mein logfile

16Antworten
  1. #1
    Avatar von
    Themen Starter

    Standard mein logfile

    hi zusammen,
    bekomme beim öffnen meines internet explorers direkt warnungen meines antiviren programms
    obwohl er die dateien löscht
    kommen die warnungen immer wieder auch zwischendurch beim surfen
    auf der suche bei google nach diesen dateien wird nix gefunden
    folgende dateien werden mir als trojaner angezeigt:
    ozhakpxs6.exe
    s6[1]
    ywndbvcp.sys

    und hier mal mein logfile von hijacker:

    Logfile of HijackThis v1.99.1
    Scan saved at 09:18:10, on 1.8.2005
    Platform: Windows 2000 SP4 (WinNT 5.00.2195)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Logfile wegen Virenmeldung entfernt...

    schonmal danke an euch für die hilfe

  2. #2
    Avatar von computerdirk
    computerdirk ist offline

    Title
    Benutzer
    seit
    07.01.2005
    Ort
    Ilsede
    Beiträge
    12.171

    Standard

    Hallöchen,

    ich hab das Logfile aus deinem Posting entfernt, da mein Virenscanner schon beim Öffnen des Logfiles Alarm geschlagen hat. Also ich würde empfehlen das du deinen Rechner mal mit Ad-aware und Spybot Search & Destroy durchsuchst und die gefundene Adware/Spyware löschen läßt. Anschließend natürlich auch mit einem aktuellen Antivirenprogramm suchen...

  3. #3
    Avatar von
    Themen Starter

    Standard

    Hallo dirk ich hoffe das geht klar wenn ich mal nachfrage,
    Welche virenmeldung kam denn?

    An den fragesteller du könntest mir das log per email zusenden und zwar als datei nicht als text bitte.

    h.marcell@gmail.com

    und schren bitte dabei wer du bist und, dass du von dirks forum kommst sonstverwechsele ich dich evtl.

  4. #4
    Avatar von computerdirk
    computerdirk ist offline

    Title
    Benutzer
    seit
    07.01.2005
    Ort
    Ilsede
    Beiträge
    12.171

    Standard

    Hallöchen,

    die Meldung betraf einen Script-Virus: HTML/Exploit.MHTML

    Und um eventuelle unerfahrene User nicht zu verwirren hab ich das Logfile entfernt... Das Problem soltle sich aber mit Ad-aware und einer Datenträgerbereinigung lösen lassen...

  5. #5
    Avatar von
    Themen Starter

    Standard

    danke für die bisherige hilfe
    habe mit adaware schon 6 dateien gelöscht und danach keine meldung mehr von antiviren programm bekommen
    danach mal mit antivir versucht auch keine meldung
    ich denke das problem ist behoben habe das neue logfile trotzdem mal holy marcell gesendet damit er mir tipps geben kann

    dankeeeee

  6. #6
    Avatar von
    Themen Starter

    Standard

    @Dirk diese meldung ist unbedenklich den haben wir beim infoarchiv auch öfters ^^
    ===========================
    @fragesteller:

    Hijack This Starten ==> Button: Noone of the above just start the programm ==> Button Scan ==> Die Checkbox vor folgenden Einträgen Aktiviren ==> Button Fix Checked ==> Neustart

    R3 - Default URLSearchHook is missing

    O2 - BHO: (no name) - {5CEA5898-0908-A885-3590-38E16B48626D} - (no file)

    O2 - BHO: (no name) - {B4542252-D2D4-E637-7DE2-356AF211397C} - (no file)

    O4 - HKLM\..\Run: [DVIVRES] C:\DATEV\PROGRAMM\WINIV\pc-abo.exe

    O4 - HKCU\..\Run: [DR_S] C:\Programme\DR_S\DR_S.exe

    O4 - HKCU\..\Run: [SYSfit] C:\WINNT\SYSfit.exe

    ==============================
    Da ist echt ne menge müll bei mache mal dies:
    ==============================

    Mache bitte einen Escan und poste das Logfile hier:
    https://nikita.eddys-domain.de/escan.html

    ==============================

  7. #7
    Avatar von computerdirk
    computerdirk ist offline

    Title
    Benutzer
    seit
    07.01.2005
    Ort
    Ilsede
    Beiträge
    12.171

    Standard

    Hallöchen,

    also für unbedenklich würde ich diese Meldung nicht halten...

    und ich würde auch aus dem Logfile nicht die Zeile:

    O4 - HKLM\..\Run: [DVIVRES] C:\DATEV\PROGRAMM\WINIV\pc-abo.exe
    enfernen. Dieser Startaufruf gehört zu einer Buchhaltungssofftware und könnte auch erwünscht oder benötigt sein...

  8. #8
    Avatar von
    Themen Starter

    Standard

    Hi zusammen,
    schonmal danke für die infos

    habe jetzt den escanner druf und scanne gerade
    werde das logfile dann gleich hier rein editieren

    hat schon einige sachen gefunden ^^

    hoffe wir bekommen das hin

  9. #9
    Avatar von
    Themen Starter

    Standard

    Hi zusammen,
    schonmal danke für die infos

    habe jetzt den escanner druf und scanne gerade
    werde das logfile dann gleich hier rein editieren

    hat schon einige sachen gefunden ^^

    hoffe wir bekommen das hin

  10. #10
    Avatar von
    Themen Starter

    Standard

    Was ist hat es geklappt?

