsrv.exe
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software Internacional - C:\Programme\Panda Software\Panda Titanium Antivirus 2005\PsImSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Programme\Gemeinsame Dateien\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Programme\Gemeinsame Dateien\Sony Shared\AVLib\SSScsiSV.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: IBM Tracefunktion (TrcBoot) - IBM Corporation - C:\WINNT\system32\Drivers\trcboot.exe
O23 - Service: VMware Authorization Service (VMAuthdService) - Unknown owner - D:\Programme\VMware\VMware Workstation\vmware-authd.exe (file missing)
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\WINNT\System32\vmnetdhcp.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\WINNT\System32\vmnat.exe

Allerdings konnte ich den Daily Weatherforcast nicht löschen, wüßte nicht wo. Ist in der Software nicht eingetragen.

Ist jetzt alles happy?

Ciao
Frank
fossibaer98
 
Beiträge: 5
Registriert: 11.06.2005, 16:54
Nach oben

Beitragvon Nikita am 18.06.2005, 22:38

Du hast das installiert, aber dennoch gefaellt mir dein Log nicht...viel zu viele Sachen aktiviert.....

VMware virtual machine


mache das bitte und poste alles:
http://nikita.eddys-domain.de/escan.html


4. ) Unnötige Dienste deaktivieren
http://nikita.eddys-domain.de/seite1.html
Windows-Dienste abschalten!

http://www.dingens.org

Windows Worms Doors Cleaner erlaubt Ihnen die Dienste auf die die Würmer angewiesen sind, zu schließen

Windows Worms Doors Cleaner

Die meisten der Würmer, nutzen bekannte Verwundbarkeiten bei Windowsdiensten die standardmäßig eingestellt sind und nicht ohne weiteres über die Betriebssystemeinstellungen deaktiviert werden können. Selbst wenn diese Dienste durch Microsoft Sicherheitskorrekturen behoben werden, im Allgemeinen sind sie trotzdem dem Internet ausgesetzt, bereit um vom nächsten exploit ausgenutzt zu werden.
Diese Ports/Services von der Client Seite aus sind:
Nikita
Moderator
 
Beiträge: 11478
Registriert: 07.12.2003, 16:53
Wohnort: Lissabon
Nach oben

Beitragvon fossibaer98 am 19.06.2005, 17:54

Ja, VMware könnte man entfernen. Habe die Software mal installiert, aber beim deinstallieren ist das übriggeblieben. Außerdem würde ich gern ein paar startups loswerden, nämlich den realplayer und den quicktimeplayer, die kommen immer 2xhoch.
Leider wurde meine Internet-Integration des Internet-Download-Managers entfernt, die hätt ich aber gern, kann ich die wieder rekonstruieren? (bietet der IDM an).
So, hier gleich das Log:

--------------------------------------------------
-------------------- INFECTED --------------------
--------------------------------------------------

1: Sun Jun 19 11:53:45 2005 => File C:\WINNT\system32\mslsp.dll infected by "Trojan-Clicker.Win32.Morwill.b" Virus! Action Taken: No Action Taken.
2: Sun Jun 19 12:06:07 2005 => File C:\WINNT\system32\mslsp.dll infected by "Trojan-Clicker.Win32.Morwill.b" Virus! Action Taken: No Action Taken.
3: Sun Jun 19 13:36:59 2005 => File C:\WINNT\system32\mslsp.dll infected by "Trojan-Clicker.Win32.Morwill.b" Virus! Action Taken: No Action Taken.

--------------------------------------------------
--------------------- TAGGED ---------------------
--------------------------------------------------

1: Sun Jun 19 12:05:34 2005 => File C:\WINNT\system32\HCW848UN.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
2: Sun Jun 19 12:14:22 2005 => File C:\Dokumente und Einstellungen\Frank Gerz\Eigene Dateien\download\News_Rover_v10.0.Rev1-DIGERATI.ZIP tagged as not-a-virus:CrackTool.Win32.Agent.b. No Action Taken.
3: Sun Jun 19 12:15:32 2005 => File C:\Dokumente und Einstellungen\Frank Gerz\Eigene Dateien\Downloads\Compressed\WinRAR_v3.40_All (www.crack.cd).zip tagged as not-a-virus:Tool.Win32.TPE.a. No Action Taken.
4: Sun Jun 19 12:29:57 2005 => File C:\Program Files\mIRC\mirc.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.03. No Action Taken.
5: Sun Jun 19 13:36:14 2005 => File C:\WINNT\system32\HCW848UN.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
6: Sun Jun 19 13:38:54 2005 => File C:\WINNT\Temp\~GL_2771.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
7: Sun Jun 19 13:42:48 2005 => File D:\Emule\Incoming\(Windows) Universal Citrix License Generator v1.2.zip tagged as not-a-virus:CrackTool.Win32.Agent.a. No Action Taken.
8: Sun Jun 19 14:15:42 2005 => File D:\Programme\IBM\WebSphere Studio\Application Developer\v5.1\runtimes\aes_v4\Fix\PQ76109\PQ76109_Fix_AEsServer_AEServer_backup.jar tagged as not-a-virus:Garbage.Java.ChatProperties. No Action Taken.
9: Sun Jun 19 14:29:51 2005 => Scanning File D:\Programme\IBM\WebSphere Studio\Application Developer\v5.1\runtimes\base_v5\java\src\org\omg\IOP\TaggedComponent.java [**]
10: Sun Jun 19 14:29:51 2005 => Scanning File D:\Programme\IBM\WebSphere Studio\Application Developer\v5.1\runtimes\base_v5\java\src\org\omg\IOP\TaggedProfile.java [**]
11: Sun Jun 19 15:57:14 2005 => File D:\Programme\IBM\WebSphere Studio\wstools\eclipse\plugins\com.ibm.etools.jve.j2ee.examples_5.1.1\runtime\j2eeExamples.jar tagged as not-a-virus:Garbage.Java.TuesDayToyAuto. No Action Taken.
12: Sun Jun 19 15:57:59 2005 => File D:\Programme\IBM\WebSphere Studio\wstools\eclipse\plugins\com.ibm.etools.rad.codegen.struts.portlet_5.1.1\runtime\strutsportletcodegen.jar tagged as not-a-virus:Garbage.Java.FormURLToy. No Action Taken.
13: Sun Jun 19 16:26:40 2005 => File D:\Programme\mIRC\mirc.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.12. No Action Taken.
14: Sun Jun 19 16:35:26 2005 => File J:\Zips\ACDSee\ACDSee_v5.0.0.0025_by_Prad1`.zip tagged as not-a-virus:FalseAlarm.DrWeb.Backdoor.Theef.111. No Action Taken.

