so leute ich weiss ich bin neu hier............und das problem haben bestimmt viele...........und viele haebn euch schon um hilfe gebeten.......... und ich hoffe das mi auch geholfen werden kann.....


also es geht darum ich habe ein zip datei bei msn bekommen wo stand myfotos und das vol freund und ich wollte es natürlich öffnen auf einmal spinnt mein msn komplett rum........ abe rich haeb schon erfahren das es ein virus ist ich habe mir programm runtergelden für meine log datein ich hoffe jemand von euch kann mir helfen was ich jetzt machen muss...........WÄRE SEHR SEHR DANKBAR

Logfile of HijackThis v1.99.1
Scan saved at 02:11:28, on 31.01.2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
H:\WINDOWS\System32\smss.exe
H:\WINDOWS\system32\winlogon.exe
H:\WINDOWS\system32\services.exe
H:\WINDOWS\system32\lsass.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\System32\svchost.exe
H:\WINDOWS\system32\spoolsv.exe
H:\Programme\AntiVir PersonalEdition Classic\sched.exe
H:\Programme\AntiVir PersonalEdition Classic\avguard.exe
H:\Programme\Firebird\Firebird_1_5\bin\fbguard.exe
H:\WINDOWS\System32\nvsvc32.exe
H:\Programme\Firebird\Firebird_1_5\bin\fbserver.exe
H:\WINDOWS\Explorer.EXE
H:\Programme\AntiVir PersonalEdition Classic\avgnt.exe
H:\Programme\Java\jre1.6.0_01\bin\jusched.exe
H:\Programme\SyncroSoft\Pos\H2O\cledx.exe
H:\WINDOWS\System32\RUNDLL32.EXE
H:\WINDOWS\System32\ctfmon.exe
H:\Programme\DAEMON Tools\daemon.exe
H:\WINDOWS\System32\wuauclt.exe
H:\Programme\MSN Messenger\usnsvc.exe
H:\Programme\AntiVir PersonalEdition Classic\avscan.exe
H:\Programme\Internet Explorer\IEXPLORE.EXE
H:\Dokumente und Einstellungen\dennis\Desktop\Neuer Ordner\HijackThis.exe

O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - H:\Programme\MyGlobalSearch\bar\1.bin\MGSBAR.DLL
O2 - BHO: Zango Search Assistant Helper /fleok=1D8A83A5C5E315789FA575760EA83FA5EF80752B94E2DF7D55784E2137C2 - {56F1D444-11BF-4879-A12B-79CF0177F038} - h:\programme\zango\zangohook.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - H:\Programme\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - H:\Programme\FlashFXP\IEFlash.dll
O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - H:\Programme\MyGlobalSearch\bar\1.bin\MGSBAR.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - H:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [avgnt] "H:\Programme\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "H:\Programme\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] H:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [WinampAgent] j:\Programme\Winamp\winampa.exe
O4 - HKLM\..\Run: [H2O] H:\Programme\SyncroSoft\Pos\H2O\cledx.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE H:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE H:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [CTFMON.EXE] H:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MessengerPlus3] "j:\Programme\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [NBJ] "H:\Programme\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [msnmsgr] "H:\Programme\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [DAEMON Tools] "H:\Programme\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\RunOnce: [ICQ Lite] J:\Programme\ICQLite\ICQLite.exe -trayboot
O8 - Extra context menu item: Download with NetPumper - j:\Programme\NetPumper\AddUrl.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - H:\Programme\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - H:\Programme\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - j:\Programme\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - j:\Programme\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - j:\Programme\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - j:\Programme\ICQLite\ICQLite.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - H:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - H:\WINDOWS\web\related.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - H:\Programme\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - H:\Programme\Messenger\MSMSGS.EXE
O16 - DPF: {A672558F-A878-4D5A-A921-627C091CEB60} (Flatcast Producer 4.15) - http://www.flatcast.com/de/download/NpFp415.dll
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZI ... b56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b56907.cab
O16 - DPF: {F834FDED-CB7E-4CAC-878B-16089C04EFC7} (Flatcast Producer 4.12) - http://www.flatcast.com/de/download/NpFp412.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - H:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - H:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O21 - SSODL: system32 - {6504C30E-A6ED-4ED8-8DCD-4A6ECAB8321D} - sysprinters.dll (file missing)
O23 - Service: AntiVir PersonalEdition Classic Planer (AntiVirScheduler) - Avira GmbH - H:\Programme\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - H:\Programme\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - The Firebird Project - H:\Programme\Firebird\Firebird_1_5\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - The Firebird Project - H:\Programme\Firebird\Firebird_1_5\bin\fbserver.exe
O23 - Service: MySQL - Unknown owner - H:\mysql\bin\mysqld-nt.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - H:\WINDOWS\System32\nvsvc32.exe

