ich benötige wieder einmal eure Hile!
Wie entferne ich die Spyware/Adware vom Computer meines Kollegen?
Es ist Roings , Istbar und Bearshare.
Er hat aber schon etliche Antivieren und andere Adwaretools benutzt und kein einziges Log. gespeichert
( keine Ahnung was für Vieren Trojaner Backdoors etc. auf dem Compi wahren )
Beim Panda Onlinescan schliesst der IE Browser während dem Scan und immer an der gleichen stelle.
Vielen Dank im voraus
Mfg Swiss
Logfile of HijackThis v1.99.1
Scan saved at 12:05:31, on 25.08.2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
C:\WINDOWS\Mixer.exe
C:\Program Files\AVPersonal\AVGNT.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Ulead Systems\Ulead Photo Express 3.0 SE\CalCheck.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\AVPersonal\AVGUARD.EXE
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\hijsckthis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://fr.rd.yahoo.com/customize/ie/def ... .yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ch/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ie/def ... .yahoo.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [AVGCtrl] "C:\Program Files\AVPersonal\AVGNT.EXE" /min
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\ypager.exe" -quiet
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - Global Startup: Adobe Reader - Schnellstart.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Photo Express SE Calendar Checker.lnk = C:\Program Files\Ulead Systems\Ulead Photo Express 3.0 SE\CalCheck.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Easy-WebPrint Ajouter à la Liste à Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://F:\PROGRA~1\OFFICE11\EXCEL.EXE/3000
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v ... 7456832437
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan ... asinst.cab
O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXE
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
-------------------------------------------------------------------------------------
--------------------------------------------------
-------------------- INFECTED --------------------
--------------------------------------------------
1: Thu Aug 25 10:34:24 2005 => System found infected with bearshare Spyware/Adware ({558ec983-bedb-9168-b2de-31dbf0ee543e})! Action taken: No Action Taken.
2: Thu Aug 25 10:34:24 2005 => System found infected with bearshare Spyware/Adware ({5f95e1af-2620-4f15-bdf9-7fdce4607e17})! Action taken: No Action Taken.
3: Thu Aug 25 10:34:58 2005 => Offending file found: C:\WINDOWS\system32\dust.exe
4: Thu Aug 25 10:34:58 2005 => System found infected with istbar Spyware/Adware (dust.exe)! Action taken: No Action Taken.
5: Thu Aug 25 10:35:01 2005 => Offending file found: C:\WINDOWS\objsafe.tlb
6: Thu Aug 25 10:35:01 2005 => System found infected with roings Spyware/Adware (objsafe.tlb)! Action taken: No Action Taken.
7: Thu Aug 25 10:52:24 2005 => Scanning Folder: C:\Program Files\AVPersonal\INFECTED\*.*
8: Thu Aug 25 11:02:57 2005 => Scanning Folder: C:\Program Files\Softwin\BitDefender Free Edition\Infected\*.*
--------------------------------------------------
--------------------- ERRORS ---------------------
--------------------------------------------------
1: Thu Aug 25 10:34:09 2005 => ERROR!!! Invalid Entry lssas Monitoring Startup = lssas.exe (in key SOFTWARE\Microsoft\Windows\CurrentVersion\Run). No Action Taken.
2: Thu Aug 25 10:34:09 2005 => ERROR!!! Invalid Entry Microsoft Update = Svhost.exe (in key SOFTWARE\Microsoft\Windows\CurrentVersion\Run). No Action Taken.
3: Thu Aug 25 10:35:22 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Ahead\Lib\AdvrCntr.dll". Action Taken: No Action Taken.
4: Thu Aug 25 10:35:22 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Ahead\CoverDesigner\covered-deu.nls". Action Taken: No Action Taken.
5: Thu Aug 25 10:35:22 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Ahead\CoverDesigner\covered-jpn.nls". Action Taken: No Action Taken.
6: Thu Aug 25 10:35:22 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Ahead\Nero BackItUp\BackItUp-Deu.nls". Action Taken: No Action Taken.
7: Thu Aug 25 10:35:22 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Ahead\Nero BackItUp\BackItUp-Jpn.nls". Action Taken: No Action Taken.
8: Thu Aug 25 10:35:22 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\system32\DIMM.DLL". Action Taken: No Action Taken.