  11. #11
    Avatar von
    Themen Starter

    Standard

    hat ein bissle gedauert
    hier mein log


    --------------------------------------------------
    -------------------- INFECTED --------------------
    --------------------------------------------------

    1: Wed Aug 03 07:42:08 2005 => System found infected with CoolWebSearch Spyware/Adware ({0E1230F8-EA50-42A9-983C-D22ABC2EED3B})! Action taken: No Action Taken.
    2: Wed Aug 03 07:52:05 2005 => File C:\WINNT\system32\GoGo9CP.dll infected by "Trojan-Dropper.Win32.Small.so" Virus! Action Taken: No Action Taken.
    3: Wed Aug 03 07:55:08 2005 => File C:\WINNT\system32\xcpegcaz.dll infected by "Trojan-Dropper.Win32.Agent.fu" Virus! Action Taken: No Action Taken.
    4: Wed Aug 03 09:15:03 2005 => File C:\hijackthis\backups\backup-20050801-094305-636.dll infected by "Trojan-Dropper.Win32.Agent.fu" Virus! Action Taken: No Action Taken.
    5: Wed Aug 03 09:16:43 2005 => Scanning Folder: C:\Programme\AVPersonal\INFECTED\*.*
    6: Wed Aug 03 11:26:52 2005 => Scanning File C:\Quarantäne\infected.log [**]
    7: Wed Aug 03 12:20:26 2005 => File C:\WINNT\system32\GoGo9CP.dll infected by "Trojan-Dropper.Win32.Small.so" Virus! Action Taken: No Action Taken.
    8: Wed Aug 03 12:23:24 2005 => File C:\WINNT\system32\xcpegcaz.dll infected by "Trojan-Dropper.Win32.Agent.fu" Virus! Action Taken: No Action Taken.

    --------------------------------------------------
    --------------------- TAGGED ---------------------
    --------------------------------------------------

    1: Wed Aug 03 07:50:40 2005 => File C:\WINNT\NDNuninstall6_38.exe tagged as "not-a-virus:AdWare.NewDotNet". Action Taken: No Action Taken.
    2: Wed Aug 03 07:50:46 2005 => File C:\WINNT\woinstall.exe tagged as "not-a-virus:AdWare.EZula.ak". Action Taken: No Action Taken.
    3: Wed Aug 03 07:56:27 2005 => File C:\DOKUME~1\Bautz\LOKALE~1\Temp\tvmupdater.exe tagged as "not-a-virus:AdWare.TotalVelocity.aa". Action Taken: No Action Taken.
    4: Wed Aug 03 09:13:37 2005 => File C:\Dokumente und Einstellungen\Bautz\Lokale Einstellungen\Temp\tvmupdater.exe tagged as "not-a-virus:AdWare.TotalVelocity.aa". Action Taken: No Action Taken.
    5: Wed Aug 03 12:10:36 2005 => File C:\WINNT\NDNuninstall6_38.exe tagged as "not-a-virus:AdWare.NewDotNet". Action Taken: No Action Taken.
    6: Wed Aug 03 12:23:33 2005 => File C:\WINNT\woinstall.exe tagged as "not-a-virus:AdWare.EZula.ak". Action Taken: No Action Taken.

    --------------------------------------------------
    --------------------- ERRORS ---------------------
    --------------------------------------------------