1. Cleanup, so wie hier beschrieben, anwenden + (PC neu starten)
http://www.gipsy-computer.de/downloads/ ... /index.php
______________________________________________________________________________________

2. öffne das HijackThis --> Button "scan" --> Häkchen setzen --> Button "Fix checked" --> PC neustarten

O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - H:\Programme\MyGlobalSearch\bar\1.bin\MGSBAR.DLL

O2 - BHO: Zango Search Assistant Helper /fleok=1D8A83A5C5E315789FA575760EA83FA5EF80752B94E2DF7D55784E2137C2 - {56F1D444-11BF-4879-A12B-79CF0177F038} - h:\programme\zango\zangohook.dll

O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - H:\Programme\MyGlobalSearch\bar\1.bin\MGSBAR.DLL

O4 - HKCU\..\Run: [MessengerPlus3] "j:\Programme\MessengerPlus! 3\MsgPlus.exe" /WinStart

O8 - Extra context menu item: Download with NetPumper - j:\Programme\NetPumper\AddUrl.htm

O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - j:\Programme\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - j:\Programme\PartyGaming\PartyPoker\RunApp.exe (file missing)

O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - H:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - H:\WINDOWS\web\related.htm

O21 - SSODL: system32 - {6504C30E-A6ED-4ED8-8DCD-4A6ECAB8321D} - sysprinters.dll (file missing)

______________________________________________________________________________________

3. Deinstalliere:

Bearshare
MessengerPlus! 3
NetPumper
MyGlobalSearch
Zango Toolbar
______________________________________________________________________________________

4. Avenger
http://virus-protect.org/artikel/tools/avenger.html
kopiere rein:

registry keys to delete:
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ClientAX.ClientInstaller
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ClientAX.ClientInstaller.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ClientAX.RequiredComponent
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ClientAX.RequiredComponent.1
HKEY_LOCAL_MACHINE\SOFTWARE\zango
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\zango
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ClientAX.ZangoClientAX
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ClientAX.ZangoClientAX.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{56F1D444-11BF-4879-A12B-79CF0177F038}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7FA8976F-D00C-4E98-8729-A66569233FB5}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{8BE3FABA-7468-4851-B97C-0750AF2B908E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\zangohook.SABHO
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\zangohook.SABHO.1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\zango
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{56F1D444-11BF-4879-A12B-79CF0177F038}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\zango
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{EA0D26BD-9029-431A-86E0-83152D67828A}
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{56F1D444-11BF-4879-A12B-79CF0177F038}

Files to delete:
J:\Programme\Mozilla Firefox\plugins\npclntax.dll
H:\Programme\Mozilla Firefox\plugins\npclntax.dll
H:\WINDOWS\Downloaded Program Files\ClientAX.dll
H:\WINDOWS\Downloaded Program Files\SAIX.dll
H:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Zango\Go to Library.url
H:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Zango\Uninstall Zango Instructions.lnk
H:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Zango\Zango Customer Support.url
H:\Dokumente und Einstellungen\dennis\Anwendungsdaten\clockamenpeak
H:\Dokumente und Einstellungen\dennis\Anwendungsdaten\NetPumper
H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Messenger Plus!
H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\online okay each axis
H:\WINDOWS\System32\im_2.exe

