mein logfile

01.08.2005, 08:28

hi zusammen,
bekomme beim öffnen meines internet explorers direkt warnungen meines antiviren programms
obwohl er die dateien löscht
kommen die warnungen immer wieder auch zwischendurch beim surfen
auf der suche bei google nach diesen dateien wird nix gefunden
folgende dateien werden mir als trojaner angezeigt:
ozhakpxs6.exe
s6[1]
ywndbvcp.sys

und hier mal mein logfile von hijacker:

Logfile of HijackThis v1.99.1
Scan saved at 09:18:10, on 1.8.2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Logfile wegen Virenmeldung entfernt...

schonmal danke an euch für die hilfe

01.08.2005, 14:17

Hallöchen,

ich hab das Logfile aus deinem Posting entfernt, da mein Virenscanner schon beim Öffnen des Logfiles Alarm geschlagen hat. Also ich würde empfehlen das du deinen Rechner mal mit Ad-aware und Spybot Search & Destroy durchsuchst und die gefundene Adware/Spyware löschen läßt. Anschließend natürlich auch mit einem aktuellen Antivirenprogramm suchen...

01.08.2005, 14:34

Hallo dirk ich hoffe das geht klar wenn ich mal nachfrage,
Welche virenmeldung kam denn?

An den fragesteller du könntest mir das log per email zusenden und zwar als datei nicht als text bitte.

h.marcell@gmail.com

und schren bitte dabei wer du bist und, dass du von dirks forum kommst sonstverwechsele ich dich evtl.

01.08.2005, 15:39

Hallöchen,

die Meldung betraf einen Script-Virus: HTML/Exploit.MHTML

Und um eventuelle unerfahrene User nicht zu verwirren hab ich das Logfile entfernt... Das Problem soltle sich aber mit Ad-aware und einer Datenträgerbereinigung lösen lassen...

01.08.2005, 15:49

danke für die bisherige hilfe
habe mit adaware schon 6 dateien gelöscht und danach keine meldung mehr von antiviren programm bekommen
danach mal mit antivir versucht auch keine meldung
ich denke das problem ist behoben habe das neue logfile trotzdem mal holy marcell gesendet damit er mir tipps geben kann

dankeeeee

01.08.2005, 17:21

@Dirk diese meldung ist unbedenklich den haben wir beim infoarchiv auch öfters ^^
===========================
@fragesteller:

Hijack This Starten ==> Button: Noone of the above just start the programm ==> Button Scan ==> Die Checkbox vor folgenden Einträgen Aktiviren ==> Button Fix Checked ==> Neustart

R3 - Default URLSearchHook is missing

O2 - BHO: (no name) - {5CEA5898-0908-A885-3590-38E16B48626D} - (no file)

O2 - BHO: (no name) - {B4542252-D2D4-E637-7DE2-356AF211397C} - (no file)

O4 - HKLM\..\Run: [DVIVRES] C:\DATEV\PROGRAMM\WINIV\pc-abo.exe

O4 - HKCU\..\Run: [DR_S] C:\Programme\DR_S\DR_S.exe

O4 - HKCU\..\Run: [SYSfit] C:\WINNT\SYSfit.exe

==============================
Da ist echt ne menge müll bei mache mal dies:
==============================

Mache bitte einen Escan und poste das Logfile hier:
https://nikita.eddys-domain.de/escan.html

==============================

01.08.2005, 17:59

Hallöchen,

also für unbedenklich würde ich diese Meldung nicht halten...

und ich würde auch aus dem Logfile nicht die Zeile:

O4 - HKLM\..\Run: [DVIVRES] C:\DATEV\PROGRAMM\WINIV\pc-abo.exe

enfernen. Dieser Startaufruf gehört zu einer Buchhaltungssofftware und könnte auch erwünscht oder benötigt sein...

03.08.2005, 07:35

Hi zusammen,
schonmal danke für die infos

habe jetzt den escanner druf und scanne gerade
werde das logfile dann gleich hier rein editieren

hat schon einige sachen gefunden ^^

hoffe wir bekommen das hin

03.08.2005, 08:12

Hi zusammen,
schonmal danke für die infos

habe jetzt den escanner druf und scanne gerade
werde das logfile dann gleich hier rein editieren

hat schon einige sachen gefunden ^^

hoffe wir bekommen das hin

03.08.2005, 13:07

Was ist hat es geklappt?

03.08.2005, 13:53

hat ein bissle gedauert
hier mein log

--------------------------------------------------
-------------------- INFECTED --------------------
--------------------------------------------------

1: Wed Aug 03 07:42:08 2005 => System found infected with CoolWebSearch Spyware/Adware ({0E1230F8-EA50-42A9-983C-D22ABC2EED3B})! Action taken: No Action Taken.
2: Wed Aug 03 07:52:05 2005 => File C:\WINNT\system32\GoGo9CP.dll infected by "Trojan-Dropper.Win32.Small.so" Virus! Action Taken: No Action Taken.
3: Wed Aug 03 07:55:08 2005 => File C:\WINNT\system32\xcpegcaz.dll infected by "Trojan-Dropper.Win32.Agent.fu" Virus! Action Taken: No Action Taken.
4: Wed Aug 03 09:15:03 2005 => File C:\hijackthis\backups\backup-20050801-094305-636.dll infected by "Trojan-Dropper.Win32.Agent.fu" Virus! Action Taken: No Action Taken.
5: Wed Aug 03 09:16:43 2005 => Scanning Folder: C:\Programme\AVPersonal\INFECTED\*.*
6: Wed Aug 03 11:26:52 2005 => Scanning File C:\Quarantäne\infected.log [**]
7: Wed Aug 03 12:20:26 2005 => File C:\WINNT\system32\GoGo9CP.dll infected by "Trojan-Dropper.Win32.Small.so" Virus! Action Taken: No Action Taken.
8: Wed Aug 03 12:23:24 2005 => File C:\WINNT\system32\xcpegcaz.dll infected by "Trojan-Dropper.Win32.Agent.fu" Virus! Action Taken: No Action Taken.