--------------------------------------------------
--------------------- ERRORS ---------------------
--------------------------------------------------

1: Sun Jun 19 11:55:19 2005 => ERROR!!! Invalid Entry \SystemRoot\system32\drivers\av5flt.sys in SYSTEM\CurrentControlSet\Services\AvFlt...
2: Sun Jun 19 11:55:23 2005 => ERROR!!! Invalid Entry system32\DRIVERS\gt681x.sys in SYSTEM\CurrentControlSet\Services\GT681x...
3: Sun Jun 19 11:55:23 2005 => ERROR!!! Invalid Entry system32\DRIVERS\imagedrv.sys in SYSTEM\CurrentControlSet\Services\Imagedrv...
4: Sun Jun 19 11:55:24 2005 => ERROR!!! Invalid Entry D:\Programme\Rational\ClearQuest\mailservice.exe in SYSTEM\CurrentControlSet\Services\MailService...
5: Sun Jun 19 11:55:36 2005 => ERROR!!! Invalid Entry D:\Programme\VMware\VMware Workstation\vmware-authd.exe in SYSTEM\CurrentControlSet\Services\VMAuthdService...
6: Sun Jun 19 12:02:21 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINNT\System32\spool\DRIVERS\W32X86\Rasddui.hlp". Action Taken: No Action Taken.
7: Sun Jun 19 12:02:21 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINNT\System32\spool\DRIVERS\W32X86\Rasdd.dll". Action Taken: No Action Taken.
8: Sun Jun 19 12:02:21 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINNT\System32\spool\DRIVERS\W32X86\Rasddui.dll". Action Taken: No Action Taken.
9: Sun Jun 19 12:02:21 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINNT\system32\giveio.sys". Action Taken: No Action Taken.
10: Sun Jun 19 12:02:26 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINNT\System32\plugincpl.cpl". Action Taken: No Action Taken.
11: Sun Jun 19 12:02:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\Common\rhmmplay.dll". Action Taken: No Action Taken.
12: Sun Jun 19 12:02:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\Common\popup.ocx". Action Taken: No Action Taken.
13: Sun Jun 19 12:02:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\Common\inetwh32.dll". Action Taken: No Action Taken.
14: Sun Jun 19 12:02:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\Common\csh.dll". Action Taken: No Action Taken.
15: Sun Jun 19 12:02:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\ActPanel.dll". Action Taken: No Action Taken.
16: Sun Jun 19 12:02:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\JdbcOdbc.dll". Action Taken: No Action Taken.
17: Sun Jun 19 12:02:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\NPJava11.dll". Action Taken: No Action Taken.
18: Sun Jun 19 12:02:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\NPJava12.dll". Action Taken: No Action Taken.
19: Sun Jun 19 12:02:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\NPJava13.dll". Action Taken: No Action Taken.
20: Sun Jun 19 12:02:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\NPJava32.dll". Action Taken: No Action Taken.
21: Sun Jun 19 12:02:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\NPOJI610.dll". Action Taken: No Action Taken.
22: Sun Jun 19 12:02:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\awt.dll". Action Taken: No Action Taken.
23: Sun Jun 19 12:02:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\cmm.dll". Action Taken: No Action Taken.
24: Sun Jun 19 12:02:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\dcpr.dll". Action Taken: No Action Taken.
25: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\dt_shmem.dll". Action Taken: No Action Taken.
26: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\dt_socket.dll". Action Taken: No Action Taken.
27: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\fontmanager.dll". Action Taken: No Action Taken.
28: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\hpi.dll". Action Taken: No Action Taken.
29: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\hprof.dll". Action Taken: No Action Taken.
30: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\ioser12.dll". Action Taken: No Action Taken.
31: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\jaas_nt.dll". Action Taken: No Action Taken.
32: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\java.dll". Action Taken: No Action Taken.
33: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\java.exe". Action Taken: No Action Taken.
34: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\javaw.exe". Action Taken: No Action Taken.
35: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\javaws-1_2_0_01-windows-i586-i.exe". Action Taken: No Action Taken.
36: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\jawt.dll". Action Taken: No Action Taken.
37: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\jcov.dll". Action Taken: No Action Taken.
38: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\jdwp.dll". Action Taken: No Action Taken.
39: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\jpeg.dll". Action Taken: No Action Taken.
40: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\jpicom32.dll". Action Taken: No Action Taken.
41: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\jpicpl32.exe". Action Taken: No Action Taken.
42: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\jpiexp32.dll". Action Taken: No Action Taken.
43: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\jpins32.dll". Action Taken: No Action Taken.
44: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\jpishare.dll". Action Taken: No Action Taken.
45: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\jsound.dll". Action Taken: No Action Taken.
46: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\client\jvm.dll". Action Taken: No Action Taken.
47: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\keytool.exe". Action Taken: No Action Taken.
48: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\kinit.exe". Action Taken: No Action Taken.
49: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\klist.exe". Action Taken: No Action Taken.
50: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\ktab.exe". Action Taken: No Action Taken.
51: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\msvcrt.dll". Action Taken: No Action Taken.
52: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\net.dll". Action Taken: No Action Taken.
53: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\nio.dll". Action Taken: No Action Taken.