    1: Wed Aug 03 07:41:44 2005 => ERROR!!! Invalid Entry stnospy = C:\Programme\SinEspias\no-spy.exe /autorun (in key SOFTWARE\Microsoft\Windows\CurrentVersion\Run). No Action Taken.
    2: Wed Aug 03 07:42:04 2005 => ERROR!!! Invalid Entry C:\WINNT\system32\ozhakpxs6.exe in SYSTEM\CurrentControlSet\Services\uoskwyao6...
    3: Wed Aug 03 07:42:06 2005 => ERROR!!! Invalid Entry System32\drivers\ywndbvcp.sys in SYSTEM\CurrentControlSet\Services\ywndbvcp...
    4: Wed Aug 03 07:42:42 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\Programme\Gemeinsame Dateien\Microsoft Shared\Proof\MSGRGE32.DLL". Action Taken: No Action Taken.
    5: Wed Aug 03 07:42:42 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\Programme\Gemeinsame Dateien\Microsoft Shared\Proof\msgr_ge.lex". Action Taken: No Action Taken.
    6: Wed Aug 03 07:42:42 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\WINNT\System32\XLREC.DLL". Action Taken: No Action Taken.
    7: Wed Aug 03 07:42:42 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\WINNT\System32\RECNCL.DLL". Action Taken: No Action Taken.
    8: Wed Aug 03 07:42:42 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "D:\OFFICE~8\Office\Assistnt\logo.act". Action Taken: No Action Taken.
    9: Wed Aug 03 07:42:42 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "D:\OFFICE~8\Office\Assistnt\scribble.act". Action Taken: No Action Taken.
    10: Wed Aug 03 07:42:42 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "D:\OFFICE~8\Office\Assistnt\dot.act". Action Taken: No Action Taken.
    11: Wed Aug 03 07:42:42 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "D:\OFFICE~8\Office\Assistnt\mnature.act". Action Taken: No Action Taken.
    12: Wed Aug 03 07:42:42 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "D:\OFFICE~8\Office\Assistnt\hoverbot.act". Action Taken: No Action Taken.
    13: Wed Aug 03 07:42:42 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "D:\OFFICE~8\Office\Assistnt\will.act". Action Taken: No Action Taken.
    14: Wed Aug 03 07:42:42 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "D:\OFFICE~8\Office\Assistnt\powerpup.act". Action Taken: No Action Taken.
    15: Wed Aug 03 07:42:42 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "D:\OFFICE~8\Office\Assistnt\genius.act". Action Taken: No Action Taken.
    16: Wed Aug 03 07:42:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\DOKUME~1\User\LOKALE~1\Temp\DvInes\K0000017\in sttool.dll". Action Taken: No Action Taken.
    17: Wed Aug 03 07:42:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\DATEV\SYSTEM\LCrypt.tlb". Action Taken: No Action Taken.
    18: Wed Aug 03 07:42:45 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\Programme\Gemeinsame Dateien\InstallShield\Professional\RunTime\10\00\I ntel32\iKernel.dll". Action Taken: No Action Taken.
    19: Wed Aug 03 07:42:45 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\Programme\Gemeinsame Dateien\InstallShield\Professional\RunTime\10\00\I ntel32\Setup.dll". Action Taken: No Action Taken.
    20: Wed Aug 03 07:42:45 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\Programme\Gemeinsame Dateien\InstallShield\Professional\RunTime\10\00\I ntel32\iscript.dll". Action Taken: No Action Taken.
    21: Wed Aug 03 07:42:45 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\Programme\Gemeinsame Dateien\InstallShield\Professional\RunTime\10\00\I ntel32\ctor.dll". Action Taken: No Action Taken.
    22: Wed Aug 03 07:42:45 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\Programme\Gemeinsame Dateien\InstallShield\Professional\RunTime\10\00\I ntel32\iuser.dll". Action Taken: No Action Taken.
    23: Wed Aug 03 07:42:45 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\Programme\Gemeinsame Dateien\InstallShield\Professional\RunTime\10\00\I ntel32\IGDI.dll". Action Taken: No Action Taken.
    24: Wed Aug 03 07:42:48 2005 => Entry "HKCR\CLSID\{00020D05-0000-0000-C000-000000000046}" refers to invalid object "outex.dll". Action Taken: No Action Taken.
    25: Wed Aug 03 07:42:48 2005 => Entry "HKCR\CLSID\{00793662-E0C4-11D0-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\dvswtool.dll". Action Taken: No Action Taken.
    26: Wed Aug 03 07:42:48 2005 => Entry "HKCR\CLSID\{0199DF25-9820-4bd5-9FEE-5A765AB4371E}" refers to invalid object "C:\PROGRA~1\INCRED~1\BHO\INCFIN~1.DLL". Action Taken: No Action Taken.
    27: Wed Aug 03 07:42:49 2005 => Entry "HKCR\CLSID\{07C228E2-1FBD-11D1-86D2-0000F69611BA}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    28: Wed Aug 03 07:42:50 2005 => Entry "HKCR\CLSID\{0D62363A-DBA2-11D1-B5DF-0060976089D0}" refers to invalid object "C:\DATEV\SYSTEM\tdbg7.ocx". Action Taken: No Action Taken.
    29: Wed Aug 03 07:42:50 2005 => Entry "HKCR\CLSID\{0D62363B-DBA2-11D1-B5DF-0060976089D0}" refers to invalid object "C:\DATEV\SYSTEM\tdbg7.ocx". Action Taken: No Action Taken.
    30: Wed Aug 03 07:42:50 2005 => Entry "HKCR\CLSID\{0D623649-DBA2-11D1-B5DF-0060976089D0}" refers to invalid object "C:\DATEV\SYSTEM\tdbg7.ocx". Action Taken: No Action Taken.
    31: Wed Aug 03 07:42:50 2005 => Entry "HKCR\CLSID\{0D62364A-DBA2-11D1-B5DF-0060976089D0}" refers to invalid object "C:\DATEV\SYSTEM\tdbg7.ocx". Action Taken: No Action Taken.
    32: Wed Aug 03 07:42:50 2005 => Entry "HKCR\CLSID\{0D62364B-DBA2-11D1-B5DF-0060976089D0}" refers to invalid object "C:\DATEV\SYSTEM\tdbg7.ocx". Action Taken: No Action Taken.
    33: Wed Aug 03 07:42:50 2005 => Entry "HKCR\CLSID\{0D62364D-DBA2-11D1-B5DF-0060976089D0}" refers to invalid object "C:\DATEV\SYSTEM\tdbg7.ocx". Action Taken: No Action Taken.
    34: Wed Aug 03 07:42:50 2005 => Entry "HKCR\CLSID\{0D62364E-DBA2-11D1-B5DF-0060976089D0}" refers to invalid object "C:\DATEV\SYSTEM\tdbg7.ocx". Action Taken: No Action Taken.
    35: Wed Aug 03 07:42:50 2005 => Entry "HKCR\CLSID\{0D623653-DBA2-11D1-B5DF-0060976089D0}" refers to invalid object "C:\DATEV\SYSTEM\tdbg7.ocx". Action Taken: No Action Taken.