9: Thu Aug 25 10:35:22 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Oberon Media\Jewel Quest\Uninstall.exe". Action Taken: No Action Taken.
10: Thu Aug 25 10:35:22 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\system32\drivers\CDAC11BA.EXE". Action Taken: No Action Taken.
11: Thu Aug 25 10:35:22 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\Downloaded Program Files\MsnPUpld.dll". Action Taken: No Action Taken.
12: Thu Aug 25 10:35:22 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\Downloaded Program Files\bitdefender.ocx". Action Taken: No Action Taken.
13: Thu Aug 25 10:35:23 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\ga_main.exe" refers to invalid object "". Action Taken: No Action Taken.
14: Thu Aug 25 10:35:25 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".OLB". Action Taken: No Action Taken.
15: Thu Aug 25 10:35:25 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "media-motor". Action Taken: No Action Taken.
16: Thu Aug 25 10:35:25 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "Mozilla Firefox (1.0)". Action Taken: No Action Taken.
17: Thu Aug 25 10:35:25 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "Mozilla Firefox (1.0.2)". Action Taken: No Action Taken.
18: Thu Aug 25 10:35:25 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "Mozilla Firefox (1.0.3)". Action Taken: No Action Taken.
19: Thu Aug 25 10:35:25 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "Mozilla Firefox (1.0.4)". Action Taken: No Action Taken.
20: Thu Aug 25 10:35:25 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "Photo Frame Maker_is1". Action Taken: No Action Taken.
21: Thu Aug 25 10:35:25 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "salm". Action Taken: No Action Taken.
22: Thu Aug 25 10:35:25 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "Search Relevancy". Action Taken: No Action Taken.
23: Thu Aug 25 10:35:25 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "SideFind". Action Taken: No Action Taken.
24: Thu Aug 25 10:35:25 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "WhenUSaveMsg". Action Taken: No Action Taken.
25: Thu Aug 25 10:35:25 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{29D45189-1851-11D3-8FED-27C34F1DD778}". Action Taken: No Action Taken.
26: Thu Aug 25 10:35:25 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{3F381CAE-EE1C-4C24-B891-9ED092EF1E6F}". Action Taken: No Action Taken.
27: Thu Aug 25 10:35:25 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{61C1E4FF-3203-4CE0-B4AF-6480607D0AA3}". Action Taken: No Action Taken.
28: Thu Aug 25 10:35:25 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{ABEB838C-A1A7-4C5D-B7E1-8B4314600137}". Action Taken: No Action Taken.
29: Thu Aug 25 10:35:25 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{ABEB838C-A1A7-4C5D-B7E1-8B4314600205}". Action Taken: No Action Taken.
30: Thu Aug 25 10:35:25 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{ABEB838C-A1A7-4C5D-B7E1-8B4314600425}". Action Taken: No Action Taken.
31: Thu Aug 25 10:35:25 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{B2581F43-F400-4335-8AA6-9F163564ABCE}". Action Taken: No Action Taken.
32: Thu Aug 25 10:35:25 2005 => Entry "HKCR\CLSID\{0254F2B0-7116-40FC-8551-A2ED8C0C5872}" refers to invalid object "C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe". Action Taken: No Action Taken.
33: Thu Aug 25 10:35:25 2005 => Entry "HKCR\CLSID\{038E9840-12DD-40E8-82BE-DA826423886E}" refers to invalid object "C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe". Action Taken: No Action Taken.
34: Thu Aug 25 10:35:26 2005 => Entry "HKCR\CLSID\{0BB66938-FC89-4658-A365-7CD7F60E87E7}" refers to invalid object "C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe". Action Taken: No Action Taken.
35: Thu Aug 25 10:35:26 2005 => Entry "HKCR\CLSID\{0CA55C77-CC60-408B-94C6-EC772FD104A9}" refers to invalid object "C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe". Action Taken: No Action Taken.
36: Thu Aug 25 10:35:26 2005 => Entry "HKCR\CLSID\{0DED49D5-A8B7-4d5d-97A1-12B0C195874D}" refers to invalid object "BdaPlgin.ax". Action Taken: No Action Taken.
37: Thu Aug 25 10:35:26 2005 => Entry "HKCR\CLSID\{1CA68D9F-3A22-4EE6-8DD3-9F4BA554625A}" refers to invalid object "C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe". Action Taken: No Action Taken.