54: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\orbd.exe". Action Taken: No Action Taken.
55: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\policytool.exe". Action Taken: No Action Taken.
56: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\rmi.dll". Action Taken: No Action Taken.
57: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\rmid.exe". Action Taken: No Action Taken.
58: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\rmiregistry.exe". Action Taken: No Action Taken.
59: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\servertool.exe". Action Taken: No Action Taken.
60: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\tnameserv.exe". Action Taken: No Action Taken.
61: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\verify.dll". Action Taken: No Action Taken.
62: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\w2k_lsa_auth.dll". Action Taken: No Action Taken.
63: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\Java\JRE\bin\zip.dll". Action Taken: No Action Taken.
64: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\SqlAnywhere8\win32\dbcon8.dll". Action Taken: No Action Taken.
65: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\SqlAnywhere8\win32\dbctrs8.dll". Action Taken: No Action Taken.
66: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\SqlAnywhere8\win32\dbeng8.exe". Action Taken: No Action Taken.
67: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\SqlAnywhere8\win32\dbinit.exe". Action Taken: No Action Taken.
68: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\SqlAnywhere8\win32\dblgde8.dll". Action Taken: No Action Taken.
69: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\SqlAnywhere8\win32\dblgen8.dll". Action Taken: No Action Taken.
70: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\SqlAnywhere8\win32\dblges8.dll". Action Taken: No Action Taken.
71: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\SqlAnywhere8\win32\dblgfr8.dll". Action Taken: No Action Taken.
72: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\SqlAnywhere8\win32\dblgit8.dll". Action Taken: No Action Taken.
73: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\SqlAnywhere8\win32\dblgja8.dll". Action Taken: No Action Taken.
74: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\SqlAnywhere8\win32\dblgko8.dll". Action Taken: No Action Taken.
75: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\SqlAnywhere8\win32\dblgpl8.dll". Action Taken: No Action Taken.
76: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\SqlAnywhere8\win32\dblgpt8.dll". Action Taken: No Action Taken.
77: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\SqlAnywhere8\win32\dblgru8.dll". Action Taken: No Action Taken.
78: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\SqlAnywhere8\win32\dblgtw8.dll". Action Taken: No Action Taken.
79: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\SqlAnywhere8\win32\dblguk8.dll". Action Taken: No Action Taken.
80: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\SqlAnywhere8\win32\dblgzh8.dll". Action Taken: No Action Taken.
81: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\SqlAnywhere8\win32\dblib8.dll". Action Taken: No Action Taken.
82: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\SqlAnywhere8\win32\dblog.exe". Action Taken: No Action Taken.
83: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\SqlAnywhere8\win32\dbodbc8.dll". Action Taken: No Action Taken.
84: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\SqlAnywhere8\win32\dboledb8.dll". Action Taken: No Action Taken.
85: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\SqlAnywhere8\win32\dboledba8.dll". Action Taken: No Action Taken.
86: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\SqlAnywhere8\win32\dbserv8.dll". Action Taken: No Action Taken.
87: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\SqlAnywhere8\win32\dbtool8.dll". Action Taken: No Action Taken.
88: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\icr32.dll". Action Taken: No Action Taken.
89: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\common\icrsrv32.exe". Action Taken: No Action Taken.
90: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\ReqPro.dll". Action Taken: No Action Taken.
91: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqBatchCheckinServices.dll". Action Taken: No Action Taken.
92: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqBatchCheckinServicesRes.dll". Action Taken: No Action Taken.
93: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqCRCEngine.dll". Action Taken: No Action Taken.
94: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqComRes.dll". Action Taken: No Action Taken.
95: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqDataConverter.dll". Action Taken: No Action Taken.
96: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqDataConverterRes.dll". Action Taken: No Action Taken.
97: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqDataMover.dll". Action Taken: No Action Taken.
98: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqDataMoverInterfaces.TLB". Action Taken: No Action Taken.
99: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqDataServices.dll". Action Taken: No Action Taken.
100: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqDatastoreGUI.dll". Action Taken: No Action Taken.
101: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqDatastoreRes.dll". Action Taken: No Action Taken.
102: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqDatastoreServices.dll". Action Taken: No Action Taken.
103: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqDbUpgradeRes.dll". Action Taken: No Action Taken.
104: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqDbUpgradeWiz.exe". Action Taken: No Action Taken.
105: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqEmailServices.dll". Action Taken: No Action Taken.
106: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqEmailServicesRes.dll". Action Taken: No Action Taken.
107: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqEventServices.dll". Action Taken: No Action Taken.
108: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqGeneralGuiServices.dll". Action Taken: No Action Taken.
109: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqGeneralServices.dll". Action Taken: No Action Taken.