--------------------------------------------------
--------------------- TAGGED ---------------------
--------------------------------------------------

1: Wed Aug 03 07:50:40 2005 => File C:\WINNT\NDNuninstall6_38.exe tagged as "not-a-virus:AdWare.NewDotNet". Action Taken: No Action Taken.
2: Wed Aug 03 07:50:46 2005 => File C:\WINNT\woinstall.exe tagged as "not-a-virus:AdWare.EZula.ak". Action Taken: No Action Taken.
3: Wed Aug 03 07:56:27 2005 => File C:\DOKUME~1\Bautz\LOKALE~1\Temp\tvmupdater.exe tagged as "not-a-virus:AdWare.TotalVelocity.aa". Action Taken: No Action Taken.
4: Wed Aug 03 09:13:37 2005 => File C:\Dokumente und Einstellungen\Bautz\Lokale Einstellungen\Temp\tvmupdater.exe tagged as "not-a-virus:AdWare.TotalVelocity.aa". Action Taken: No Action Taken.
5: Wed Aug 03 12:10:36 2005 => File C:\WINNT\NDNuninstall6_38.exe tagged as "not-a-virus:AdWare.NewDotNet". Action Taken: No Action Taken.
6: Wed Aug 03 12:23:33 2005 => File C:\WINNT\woinstall.exe tagged as "not-a-virus:AdWare.EZula.ak". Action Taken: No Action Taken.

--------------------------------------------------
--------------------- ERRORS ---------------------
--------------------------------------------------