38: Thu Aug 25 10:35:26 2005 => Entry "HKCR\CLSID\{1FAE3754-F46B-45DA-B4CF-9EBF92E950EA}" refers to invalid object "C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe". Action Taken: No Action Taken.
39: Thu Aug 25 10:35:26 2005 => Entry "HKCR\CLSID\{1FE7C365-F6A9-4AD2-A075-D61F9AD59236}" refers to invalid object "C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe". Action Taken: No Action Taken.
40: Thu Aug 25 10:35:26 2005 => Entry "HKCR\CLSID\{20351880-1EF9-4879-A646-9FAF6D9FC87D}" refers to invalid object "C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe". Action Taken: No Action Taken.
41: Thu Aug 25 10:35:26 2005 => Entry "HKCR\CLSID\{23AF82A5-E704-4EBC-BFE8-DF33EA467512}" refers to invalid object "C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe". Action Taken: No Action Taken.
42: Thu Aug 25 10:35:27 2005 => Entry "HKCR\CLSID\{29FF67FF-8050-480f-9F30-CC41635F2F9D}" refers to invalid object "ADMWPROX.DLL". Action Taken: No Action Taken.
43: Thu Aug 25 10:35:27 2005 => Entry "HKCR\CLSID\{2AFC1A12-65EC-433A-BF9B-7AD381F1EF10}" refers to invalid object "C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe". Action Taken: No Action Taken.
44: Thu Aug 25 10:35:27 2005 => Entry "HKCR\CLSID\{2D0DE198-0296-4A84-AC3B-0DB11C7F62F2}" refers to invalid object "C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe". Action Taken: No Action Taken.
45: Thu Aug 25 10:35:27 2005 => Entry "HKCR\CLSID\{3A5AC3A7-CC29-47F8-A0FF-AB82F3D2D9F5}" refers to invalid object "C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe". Action Taken: No Action Taken.
46: Thu Aug 25 10:35:27 2005 => Entry "HKCR\CLSID\{3C4E3B8D-98C8-4701-92D6-64702D6A9EEF}" refers to invalid object "C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe". Action Taken: No Action Taken.
47: Thu Aug 25 10:35:28 2005 => Entry "HKCR\CLSID\{5A63D47D-1BA2-48ff-9955-31207899BE01}" refers to invalid object "c:\program files\mcafee.com\shared\mcinfo.exe". Action Taken: No Action Taken.
48: Thu Aug 25 10:35:29 2005 => Entry "HKCR\CLSID\{70A4E5E9-D350-4AF0-8298-98E8BB30ADB7}" refers to invalid object "C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe". Action Taken: No Action Taken.
49: Thu Aug 25 10:35:29 2005 => Entry "HKCR\CLSID\{70B51430-B6CA-11D0-B9B9-00A0C922E750}" refers to invalid object "ADMWPROX.DLL". Action Taken: No Action Taken.
50: Thu Aug 25 10:35:29 2005 => Entry "HKCR\CLSID\{8298d101-f992-43b7-8eca-5052d885b995}" refers to invalid object "ADMWPROX.DLL". Action Taken: No Action Taken.
51: Thu Aug 25 10:35:29 2005 => Entry "HKCR\CLSID\{8D2E6C05-A032-4B23-8287-C3ACF30703B0}" refers to invalid object "C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe". Action Taken: No Action Taken.
52: Thu Aug 25 10:35:30 2005 => Entry "HKCR\CLSID\{9E0B8886-3014-4617-91AA-DF4B8D50E77C}" refers to invalid object "C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe". Action Taken: No Action Taken.
53: Thu Aug 25 10:35:30 2005 => Entry "HKCR\CLSID\{A7371B3E-46D1-48B0-890D-CC9E7E531EDD}" refers to invalid object "C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe". Action Taken: No Action Taken.
54: Thu Aug 25 10:35:30 2005 => Entry "HKCR\CLSID\{A9141FB9-7A4F-4047-94A2-0A0B1DEF5EBB}" refers to invalid object "C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe". Action Taken: No Action Taken.
55: Thu Aug 25 10:35:30 2005 => Entry "HKCR\CLSID\{A9E69612-B80D-11D0-B9B9-00A0C922E750}" refers to invalid object "ADMWPROX.DLL". Action Taken: No Action Taken.