110: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqInterfaces.TLB". Action Taken: No Action Taken.
111: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqMessageServices.dll". Action Taken: No Action Taken.
112: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqNewTemplateRes.dll". Action Taken: No Action Taken.
113: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqNewTemplateWiz.dll". Action Taken: No Action Taken.
114: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqPoolManager.dll". Action Taken: No Action Taken.
115: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqQueryEngine.dll". Action Taken: No Action Taken.
116: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqReparentEngine.dll". Action Taken: No Action Taken.
117: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqResourceServices.dll". Action Taken: No Action Taken.
118: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqSchemaConverter.dll". Action Taken: No Action Taken.
119: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqVersioningServices.dll". Action Taken: No Action Taken.
120: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqVersioningServicesRes.dll". Action Taken: No Action Taken.
121: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqWordServices.dll". Action Taken: No Action Taken.
122: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqXMLServices.dll". Action Taken: No Action Taken.
123: Sun Jun 19 12:02:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\rqprodb.mda". Action Taken: No Action Taken.
124: Sun Jun 19 12:03:02 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINNT\system32\pxsfs.dll". Action Taken: No Action Taken.
125: Sun Jun 19 12:03:04 2005 => Entry "HKCR\CLSID\{000287CC-0000-0000-C000-000000000046}" refers to invalid object "apprclip.dll". Action Taken: No Action Taken.
126: Sun Jun 19 12:03:04 2005 => Entry "HKCR\CLSID\{00028C49-0000-0000-0000-000000000046}" refers to invalid object "D:\PROGRAMME\RATIONAL\COMMON\TDBG5.OCX". Action Taken: No Action Taken.
127: Sun Jun 19 12:03:04 2005 => Entry "HKCR\CLSID\{00028C4C-0000-0000-0000-000000000046}" refers to invalid object "D:\PROGRAMME\RATIONAL\COMMON\TDBG5.OCX". Action Taken: No Action Taken.
128: Sun Jun 19 12:03:04 2005 => Entry "HKCR\CLSID\{00028C4D-0000-0000-0000-000000000046}" refers to invalid object "D:\PROGRAMME\RATIONAL\COMMON\TDBG5.OCX". Action Taken: No Action Taken.
129: Sun Jun 19 12:03:04 2005 => Entry "HKCR\CLSID\{00028C65-0000-0000-0000-000000000046}" refers to invalid object "D:\PROGRAMME\RATIONAL\COMMON\TDBG5.OCX". Action Taken: No Action Taken.
130: Sun Jun 19 12:03:04 2005 => Entry "HKCR\CLSID\{00028C69-0000-0000-0000-000000000046}" refers to invalid object "D:\PROGRAMME\RATIONAL\COMMON\TDBG5.OCX". Action Taken: No Action Taken.
131: Sun Jun 19 12:03:04 2005 => Entry "HKCR\CLSID\{00028C6A-0000-0000-0000-000000000046}" refers to invalid object "D:\PROGRAMME\RATIONAL\COMMON\TDBG5.OCX". Action Taken: No Action Taken.
132: Sun Jun 19 12:03:04 2005 => Entry "HKCR\CLSID\{00028C6B-0000-0000-0000-000000000046}" refers to invalid object "D:\PROGRAMME\RATIONAL\COMMON\TDBG5.OCX". Action Taken: No Action Taken.
133: Sun Jun 19 12:03:04 2005 => Entry "HKCR\CLSID\{00028C6C-0000-0000-0000-000000000046}" refers to invalid object "D:\PROGRAMME\RATIONAL\COMMON\TDBG5.OCX". Action Taken: No Action Taken.
134: Sun Jun 19 12:03:04 2005 => Entry "HKCR\CLSID\{00028C6D-0000-0000-0000-000000000046}" refers to invalid object "D:\PROGRAMME\RATIONAL\COMMON\TDBG5.OCX". Action Taken: No Action Taken.
135: Sun Jun 19 12:03:04 2005 => Entry "HKCR\CLSID\{00028C6E-0000-0000-0000-000000000046}" refers to invalid object "D:\PROGRAMME\RATIONAL\COMMON\TDBG5.OCX". Action Taken: No Action Taken.
136: Sun Jun 19 12:03:04 2005 => Entry "HKCR\CLSID\{00028C70-0000-0000-0000-000000000046}" refers to invalid object "D:\PROGRAMME\RATIONAL\COMMON\TDBG5.OCX". Action Taken: No Action Taken.
137: Sun Jun 19 12:03:04 2005 => Entry "HKCR\CLSID\{00028C72-0000-0000-0000-000000000046}" refers to invalid object "D:\PROGRAMME\RATIONAL\COMMON\TDBG5.OCX". Action Taken: No Action Taken.
138: Sun Jun 19 12:03:04 2005 => Entry "HKCR\CLSID\{00028C73-0000-0000-0000-000000000046}" refers to invalid object "D:\PROGRAMME\RATIONAL\COMMON\TDBG5.OCX". Action Taken: No Action Taken.
139: Sun Jun 19 12:03:04 2005 => Entry "HKCR\CLSID\{00028C75-0000-0000-0000-000000000046}" refers to invalid object "D:\PROGRAMME\RATIONAL\COMMON\TDBG5.OCX". Action Taken: No Action Taken.
140: Sun Jun 19 12:03:04 2005 => Entry "HKCR\CLSID\{00028C76-0000-0000-0000-000000000046}" refers to invalid object "D:\PROGRAMME\RATIONAL\COMMON\TDBG5.OCX". Action Taken: No Action Taken.
141: Sun Jun 19 12:03:04 2005 => Entry "HKCR\CLSID\{00028C98-0000-0000-0000-000000000046}" refers to invalid object "D:\PROGRAMME\RATIONAL\COMMON\TDBG5.OCX". Action Taken: No Action Taken.
142: Sun Jun 19 12:03:04 2005 => Entry "HKCR\CLSID\{00028CF3-0000-0000-0000-000000000046}" refers to invalid object "D:\Programme\Rational\common\xarray32.ocx". Action Taken: No Action Taken.
143: Sun Jun 19 12:03:05 2005 => Entry "HKCR\CLSID\{00130979-B1BA-11CE-ABC6-F5B2E79D9E3F}" refers to invalid object "E:\FLIPAL~4\FLIPAL~3\ltmm_n.dll". Action Taken: No Action Taken.
144: Sun Jun 19 12:03:05 2005 => Entry "HKCR\CLSID\{0013097A-B1BA-11CE-ABC6-F5B2E79D9E3F}" refers to invalid object "E:\FLIPAL~4\FLIPAL~3\ltmm_n.dll". Action Taken: No Action Taken.
145: Sun Jun 19 12:03:05 2005 => Entry "HKCR\CLSID\{0013097F-B1BA-11CE-ABC6-F5B2E79D9E3F}" refers to invalid object "E:\FLIPAL~4\FLIPAL~3\ltmm_n.dll". Action Taken: No Action Taken.
146: Sun Jun 19 12:03:05 2005 => Entry "HKCR\CLSID\{00130980-B1BA-11CE-ABC6-F5B2E79D9E3F}" refers to invalid object "E:\FLIPAL~4\FLIPAL~3\ltmm_n.dll". Action Taken: No Action Taken.
147: Sun Jun 19 12:03:06 2005 => Entry "HKCR\CLSID\{00130983-B1BA-11CE-ABC6-F5B2E79D9E3F}" refers to invalid object "E:\FLIPAL~4\FLIPAL~3\ltmm_n.dll". Action Taken: No Action Taken.
148: Sun Jun 19 12:03:06 2005 => Entry "HKCR\CLSID\{00130984-B1BA-11CE-ABC6-F5B2E79D9E3F}" refers to invalid object "E:\FLIPAL~4\FLIPAL~3\ltmm_n.dll". Action Taken: No Action Taken.
149: Sun Jun 19 12:03:06 2005 => Entry "HKCR\CLSID\{00130985-B1BA-11CE-ABC6-F5B2E79D9E3F}" refers to invalid object "E:\FLIPAL~4\FLIPAL~3\ltmm_n.dll". Action Taken: No Action Taken.