1: Wed Aug 03 07:41:44 2005 => ERROR!!! Invalid Entry stnospy = C:\Programme\SinEspias\no-spy.exe /autorun (in key SOFTWARE\Microsoft\Windows\CurrentVersion\Run). No Action Taken.
2: Wed Aug 03 07:42:04 2005 => ERROR!!! Invalid Entry C:\WINNT\system32\ozhakpxs6.exe in SYSTEM\CurrentControlSet\Services\uoskwyao6...
3: Wed Aug 03 07:42:06 2005 => ERROR!!! Invalid Entry System32\drivers\ywndbvcp.sys in SYSTEM\CurrentControlSet\Services\ywndbvcp...
4: Wed Aug 03 07:42:42 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\Programme\Gemeinsame Dateien\Microsoft Shared\Proof\MSGRGE32.DLL". Action Taken: No Action Taken.
5: Wed Aug 03 07:42:42 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\Programme\Gemeinsame Dateien\Microsoft Shared\Proof\msgr_ge.lex". Action Taken: No Action Taken.
6: Wed Aug 03 07:42:42 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\WINNT\System32\XLREC.DLL". Action Taken: No Action Taken.
7: Wed Aug 03 07:42:42 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\WINNT\System32\RECNCL.DLL". Action Taken: No Action Taken.
8: Wed Aug 03 07:42:42 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "D:\OFFICE~8\Office\Assistnt\logo.act". Action Taken: No Action Taken.
9: Wed Aug 03 07:42:42 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "D:\OFFICE~8\Office\Assistnt\scribble.act". Action Taken: No Action Taken.
10: Wed Aug 03 07:42:42 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "D:\OFFICE~8\Office\Assistnt\dot.act". Action Taken: No Action Taken.
11: Wed Aug 03 07:42:42 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "D:\OFFICE~8\Office\Assistnt\mnature.act". Action Taken: No Action Taken.
12: Wed Aug 03 07:42:42 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "D:\OFFICE~8\Office\Assistnt\hoverbot.act". Action Taken: No Action Taken.
13: Wed Aug 03 07:42:42 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "D:\OFFICE~8\Office\Assistnt\will.act". Action Taken: No Action Taken.
14: Wed Aug 03 07:42:42 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "D:\OFFICE~8\Office\Assistnt\powerpup.act". Action Taken: No Action Taken.
15: Wed Aug 03 07:42:42 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "D:\OFFICE~8\Office\Assistnt\genius.act". Action Taken: No Action Taken.
16: Wed Aug 03 07:42:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\DOKUME~1\User\LOKALE~1\Temp\DvInes\K0000017\in sttool.dll". Action Taken: No Action Taken.
17: Wed Aug 03 07:42:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\DATEV\SYSTEM\LCrypt.tlb". Action Taken: No Action Taken.
18: Wed Aug 03 07:42:45 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\Programme\Gemeinsame Dateien\InstallShield\Professional\RunTime\10\00\I ntel32\iKernel.dll". Action Taken: No Action Taken.
19: Wed Aug 03 07:42:45 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\Programme\Gemeinsame Dateien\InstallShield\Professional\RunTime\10\00\I ntel32\Setup.dll". Action Taken: No Action Taken.
20: Wed Aug 03 07:42:45 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\Programme\Gemeinsame Dateien\InstallShield\Professional\RunTime\10\00\I ntel32\iscript.dll". Action Taken: No Action Taken.
21: Wed Aug 03 07:42:45 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\Programme\Gemeinsame Dateien\InstallShield\Professional\RunTime\10\00\I ntel32\ctor.dll". Action Taken: No Action Taken.
22: Wed Aug 03 07:42:45 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\Programme\Gemeinsame Dateien\InstallShield\Professional\RunTime\10\00\I ntel32\iuser.dll". Action Taken: No Action Taken.
23: Wed Aug 03 07:42:45 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\Programme\Gemeinsame Dateien\InstallShield\Professional\RunTime\10\00\I ntel32\IGDI.dll". Action Taken: No Action Taken.
24: Wed Aug 03 07:42:48 2005 => Entry "HKCR\CLSID\{00020D05-0000-0000-C000-000000000046}" refers to invalid object "outex.dll". Action Taken: No Action Taken.
25: Wed Aug 03 07:42:48 2005 => Entry "HKCR\CLSID\{00793662-E0C4-11D0-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\dvswtool.dll". Action Taken: No Action Taken.
26: Wed Aug 03 07:42:48 2005 => Entry "HKCR\CLSID\{0199DF25-9820-4bd5-9FEE-5A765AB4371E}" refers to invalid object "C:\PROGRA~1\INCRED~1\BHO\INCFIN~1.DLL". Action Taken: No Action Taken.
27: Wed Aug 03 07:42:49 2005 => Entry "HKCR\CLSID\{07C228E2-1FBD-11D1-86D2-0000F69611BA}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
28: Wed Aug 03 07:42:50 2005 => Entry "HKCR\CLSID\{0D62363A-DBA2-11D1-B5DF-0060976089D0}" refers to invalid object "C:\DATEV\SYSTEM\tdbg7.ocx". Action Taken: No Action Taken.
29: Wed Aug 03 07:42:50 2005 => Entry "HKCR\CLSID\{0D62363B-DBA2-11D1-B5DF-0060976089D0}" refers to invalid object "C:\DATEV\SYSTEM\tdbg7.ocx". Action Taken: No Action Taken.
30: Wed Aug 03 07:42:50 2005 => Entry "HKCR\CLSID\{0D623649-DBA2-11D1-B5DF-0060976089D0}" refers to invalid object "C:\DATEV\SYSTEM\tdbg7.ocx". Action Taken: No Action Taken.
31: Wed Aug 03 07:42:50 2005 => Entry "HKCR\CLSID\{0D62364A-DBA2-11D1-B5DF-0060976089D0}" refers to invalid object "C:\DATEV\SYSTEM\tdbg7.ocx". Action Taken: No Action Taken.
32: Wed Aug 03 07:42:50 2005 => Entry "HKCR\CLSID\{0D62364B-DBA2-11D1-B5DF-0060976089D0}" refers to invalid object "C:\DATEV\SYSTEM\tdbg7.ocx". Action Taken: No Action Taken.
33: Wed Aug 03 07:42:50 2005 => Entry "HKCR\CLSID\{0D62364D-DBA2-11D1-B5DF-0060976089D0}" refers to invalid object "C:\DATEV\SYSTEM\tdbg7.ocx". Action Taken: No Action Taken.
34: Wed Aug 03 07:42:50 2005 => Entry "HKCR\CLSID\{0D62364E-DBA2-11D1-B5DF-0060976089D0}" refers to invalid object "C:\DATEV\SYSTEM\tdbg7.ocx". Action Taken: No Action Taken.
35: Wed Aug 03 07:42:50 2005 => Entry "HKCR\CLSID\{0D623653-DBA2-11D1-B5DF-0060976089D0}" refers to invalid object "C:\DATEV\SYSTEM\tdbg7.ocx". Action Taken: No Action Taken.