    36: Wed Aug 03 07:42:50 2005 => Entry "HKCR\CLSID\{0D623659-DBA2-11D1-B5DF-0060976089D0}" refers to invalid object "C:\DATEV\SYSTEM\tdbg7.ocx". Action Taken: No Action Taken.
    37: Wed Aug 03 07:42:51 2005 => Entry "HKCR\CLSID\{15EBE42B-18FF-11D8-87C2-9DBFFE39539F}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\BUBIDISP.ocx". Action Taken: No Action Taken.
    38: Wed Aug 03 07:42:51 2005 => Entry "HKCR\CLSID\{15EBE434-18FF-11D8-87C2-9DBFFE39539F}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\BUBIDISP.ocx". Action Taken: No Action Taken.
    39: Wed Aug 03 07:42:51 2005 => Entry "HKCR\CLSID\{15EBE43E-18FF-11D8-87C2-9DBFFE39539F}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\BUBIDISP.ocx". Action Taken: No Action Taken.
    40: Wed Aug 03 07:42:51 2005 => Entry "HKCR\CLSID\{15EBE463-18FF-11D8-87C2-9DBFFE39539F}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\BUBIDISP.ocx". Action Taken: No Action Taken.
    41: Wed Aug 03 07:42:51 2005 => Entry "HKCR\CLSID\{16831342-E259-11D0-8A9D-0000F6921A96}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    42: Wed Aug 03 07:42:52 2005 => Entry "HKCR\CLSID\{190E5F82-D1E6-11D0-8A9D-0000F6921A96}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\Kamsrv.dll". Action Taken: No Action Taken.
    43: Wed Aug 03 07:42:52 2005 => Entry "HKCR\CLSID\{1C5697DE-18FF-11D8-87C2-9DBFFE39539F}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\DMSCREG.dll". Action Taken: No Action Taken.
    44: Wed Aug 03 07:42:53 2005 => Entry "HKCR\CLSID\{22448882-E0BA-11D0-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\dvswtool.dll". Action Taken: No Action Taken.
    45: Wed Aug 03 07:42:53 2005 => Entry "HKCR\CLSID\{26CBAC92-AEF9-11D4-AE20-00062962801D}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\dvswtool.dll". Action Taken: No Action Taken.
    46: Wed Aug 03 07:42:53 2005 => Entry "HKCR\CLSID\{2733D302-E23B-11D0-8A9D-0000F6921A96}" refers to invalid object "C:\DATEV\PROGRAMM\RZBANKK\rzkrsrvk.dll". Action Taken: No Action Taken.
    47: Wed Aug 03 07:42:53 2005 => Entry "HKCR\CLSID\{2B3CDF42-FB9A-11D1-8212-0000F6961CC9}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    48: Wed Aug 03 07:42:54 2005 => Entry "HKCR\CLSID\{320F5061-2B78-11D2-B096-0000F69617E7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    49: Wed Aug 03 07:42:54 2005 => Entry "HKCR\CLSID\{34173E02-DACA-11D3-AD45-0000F6922AC7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
    50: Wed Aug 03 07:42:54 2005 => Entry "HKCR\CLSID\{35DD7F22-D32E-11D3-AD3C-0000F6922AC7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\dvswtool.dll". Action Taken: No Action Taken.
    51: Wed Aug 03 07:42:55 2005 => Entry "HKCR\CLSID\{3ACBFF1A-8006-4F68-A488-A2AA4208BCD9}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    52: Wed Aug 03 07:42:55 2005 => Entry "HKCR\CLSID\{3D39EA18-281D-11D1-9540-0000F692648B}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\Kamsrv.dll". Action Taken: No Action Taken.
    53: Wed Aug 03 07:42:55 2005 => Entry "HKCR\CLSID\{3E92790A-E616-11D0-96D8-0000F6993123}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\Kamsrv.dll". Action Taken: No Action Taken.
    54: Wed Aug 03 07:42:55 2005 => Entry "HKCR\CLSID\{3EACD543-B19C-11D1-9621-0000F692648B}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\Kamsrv.dll". Action Taken: No Action Taken.
    55: Wed Aug 03 07:42:55 2005 => Entry "HKCR\CLSID\{409A9042-E240-11D0-8A9D-0000F6921A96}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    56: Wed Aug 03 07:42:56 2005 => Entry "HKCR\CLSID\{429E8EC2-E3CE-11D0-8A9D-0000F6921A96}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    57: Wed Aug 03 07:42:57 2005 => Entry "HKCR\CLSID\{4D2E6831-E2FB-11D0-96D8-0000F6993123}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\Kamsrv.dll". Action Taken: No Action Taken.
    58: Wed Aug 03 07:42:57 2005 => Entry "HKCR\CLSID\{50164992-B3B3-11D4-AE23-00062962801D}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\Kamsrv.dll". Action Taken: No Action Taken.
    59: Wed Aug 03 07:42:57 2005 => Entry "HKCR\CLSID\{5042E9B2-84E3-11D1-B7F5-00A024DD24DC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\dvswtool.dll". Action Taken: No Action Taken.
    60: Wed Aug 03 07:42:58 2005 => Entry "HKCR\CLSID\{5A593401-CE74-11D3-8537-0000F69282B7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    61: Wed Aug 03 07:42:58 2005 => Entry "HKCR\CLSID\{5B81A302-97DE-11D1-BD41-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\dvswtool.dll". Action Taken: No Action Taken.
    62: Wed Aug 03 07:42:58 2005 => Entry "HKCR\CLSID\{5BE63E42-E302-11D0-86D1-0000F69611BA}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    63: Wed Aug 03 07:42:58 2005 => Entry "HKCR\CLSID\{5F3E04C3-4612-11D0-A113-00A024B50363}" refers to invalid object "C:\PROGRA~1\GEMEIN~1\IRAREG.DLL". Action Taken: No Action Taken.
    64: Wed Aug 03 07:42:58 2005 => Entry "HKCR\CLSID\{5F3E04C4-4612-11D0-A113-00A024B50363}" refers to invalid object "C:\PROGRA~1\GEMEIN~1\IRAMDMTR.DLL". Action Taken: No Action Taken.
    65: Wed Aug 03 07:42:58 2005 => Entry "HKCR\CLSID\{5F3E04C6-4612-11D0-A113-00A024B50363}" refers to invalid object "C:\PROGRA~1\GEMEIN~1\IRAREG.DLL". Action Taken: No Action Taken.
    66: Wed Aug 03 07:42:59 2005 => Entry "HKCR\CLSID\{61BD5872-13A6-11D1-9527-0000F692648B}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
    67: Wed Aug 03 07:42:59 2005 => Entry "HKCR\CLSID\{61E3A204-6567-11D1-96E1-0000F6993123}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\Kamsrv.dll". Action Taken: No Action Taken.
    68: Wed Aug 03 07:42:59 2005 => Entry "HKCR\CLSID\{649D583D-3401-11D1-8C47-0080C7C43E7F}" refers to invalid object "C:\Programme\Office2K\Office\1031\WFXRSTRZ.DL L". Action Taken: No Action Taken.
    69: Wed Aug 03 07:42:59 2005 => Entry "HKCR\CLSID\{6993B042-7320-11D2-8506-0000F69282B7}" refers to invalid object "C:\DATEV\PROGRAMM\RZBANKK\rzkrsrvk.dll". Action Taken: No Action Taken.