Folders to delete:
H:\Programme\Zango
H:\Programme\BearShare
H:\Programme\MyGlobalSearch
h:\programme\zango
j:\Programme\MessengerPlus! 3
j:\Programme\NetPumper
j:\Programme\PartyGaming

Klicke die grüne Ampel
das Script wird nun ausgeführt, dann wird der PC automatisch neustarten

**

poste das Logfile, was nach dem Neustart erscheint
______________________________________________________________________________________

Danach lade CounterSpy und mache die dazugehörige Updates und trennst dann das Internet.
Wenn die alle Updates erfolgreich installiert wurden, mache einen vollständigen Scan!

Nach dem Scan unter > Action (Default) wählen, was man mit der Malware machen will:
*Ignore
*Quarantine
*Remove

Wähle bei jeder einzelnen gefundenen Malware immer -> *Remove
poste bitte den Scanreport
http://virus-protect.org/counterspy1.html
______________________________________________________________________________________

Mache bitte einen PandaOnlineScan und poste den Report (see Report --> save Report --> hier posten)
http://virus-protect.org/onlinescan.html
______________________________________________________________________________________

Danach geht's weiter

Logfile of The Avenger version 1, by Swandog46
Running from registry key:
\Registry\Machine\System\CurrentControlSet\Services\lkavgiwo

*******************

Script file located at: \??\H:\qxvhroae.txt
Script file opened successfully.

Script file read successfully

Backups directory opened successfully at H:\Avenger

*******************

Beginning to process script file:



Could not open file J:\Programme\Mozilla Firefox\plugins\npclntax.dll for deletion
Deletion of file J:\Programme\Mozilla Firefox\plugins\npclntax.dll failed!

Could not process line:
J:\Programme\Mozilla Firefox\plugins\npclntax.dll
Status: 0xc000003a

File H:\Programme\Mozilla Firefox\plugins\npclntax.dll deleted successfully.
File H:\WINDOWS\Downloaded Program Files\ClientAX.dll deleted successfully.


File H:\WINDOWS\Downloaded Program Files\SAIX.dll not found!
Deletion of file H:\WINDOWS\Downloaded Program Files\SAIX.dll failed!

Could not process line:
H:\WINDOWS\Downloaded Program Files\SAIX.dll
Status: 0xc0000034

File H:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Zango\Go to Library.url deleted successfully.


File H:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Zango\Uninstall Zango Instructions.lnk not found!
Deletion of file H:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Zango\Uninstall Zango Instructions.lnk failed!

Could not process line:
H:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Zango\Uninstall Zango Instructions.lnk
Status: 0xc0000034

File H:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Zango\Zango Customer Support.url deleted successfully.


File H:\Dokumente und Einstellungen\dennis\Anwendungsdaten\clockamenpeak not found!
Deletion of file H:\Dokumente und Einstellungen\dennis\Anwendungsdaten\clockamenpeak failed!

Could not process line:
H:\Dokumente und Einstellungen\dennis\Anwendungsdaten\clockamenpeak
Status: 0xc0000034



Error: H:\Dokumente und Einstellungen\dennis\Anwendungsdaten\NetPumper is a folder, not a file!
Deletion of file H:\Dokumente und Einstellungen\dennis\Anwendungsdaten\NetPumper failed!

Could not process line:
H:\Dokumente und Einstellungen\dennis\Anwendungsdaten\NetPumper
Status: 0xc00000ba



Error: H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Messenger Plus! is a folder, not a file!
Deletion of file H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Messenger Plus! failed!

Could not process line:
H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Messenger Plus!
Status: 0xc00000ba



File H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\online okay each axis not found!
Deletion of file H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\online okay each axis failed!

Could not process line:
H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\online okay each axis
Status: 0xc0000034



Could not open file H:\WINDOWS\System32\im_2.exe --> löschen, falls es vorhanden ist for deletion
Deletion of file H:\WINDOWS\System32\im_2.exe --> löschen, falls es vorhanden ist failed!