150: Sun Jun 19 12:03:06 2005 => Entry "HKCR\CLSID\{00130986-B1BA-11CE-ABC6-F5B2E79D9E3F}" refers to invalid object "E:\FLIPAL~4\FLIPAL~3\ltmm_n.dll". Action Taken: No Action Taken.
151: Sun Jun 19 12:03:06 2005 => Entry "HKCR\CLSID\{00130989-B1BA-11CE-ABC6-F5B2E79D9E3F}" refers to invalid object "E:\FLIPAL~4\FLIPAL~3\ltmm_n.dll". Action Taken: No Action Taken.
152: Sun Jun 19 12:03:06 2005 => Entry "HKCR\CLSID\{0013098A-B1BA-11CE-ABC6-F5B2E79D9E3F}" refers to invalid object "E:\FLIPAL~4\FLIPAL~3\ltmm_n.dll". Action Taken: No Action Taken.
153: Sun Jun 19 12:03:06 2005 => Entry "HKCR\CLSID\{001309AF-B1BA-11CE-ABC6-F5B2E79D9E3F}" refers to invalid object "E:\FLIPAL~4\FLIPAL~3\ltmm_n.dll". Action Taken: No Action Taken.
154: Sun Jun 19 12:03:06 2005 => Entry "HKCR\CLSID\{001309B9-B1BA-11CE-ABC6-F5B2E79D9E3F}" refers to invalid object "E:\FLIPAL~4\FLIPAL~3\ltmm_n.dll". Action Taken: No Action Taken.
155: Sun Jun 19 12:03:06 2005 => Entry "HKCR\CLSID\{001309BB-B1BA-11CE-ABC6-F5B2E79D9E3F}" refers to invalid object "E:\FLIPAL~4\FLIPAL~3\ltmm_n.dll". Action Taken: No Action Taken.
156: Sun Jun 19 12:03:06 2005 => Entry "HKCR\CLSID\{013C1DD9-40B0-11D4-83BF-0010A4F8FFAB}" refers to invalid object "D:\PROGRA~1\Rational\RATION~1\RTASSE~1.OCX". Action Taken: No Action Taken.
157: Sun Jun 19 12:03:06 2005 => Entry "HKCR\CLSID\{013C1DDA-40B0-11D4-83BF-0010A4F8FFAB}" refers to invalid object "D:\PROGRA~1\Rational\RATION~1\RTASSE~1.OCX". Action Taken: No Action Taken.
158: Sun Jun 19 12:03:06 2005 => Entry "HKCR\CLSID\{016FF544-53AD-11D4-83EC-000000000000}" refers to invalid object "D:\Programme\Rational\Rational Test\rttestserverui.dll". Action Taken: No Action Taken.
159: Sun Jun 19 12:03:07 2005 => Entry "HKCR\CLSID\{025B591D-B045-4955-A98E-D6C3E03A6C56}" refers to invalid object "D:\Programme\Rational\Rational Test\rtcomtestserver.dll". Action Taken: No Action Taken.
160: Sun Jun 19 12:03:07 2005 => Entry "HKCR\CLSID\{02FF5D77-092E-4DF0-BD14-095D82BEE746}" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqSchemaConverter.dll". Action Taken: No Action Taken.
161: Sun Jun 19 12:03:07 2005 => Entry "HKCR\CLSID\{055694A2-7D25-4B33-A799-AD0FEB395D20}" refers to invalid object "C:\PROGRA~1\STARDO~1\nshelper.dll". Action Taken: No Action Taken.
162: Sun Jun 19 12:03:07 2005 => Entry "HKCR\CLSID\{057862A7-F381-4D6A-8C1D-3CE64431E11B}" refers to invalid object "D:\Programme\VMware\VMware Workstation\vmappsdk.dll". Action Taken: No Action Taken.
163: Sun Jun 19 12:03:08 2005 => Entry "HKCR\CLSID\{0640A81B-4341-4400-A624-3765803F8A64}" refers to invalid object "D:\Programme\VMware\VMware Workstation\vmappsdk.dll". Action Taken: No Action Taken.
164: Sun Jun 19 12:03:08 2005 => Entry "HKCR\CLSID\{08193BA6-70C2-40FC-8857-C874435DE2B1}" refers to invalid object "D:\Programme\VMware\VMware Workstation\vmappsdk.dll". Action Taken: No Action Taken.
165: Sun Jun 19 12:03:08 2005 => Entry "HKCR\CLSID\{084222B9-88DF-43DF-A7B3-79D94256ED9F}" refers to invalid object "D:\Programme\Rational\Rational Test\rtcomtestserver.dll". Action Taken: No Action Taken.
166: Sun Jun 19 12:03:08 2005 => Entry "HKCR\CLSID\{085310D8-FAE7-11D3-82FD-000000000000}" refers to invalid object "D:\Programme\Rational\Rational Test\rtcomtestserver.dll". Action Taken: No Action Taken.
167: Sun Jun 19 12:03:08 2005 => Entry "HKCR\CLSID\{085310DB-FAE7-11D3-82FD-000000000000}" refers to invalid object "D:\Programme\Rational\Rational Test\rtcomtestserver.dll". Action Taken: No Action Taken.
168: Sun Jun 19 12:03:08 2005 => Entry "HKCR\CLSID\{085310E0-FAE7-11D3-82FD-000000000000}" refers to invalid object "D:\Programme\Rational\Rational Test\rtcomtestserver.dll". Action Taken: No Action Taken.
169: Sun Jun 19 12:03:09 2005 => Entry "HKCR\CLSID\{0AD560A5-3DB8-11D4-83B7-000000000000}" refers to invalid object "D:\Programme\Rational\Rational Test\rtcomtestserver.dll". Action Taken: No Action Taken.
170: Sun Jun 19 12:03:09 2005 => Entry "HKCR\CLSID\{0AD560A8-3DB8-11D4-83B7-000000000000}" refers to invalid object "D:\Programme\Rational\Rational Test\rtcomtestserver.dll". Action Taken: No Action Taken.
171: Sun Jun 19 12:03:09 2005 => Entry "HKCR\CLSID\{0D4AC3EE-174E-11D2-8233-00A0C9245320}" refers to invalid object "D:\Programme\Rational\ClearQuest\cqmainttool.dll". Action Taken: No Action Taken.
172: Sun Jun 19 12:03:10 2005 => Entry "HKCR\CLSID\{0FFB2327-0B1D-11D4-98AD-00C04F8D118A}" refers to invalid object "D:\Programme\Rational\Rational Test\rtcomtestserver.dll". Action Taken: No Action Taken.
173: Sun Jun 19 12:03:10 2005 => Entry "HKCR\CLSID\{0FFB2364-0B1D-11D4-98AD-00C04F8D118A}" refers to invalid object "D:\Programme\Rational\Rational Test\rtcomtestserver.dll". Action Taken: No Action Taken.
174: Sun Jun 19 12:03:10 2005 => Entry "HKCR\CLSID\{11B91D37-2855-40BB-8563-8D750B8B2C58}" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqDataMover.dll". Action Taken: No Action Taken.
175: Sun Jun 19 12:03:11 2005 => Entry "HKCR\CLSID\{13675C86-5D4F-4314-BB5D-8F1FE8074705}" refers to invalid object "D:\Programme\VMware\VMware Workstation\vmappsdk.dll". Action Taken: No Action Taken.
176: Sun Jun 19 12:03:11 2005 => Entry "HKCR\CLSID\{14445D7D-50A5-4763-9B67-3A7157744D96}" refers to invalid object "D:\Programme\VMware\VMware Workstation\vmappsdk.dll". Action Taken: No Action Taken.
177: Sun Jun 19 12:03:11 2005 => Entry "HKCR\CLSID\{14843E9B-2A8D-11D4-BE5C-000629056267}" refers to invalid object "D:\Programme\Rational\ClearQuest\CQICQDatastore.dll". Action Taken: No Action Taken.
178: Sun Jun 19 12:03:11 2005 => Entry "HKCR\CLSID\{161FEBB3-FB86-437D-8A87-75832036BDA3}" refers to invalid object "D:\Programme\VMware\VMware Workstation\vmappsdk.dll". Action Taken: No Action Taken.
179: Sun Jun 19 12:03:11 2005 => Entry "HKCR\CLSID\{17B970DF-F58F-11D1-84F9-0060979C513D}" refers to invalid object "D:\Programme\Rational\Rational Test\sqa7rsvr.dll". Action Taken: No Action Taken.
180: Sun Jun 19 12:03:11 2005 => Entry "HKCR\CLSID\{17E62C72-1B77-11D4-A147-00C04F484503}" refers to invalid object "D:\Programme\Rational\Rational Test\rttestserverui.dll". Action Taken: No Action Taken.