56: Thu Aug 25 10:35:30 2005 => Entry "HKCR\CLSID\{B0693766-5278-4ec6-B9E1-3CE40560EF5A}" refers to invalid object "CaPlgin.ax". Action Taken: No Action Taken.
57: Thu Aug 25 10:35:30 2005 => Entry "HKCR\CLSID\{B50EB9E2-FC6D-4E25-9492-B5D77F373EE2}" refers to invalid object "C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe". Action Taken: No Action Taken.
58: Thu Aug 25 10:35:30 2005 => Entry "HKCR\CLSID\{B7800816-BCE4-4228-BD55-2E7A2B0B230A}" refers to invalid object "C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe". Action Taken: No Action Taken.
59: Thu Aug 25 10:35:32 2005 => Entry "HKCR\CLSID\{f612954d-3b0b-4c56-9563-227b7be624b4}" refers to invalid object "ADMWPROX.DLL". Action Taken: No Action Taken.
60: Thu Aug 25 10:35:33 2005 => Entry "HKCR\CLSID\{F708D841-35FE-4AD6-A313-A7F5F1037A8A}" refers to invalid object "C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe". Action Taken: No Action Taken.
61: Thu Aug 25 10:35:33 2005 => Entry "HKCR\CLSID\{F83865C0-92C3-11d3-B41E-0010DC973BDB}" refers to invalid object "CamExO20.ax". Action Taken: No Action Taken.
62: Thu Aug 25 10:35:33 2005 => Entry "HKCR\CLSID\{F83865C2-92C3-11d3-B41E-0010DC973BDB}" refers to invalid object "CamExO20.ax". Action Taken: No Action Taken.
63: Thu Aug 25 10:35:33 2005 => Entry "HKCR\CLSID\{F83865C3-92C3-11d3-B41E-0010DC973BDB}" refers to invalid object "CamExO20.ax". Action Taken: No Action Taken.
64: Thu Aug 25 10:35:33 2005 => Entry "HKCR\CLSID\{FBA89159-6A08-4004-B269-D34588429A88}" refers to invalid object "C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe". Action Taken: No Action Taken.
65: Thu Aug 25 10:35:33 2005 => Entry "HKCR\CLSID\{FD0A5AF3-B41D-11d2-9C95-00C04F7971E0}" refers to invalid object "BdaPlgin.ax". Action Taken: No Action Taken.
66: Thu Aug 25 10:35:33 2005 => Entry "HKCR\TypeLib\{60ACE49B-F247-4E12-B740-EF8DB1941D0F}" refers to invalid object "C:\Program Files\ewido\security suite\context.dll". Action Taken: No Action Taken.
67: Thu Aug 25 10:35:34 2005 => Entry "HKCR\TypeLib\{CEACE91F-3F71-4A8C-B952-63716B2BC026}" refers to invalid object "C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe". Action Taken: No Action Taken.
68: Thu Aug 25 10:35:34 2005 => Entry "HKCR\.gnu" refers to invalid object "gnufile". Action Taken: No Action Taken.
69: Thu Aug 25 10:35:34 2005 => Entry "HKCR\.pcb" refers to invalid object "PCBFile". Action Taken: No Action Taken.
70: Thu Aug 25 10:35:35 2005 => Entry "HKCR\Alg.AlgSetup" refers to invalid object "{27D0BCCC-344D-4287-AF37-0C72C161C14C}". Action Taken: No Action Taken.
71: Thu Aug 25 10:35:35 2005 => Entry "HKCR\Alg.AlgSetup.1" refers to invalid object "{27D0BCCC-344D-4287-AF37-0C72C161C14C}". Action Taken: No Action Taken.
72: Thu Aug 25 10:35:35 2005 => Entry "HKCR\AudioVis.AudioVisual" refers to invalid object "{305F718E-620B-11D3-B484-008029659E91}". Action Taken: No Action Taken.
73: Thu Aug 25 10:35:35 2005 => Entry "HKCR\AudioVis.AudioVisual.1" refers to invalid object "{305F718E-620B-11D3-B484-008029659E91}". Action Taken: No Action Taken.
74: Thu Aug 25 10:35:35 2005 => Entry "HKCR\BigKahunaReef.BoardSet\shell\open\command" refers to invalid object ""C:\Program Files\Oberon Media\Big Kahuna Reef\InstallBoard.exe" "%1"". Action Taken: No Action Taken.
75: Thu Aug 25 10:35:36 2005 => Entry "HKCR\Contact.Contacts.1" refers to invalid object "{175652E8-8BCC-47C4-B591-0D630F469C19}". Action Taken: No Action Taken.
76: Thu Aug 25 10:35:36 2005 => Entry "HKCR\Context.test" refers to invalid object "{57BD36D7-CE32-4600-9B1C-1A0C47EFC02E}". Action Taken: No Action Taken.
77: Thu Aug 25 10:35:36 2005 => Entry "HKCR\Context.test.1" refers to invalid object "{57BD36D7-CE32-4600-9B1C-1A0C47EFC02E}". Action Taken: No Action Taken.
78: Thu Aug 25 10:35:36 2005 => Entry "HKCR\divFile\shell\open\command" refers to invalid object ""C:\Program Files\DivX\DivX Player\DivX Player.exe" "%1"". Action Taken: No Action Taken.
79: Thu Aug 25 10:35:36 2005 => Entry "HKCR\divxFile\shell\open\command" refers to invalid object ""C:\Program Files\DivX\DivX Player\DivX Player.exe" "%1"". Action Taken: No Action Taken.
80: Thu Aug 25 10:35:36 2005 => Entry "HKCR\divxTicketFile\shell\open\command" refers to invalid object ""C:\Program Files\DivX\DivX Player\DivX Player.exe" "%1"". Action Taken: No Action Taken.
81: Thu Aug 25 10:35:37 2005 => Entry "HKCR\dpsFile\shell\open\command" refers to invalid object ""C:\Program Files\DivX\DivX Player\DivX Player.exe" "%1"". Action Taken: No Action Taken.
82: Thu Aug 25 10:35:37 2005 => Entry "HKCR\dxuFile\shell\open\command" refers to invalid object ""C:\Program Files\DivX\DivX Player\DivX Player.exe" "%1"". Action Taken: No Action Taken.
83: Thu Aug 25 10:35:37 2005 => Entry "HKCR\gnu\shell\open\command" refers to invalid object ""C:\Program Files\BearShare\BearShare.exe" --noinstcheck -spawnedfromurl %1". Action Taken: No Action Taken.
84: Thu Aug 25 10:35:38 2005 => Entry "HKCR\MailFileAtt" refers to invalid object "{00020D05-0000-0000-C000-000000000046}". Action Taken: No Action Taken.
85: Thu Aug 25 10:35:38 2005 => Entry "HKCR\mapifvbx.object" refers to invalid object "{41116C00-8B90-101B-96CD-00AA003B14FC}". Action Taken: No Action Taken.
86: Thu Aug 25 10:35:38 2005 => Entry "HKCR\mapifvbx.object.1" refers to invalid object "{41116C00-8B90-101B-96CD-00AA003B14FC}". Action Taken: No Action Taken.
87: Thu Aug 25 10:35:39 2005 => Entry "HKCR\MsnPhotoUpload.PhotoUploadCtl" refers to invalid object "{4F1E5B1A-2A80-42ca-8532-2D05CB959537}". Action Taken: No Action Taken.
88: Thu Aug 25 10:35:39 2005 => Entry "HKCR\MsnPhotoUpload.PhotoUploadCtl.1" refers to invalid object "{4F1E5B1A-2A80-42ca-8532-2D05CB959537}". Action Taken: No Action Taken.
89: Thu Aug 25 10:35:40 2005 => Entry "HKCR\MSWinsock.Winsock" refers to invalid object "{248DD896-BB45-11CF-9ABC-0080C7E7B78D}". Action Taken: No Action Taken.
90: Thu Aug 25 10:35:40 2005 => Entry "HKCR\MSWinsock.Winsock.1" refers to invalid object "{248DD896-BB45-11CF-9ABC-0080C7E7B78D}". Action Taken: No Action Taken.
91: Thu Aug 25 10:35:40 2005 => Entry "HKCR\MyWebSearch.HTMLPanel" refers to invalid object "{3E720452-B472-4954-B7AA-33069EB53906}". Action Taken: No Action Taken.
92: Thu Aug 25 10:35:40 2005 => Entry "HKCR\MyWebSearch.HTMLPanel.1" refers to invalid object "{3E720452-B472-4954-B7AA-33069EB53906}". Action Taken: No Action Taken.
93: Thu Aug 25 10:35:41 2005 => Entry "HKCR\Plenoptic.Plenoptic" refers to invalid object "{607C27E9-AB27-11d3-A116-A0EA50C10801}". Action Taken: No Action Taken.
94: Thu Aug 25 10:35:41 2005 => Entry "HKCR\Plenoptic.Plenoptic.1" refers to invalid object "{607C27E9-AB27-11d3-A116-A0EA50C10801}". Action Taken: No Action Taken.
95: Thu Aug 25 10:35:41 2005 => Entry "HKCR\ppifile\shell\open\command" refers to invalid object "%SystemRoot%\System32\msppcnfg.exe /Config %1". Action Taken: No Action Taken.
96: Thu Aug 25 10:35:41 2005 => Entry "HKCR\RTCCore.RTCClient" refers to invalid object "{7a42ea29-a2b7-40c4-b091-f6f024aa89be}". Action Taken: No Action Taken.
97: Thu Aug 25 10:35:41 2005 => Entry "HKCR\RTCCore.RTCClient.1" refers to invalid object "{7a42ea29-a2b7-40c4-b091-f6f024aa89be}". Action Taken: No Action Taken.
98: Thu Aug 25 10:35:41 2005 => Entry "HKCR\RTCIMSP.RTCIMService" refers to invalid object "{83D4679F-B6D7-11D2-BF36-00C04FB90A03}". Action Taken: No Action Taken.
99: Thu Aug 25 10:35:41 2005 => Entry "HKCR\RTCIMSP.RTCIMService.1" refers to invalid object "{83D4679F-B6D7-11D2-BF36-00C04FB90A03}". Action Taken: No Action Taken.
100: Thu Aug 25 10:35:42 2005 => Entry "HKCR\Shareaza.ImageViewerPlugin.1" refers to invalid object "{2EE9D739-7726-41cf-8F18-4B1B8763BC63}". Action Taken: No Action Taken.
101: Thu Aug 25 10:35:42 2005 => Entry "HKCR\Shareaza.SkinInfoExtractor.1" refers to invalid object "{0EEDB912-C5FA-486F-8334-57288578C627}". Action Taken: No Action Taken.
102: Thu Aug 25 10:35:42 2005 => Entry "HKCR\Updater.BHO" refers to invalid object "{1D7E3B41-23CE-469B-BE1B-A64B877923E1}". Action Taken: No Action Taken.
103: Thu Aug 25 10:35:43 2005 => Entry "HKCR\WEBInstaller.CExecute.1" refers to invalid object "{C0EF89EE-EEC7-4535-A041-F1EBF79560A7}". Action Taken: No Action Taken.
104: Thu Aug 25 10:35:43 2005 => Entry "HKCR\WMPPublsihCntr.WMPPublsihCntr" refers to invalid object "{939438A9-CF0F-44d8-9140-599736F0D3A2}". Action Taken: No Action Taken.
105: Thu Aug 25 10:35:43 2005 => Entry "HKCR\WMPPublsihCntr.WMPPublsihCntr.1" refers to invalid object "{939438A9-CF0F-44d8-9140-599736F0D3A2}". Action Taken: No Action Taken.
106: Thu Aug 25 10:39:17 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Catal.zip is Not Scanned
107: Thu Aug 25 10:39:17 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DyFuCA.zip is Not Scanned
108: Thu Aug 25 10:39:18 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DyFuCA1.zip is Not Scanned
109: Thu Aug 25 10:39:18 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DyFuCA2.zip is Not Scanned
110: Thu Aug 25 10:39:18 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ExactAdvertisingBargainsBuddy.zip is Not Scanned
111: Thu Aug 25 10:39:18 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ExactAdvertisingBargainsBuddy1.zip is Not Scanned
112: Thu Aug 25 10:39:18 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\FunWeb.zip is Not Scanned
113: Thu Aug 25 10:39:18 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\FunWebProducts.zip is Not Scanned
114: Thu Aug 25 10:39:18 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\FunWebProducts1.zip is Not Scanned
115: Thu Aug 25 10:39:18 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\FunWebProducts2.zip is Not Scanned
116: Thu Aug 25 10:39:18 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\FunWebProducts3.zip is Not Scanned
117: Thu Aug 25 10:39:18 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\FunWebProducts4.zip is Not Scanned
118: Thu Aug 25 10:39:18 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\FunWebProducts5.zip is Not Scanned
119: Thu Aug 25 10:39:18 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechPowerScan.zip is Not Scanned
120: Thu Aug 25 10:39:18 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechSideFind.zip is Not Scanned
121: Thu Aug 25 10:39:19 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechSideFind1.zip is Not Scanned
122: Thu Aug 25 10:39:19 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechSideFind10.zip is Not Scanned
123: Thu Aug 25 10:39:19 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechSideFind11.zip is Not Scanned
124: Thu Aug 25 10:39:19 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechSideFind12.zip is Not Scanned
125: Thu Aug 25 10:39:19 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechSideFind13.zip is Not Scanned
126: Thu Aug 25 10:39:19 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechSideFind14.zip is Not Scanned
127: Thu Aug 25 10:39:19 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechSideFind15.zip is Not Scanned
128: Thu Aug 25 10:39:19 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechSideFind16.zip is Not Scanned
129: Thu Aug 25 10:39:19 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechSideFind17.zip is Not Scanned
130: Thu Aug 25 10:39:19 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechSideFind18.zip is Not Scanned
131: Thu Aug 25 10:39:19 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechSideFind19.zip is Not Scanned
132: Thu Aug 25 10:39:19 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechSideFind2.zip is Not Scanned
133: Thu Aug 25 10:39:19 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechSideFind20.zip is Not Scanned
134: Thu Aug 25 10:39:19 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechSideFind21.zip is Not Scanned
135: Thu Aug 25 10:39:20 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechSideFind22.zip is Not Scanned
136: Thu Aug 25 10:39:20 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechSideFind23.zip is Not Scanned
137: Thu Aug 25 10:39:20 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechSideFind24.zip is Not Scanned
138: Thu Aug 25 10:39:20 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechSideFind25.zip is Not Scanned
139: Thu Aug 25 10:39:20 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechSideFind26.zip is Not Scanned
140: Thu Aug 25 10:39:20 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechSideFind27.zip is Not Scanned
141: Thu Aug 25 10:39:20 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechSideFind28.zip is Not Scanned
142: Thu Aug 25 10:39:20 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechSideFind29.zip is Not Scanned
143: Thu Aug 25 10:39:20 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechSideFind3.zip is Not Scanned
144: Thu Aug 25 10:39:20 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechSideFind30.zip is Not Scanned
145: Thu Aug 25 10:39:20 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechSideFind31.zip is Not Scanned
146: Thu Aug 25 10:39:20 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechSideFind32.zip is Not Scanned
147: Thu Aug 25 10:39:20 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechSideFind4.zip is Not Scanned
148: Thu Aug 25 10:39:20 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechSideFind5.zip is Not Scanned
149: Thu Aug 25 10:39:20 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechSideFind6.zip is Not Scanned
150: Thu Aug 25 10:39:21 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechSideFind7.zip is Not Scanned
151: Thu Aug 25 10:39:21 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechSideFind8.zip is Not Scanned
152: Thu Aug 25 10:39:21 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechSideFind9.zip is Not Scanned
153: Thu Aug 25 10:39:21 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MyWebSearch.zip is Not Scanned
154: Thu Aug 25 10:39:21 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MyWebSearch1.zip is Not Scanned
155: Thu Aug 25 10:39:21 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MyWebSearch2.zip is Not Scanned
156: Thu Aug 25 10:39:21 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MyWebSearch3.zip is Not Scanned
157: Thu Aug 25 10:39:21 2005 => Result: ERROR!!! File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MyWebSearch4.zip is Not Scanned
--------------------------------------------------
-------------------- Statistik -------------------
--------------------------------------------------
Thu Aug 25 12:00:31 2005 => Total Objects Scanned: 72903
Thu Aug 25 12:00:31 2005 => Total Virus(es) Found: 7
Thu Aug 25 12:00:31 2005 => Total Errors: 157
Thu Aug 25 12:00:31 2005 => Virus Database Date: 2005/08/25
Thu Aug 25 12:00:31 2005 => Virus Database Count: 145538
Thu Aug 25 12:01:13 2005 => Total Objects Scanned: 72903
Thu Aug 25 12:01:13 2005 => Total Virus(es) Found: 7
Thu Aug 25 12:01:13 2005 => Total Errors: 157