    70: Wed Aug 03 07:42:59 2005 => Entry "HKCR\CLSID\{69E5414B-B371-11D0-BCD9-00AA00C1AB1C}" refers to invalid object "C:\Programme\Microsoft Office\Office\addins\activeex.dll". Action Taken: No Action Taken.
    71: Wed Aug 03 07:42:59 2005 => Entry "HKCR\CLSID\{69E5414D-B371-11D0-BCD9-00AA00C1AB1C}" refers to invalid object "C:\Programme\Microsoft Office\Office\addins\activeex.dll". Action Taken: No Action Taken.
    72: Wed Aug 03 07:42:59 2005 => Entry "HKCR\CLSID\{69E5414F-B371-11D0-BCD9-00AA00C1AB1C}" refers to invalid object "C:\Programme\Microsoft Office\Office\addins\activeex.dll". Action Taken: No Action Taken.
    73: Wed Aug 03 07:42:59 2005 => Entry "HKCR\CLSID\{6B019041-AD17-11D1-961E-0000F692648B}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\Kamsrv.dll". Action Taken: No Action Taken.
    74: Wed Aug 03 07:42:59 2005 => Entry "HKCR\CLSID\{6B5348A2-E3CF-11D0-8A9D-0000F6921A96}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    75: Wed Aug 03 07:43:01 2005 => Entry "HKCR\CLSID\{76021F22-E261-11D0-8A9D-0000F6921A96}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    76: Wed Aug 03 07:43:01 2005 => Entry "HKCR\CLSID\{7D20A962-3339-11D1-98C2-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    77: Wed Aug 03 07:43:01 2005 => Entry "HKCR\CLSID\{7D449122-2A9E-11D1-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
    78: Wed Aug 03 07:43:01 2005 => Entry "HKCR\CLSID\{7D449125-2A9E-11D1-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
    79: Wed Aug 03 07:43:01 2005 => Entry "HKCR\CLSID\{7D449128-2A9E-11D1-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
    80: Wed Aug 03 07:43:01 2005 => Entry "HKCR\CLSID\{7D44912B-2A9E-11D1-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
    81: Wed Aug 03 07:43:01 2005 => Entry "HKCR\CLSID\{7E4FA801-6512-11CF-B488-0000F69617E7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    82: Wed Aug 03 07:43:02 2005 => Entry "HKCR\CLSID\{88D87E22-E32C-11D0-98BD-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
    83: Wed Aug 03 07:43:02 2005 => Entry "HKCR\CLSID\{88D87E24-E32C-11D0-98BD-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
    84: Wed Aug 03 07:43:02 2005 => Entry "HKCR\CLSID\{88D87E26-E32C-11D0-98BD-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    85: Wed Aug 03 07:43:02 2005 => Entry "HKCR\CLSID\{88D87E28-E32C-11D0-98BD-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    86: Wed Aug 03 07:43:02 2005 => Entry "HKCR\CLSID\{88D87E2A-E32C-11D0-98BD-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    87: Wed Aug 03 07:43:02 2005 => Entry "HKCR\CLSID\{88D87E2C-E32C-11D0-98BD-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    88: Wed Aug 03 07:43:02 2005 => Entry "HKCR\CLSID\{88D87E2E-E32C-11D0-98BD-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    89: Wed Aug 03 07:43:02 2005 => Entry "HKCR\CLSID\{88D87E30-E32C-11D0-98BD-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    90: Wed Aug 03 07:43:02 2005 => Entry "HKCR\CLSID\{88D87E32-E32C-11D0-98BD-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    91: Wed Aug 03 07:43:02 2005 => Entry "HKCR\CLSID\{88D87E34-E32C-11D0-98BD-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    92: Wed Aug 03 07:43:02 2005 => Entry "HKCR\CLSID\{88D87E36-E32C-11D0-98BD-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    93: Wed Aug 03 07:43:02 2005 => Entry "HKCR\CLSID\{88D87E38-E32C-11D0-98BD-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    94: Wed Aug 03 07:43:02 2005 => Entry "HKCR\CLSID\{88D87E3A-E32C-11D0-98BD-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    95: Wed Aug 03 07:43:02 2005 => Entry "HKCR\CLSID\{8D504EA3-E300-11D0-B07E-0000F69617E7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    96: Wed Aug 03 07:43:02 2005 => Entry "HKCR\CLSID\{8D504EA6-E300-11D0-B07E-0000F69617E7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    97: Wed Aug 03 07:43:02 2005 => Entry "HKCR\CLSID\{8D504EA8-E300-11D0-B07E-0000F69617E7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    98: Wed Aug 03 07:43:03 2005 => Entry "HKCR\CLSID\{8D504EAB-E300-11D0-B07E-0000F69617E7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    99: Wed Aug 03 07:43:03 2005 => Entry "HKCR\CLSID\{8D504EAE-E300-11D0-B07E-0000F69617E7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    100: Wed Aug 03 07:43:03 2005 => Entry "HKCR\CLSID\{96F6CAE2-E258-11D0-8A9D-0000F6921A96}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    101: Wed Aug 03 07:43:04 2005 => Entry "HKCR\CLSID\{99180163-DA16-101A-935C-444553540000}" refers to invalid object "recncl.dll". Action Taken: No Action Taken.
    102: Wed Aug 03 07:43:04 2005 => Entry "HKCR\CLSID\{99735721-BFD4-11D1-98C7-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    103: Wed Aug 03 07:43:04 2005 => Entry "HKCR\CLSID\{9A7905E5-9BBA-11D1-8212-0000F6961CC9}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    104: Wed Aug 03 07:43:04 2005 => Entry "HKCR\CLSID\{A2A1C302-E30B-11D0-820F-0000F6961CC9}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    105: Wed Aug 03 07:43:04 2005 => Entry "HKCR\CLSID\{A2A1C304-E30B-11D0-820F-0000F6961CC9}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    106: Wed Aug 03 07:43:04 2005 => Entry "HKCR\CLSID\{A2A1C306-E30B-11D0-820F-0000F6961CC9}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    107: Wed Aug 03 07:43:04 2005 => Entry "HKCR\CLSID\{A2A1C308-E30B-11D0-820F-0000F6961CC9}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    108: Wed Aug 03 07:43:04 2005 => Entry "HKCR\CLSID\{A2A1C30A-E30B-11D0-820F-0000F6961CC9}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    109: Wed Aug 03 07:43:04 2005 => Entry "HKCR\CLSID\{A2A1C30C-E30B-11D0-820F-0000F6961CC9}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    110: Wed Aug 03 07:43:04 2005 => Entry "HKCR\CLSID\{A2A1C30E-E30B-11D0-820F-0000F6961CC9}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    111: Wed Aug 03 07:43:04 2005 => Entry "HKCR\CLSID\{A30BB0C1-E2FD-11D0-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
    112: Wed Aug 03 07:43:04 2005 => Entry "HKCR\CLSID\{A30BB0C3-E2FD-11D0-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    113: Wed Aug 03 07:43:04 2005 => Entry "HKCR\CLSID\{A30BB0C5-E2FD-11D0-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
    114: Wed Aug 03 07:43:04 2005 => Entry "HKCR\CLSID\{A30BB0C7-E2FD-11D0-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
    115: Wed Aug 03 07:43:04 2005 => Entry "HKCR\CLSID\{A30BB0C9-E2FD-11D0-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
    116: Wed Aug 03 07:43:04 2005 => Entry "HKCR\CLSID\{A4845882-333F-11D0-B724-00AA0062CBB7}" refers to invalid object "C:\WINNT\System32\WBEM\WBEMSTUB.DLL". Action Taken: No Action Taken.
    117: Wed Aug 03 07:43:04 2005 => Entry "HKCR\CLSID\{A4AE854A-93CB-11D1-96E1-0000F6993123}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    118: Wed Aug 03 07:43:05 2005 => Entry "HKCR\CLSID\{A65BCA81-E31B-11D0-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
    119: Wed Aug 03 07:43:05 2005 => Entry "HKCR\CLSID\{A94BBF22-72D1-11D1-96E1-0000F6993123}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\zdsrvk.dll". Action Taken: No Action Taken.
    120: Wed Aug 03 07:43:05 2005 => Entry "HKCR\CLSID\{A94BBF24-72D1-11D1-96E1-0000F6993123}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\zdsrvk.dll". Action Taken: No Action Taken.
    121: Wed Aug 03 07:43:05 2005 => Entry "HKCR\CLSID\{A9D3DFC2-E1A6-11D0-8A9D-0000F6921A96}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\Kamsrv.dll". Action Taken: No Action Taken.
    122: Wed Aug 03 07:43:05 2005 => Entry "HKCR\CLSID\{AB481080-796C-11D0-A113-00A024B50363}" refers to invalid object "C:\PROGRA~1\GEMEIN~1\IRAABOUT.DLL". Action Taken: No Action Taken.
    123: Wed Aug 03 07:43:05 2005 => Entry "HKCR\CLSID\{AE50C901-78D9-11CF-ACE4-10005ADB0E7F}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
    124: Wed Aug 03 07:43:05 2005 => Entry "HKCR\CLSID\{B0693766-5278-4ec6-B9E1-3CE40560EF5A}" refers to invalid object "CaPlgin.ax". Action Taken: No Action Taken.
    125: Wed Aug 03 07:43:05 2005 => Entry "HKCR\CLSID\{B0E5DEC2-E3CD-11D0-8A9D-0000F6921A96}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    126: Wed Aug 03 07:43:06 2005 => Entry "HKCR\CLSID\{B2880995-7066-11D1-BD33-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    127: Wed Aug 03 07:43:06 2005 => Entry "HKCR\CLSID\{B3587787-284C-11D1-96DF-0000F6993123}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\Kamsrv.dll". Action Taken: No Action Taken.
    128: Wed Aug 03 07:43:06 2005 => Entry "HKCR\CLSID\{B928DE02-0C3C-11D2-98C8-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    129: Wed Aug 03 07:43:06 2005 => Entry "HKCR\CLSID\{BC505CC2-E262-11D0-8A9D-0000F6921A96}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    130: Wed Aug 03 07:43:07 2005 => Entry "HKCR\CLSID\{BD85D542-F165-11D0-98BD-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    131: Wed Aug 03 07:43:07 2005 => Entry "HKCR\CLSID\{C1172D01-751C-11D0-B6CF-00A024BF23EF}" refers to invalid object "C:\PROGRA~1\GEMEIN~1\IRASRIAL.DLL". Action Taken: No Action Taken.
    132: Wed Aug 03 07:43:07 2005 => Entry "HKCR\CLSID\{C42054F4-F9EB-11D0-9508-0000F692648B}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\krwimprt.dll". Action Taken: No Action Taken.
    133: Wed Aug 03 07:43:07 2005 => Entry "HKCR\CLSID\{C4D97602-1229-11D1-8A9D-0000F6921A96}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\Kamsrv.dll". Action Taken: No Action Taken.
    134: Wed Aug 03 07:43:08 2005 => Entry "HKCR\CLSID\{C90F10E2-E23B-11D0-8A9D-0000F6921A96}" refers to invalid object "C:\DATEV\PROGRAMM\RZBANKK\rzkrsrvk.dll". Action Taken: No Action Taken.
    135: Wed Aug 03 07:43:08 2005 => Entry "HKCR\CLSID\{C90F10E4-E23B-11D0-8A9D-0000F6921A96}" refers to invalid object "C:\DATEV\PROGRAMM\RZBANKK\rzkrsrvk.dll". Action Taken: No Action Taken.
    136: Wed Aug 03 07:43:08 2005 => Entry "HKCR\CLSID\{C9C6F9E2-E325-11D0-B07E-0000F69617E7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    137: Wed Aug 03 07:43:08 2005 => Entry "HKCR\CLSID\{CCC24ED2-0EFE-11D1-9523-0000F692648B}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\dvswtool.dll". Action Taken: No Action Taken.
    138: Wed Aug 03 07:43:08 2005 => Entry "HKCR\CLSID\{CCDD9080-8100-11D0-B6CF-00A024BF23EF}" refers to invalid object "C:\PROGRA~1\GEMEIN~1\IRALPTTR.DLL". Action Taken: No Action Taken.
    139: Wed Aug 03 07:43:08 2005 => Entry "HKCR\CLSID\{CD6D39C2-E3CE-11D0-8A9D-0000F6921A96}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    140: Wed Aug 03 07:43:08 2005 => Entry "HKCR\CLSID\{D16A9922-1EF5-11D1-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
    141: Wed Aug 03 07:43:09 2005 => Entry "HKCR\CLSID\{D94F5A61-17B9-11D1-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
    142: Wed Aug 03 07:43:09 2005 => Entry "HKCR\CLSID\{D94F5A63-17B9-11D1-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
    143: Wed Aug 03 07:43:09 2005 => Entry "HKCR\CLSID\{D94F5A65-17B9-11D1-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
    144: Wed Aug 03 07:43:09 2005 => Entry "HKCR\CLSID\{D94F5A67-17B9-11D1-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
    145: Wed Aug 03 07:43:09 2005 => Entry "HKCR\CLSID\{D94F5A69-17B9-11D1-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
    146: Wed Aug 03 07:43:09 2005 => Entry "HKCR\CLSID\{DA6A85E0-05C7-11D1-B243-006097CAD7E2}" refers to invalid object "C:\PROGRA~1\GEMEIN~1\IRAABOUT.DLL". Action Taken: No Action Taken.
    147: Wed Aug 03 07:43:09 2005 => Entry "HKCR\CLSID\{DA948B92-9AB0-11D5-AF28-00062962801D}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\dvswtool.dll". Action Taken: No Action Taken.
    148: Wed Aug 03 07:43:09 2005 => Entry "HKCR\CLSID\{DB42E5A4-3311-11D1-954E-0000F692648B}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\Kamsrv.dll". Action Taken: No Action Taken.