181: Sun Jun 19 12:03:12 2005 => Entry "HKCR\CLSID\{1B316F3B-BEDD-40FD-A0E3-71F11241F620}" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqGeneralServices.dll". Action Taken: No Action Taken.
182: Sun Jun 19 12:03:12 2005 => Entry "HKCR\CLSID\{1BA37A44-CC5B-44C3-9F03-B33BE02AC609}" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqBatchCheckinServices.dll". Action Taken: No Action Taken.
183: Sun Jun 19 12:03:12 2005 => Entry "HKCR\CLSID\{1C8F1A43-20F4-11D4-A328-000102351C9B}" refers to invalid object "D:\Programme\Rational\Rational Test\rttestserverui.dll". Action Taken: No Action Taken.
184: Sun Jun 19 12:03:12 2005 => Entry "HKCR\CLSID\{1CBC38EF-FF9F-4F17-9B69-8FBFE9FF8056}" refers to invalid object "D:\Programme\VMware\VMware Workstation\vmdbCOM.dll". Action Taken: No Action Taken.
185: Sun Jun 19 12:03:13 2005 => Entry "HKCR\CLSID\{20662ECF-4B8E-4C9E-9149-1F14A06738D1}" refers to invalid object "D:\Programme\VMware\VMware Workstation\vmappsdk.dll". Action Taken: No Action Taken.
186: Sun Jun 19 12:03:13 2005 => Entry "HKCR\CLSID\{215CD1CF-2EC7-4463-9F62-4AFD5F31CA47}" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqWordServices.dll". Action Taken: No Action Taken.
187: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{24B5E555-16A0-11D2-82DF-0060089253D0}" refers to invalid object "D:\Programme\Rational\common\EHelpServer.dll". Action Taken: No Action Taken.
188: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{2597EB94-0A32-4476-9A92-F28E751647B8}" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqXMLServices.dll". Action Taken: No Action Taken.
189: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{25A9C66D-1789-11D4-98BB-00C04F8D118A}" refers to invalid object "D:\Programme\Rational\Rational Test\rtcomtestserver.dll". Action Taken: No Action Taken.
190: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{25A9C67F-1789-11D4-98BB-00C04F8D118A}" refers to invalid object "D:\Programme\Rational\Rational Test\rtcomtestserver.dll". Action Taken: No Action Taken.
191: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{25A9C691-1789-11D4-98BB-00C04F8D118A}" refers to invalid object "D:\Programme\Rational\Rational Test\rtcomtestserver.dll". Action Taken: No Action Taken.
192: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{27288A9E-2868-40BD-B432-40A905E3C85F}" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqDatastoreGUI.dll". Action Taken: No Action Taken.
193: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{27BB6320-D070-450B-AC37-FCC33EF9060E}" refers to invalid object "D:\PROGRA~1\Rational\CLEARQ~1\CQWKSP~1.OCX". Action Taken: No Action Taken.
194: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{27CC5061-4DC7-11D4-A341-000102351C9B}" refers to invalid object "D:\Programme\Rational\Rational Test\rttestserverui.dll". Action Taken: No Action Taken.
195: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{282CC264-1A91-4EAD-8669-764263BDB44F}" refers to invalid object "D:\Programme\Rational\Rational Test\rttestserverui.dll". Action Taken: No Action Taken.
196: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{28B8D8D6-0E97-4B9D-AAB8-80E14322F215}" refers to invalid object "D:\Programme\VMware\VMware Workstation\vmappsdk.dll". Action Taken: No Action Taken.
197: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{28F7DFE8-7B76-45e8-80F7-7402FAF60A33}" refers to invalid object "D:\Programme\VMware\VMware Workstation\vmappsdk.dll". Action Taken: No Action Taken.
198: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{290377D5-0BF8-11D4-A146-00C04F484503}" refers to invalid object "D:\Programme\Rational\Rational Test\rttestserverui.dll". Action Taken: No Action Taken.
199: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{290377DB-0BF8-11D4-A146-00C04F484503}" refers to invalid object "D:\Programme\Rational\Rational Test\rttestserverui.dll". Action Taken: No Action Taken.
200: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{290377DE-0BF8-11D4-A146-00C04F484503}" refers to invalid object "D:\Programme\Rational\Rational Test\rttestserverui.dll". Action Taken: No Action Taken.
201: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{290377E1-0BF8-11D4-A146-00C04F484503}" refers to invalid object "D:\Programme\Rational\Rational Test\rttestserverui.dll". Action Taken: No Action Taken.
202: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{290377E4-0BF8-11D4-A146-00C04F484503}" refers to invalid object "D:\Programme\Rational\Rational Test\rttestserverui.dll". Action Taken: No Action Taken.
203: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{290377E7-0BF8-11D4-A146-00C04F484503}" refers to invalid object "D:\Programme\Rational\Rational Test\rttestserverui.dll". Action Taken: No Action Taken.
204: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{290377EA-0BF8-11D4-A146-00C04F484503}" refers to invalid object "D:\Programme\Rational\Rational Test\rttestserverui.dll". Action Taken: No Action Taken.
205: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{290377ED-0BF8-11D4-A146-00C04F484503}" refers to invalid object "D:\Programme\Rational\Rational Test\rttestserverui.dll". Action Taken: No Action Taken.
206: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{290377F0-0BF8-11D4-A146-00C04F484503}" refers to invalid object "D:\Programme\Rational\Rational Test\rttestserverui.dll". Action Taken: No Action Taken.
207: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{290377F3-0BF8-11D4-A146-00C04F484503}" refers to invalid object "D:\Programme\Rational\Rational Test\rttestserverui.dll". Action Taken: No Action Taken.
208: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{290377F6-0BF8-11D4-A146-00C04F484503}" refers to invalid object "D:\Programme\Rational\Rational Test\rttestserverui.dll". Action Taken: No Action Taken.
209: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{290377F9-0BF8-11D4-A146-00C04F484503}" refers to invalid object "D:\Programme\Rational\Rational Test\rttestserverui.dll". Action Taken: No Action Taken.
210: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{290377FC-0BF8-11D4-A146-00C04F484503}" refers to invalid object "D:\Programme\Rational\Rational Test\rttestserverui.dll". Action Taken: No Action Taken.
211: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{290377FF-0BF8-11D4-A146-00C04F484503}" refers to invalid object "D:\Programme\Rational\Rational Test\rttestserverui.dll". Action Taken: No Action Taken.