Could not process line:
H:\WINDOWS\System32\im_2.exe --> löschen, falls es vorhanden ist
Status: 0xc0000033

Folder H:\Programme\Zango deleted successfully.


Folder H:\Programme\BearShare not found!
Deletion of folder H:\Programme\BearShare failed!

Could not process line:
H:\Programme\BearShare
Status: 0xc0000034

Folder H:\Programme\MyGlobalSearch deleted successfully.


Folder h:\programme\zango not found!
Deletion of folder h:\programme\zango failed!

Could not process line:
h:\programme\zango
Status: 0xc0000034

Folder j:\Programme\MessengerPlus! 3 deleted successfully.


Folder j:\Programme\NetPumper not found!
Deletion of folder j:\Programme\NetPumper failed!

Could not process line:
j:\Programme\NetPumper
Status: 0xc0000034



Folder j:\Programme\PartyGaming not found!
Deletion of folder j:\Programme\PartyGaming failed!

Could not process line:
j:\Programme\PartyGaming
Status: 0xc0000034

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ClientAX.ClientInstaller deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ClientAX.ClientInstaller.1 deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ClientAX.RequiredComponent deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ClientAX.RequiredComponent.1 deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\zango deleted successfully.


Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\zango not found!
Deletion of registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\zango failed!
Status: 0xc0000034

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ClientAX.ZangoClientAX deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ClientAX.ZangoClientAX.1 deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9} deleted successfully.


Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{56F1D444-11BF-4879-A12B-79CF0177F038} not found!
Deletion of registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{56F1D444-11BF-4879-A12B-79CF0177F038} failed!
Status: 0xc0000034

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7FA8976F-D00C-4E98-8729-A66569233FB5} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{8BE3FABA-7468-4851-B97C-0750AF2B908E} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\zangohook.SABHO deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\zangohook.SABHO.1 deleted successfully.


Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\zango not found!
Deletion of registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\zango failed!
Status: 0xc0000034



Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{56F1D444-11BF-4879-A12B-79CF0177F038} not found!
Deletion of registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{56F1D444-11BF-4879-A12B-79CF0177F038} failed!
Status: 0xc0000034



Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\zango not found!
Deletion of registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\zango failed!
Status: 0xc0000034



Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{EA0D26BD-9029-431A-86E0-83152D67828A} not found!
Deletion of registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{EA0D26BD-9029-431A-86E0-83152D67828A} failed!
Status: 0xc0000034



Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{56F1D444-11BF-4879-A12B-79CF0177F038} not found!
Deletion of registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{56F1D444-11BF-4879-A12B-79CF0177F038} failed!
Status: 0xc0000034


Completed script processing.

*******************

Finished! Terminate.





HIER DAS IST DIE DATEI VON COUNTER SPY HABE SIE MAL HOCHGELADEN WEIL DAS SO VIEL IST


DER LInk: http://uploaded.de/?id=tzro9h



und beim PANDA ONLINE SCAN:


der sagt mir er kann es nicht anzeigen........... er sagt mir Possible causes of this error are:

Not allowing the application's ActiveX control to be downloaded.

Problems with the Internet connection.

The error could be due to a download error or an installation error due to lack of hard disk space, privileges etc.,... und dann wenn ich try again drücke sagt er mir die seite kann ohne ein erneutes senden der information nich aktualisiert werden.........


bitte nochmal um hilfe

Ich habe dasselbe Problem T_T nur hab ich kein Plan von den ganzen Zeug hier....kann mir vielleicht trotzdem jemand helfen bitte ;_;???????????

@Miyuki

Mache bitte einen neuen Thread auf und poste gleich die Logfile in den neuen Thread

1. Cleanup, wie hier beschrieben, anwenden
http://www.gipsy-computer.de/downloads/ ... /index.php

2. Mache bitte ein Hijackthis Logfile und poste es in deinem neuen Thread
http://www.gipsy-computer.de/anleitunge ... /index.php

Gruß

Gipsy