    149: Wed Aug 03 07:43:09 2005 => Entry "HKCR\CLSID\{DBAFCD22-2035-11D1-9537-0000F692648B}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\Kamsrv.dll". Action Taken: No Action Taken.
    150: Wed Aug 03 07:43:10 2005 => Entry "HKCR\CLSID\{E07D3492-32B5-11D0-B724-00AA0062CBB7}" refers to invalid object "C:\WINNT\System32\WBEM\WBEMSTUB.DLL". Action Taken: No Action Taken.
    151: Wed Aug 03 07:43:10 2005 => Entry "HKCR\CLSID\{E4A3AAA9-BB30-11D0-89D6-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\dvswtool.dll". Action Taken: No Action Taken.
    152: Wed Aug 03 07:43:10 2005 => Entry "HKCR\CLSID\{E4A5F6A2-E3D7-11D0-AC7B-444553540000}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    153: Wed Aug 03 07:43:10 2005 => Entry "HKCR\CLSID\{E4A5F6A4-E3D7-11D0-AC7B-444553540000}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    154: Wed Aug 03 07:43:10 2005 => Entry "HKCR\CLSID\{E5B42981-67DC-11D0-8547-00A0240B50F0}" refers to invalid object "C:\PROGRA~1\GEMEIN~1\IRAWEBTR.DLL". Action Taken: No Action Taken.
    155: Wed Aug 03 07:43:10 2005 => Entry "HKCR\CLSID\{E8D83F00-CD78-11D0-B4D3-00A024BF23EF}" refers to invalid object "C:\PROGRA~1\GEMEIN~1\IRAABOUT.DLL". Action Taken: No Action Taken.
    156: Wed Aug 03 07:43:10 2005 => Entry "HKCR\CLSID\{E99606E1-E257-11D0-8A9D-0000F6921A96}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    157: Wed Aug 03 07:43:11 2005 => Entry "HKCR\CLSID\{EB2197C2-E33A-11D0-98BD-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\imexprtk.dll". Action Taken: No Action Taken.
    158: Wed Aug 03 07:43:11 2005 => Entry "HKCR\CLSID\{EC626447-BF38-11D1-98C7-0000F6961DD7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    159: Wed Aug 03 07:43:11 2005 => Entry "HKCR\CLSID\{ED41D8C2-72CE-11D1-820F-0000F6961CC9}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    160: Wed Aug 03 07:43:11 2005 => Entry "HKCR\CLSID\{EDE680C2-E311-11D0-820F-0000F6961CC9}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    161: Wed Aug 03 07:43:11 2005 => Entry "HKCR\CLSID\{EF0FDA22-F2AA-11D0-96D8-0000F6993123}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    162: Wed Aug 03 07:43:11 2005 => Entry "HKCR\CLSID\{EFF9308E-6650-11D5-AAF9-006094B9DE44}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    163: Wed Aug 03 07:43:11 2005 => Entry "HKCR\CLSID\{F1A66687-3C20-11D2-AC7E-0000F6960922}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    164: Wed Aug 03 07:43:12 2005 => Entry "HKCR\CLSID\{F41FD421-DD5D-11D3-8537-0000F69282B7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\Kamsrv.dll". Action Taken: No Action Taken.
    165: Wed Aug 03 07:43:12 2005 => Entry "HKCR\CLSID\{F42355C3-0B3E-11D2-84E7-0000F69282B7}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    166: Wed Aug 03 07:43:12 2005 => Entry "HKCR\CLSID\{F46D8CE3-E3CF-11D0-8A9D-0000F6921A96}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    167: Wed Aug 03 07:43:12 2005 => Entry "HKCR\CLSID\{F8B5F142-60DC-11D1-89D7-0000F69973AC}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\dvswtool.dll". Action Taken: No Action Taken.
    168: Wed Aug 03 07:43:13 2005 => Entry "HKCR\CLSID\{FE4F1242-F79F-11D0-96D8-0000F6993123}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\Kamsrv.dll". Action Taken: No Action Taken.
    169: Wed Aug 03 07:43:13 2005 => Entry "HKCR\CLSID\{FEA8E5A0-66D0-11D5-AEF5-00062962801D}" refers to invalid object "C:\DATEV\PROGRAMM\KTOMAN\belsrvk.dll". Action Taken: No Action Taken.
    170: Wed Aug 03 07:43:17 2005 => Entry "HKCR\ComPlusMetaData.MsCorHost" refers to invalid object "{727CDF4F-3BA0-11D3-8738-00C04F79ED0D}". Action Taken: No Action Taken.
    171: Wed Aug 03 07:43:17 2005 => Entry "HKCR\ComPlusMetaData.MsCorHost.2" refers to invalid object "{727CDF4F-3BA0-11D3-8738-00C04F79ED0D}". Action Taken: No Action Taken.
    172: Wed Aug 03 07:43:25 2005 => Entry "HKCR\Dvbstd_VCard.DvbstdVCards" refers to invalid object "{28822135-E5D7-11D3-B765-00104BD962AC}". Action Taken: No Action Taken.
    173: Wed Aug 03 07:43:25 2005 => Entry "HKCR\Dvbstd_VCard.DvbstdVCards.1" refers to invalid object "{28822135-E5D7-11D3-B765-00104BD962AC}". Action Taken: No Action Taken.
    174: Wed Aug 03 07:43:30 2005 => Entry "HKCR\KAMAI.LwPfadAuswahl" refers to invalid object "{A5EAE34E-FAE7-11D6-87C2-C2129424652F}". Action Taken: No Action Taken.
    175: Wed Aug 03 07:43:37 2005 => Entry "HKCR\SymWriter.pdb" refers to invalid object "{520DC67A-752E-11D3-8D56-00C04F680B2B}". Action Taken: No Action Taken.
    176: Wed Aug 03 08:28:51 2005 => Result: ERROR!!! File C:\DATEV\PROGRAMM\KOST\Muster\EI-Muster-Bau- und Ausbau SKR 03-28975-3000-1.Z is Not Scanned
    177: Wed Aug 03 08:29:03 2005 => Result: ERROR!!! File C:\DATEV\PROGRAMM\KOST\Muster\EI-Muster-Bau- und Ausbau SKR 04-28975-4000-1.Z is Not Scanned
    178: Wed Aug 03 08:29:16 2005 => Result: ERROR!!! File C:\DATEV\PROGRAMM\KOST\Muster\EI-Muster-KommBZAbr-28097-2010-1.Z is Not Scanned
    179: Wed Aug 03 08:29:29 2005 => Result: ERROR!!! File C:\DATEV\PROGRAMM\KOST\Muster\EI-Muster-KommErfÜ-28097-2010-2.Z is Not Scanned
    180: Wed Aug 03 08:29:52 2005 => Result: ERROR!!! File C:\DATEV\PROGRAMM\KOST\Muster\EI-Muster-Kost KG-28107-11111-1.Z is Not Scanned
    181: Wed Aug 03 08:30:04 2005 => Result: ERROR!!! File C:\DATEV\PROGRAMM\KOST\Muster\EI-Muster-PBV-gemischte Einrichtungen-28948-30345-1.Z is Not Scanned
    182: Wed Aug 03 08:30:16 2005 => Result: ERROR!!! File C:\DATEV\PROGRAMM\KOST\Muster\EI-Muster-Vereine-29100-287-1.Z is Not Scanned
    183: Wed Aug 03 08:30:40 2005 => Result: ERROR!!! File C:\DATEV\PROGRAMM\KOST\Muster\EI-Musterholz GmbH-29098-271-6.Z is Not Scanned
    184: Wed Aug 03 08:31:02 2005 => Result: ERROR!!! File C:\DATEV\PROGRAMM\KOST\Muster\EI-Musterholz GmbH-29098-271-9.Z is Not Scanned
    185: Wed Aug 03 08:31:25 2005 => Result: ERROR!!! File C:\DATEV\PROGRAMM\KOST\Muster\EI-Testholz SKR 04-29098-40271-5.Z is Not Scanned

    --------------------------------------------------
    -------- DATEIEN ZUM LÖSCHEN HINZUGEFÜGT ---------
    --------------------------------------------------

    1: C:\WINNT\system32\GoGo9CP.dll => Trojan-Dropper.Win32.Small.so
    2: C:\WINNT\system32\xcpegcaz.dll => Trojan-Dropper.Win32.Agent.fu
    3: C:\hijackthis\backups\backup-20050801-094305-636.dll => Trojan-Dropper.Win32.Agent.fu

    --------------------------------------------------
    -------------------- Statistik -------------------
    --------------------------------------------------

    Wed Aug 03 12:23:33 2005 => Total Objects Scanned: 72587
    Wed Aug 03 12:23:33 2005 => Total Virus(es) Found: 15
    Wed Aug 03 12:23:33 2005 => Total Errors: 185
    Wed Aug 03 12:23:33 2005 => Virus Database Date: 2005/08/03
    Wed Aug 03 12:23:33 2005 => Virus Database Count: 141721


    Wie geht es weiter ist ja doch noch einiges drauf ^^

  12. #12
    Avatar von
    Themen Starter

    Standard

    Man du hast ja voll das Chaos...

    Hast du schon mal an eine Neuinstallation gedacht?

  13. #13
    Avatar von computerdirk
    computerdirk ist offline

    Title
    Benutzer
    seit
    07.01.2005
    Ort
    Ilsede
    Beiträge
    12.171

    Standard

    Hallöchen,

    da ist das einzigste was vernüftig wäre eine Neuinstallation. Vorher alle Daten und Einstellungen sichern... Nach der Windows-Installation den Rechner vernünftig absichern und erst dann online gehen...

  14. #14
    Avatar von
    Themen Starter

    Standard

    mist
    ich hatte gehofft um eine neuinstallation rum zukommen
    weil es doch schon sehr zeit intensiv wäre die ganzen DATEV programme zuinstallieren kann man da nix anderes versuchen ?
    Habe von viren ka also bitte ein kruzes feadback

    MFG KingHeinz

  15. #15
    Avatar von computerdirk
    computerdirk ist offline

    Title
    Benutzer
    seit
    07.01.2005
    Ort
    Ilsede
    Beiträge
    12.171

    Standard

    Hallöchen,

    da du auf dem Rechner die Datev-Programme installiert hast, scheint es ja ein Rechner zu sein der auch beruflich genutzt wird. Da ist natürlich Datensicherheit unbedingt nötig... Durch den Virenbefall ist die Sicherheit der Daten natürlich nicht mehr gewährleistet.

    Wenn du die Neuinstallation ubedingt vermeiden möchtest, könntest du den Rechner im abgesicherten Modus starten und dort ein aktuelles Antivirenprogramm laufen lassen. Möglicherweise wird ein großer Teil der Viren bereits bereinigt... Anschließend, ebenfalls noch im abgesicherten Modus, einen SCan mit einer aktuellen Version von Ad-aware oder spybot Search & Destroy durchführen...

  16. #16
    Avatar von
    Themen Starter

    Standard

    jo danke ich werde es mal versuchen ansonsten heißt es überstunden ^^
    und neu aufsetzen
    danke schonmal für eure hilfe werde nochmal hier posten ob er was gefunden hat im abgesicherten modus

    MFG KingHeinz

  17. #17
    Avatar von
    Themen Starter

    Standard

    Alle klar... und kein Problem.

    Sag dann mal bescheid.

Ähnliche Themen

  1. Antworten: 5
    Letzter Beitrag: 19.11.2010, 07:42
  2. Logfile

    Von suse im Forum Antivirus und PC Sicherheit
    Antworten: 1
    Letzter Beitrag: 22.08.2010, 18:53
  3. Mein Zweit festplatte erkennt mein PC nicht

    Von spasstrinker im Forum Festplatten und Laufwerke
    Antworten: 5
    Letzter Beitrag: 19.12.2009, 11:46
  4. Mein HiJackThis LogFile

    Von ollixtc im Forum Antivirus und PC Sicherheit
    Antworten: 2
    Letzter Beitrag: 23.11.2007, 00:40
  5. Mein Hijackthis Logfile

    Von jan im Forum Antivirus und PC Sicherheit
    Antworten: 4
    Letzter Beitrag: 27.10.2006, 08:56

Benutzer, die dieses Thema gelesen haben: 0

Derzeit gibt es keine Benutzer zum Anzeigen.
Diese Seite benutzt Cookies Durch die weitere Nutzung der Seite stimmen Sie der Verwendung von Cookies zu. Infos zum Datenschutz