212: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{29037802-0BF8-11D4-A146-00C04F484503}" refers to invalid object "D:\Programme\Rational\Rational Test\rttestserverui.dll". Action Taken: No Action Taken.
213: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{29037805-0BF8-11D4-A146-00C04F484503}" refers to invalid object "D:\Programme\Rational\Rational Test\rttestserverui.dll". Action Taken: No Action Taken.
214: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{291338A0-2EED-1069-BF5D-00DD011186B7}" refers to invalid object "H:\lotus\COMPNENT\LTSCTN40.OCX". Action Taken: No Action Taken.
215: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{291338A5-2EED-1069-BF5D-00DD011186B7}" refers to invalid object "H:\lotus\COMPNENT\LTSCTN40.OCX". Action Taken: No Action Taken.
216: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{291338AA-2EED-1069-BF5D-00DD011186B7}" refers to invalid object "H:\lotus\COMPNENT\LTSCTN40.OCX". Action Taken: No Action Taken.
217: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{291338AF-2EED-1069-BF5D-00DD011186B7}" refers to invalid object "H:\lotus\COMPNENT\LTSCTN40.OCX". Action Taken: No Action Taken.
218: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{291338B4-2EED-1069-BF5D-00DD011186B7}" refers to invalid object "H:\lotus\COMPNENT\LTSCTN40.OCX". Action Taken: No Action Taken.
219: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{291338B9-2EED-1069-BF5D-00DD011186B7}" refers to invalid object "H:\lotus\COMPNENT\LTSCTN40.OCX". Action Taken: No Action Taken.
220: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{291338BE-2EED-1069-BF5D-00DD011186B7}" refers to invalid object "H:\lotus\COMPNENT\LTSCTN40.OCX". Action Taken: No Action Taken.
221: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{291338C3-2EED-1069-BF5D-00DD011186B7}" refers to invalid object "H:\lotus\COMPNENT\LTSCTN40.OCX". Action Taken: No Action Taken.
222: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{291338C8-2EED-1069-BF5D-00DD011186B7}" refers to invalid object "H:\lotus\COMPNENT\LTSCTN40.OCX". Action Taken: No Action Taken.
223: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{291338CD-2EED-1069-BF5D-00DD011186B7}" refers to invalid object "H:\lotus\COMPNENT\LTSCTN40.OCX". Action Taken: No Action Taken.
224: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{291338D2-2EED-1069-BF5D-00DD011186B7}" refers to invalid object "H:\lotus\COMPNENT\LTSCTN40.OCX". Action Taken: No Action Taken.
225: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{291338D7-2EED-1069-BF5D-00DD011186B7}" refers to invalid object "H:\lotus\COMPNENT\LTSCTN40.OCX". Action Taken: No Action Taken.
226: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{291339AD-2EED-1069-BF5D-00DD011186B7}" refers to invalid object "H:\lotus\compnent\lcsrtn10.dll". Action Taken: No Action Taken.
227: Sun Jun 19 12:03:14 2005 => Entry "HKCR\CLSID\{291339AF-2EED-1069-BF5D-00DD011186B7}" refers to invalid object "H:\lotus\compnent\lcsrtn10.dll". Action Taken: No Action Taken.
228: Sun Jun 19 12:03:15 2005 => Entry "HKCR\CLSID\{291339B1-2EED-1069-BF5D-00DD011186B7}" refers to invalid object "H:\lotus\compnent\lcsrtn10.dll". Action Taken: No Action Taken.
229: Sun Jun 19 12:03:15 2005 => Entry "HKCR\CLSID\{291339B2-2EED-1069-BF5D-00DD011186B7}" refers to invalid object "H:\lotus\compnent\lcsrtn10.dll". Action Taken: No Action Taken.
230: Sun Jun 19 12:03:15 2005 => Entry "HKCR\CLSID\{291339B3-2EED-1069-BF5D-00DD011186B7}" refers to invalid object "H:\lotus\compnent\lcsrtn10.dll". Action Taken: No Action Taken.
231: Sun Jun 19 12:03:15 2005 => Entry "HKCR\CLSID\{291339B4-2EED-1069-BF5D-00DD011186B7}" refers to invalid object "H:\lotus\compnent\lcsrtn10.dll". Action Taken: No Action Taken.
232: Sun Jun 19 12:03:15 2005 => Entry "HKCR\CLSID\{29134531-2EED-1069-BF5D-00DD011186B7}" refers to invalid object "H:\lotus\compnent\ltibsn10.ocx". Action Taken: No Action Taken.
233: Sun Jun 19 12:03:15 2005 => Entry "HKCR\CLSID\{29134534-2EED-1069-BF5D-00DD011186B7}" refers to invalid object "H:\lotus\compnent\beans.ocx". Action Taken: No Action Taken.
234: Sun Jun 19 12:03:15 2005 => Entry "HKCR\CLSID\{2C37C480-CEE3-11D1-82C3-0060089253D0}" refers to invalid object "D:\Programme\Rational\common\licensing.dll". Action Taken: No Action Taken.
235: Sun Jun 19 12:03:15 2005 => Entry "HKCR\CLSID\{2CAC41D6-2F23-11D4-A14A-00C04F484503}" refers to invalid object "D:\Programme\Rational\Rational Test\rttestserverui.dll". Action Taken: No Action Taken.
236: Sun Jun 19 12:03:15 2005 => Entry "HKCR\CLSID\{2CE3BADE-BD3E-4669-8242-8B54F7F0F125}" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqDataMover.dll". Action Taken: No Action Taken.
237: Sun Jun 19 12:03:16 2005 => Entry "HKCR\CLSID\{2E21FC70-0402-11D3-9A24-00203529A3C6}" refers to invalid object "C:\Programme\IBM\Personal Communications\autohio.dll". Action Taken: No Action Taken.
238: Sun Jun 19 12:03:16 2005 => Entry "HKCR\CLSID\{2E88ED91-E77D-441C-8891-840729C9E964}" refers to invalid object "D:\Programme\VMware\VMware Workstation\vmdbCOM.dll". Action Taken: No Action Taken.
239: Sun Jun 19 12:03:16 2005 => Entry "HKCR\CLSID\{2EFAD9A5-B66B-4499-8AEF-9ED7C44420BC}" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqDatastoreServices.dll". Action Taken: No Action Taken.
240: Sun Jun 19 12:03:16 2005 => Entry "HKCR\CLSID\{2F5F7F6D-1899-446C-8F8A-EBAE2C653C2D}" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqVersioningServices.dll". Action Taken: No Action Taken.
241: Sun Jun 19 12:03:16 2005 => Entry "HKCR\CLSID\{3024E394-2E58-11D3-AAFE-701604C10000}" refers to invalid object "C:\DOKUME~1\FRANKG~1\LOKALE~1\Temp\fldrview.ocx". Action Taken: No Action Taken.
242: Sun Jun 19 12:03:16 2005 => Entry "HKCR\CLSID\{30403994-1DE5-4CB6-BDF4-9C5152921E0B}" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqXMLServices.dll". Action Taken: No Action Taken.
243: Sun Jun 19 12:03:16 2005 => Entry "HKCR\CLSID\{30AA2DFB-1F5B-11D4-9D5F-00B0D02048F5}" refers to invalid object "D:\PROGRA~1\Rational\RATION~1\RTLOGT~1.OCX". Action Taken: No Action Taken.
244: Sun Jun 19 12:03:16 2005 => Entry "HKCR\CLSID\{30AA2DFC-1F5B-11D4-9D5F-00B0D02048F5}" refers to invalid object "D:\PROGRA~1\Rational\RATION~1\RTLOGT~1.OCX". Action Taken: No Action Taken.