36: Wed Aug 03 07:42:50 2005 => Entry "HKCR\CLSID\{0D623659-DBA2-11D1-B5DF-0060976089D0}" refers to invalid object "C:\DATEV\SYSTEM\tdbg7.ocx". Action Taken: No Action Taken.
37: Wed Aug 03 07:42:51 2005 => Entry "HKCR\CLSID\{15EBE42B-18FF-11D8-87C2-9DBFFE39539F}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\BUBIDISP.ocx". Action Taken: No Action Taken.
38: Wed Aug 03 07:42:51 2005 => Entry "HKCR\CLSID\{15EBE434-18FF-11D8-87C2-9DBFFE39539F}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\BUBIDISP.ocx". Action Taken: No Action Taken.
39: Wed Aug 03 07:42:51 2005 => Entry "HKCR\CLSID\{15EBE43E-18FF-11D8-87C2-9DBFFE39539F}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\BUBIDISP.ocx". Action Taken: No Action Taken.
40: Wed Aug 03 07:42:51 2005 => Entry "HKCR\CLSID\{15EBE463-18FF-11D8-87C2-9DBFFE39539F}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\BUBIDISP.ocx". Action Taken: No Action Taken.
41: Wed Aug 03 07:42:51 2005 => Entry "HKCR\CLSID\{16831342-E259-11D0-8A9D-0000F6921A96}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
42: Wed Aug 03 07:42:52 2005 => Entry "HKCR\CLSID\{190E5F82-D1E6-11D0-8A9D-0000F6921A96}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\Kamsrv.dll". Action Taken: No Action Taken.
43: Wed Aug 03 07:42:52 2005 => Entry "HKCR\CLSID\{1C5697DE-18FF-11D8-87C2-9DBFFE39539F}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\DMSCREG.dll". Action Taken: No Action Taken.
44: Wed Aug 03 07:42:53 2005 => Entry "HKCR\CLSID\{22448882-E0BA-11D0-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\dvswtool.dll". Action Taken: No Action Taken.
45: Wed Aug 03 07:42:53 2005 => Entry "HKCR\CLSID\{26CBAC92-AEF9-11D4-AE20-00062962801D}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\dvswtool.dll". Action Taken: No Action Taken.
46: Wed Aug 03 07:42:53 2005 => Entry "HKCR\CLSID\{2733D302-E23B-11D0-8A9D-0000F6921A96}" refers to invalid object "C:\DATEV\PROGRAMM\RZBANKK\rzkrsrvk.dll". Action Taken: No Action Taken.
47: Wed Aug 03 07:42:53 2005 => Entry "HKCR\CLSID\{2B3CDF42-FB9A-11D1-8212-0000F6961CC9}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
48: Wed Aug 03 07:42:54 2005 => Entry "HKCR\CLSID\{320F5061-2B78-11D2-B096-0000F69617E7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
49: Wed Aug 03 07:42:54 2005 => Entry "HKCR\CLSID\{34173E02-DACA-11D3-AD45-0000F6922AC7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
50: Wed Aug 03 07:42:54 2005 => Entry "HKCR\CLSID\{35DD7F22-D32E-11D3-AD3C-0000F6922AC7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\dvswtool.dll". Action Taken: No Action Taken.
51: Wed Aug 03 07:42:55 2005 => Entry "HKCR\CLSID\{3ACBFF1A-8006-4F68-A488-A2AA4208BCD9}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
52: Wed Aug 03 07:42:55 2005 => Entry "HKCR\CLSID\{3D39EA18-281D-11D1-9540-0000F692648B}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\Kamsrv.dll". Action Taken: No Action Taken.
53: Wed Aug 03 07:42:55 2005 => Entry "HKCR\CLSID\{3E92790A-E616-11D0-96D8-0000F6993123}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\Kamsrv.dll". Action Taken: No Action Taken.
54: Wed Aug 03 07:42:55 2005 => Entry "HKCR\CLSID\{3EACD543-B19C-11D1-9621-0000F692648B}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\Kamsrv.dll". Action Taken: No Action Taken.
55: Wed Aug 03 07:42:55 2005 => Entry "HKCR\CLSID\{409A9042-E240-11D0-8A9D-0000F6921A96}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
56: Wed Aug 03 07:42:56 2005 => Entry "HKCR\CLSID\{429E8EC2-E3CE-11D0-8A9D-0000F6921A96}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
57: Wed Aug 03 07:42:57 2005 => Entry "HKCR\CLSID\{4D2E6831-E2FB-11D0-96D8-0000F6993123}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\Kamsrv.dll". Action Taken: No Action Taken.
58: Wed Aug 03 07:42:57 2005 => Entry "HKCR\CLSID\{50164992-B3B3-11D4-AE23-00062962801D}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\Kamsrv.dll". Action Taken: No Action Taken.
59: Wed Aug 03 07:42:57 2005 => Entry "HKCR\CLSID\{5042E9B2-84E3-11D1-B7F5-00A024DD24DC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\dvswtool.dll". Action Taken: No Action Taken.
60: Wed Aug 03 07:42:58 2005 => Entry "HKCR\CLSID\{5A593401-CE74-11D3-8537-0000F69282B7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
61: Wed Aug 03 07:42:58 2005 => Entry "HKCR\CLSID\{5B81A302-97DE-11D1-BD41-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\dvswtool.dll". Action Taken: No Action Taken.
62: Wed Aug 03 07:42:58 2005 => Entry "HKCR\CLSID\{5BE63E42-E302-11D0-86D1-0000F69611BA}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
63: Wed Aug 03 07:42:58 2005 => Entry "HKCR\CLSID\{5F3E04C3-4612-11D0-A113-00A024B50363}" refers to invalid object "C:\PROGRA~1\GEMEIN~1\IRAREG.DLL". Action Taken: No Action Taken.
64: Wed Aug 03 07:42:58 2005 => Entry "HKCR\CLSID\{5F3E04C4-4612-11D0-A113-00A024B50363}" refers to invalid object "C:\PROGRA~1\GEMEIN~1\IRAMDMTR.DLL". Action Taken: No Action Taken.
65: Wed Aug 03 07:42:58 2005 => Entry "HKCR\CLSID\{5F3E04C6-4612-11D0-A113-00A024B50363}" refers to invalid object "C:\PROGRA~1\GEMEIN~1\IRAREG.DLL". Action Taken: No Action Taken.
66: Wed Aug 03 07:42:59 2005 => Entry "HKCR\CLSID\{61BD5872-13A6-11D1-9527-0000F692648B}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
67: Wed Aug 03 07:42:59 2005 => Entry "HKCR\CLSID\{61E3A204-6567-11D1-96E1-0000F6993123}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\Kamsrv.dll". Action Taken: No Action Taken.
68: Wed Aug 03 07:42:59 2005 => Entry "HKCR\CLSID\{649D583D-3401-11D1-8C47-0080C7C43E7F}" refers to invalid object "C:\Programme\Office2K\Office\1031\WFXRSTRZ.DL L". Action Taken: No Action Taken.
69: Wed Aug 03 07:42:59 2005 => Entry "HKCR\CLSID\{6993B042-7320-11D2-8506-0000F69282B7}" refers to invalid object "C:\DATEV\PROGRAMM\RZBANKK\rzkrsrvk.dll". Action Taken: No Action Taken.
70: Wed Aug 03 07:42:59 2005 => Entry "HKCR\CLSID\{69E5414B-B371-11D0-BCD9-00AA00C1AB1C}" refers to invalid object "C:\Programme\Microsoft Office\Office\addins\activeex.dll". Action Taken: No Action Taken.
71: Wed Aug 03 07:42:59 2005 => Entry "HKCR\CLSID\{69E5414D-B371-11D0-BCD9-00AA00C1AB1C}" refers to invalid object "C:\Programme\Microsoft Office\Office\addins\activeex.dll". Action Taken: No Action Taken.
72: Wed Aug 03 07:42:59 2005 => Entry "HKCR\CLSID\{69E5414F-B371-11D0-BCD9-00AA00C1AB1C}" refers to invalid object "C:\Programme\Microsoft Office\Office\addins\activeex.dll". Action Taken: No Action Taken.
73: Wed Aug 03 07:42:59 2005 => Entry "HKCR\CLSID\{6B019041-AD17-11D1-961E-0000F692648B}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\Kamsrv.dll". Action Taken: No Action Taken.
74: Wed Aug 03 07:42:59 2005 => Entry "HKCR\CLSID\{6B5348A2-E3CF-11D0-8A9D-0000F6921A96}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
75: Wed Aug 03 07:43:01 2005 => Entry "HKCR\CLSID\{76021F22-E261-11D0-8A9D-0000F6921A96}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
76: Wed Aug 03 07:43:01 2005 => Entry "HKCR\CLSID\{7D20A962-3339-11D1-98C2-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
77: Wed Aug 03 07:43:01 2005 => Entry "HKCR\CLSID\{7D449122-2A9E-11D1-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
78: Wed Aug 03 07:43:01 2005 => Entry "HKCR\CLSID\{7D449125-2A9E-11D1-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
79: Wed Aug 03 07:43:01 2005 => Entry "HKCR\CLSID\{7D449128-2A9E-11D1-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
80: Wed Aug 03 07:43:01 2005 => Entry "HKCR\CLSID\{7D44912B-2A9E-11D1-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
81: Wed Aug 03 07:43:01 2005 => Entry "HKCR\CLSID\{7E4FA801-6512-11CF-B488-0000F69617E7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
82: Wed Aug 03 07:43:02 2005 => Entry "HKCR\CLSID\{88D87E22-E32C-11D0-98BD-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
83: Wed Aug 03 07:43:02 2005 => Entry "HKCR\CLSID\{88D87E24-E32C-11D0-98BD-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
84: Wed Aug 03 07:43:02 2005 => Entry "HKCR\CLSID\{88D87E26-E32C-11D0-98BD-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
85: Wed Aug 03 07:43:02 2005 => Entry "HKCR\CLSID\{88D87E28-E32C-11D0-98BD-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
86: Wed Aug 03 07:43:02 2005 => Entry "HKCR\CLSID\{88D87E2A-E32C-11D0-98BD-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
87: Wed Aug 03 07:43:02 2005 => Entry "HKCR\CLSID\{88D87E2C-E32C-11D0-98BD-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
88: Wed Aug 03 07:43:02 2005 => Entry "HKCR\CLSID\{88D87E2E-E32C-11D0-98BD-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
89: Wed Aug 03 07:43:02 2005 => Entry "HKCR\CLSID\{88D87E30-E32C-11D0-98BD-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
90: Wed Aug 03 07:43:02 2005 => Entry "HKCR\CLSID\{88D87E32-E32C-11D0-98BD-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
91: Wed Aug 03 07:43:02 2005 => Entry "HKCR\CLSID\{88D87E34-E32C-11D0-98BD-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
92: Wed Aug 03 07:43:02 2005 => Entry "HKCR\CLSID\{88D87E36-E32C-11D0-98BD-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
93: Wed Aug 03 07:43:02 2005 => Entry "HKCR\CLSID\{88D87E38-E32C-11D0-98BD-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
94: Wed Aug 03 07:43:02 2005 => Entry "HKCR\CLSID\{88D87E3A-E32C-11D0-98BD-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
95: Wed Aug 03 07:43:02 2005 => Entry "HKCR\CLSID\{8D504EA3-E300-11D0-B07E-0000F69617E7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
96: Wed Aug 03 07:43:02 2005 => Entry "HKCR\CLSID\{8D504EA6-E300-11D0-B07E-0000F69617E7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
97: Wed Aug 03 07:43:02 2005 => Entry "HKCR\CLSID\{8D504EA8-E300-11D0-B07E-0000F69617E7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
98: Wed Aug 03 07:43:03 2005 => Entry "HKCR\CLSID\{8D504EAB-E300-11D0-B07E-0000F69617E7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
99: Wed Aug 03 07:43:03 2005 => Entry "HKCR\CLSID\{8D504EAE-E300-11D0-B07E-0000F69617E7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
100: Wed Aug 03 07:43:03 2005 => Entry "HKCR\CLSID\{96F6CAE2-E258-11D0-8A9D-0000F6921A96}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
101: Wed Aug 03 07:43:04 2005 => Entry "HKCR\CLSID\{99180163-DA16-101A-935C-444553540000}" refers to invalid object "recncl.dll". Action Taken: No Action Taken.
102: Wed Aug 03 07:43:04 2005 => Entry "HKCR\CLSID\{99735721-BFD4-11D1-98C7-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
103: Wed Aug 03 07:43:04 2005 => Entry "HKCR\CLSID\{9A7905E5-9BBA-11D1-8212-0000F6961CC9}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
104: Wed Aug 03 07:43:04 2005 => Entry "HKCR\CLSID\{A2A1C302-E30B-11D0-820F-0000F6961CC9}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
105: Wed Aug 03 07:43:04 2005 => Entry "HKCR\CLSID\{A2A1C304-E30B-11D0-820F-0000F6961CC9}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
106: Wed Aug 03 07:43:04 2005 => Entry "HKCR\CLSID\{A2A1C306-E30B-11D0-820F-0000F6961CC9}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
107: Wed Aug 03 07:43:04 2005 => Entry "HKCR\CLSID\{A2A1C308-E30B-11D0-820F-0000F6961CC9}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
108: Wed Aug 03 07:43:04 2005 => Entry "HKCR\CLSID\{A2A1C30A-E30B-11D0-820F-0000F6961CC9}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
109: Wed Aug 03 07:43:04 2005 => Entry "HKCR\CLSID\{A2A1C30C-E30B-11D0-820F-0000F6961CC9}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
110: Wed Aug 03 07:43:04 2005 => Entry "HKCR\CLSID\{A2A1C30E-E30B-11D0-820F-0000F6961CC9}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
111: Wed Aug 03 07:43:04 2005 => Entry "HKCR\CLSID\{A30BB0C1-E2FD-11D0-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
112: Wed Aug 03 07:43:04 2005 => Entry "HKCR\CLSID\{A30BB0C3-E2FD-11D0-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
113: Wed Aug 03 07:43:04 2005 => Entry "HKCR\CLSID\{A30BB0C5-E2FD-11D0-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
114: Wed Aug 03 07:43:04 2005 => Entry "HKCR\CLSID\{A30BB0C7-E2FD-11D0-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
115: Wed Aug 03 07:43:04 2005 => Entry "HKCR\CLSID\{A30BB0C9-E2FD-11D0-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
116: Wed Aug 03 07:43:04 2005 => Entry "HKCR\CLSID\{A4845882-333F-11D0-B724-00AA0062CBB7}" refers to invalid object "C:\WINNT\System32\WBEM\WBEMSTUB.DLL". Action Taken: No Action Taken.
117: Wed Aug 03 07:43:04 2005 => Entry "HKCR\CLSID\{A4AE854A-93CB-11D1-96E1-0000F6993123}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
118: Wed Aug 03 07:43:05 2005 => Entry "HKCR\CLSID\{A65BCA81-E31B-11D0-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
119: Wed Aug 03 07:43:05 2005 => Entry "HKCR\CLSID\{A94BBF22-72D1-11D1-96E1-0000F6993123}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\zdsrvk.dll". Action Taken: No Action Taken.
120: Wed Aug 03 07:43:05 2005 => Entry "HKCR\CLSID\{A94BBF24-72D1-11D1-96E1-0000F6993123}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\zdsrvk.dll". Action Taken: No Action Taken.
121: Wed Aug 03 07:43:05 2005 => Entry "HKCR\CLSID\{A9D3DFC2-E1A6-11D0-8A9D-0000F6921A96}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\Kamsrv.dll". Action Taken: No Action Taken.
122: Wed Aug 03 07:43:05 2005 => Entry "HKCR\CLSID\{AB481080-796C-11D0-A113-00A024B50363}" refers to invalid object "C:\PROGRA~1\GEMEIN~1\IRAABOUT.DLL". Action Taken: No Action Taken.
123: Wed Aug 03 07:43:05 2005 => Entry "HKCR\CLSID\{AE50C901-78D9-11CF-ACE4-10005ADB0E7F}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
124: Wed Aug 03 07:43:05 2005 => Entry "HKCR\CLSID\{B0693766-5278-4ec6-B9E1-3CE40560EF5A}" refers to invalid object "CaPlgin.ax". Action Taken: No Action Taken.
125: Wed Aug 03 07:43:05 2005 => Entry "HKCR\CLSID\{B0E5DEC2-E3CD-11D0-8A9D-0000F6921A96}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
126: Wed Aug 03 07:43:06 2005 => Entry "HKCR\CLSID\{B2880995-7066-11D1-BD33-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
127: Wed Aug 03 07:43:06 2005 => Entry "HKCR\CLSID\{B3587787-284C-11D1-96DF-0000F6993123}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\Kamsrv.dll". Action Taken: No Action Taken.
128: Wed Aug 03 07:43:06 2005 => Entry "HKCR\CLSID\{B928DE02-0C3C-11D2-98C8-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
129: Wed Aug 03 07:43:06 2005 => Entry "HKCR\CLSID\{BC505CC2-E262-11D0-8A9D-0000F6921A96}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
130: Wed Aug 03 07:43:07 2005 => Entry "HKCR\CLSID\{BD85D542-F165-11D0-98BD-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
131: Wed Aug 03 07:43:07 2005 => Entry "HKCR\CLSID\{C1172D01-751C-11D0-B6CF-00A024BF23EF}" refers to invalid object "C:\PROGRA~1\GEMEIN~1\IRASRIAL.DLL". Action Taken: No Action Taken.
132: Wed Aug 03 07:43:07 2005 => Entry "HKCR\CLSID\{C42054F4-F9EB-11D0-9508-0000F692648B}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\krwimprt.dll". Action Taken: No Action Taken.
133: Wed Aug 03 07:43:07 2005 => Entry "HKCR\CLSID\{C4D97602-1229-11D1-8A9D-0000F6921A96}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\Kamsrv.dll". Action Taken: No Action Taken.
134: Wed Aug 03 07:43:08 2005 => Entry "HKCR\CLSID\{C90F10E2-E23B-11D0-8A9D-0000F6921A96}" refers to invalid object "C:\DATEV\PROGRAMM\RZBANKK\rzkrsrvk.dll". Action Taken: No Action Taken.
135: Wed Aug 03 07:43:08 2005 => Entry "HKCR\CLSID\{C90F10E4-E23B-11D0-8A9D-0000F6921A96}" refers to invalid object "C:\DATEV\PROGRAMM\RZBANKK\rzkrsrvk.dll". Action Taken: No Action Taken.
136: Wed Aug 03 07:43:08 2005 => Entry "HKCR\CLSID\{C9C6F9E2-E325-11D0-B07E-0000F69617E7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
137: Wed Aug 03 07:43:08 2005 => Entry "HKCR\CLSID\{CCC24ED2-0EFE-11D1-9523-0000F692648B}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\dvswtool.dll". Action Taken: No Action Taken.
138: Wed Aug 03 07:43:08 2005 => Entry "HKCR\CLSID\{CCDD9080-8100-11D0-B6CF-00A024BF23EF}" refers to invalid object "C:\PROGRA~1\GEMEIN~1\IRALPTTR.DLL". Action Taken: No Action Taken.
139: Wed Aug 03 07:43:08 2005 => Entry "HKCR\CLSID\{CD6D39C2-E3CE-11D0-8A9D-0000F6921A96}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
140: Wed Aug 03 07:43:08 2005 => Entry "HKCR\CLSID\{D16A9922-1EF5-11D1-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
141: Wed Aug 03 07:43:09 2005 => Entry "HKCR\CLSID\{D94F5A61-17B9-11D1-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
142: Wed Aug 03 07:43:09 2005 => Entry "HKCR\CLSID\{D94F5A63-17B9-11D1-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
143: Wed Aug 03 07:43:09 2005 => Entry "HKCR\CLSID\{D94F5A65-17B9-11D1-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
144: Wed Aug 03 07:43:09 2005 => Entry "HKCR\CLSID\{D94F5A67-17B9-11D1-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
145: Wed Aug 03 07:43:09 2005 => Entry "HKCR\CLSID\{D94F5A69-17B9-11D1-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
146: Wed Aug 03 07:43:09 2005 => Entry "HKCR\CLSID\{DA6A85E0-05C7-11D1-B243-006097CAD7E2}" refers to invalid object "C:\PROGRA~1\GEMEIN~1\IRAABOUT.DLL". Action Taken: No Action Taken.
147: Wed Aug 03 07:43:09 2005 => Entry "HKCR\CLSID\{DA948B92-9AB0-11D5-AF28-00062962801D}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\dvswtool.dll". Action Taken: No Action Taken.
148: Wed Aug 03 07:43:09 2005 => Entry "HKCR\CLSID\{DB42E5A4-3311-11D1-954E-0000F692648B}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\Kamsrv.dll". Action Taken: No Action Taken.
149: Wed Aug 03 07:43:09 2005 => Entry "HKCR\CLSID\{DBAFCD22-2035-11D1-9537-0000F692648B}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\Kamsrv.dll". Action Taken: No Action Taken.
150: Wed Aug 03 07:43:10 2005 => Entry "HKCR\CLSID\{E07D3492-32B5-11D0-B724-00AA0062CBB7}" refers to invalid object "C:\WINNT\System32\WBEM\WBEMSTUB.DLL". Action Taken: No Action Taken.
151: Wed Aug 03 07:43:10 2005 => Entry "HKCR\CLSID\{E4A3AAA9-BB30-11D0-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\dvswtool.dll". Action Taken: No Action Taken.
152: Wed Aug 03 07:43:10 2005 => Entry "HKCR\CLSID\{E4A5F6A2-E3D7-11D0-AC7B-444553540000}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
153: Wed Aug 03 07:43:10 2005 => Entry "HKCR\CLSID\{E4A5F6A4-E3D7-11D0-AC7B-444553540000}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
154: Wed Aug 03 07:43:10 2005 => Entry "HKCR\CLSID\{E5B42981-67DC-11D0-8547-00A0240B50F0}" refers to invalid object "C:\PROGRA~1\GEMEIN~1\IRAWEBTR.DLL". Action Taken: No Action Taken.
155: Wed Aug 03 07:43:10 2005 => Entry "HKCR\CLSID\{E8D83F00-CD78-11D0-B4D3-00A024BF23EF}" refers to invalid object "C:\PROGRA~1\GEMEIN~1\IRAABOUT.DLL". Action Taken: No Action Taken.
156: Wed Aug 03 07:43:10 2005 => Entry "HKCR\CLSID\{E99606E1-E257-11D0-8A9D-0000F6921A96}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
157: Wed Aug 03 07:43:11 2005 => Entry "HKCR\CLSID\{EB2197C2-E33A-11D0-98BD-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
158: Wed Aug 03 07:43:11 2005 => Entry "HKCR\CLSID\{EC626447-BF38-11D1-98C7-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
159: Wed Aug 03 07:43:11 2005 => Entry "HKCR\CLSID\{ED41D8C2-72CE-11D1-820F-0000F6961CC9}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
160: Wed Aug 03 07:43:11 2005 => Entry "HKCR\CLSID\{EDE680C2-E311-11D0-820F-0000F6961CC9}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
161: Wed Aug 03 07:43:11 2005 => Entry "HKCR\CLSID\{EF0FDA22-F2AA-11D0-96D8-0000F6993123}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
162: Wed Aug 03 07:43:11 2005 => Entry "HKCR\CLSID\{EFF9308E-6650-11D5-AAF9-006094B9DE44}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
163: Wed Aug 03 07:43:11 2005 => Entry "HKCR\CLSID\{F1A66687-3C20-11D2-AC7E-0000F6960922}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
164: Wed Aug 03 07:43:12 2005 => Entry "HKCR\CLSID\{F41FD421-DD5D-11D3-8537-0000F69282B7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\Kamsrv.dll". Action Taken: No Action Taken.
165: Wed Aug 03 07:43:12 2005 => Entry "HKCR\CLSID\{F42355C3-0B3E-11D2-84E7-0000F69282B7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
166: Wed Aug 03 07:43:12 2005 => Entry "HKCR\CLSID\{F46D8CE3-E3CF-11D0-8A9D-0000F6921A96}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
167: Wed Aug 03 07:43:12 2005 => Entry "HKCR\CLSID\{F8B5F142-60DC-11D1-89D7-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\dvswtool.dll". Action Taken: No Action Taken.
168: Wed Aug 03 07:43:13 2005 => Entry "HKCR\CLSID\{FE4F1242-F79F-11D0-96D8-0000F6993123}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\Kamsrv.dll". Action Taken: No Action Taken.
169: Wed Aug 03 07:43:13 2005 => Entry "HKCR\CLSID\{FEA8E5A0-66D0-11D5-AEF5-00062962801D}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
170: Wed Aug 03 07:43:17 2005 => Entry "HKCR\ComPlusMetaData.MsCorHost" refers to invalid object "{727CDF4F-3BA0-11D3-8738-00C04F79ED0D}". Action Taken: No Action Taken.
171: Wed Aug 03 07:43:17 2005 => Entry "HKCR\ComPlusMetaData.MsCorHost.2" refers to invalid object "{727CDF4F-3BA0-11D3-8738-00C04F79ED0D}". Action Taken: No Action Taken.
172: Wed Aug 03 07:43:25 2005 => Entry "HKCR\Dvbstd_VCard.DvbstdVCards" refers to invalid object "{28822135-E5D7-11D3-B765-00104BD962AC}". Action Taken: No Action Taken.
173: Wed Aug 03 07:43:25 2005 => Entry "HKCR\Dvbstd_VCard.DvbstdVCards.1" refers to invalid object "{28822135-E5D7-11D3-B765-00104BD962AC}". Action Taken: No Action Taken.
174: Wed Aug 03 07:43:30 2005 => Entry "HKCR\KAMAI.LwPfadAuswahl" refers to invalid object "{A5EAE34E-FAE7-11D6-87C2-C2129424652F}". Action Taken: No Action Taken.
175: Wed Aug 03 07:43:37 2005 => Entry "HKCR\SymWriter.pdb" refers to invalid object "{520DC67A-752E-11D3-8D56-00C04F680B2B}". Action Taken: No Action Taken.
176: Wed Aug 03 08:28:51 2005 => Result: ERROR!!! File C:\DATEV\PROGRAMM\KOST\Muster\EI-Muster-Bau- und Ausbau SKR 03-28975-3000-1.Z is Not Scanned
177: Wed Aug 03 08:29:03 2005 => Result: ERROR!!! File C:\DATEV\PROGRAMM\KOST\Muster\EI-Muster-Bau- und Ausbau SKR 04-28975-4000-1.Z is Not Scanned
178: Wed Aug 03 08:29:16 2005 => Result: ERROR!!! File C:\DATEV\PROGRAMM\KOST\Muster\EI-Muster-KommBZAbr-28097-2010-1.Z is Not Scanned
179: Wed Aug 03 08:29:29 2005 => Result: ERROR!!! File C:\DATEV\PROGRAMM\KOST\Muster\EI-Muster-KommErfÜ-28097-2010-2.Z is Not Scanned
180: Wed Aug 03 08:29:52 2005 => Result: ERROR!!! File C:\DATEV\PROGRAMM\KOST\Muster\EI-Muster-Kost KG-28107-11111-1.Z is Not Scanned
181: Wed Aug 03 08:30:04 2005 => Result: ERROR!!! File C:\DATEV\PROGRAMM\KOST\Muster\EI-Muster-PBV-gemischte Einrichtungen-28948-30345-1.Z is Not Scanned
182: Wed Aug 03 08:30:16 2005 => Result: ERROR!!! File C:\DATEV\PROGRAMM\KOST\Muster\EI-Muster-Vereine-29100-287-1.Z is Not Scanned
183: Wed Aug 03 08:30:40 2005 => Result: ERROR!!! File C:\DATEV\PROGRAMM\KOST\Muster\EI-Musterholz GmbH-29098-271-6.Z is Not Scanned
184: Wed Aug 03 08:31:02 2005 => Result: ERROR!!! File C:\DATEV\PROGRAMM\KOST\Muster\EI-Musterholz GmbH-29098-271-9.Z is Not Scanned
185: Wed Aug 03 08:31:25 2005 => Result: ERROR!!! File C:\DATEV\PROGRAMM\KOST\Muster\EI-Testholz SKR 04-29098-40271-5.Z is Not Scanned

--------------------------------------------------
-------- DATEIEN ZUM LÖSCHEN HINZUGEFÜGT ---------
--------------------------------------------------

1: C:\WINNT\system32\GoGo9CP.dll => Trojan-Dropper.Win32.Small.so
2: C:\WINNT\system32\xcpegcaz.dll => Trojan-Dropper.Win32.Agent.fu
3: C:\hijackthis\backups\backup-20050801-094305-636.dll => Trojan-Dropper.Win32.Agent.fu

--------------------------------------------------
-------------------- Statistik -------------------
--------------------------------------------------

Wed Aug 03 12:23:33 2005 => Total Objects Scanned: 72587
Wed Aug 03 12:23:33 2005 => Total Virus(es) Found: 15
Wed Aug 03 12:23:33 2005 => Total Errors: 185
Wed Aug 03 12:23:33 2005 => Virus Database Date: 2005/08/03
Wed Aug 03 12:23:33 2005 => Virus Database Count: 141721

Wie geht es weiter ist ja doch noch einiges drauf ^^

03.08.2005, 18:10

Man du hast ja voll das Chaos...

Hast du schon mal an eine Neuinstallation gedacht?

03.08.2005, 18:27

Hallöchen,

da ist das einzigste was vernüftig wäre eine Neuinstallation. Vorher alle Daten und Einstellungen sichern... Nach der Windows-Installation den Rechner vernünftig absichern und erst dann online gehen...

04.08.2005, 07:07

mist
ich hatte gehofft um eine neuinstallation rum zukommen
weil es doch schon sehr zeit intensiv wäre die ganzen DATEV programme zuinstallieren kann man da nix anderes versuchen ?
Habe von viren ka also bitte ein kruzes feadback

MFG KingHeinz

04.08.2005, 14:10

Hallöchen,

da du auf dem Rechner die Datev-Programme installiert hast, scheint es ja ein Rechner zu sein der auch beruflich genutzt wird. Da ist natürlich Datensicherheit unbedingt nötig... Durch den Virenbefall ist die Sicherheit der Daten natürlich nicht mehr gewährleistet.

Wenn du die Neuinstallation ubedingt vermeiden möchtest, könntest du den Rechner im abgesicherten Modus starten und dort ein aktuelles Antivirenprogramm laufen lassen. Möglicherweise wird ein großer Teil der Viren bereits bereinigt... Anschließend, ebenfalls noch im abgesicherten Modus, einen SCan mit einer aktuellen Version von Ad-aware oder spybot Search & Destroy durchführen...

04.08.2005, 14:48

jo danke ich werde es mal versuchen ansonsten heißt es überstunden ^^
und neu aufsetzen
danke schonmal für eure hilfe werde nochmal hier posten ob er was gefunden hat im abgesicherten modus

MFG KingHeinz

05.08.2005, 07:06

Alle klar... und kein Problem.

Sag dann mal bescheid.

mein logfile

mein logfile

Ähnliche Themen

Passt mein neuer Cpu überhaupt auf mein Mainboard und wie mache ich ein Bios Update

Logfile

Mein Zweit festplatte erkennt mein PC nicht

Mein HiJackThis LogFile

Mein Hijackthis Logfile

Benutzer, die dieses Thema gelesen haben: 0