245: Sun Jun 19 12:03:16 2005 => Entry "HKCR\CLSID\{32339915-1AB6-11D4-A147-00C04F484503}" refers to invalid object "D:\Programme\Rational\Rational Test\Radminserver.dll". Action Taken: No Action Taken.
246: Sun Jun 19 12:03:16 2005 => Entry "HKCR\CLSID\{32339927-1AB6-11D4-A147-00C04F484503}" refers to invalid object "D:\Programme\Rational\Rational Test\Radminserver.dll". Action Taken: No Action Taken.
247: Sun Jun 19 12:03:16 2005 => Entry "HKCR\CLSID\{33D00BEA-287A-4AF1-8E68-C34566D298D0}" refers to invalid object "D:\Programme\VMware\VMware Workstation\vmappsdk.dll". Action Taken: No Action Taken.
248: Sun Jun 19 12:03:16 2005 => Entry "HKCR\CLSID\{342A9D83-8B37-4E26-8023-76E42BF94299}" refers to invalid object "D:\Programme\Rational\Rational Test\rtcomtestserver.dll". Action Taken: No Action Taken.
249: Sun Jun 19 12:03:17 2005 => Entry "HKCR\CLSID\{362AB2CC-C98E-4F08-BD2D-6538E661E04A}" refers to invalid object "D:\Programme\Rational\Rational Test\rtcomtestserver.dll". Action Taken: No Action Taken.
250: Sun Jun 19 12:03:17 2005 => Entry "HKCR\CLSID\{36B77A30-6963-11D4-9846-00500462D5A7}" refers to invalid object "D:\Programme\Rational\ClearQuest\cqxmldocapp.dll". Action Taken: No Action Taken.
251: Sun Jun 19 12:03:17 2005 => Entry "HKCR\CLSID\{36B77A33-6963-11D4-9846-00500462D5A7}" refers to invalid object "D:\Programme\Rational\ClearQuest\cqxmldocapp.dll". Action Taken: No Action Taken.
252: Sun Jun 19 12:03:17 2005 => Entry "HKCR\CLSID\{36F37477-120D-4A91-9908-307C3303664E}" refers to invalid object "D:\Programme\Rational\ClearQuest\cqemail.dll". Action Taken: No Action Taken.
253: Sun Jun 19 12:03:17 2005 => Entry "HKCR\CLSID\{37F491DB-0BB8-11D4-9D4E-00B0D02048F5}" refers to invalid object "D:\PROGRA~1\Rational\RATION~1\RTLOGG~1.OCX". Action Taken: No Action Taken.
254: Sun Jun 19 12:03:17 2005 => Entry "HKCR\CLSID\{37F491DC-0BB8-11D4-9D4E-00B0D02048F5}" refers to invalid object "D:\PROGRA~1\Rational\RATION~1\RTLOGG~1.OCX". Action Taken: No Action Taken.
255: Sun Jun 19 12:03:18 2005 => Entry "HKCR\CLSID\{3BBC117A-5D77-48EF-9A58-40127DBF131F}" refers to invalid object "D:\Programme\Rational\Rational Test\rtimportexport.dll". Action Taken: No Action Taken.
256: Sun Jun 19 12:03:19 2005 => Entry "HKCR\CLSID\{3FA63B42-EC25-4D55-ABD6-4C28F81DD62D}" refers to invalid object "D:\Programme\Rational\Rational Test\rtcomtestserver.dll". Action Taken: No Action Taken.
257: Sun Jun 19 12:03:19 2005 => Entry "HKCR\CLSID\{3FC14E6A-F229-4DBB-BD53-D2654E1E3C9B}" refers to invalid object "D:\Programme\VMware\VMware Workstation\vmappsdk.dll". Action Taken: No Action Taken.
258: Sun Jun 19 12:03:19 2005 => Entry "HKCR\CLSID\{41dfe9e6-db91-11d2-8c43-006008d26a6f}" refers to invalid object "d:\programme\rational\sqlanywhere8\win32\dboledb8.dll". Action Taken: No Action Taken.
259: Sun Jun 19 12:03:19 2005 => Entry "HKCR\CLSID\{41dfe9e7-db91-11d2-8c43-006008d26a6f}" refers to invalid object "d:\programme\rational\sqlanywhere8\win32\dboledb8.dll". Action Taken: No Action Taken.
260: Sun Jun 19 12:03:19 2005 => Entry "HKCR\CLSID\{41dfe9e8-db91-11d2-8c43-006008d26a6f}" refers to invalid object "d:\programme\rational\sqlanywhere8\win32\dboledb8.dll". Action Taken: No Action Taken.
261: Sun Jun 19 12:03:19 2005 => Entry "HKCR\CLSID\{41dfe9e9-db91-11d2-8c43-006008d26a6f}" refers to invalid object "d:\programme\rational\sqlanywhere8\win32\dboledba8.dll". Action Taken: No Action Taken.
262: Sun Jun 19 12:03:19 2005 => Entry "HKCR\CLSID\{42EAC89E-E182-430b-B62A-3BFE9EEFD88D}" refers to invalid object "C:\Programme\Ludigames\Rayman Pocket\syncprov.dll". Action Taken: No Action Taken.
263: Sun Jun 19 12:03:20 2005 => Entry "HKCR\CLSID\{449FCA18-0A2D-11D4-98AC-00C04F8D118A}" refers to invalid object "D:\Programme\Rational\Rational Test\rtcomtestserver.dll". Action Taken: No Action Taken.
264: Sun Jun 19 12:03:20 2005 => Entry "HKCR\CLSID\{449FCA41-0A2D-11D4-98AC-00C04F8D118A}" refers to invalid object "D:\Programme\Rational\Rational Test\rtcomtestserver.dll". Action Taken: No Action Taken.
265: Sun Jun 19 12:03:20 2005 => Entry "HKCR\CLSID\{45E97CA5-5EC2-4667-9505-3036B1211F6E}" refers to invalid object "D:\Programme\VMware\VMware Workstation\vmdbCOM.dll". Action Taken: No Action Taken.
266: Sun Jun 19 12:03:20 2005 => Entry "HKCR\CLSID\{46B1DEE2-5BD6-4BA5-8195-88A5B9CF50F2}" refers to invalid object "D:\Programme\Rational\RequisitePro\bin\RqDataConverter.dll". Action Taken: No Action Taken.
267: Sun Jun 19 12:03:20 2005 => Entry "HKCR\CLSID\{46CAF9B7-DD0E-4687-BF30-4E28BD380E1B}" refers to invalid object "D:\Programme\VMware\VMware Workstation\vmappsdk.dll". Action Taken: No Action Taken.
268: Sun Jun 19 12:03:21 2005 => Entry "HKCR\CLSID\{47C824F9-2AEB-11D5-85B0-000000000000}" refers to invalid object "D:\Programme\Rational\Rational Test\rtimportexport.dll". Action Taken: No Action Taken.
269: Sun Jun 19 12:03:21 2005 => Entry "HKCR\CLSID\{49027482-7153-41ED-8596-262CC2DF33D6}" refers to invalid object "D:\Programme\VMware\VMware Workstation\vmappsdk.dll". Action Taken: No Action Taken.
270: Sun Jun 19 12:03:22 2005 => Entry "HKCR\CLSID\{4E5EA690-7511-4356-82C5-CE1F7FE11677}" refers to invalid object "D:\Programme\Rational\ClearQuest\cqmail.dll". Action Taken: No Action Taken.
271: Sun Jun 19 12:03:22 2005 => Entry "HKCR\CLSID\{4F1DCB58-F63A-11D1-84F9-0060979C513D}" refers to invalid object "D:\Programme\Rational\Rational Test\sqa7rsvr.dll". Action Taken: No Action Taken.
272: Sun Jun 19 12:03:22 2005 => Entry "HKCR\CLSID\{504A2C0B-3965-11D4-A14D-00C04F484503}" refers to invalid object "D:\Programme\Rational\Rational Test\rtcomtestserver.dll". Action Taken: No Action Taken.
273: Sun Jun 19 12:03:22 2005 => Entry "HKCR\CLSID\{504A2C1D-3965-11D4-A14D-00C04F484503}" refers to invalid object "D:\Programme\Rational\Rational Test\rtcomtestserver.dll". Action Taken: No Action Taken.
274: Sun Jun 19 12:03:23 2005 => Entry "HKCR\CLSID\{52F6F7BD-DF73-44B3-AE13-89E1E1FB8F6A}" refers to invalid object "C:\Programme\Internet Download Manager\downlWithIDM.dll". Action Taken: No Action Taken.
275: Sun Jun 19 12:03:23 2005 => Entry "HKCR\CLSID\{53655704-5956-11D3-91AA-005004B34F28}" refers to invalid object "D:\Programme\Rational\common\licensing.dll". Action Taken: