| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Probleme mit avp.exeWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
| |
07.03.2008, 21:43
| #1 |
 |  Probleme mit avp.exe wenn ich www.virustotal.com.de eingebe kommt nur seitenfehler  |
|
07.03.2008, 21:45
| #2 |
| | Probleme mit avp.exe *Deinstalliere die Askbar, die hat nen zweifelhaften Ruf *
__________________wie mach ich das |
|
07.03.2008, 21:47
| #3 | |
| /// TB-Ausbilder     | Probleme mit avp.exe Start->Systemsteuerung->Software und da die Askbar entfernen.
__________________Danach den Ordner: Zitat:
lg myrtille |
|
07.03.2008, 21:56
| #4 |
| | Probleme mit avp.exe ok askbar gelöscht... hieß bei mir ask toolbar... Richtig??? Also in msconfig hatte ich eig nix geändert außer das ich nach einer beschreibung wie man in den abgesicherten modus kommt, bei BOOT.INI ein haken bei /SAFEBOOT gemacht hatte, hab den aba nach den kläglichen versuchen wieder rausgenommen... Das andere was du mir aufgetragen hast mache ich jetz |
|
07.03.2008, 21:58
| #5 |
| /// TB-Ausbilder | Probleme mit avp.exe Toolbar ist richtig. Eine schöne Anleitung wie du ohne MsConfig in den abgesicherten Modus kommst, gibt es hier: http://www.trojaner-board.de/63335-windows-abgesicherten-modus-starten.html]klick[/url] Oder wolltest du mit "safeboot" etwas anderes erreichen? lg myrtille |
|
07.03.2008, 22:00
| #6 |
| | Probleme mit avp.exe ne ich weiss net man hatte mir da nur geraten das ich in den abgesicherten modus mal kaspersky laufen lassen soll, aba es hat net geklappt da mein rechner nie so weit hochgefahren hat, der hat sich dann von alleine imma ausgeschaltet...  |
|
07.03.2008, 22:06
| #7 |
| | Probleme mit avp.exe Verzeichnis von C:\ 07.03.2008 21:50 1.600.638.976 hiberfil.sys 07.03.2008 21:50 1.572.864.000 pagefile.sys 07.03.2008 21:49 225 boot.ini 07.03.2008 15:50 4.654 rapport.txt 27.01.2008 18:26 235.467 DeviceLink.log 27.01.2008 18:24 0 debugSTD.txt 11.10.2007 17:34 8.553 crashAddress.txt 20.12.2006 11:01 0 MSDOS.SYS 20.12.2006 11:01 0 IO.SYS 07.11.2006 20:38 32 VDFS.DMP 18.05.2006 21:52 780 Patch.rev 17.05.2006 14:34 77 Preload.rev 17.05.2006 14:34 77 preload.aaa 17.05.2006 14:21 791 IPH.PH 05.07.2005 07:48 167 bcmwl5.log 05.07.2005 07:45 4 wps.dat 13.09.2004 12:14 512 BOOTSECT.DOS 04.08.2004 05:00 4.952 bootfont.bin 04.08.2004 05:00 47.564 NTDETECT.COM 04.08.2004 05:00 251.184 ntldr 20 Datei(en) 3.174.058.015 Bytes 0 Verzeichnis(se), 6.737.133.568 Bytes frei |
|
08.03.2008, 12:21
| #8 |
| | Probleme mit avp.exe "Silent Runners.vbs", revision 56, http://www.silentrunners.org/ Operating System: Windows XP SP2 Output limited to non-default values, except where indicated by "{++}" Startup items buried in registry: --------------------------------- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++} "preload" = "C:\Windows\RUNXMLPL.exe" ["Wistron"] "igfxpers" = "C:\WINDOWS\system32\igfxpers.exe" ["Intel Corporation"] "igfxhkcmd" = "C:\WINDOWS\system32\hkcmd.exe" ["Intel Corporation"] "AVP" = ""C:\Programme\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe"" ["Kaspersky Lab"] "SoundMan" = "SOUNDMAN.EXE" ["Realtek Semiconductor Corp."] "epm-dm" = "c:\acer\Empowering Technology\ePower\epm-dm.exe" ["Acer Inc"] "MSConfig" = "C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto" [MS] HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\ >{881dd1c5-3dcf-431b-b061-f3f88e8be88a}\(Default) = "Outlook Express" \StubPath = "C:\WINDOWS\system32\shmgrate.exe OCInstallUserConfigOE" [MS] {8b15971b-5355-4c82-8c07-7e181ea07608}\(Default) = "Fax" \StubPath = "rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\fxsocm.inf,Fax.UnInstall.PerUser" [MS] {94de52c8-2d59-4f1b-883e-79663d2d9a8c}\(Default) = "Fax Provider" \StubPath = "rundll32.exe C:\WINDOWS\system32\Setup\FxsOcm.dll,XP_UninstallProvider" [MS] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ {055FD26D-3A88-4e15-963D-DC8493744B1D}\(Default) = "XTTBPos00" -> {HKLM...CLSID} = "XTTBPos00 Class" \InProcServer32\(Default) = "C:\PROGRA~1\ICQTOO~1\toolbaru.dll" ["IE Toolbar"] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = (no title provided) -> {HKLM...CLSID} = "Adobe PDF Reader Link Helper" \InProcServer32\(Default) = "C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll" ["Adobe Systems Incorporated"] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\(Default) = (no title provided) -> {HKLM...CLSID} = "SSVHelper Class" \InProcServer32\(Default) = "C:\Programme\Java\jre1.6.0_02\bin\ssv.dll" ["Sun Microsystems, Inc."] {AA58ED58-01DD-4d91-8333-CF10577473F7}\(Default) = (no title provided) -> {HKLM...CLSID} = "Google Toolbar Helper" \InProcServer32\(Default) = "c:\programme\google\googletoolbar1.dll" ["Google Germany GmbH"] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\ "{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "CPL-Erweiterung für Anzeigeverschiebung" -> {HKLM...CLSID} = "CPL-Erweiterung für Anzeigeverschiebung" \InProcServer32\(Default) = "deskpan.dll" [file not found] "{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Erweiterung für HyperTerminal-Icons" -> {HKLM...CLSID} = "HyperTerminal Icon Ext" \InProcServer32\(Default) = "C:\WINDOWS\system32\hticons.dll" ["Hilgraeve, Inc."] "{2b45bd21-71f8-4c8c-a87a-7eeb25a1a3e0}" = "EPM-PO Shell Extension" -> {HKLM...CLSID} = "EPM-PO Shell Extensions" \InProcServer32\(Default) = "epm-po.dll" ["Acer Labs USA"] "{EFA24E62-B078-11d0-89E4-00C04FC9E26E}" = "History Band" -> {HKLM...CLSID} = "History Band" \InProcServer32\(Default) = "C:\WINDOWS\system32\shdocvw.dll" [MS] "{73B24247-042E-4EF5-ADC2-42F62E6FD654}" = "ICQ Lite Shell Extension" -> {HKLM...CLSID} = "MCLiteShellExt Class" \InProcServer32\(Default) = "C:\Programme\ICQLite\ICQLiteShell.dll" [empty string] "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "D:\Programme\WinRAR\rarext.dll" [null data] "{85E0B171-04FA-11D1-B7DA-00A0C90348D6}" = "Statistik für Web-Anti-Virus" -> {HKLM...CLSID} = "Statistik für Web-Anti-Virus" \InProcServer32\(Default) = "C:\Programme\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll" ["Kaspersky Lab"] "{44440D00-FF19-4AFC-B765-9A0970567D97}" = "TuneUp Theme Extension" -> {HKLM...CLSID} = "TuneUp Theme Extension" \InProcServer32\(Default) = "C:\WINDOWS\System32\uxtuneup.dll" ["TuneUp Software GmbH"] "{4858E7D9-8E12-45a3-B6A3-1CD128C9D403}" = "TuneUp Shredder Shell Extension" -> {HKLM...CLSID} = "TuneUp Shredder Shell Extension" \InProcServer32\(Default) = "C:\Programme\TuneUp Utilities 2008\SDShelEx-win32.dll" ["TuneUp Software GmbH"] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\ "WPDShServiceObj" = "{AAA288BA-9A4C-45B0-95D7-94D524869DB5}" -> {HKLM...CLSID} = "WPDShServiceObj Class" \InProcServer32\(Default) = "C:\WINDOWS\system32\WPDShServiceObj.dll" [MS] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ <<!>> igfxcui\DLLName = "igfxdev.dll" ["Intel Corporation"] <<!>> klogon\DLLName = "C:\WINDOWS\system32\klogon.dll" ["Kaspersky Lab"] HKLM\SOFTWARE\Classes\PROTOCOLS\Filter\ <<!>> text/xml\CLSID = "{807553E5-5146-11D5-A672-00B0D022E945}" -> {HKLM...CLSID} = (no title provided) \InProcServer32\(Default) = "C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE11\MSOXMLMF.DLL" [MS] HKLM\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\ {F9DB5320-233E-11D1-9F84-707F02C10627}\(Default) = "PDF Column Info" -> {HKLM...CLSID} = "PDF Shell Extension" \InProcServer32\(Default) = "C:\Programme\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll" ["Adobe Systems, Inc."] HKLM\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\ EDSshellExt\(Default) = "{29FF7AB0-BE34-4992-A30B-53A9D86EE239}" -> {HKLM...CLSID} = "eDSshlExt Class" \InProcServer32\(Default) = "C:\WINDOWS\system32\eDSshellExt.dll" ["HiTRUST"] ICQLiteMenu\(Default) = "{73B24247-042E-4EF5-ADC2-42F62E6FD654}" -> {HKLM...CLSID} = "MCLiteShellExt Class" \InProcServer32\(Default) = "C:\Programme\ICQLite\ICQLiteShell.dll" [empty string] Kaspersky Anti-Virus\(Default) = "{dd230880-495a-11d1-b064-008048ec2fc5}" -> {HKLM...CLSID} = (no title provided) \InProcServer32\(Default) = "C:\Programme\Kaspersky Lab\Kaspersky Internet Security 7.0\ShellEx.dll" ["Kaspersky Lab"] TuneUp Shredder Shell Extension\(Default) = "{4858E7D9-8E12-45a3-B6A3-1CD128C9D403}" -> {HKLM...CLSID} = "TuneUp Shredder Shell Extension" \InProcServer32\(Default) = "C:\Programme\TuneUp Utilities 2008\SDShelEx-win32.dll" ["TuneUp Software GmbH"] WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "D:\Programme\WinRAR\rarext.dll" [null data] HKLM\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\ EDSshellExt\(Default) = "{29FF7AB0-BE34-4992-A30B-53A9D86EE239}" -> {HKLM...CLSID} = "eDSshlExt Class" \InProcServer32\(Default) = "C:\WINDOWS\system32\eDSshellExt.dll" ["HiTRUST"] ICQLiteMenu\(Default) = "{73B24247-042E-4EF5-ADC2-42F62E6FD654}" -> {HKLM...CLSID} = "MCLiteShellExt Class" \InProcServer32\(Default) = "C:\Programme\ICQLite\ICQLiteShell.dll" [empty string] TuneUp Shredder Shell Extension\(Default) = "{4858E7D9-8E12-45a3-B6A3-1CD128C9D403}" -> {HKLM...CLSID} = "TuneUp Shredder Shell Extension" \InProcServer32\(Default) = "C:\Programme\TuneUp Utilities 2008\SDShelEx-win32.dll" ["TuneUp Software GmbH"] WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "D:\Programme\WinRAR\rarext.dll" [null data] HKLM\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\ Kaspersky Anti-Virus\(Default) = "{dd230880-495a-11d1-b064-008048ec2fc5}" -> {HKLM...CLSID} = (no title provided) \InProcServer32\(Default) = "C:\Programme\Kaspersky Lab\Kaspersky Internet Security 7.0\ShellEx.dll" ["Kaspersky Lab"] WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "D:\Programme\WinRAR\rarext.dll" [null data] Group Policies {policy setting}: -------------------------------- Note: detected settings may not have any effect. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\ "shutdownwithoutlogon" = (REG_DWORD) dword:0x00000001 {Shutdown: Allow system to be shut down without having to log on} "undockwithoutlogon" = (REG_DWORD) dword:0x00000001 {Devices: Allow undock without having to log on} Active Desktop and Wallpaper: ----------------------------- Active Desktop may be disabled at this entry: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState Displayed if Active Desktop enabled and wallpaper not set by Group Policy: HKCU\Software\Microsoft\Internet Explorer\Desktop\General\ "Wallpaper" = "C:\WINDOWS\system32\config\systemprofile\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp" Displayed if Active Desktop disabled and wallpaper not set by Group Policy: HKCU\Control Panel\Desktop\ "Wallpaper" = "C:\Dokumente und Einstellungen\Sebastian\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp" Enabled Screen Saver: --------------------- HKCU\Control Panel\Desktop\ "SCRNSAVE.EXE" = "C:\WINDOWS\system32\scrnsave.scr" [MS] Enabled Scheduled Tasks: ------------------------ "Norton Security Scan" -> launches: "C:\Programme\Norton Security Scan\Nss.exe /scan-full /scheduled" ["Symantec Corporation"] "1-Klick-Wartung" -> launches: "C:\Programme\TuneUp Utilities 2008\OneClickStarter.exe /schedulestart" [null data] Winsock2 Service Provider DLLs: ------------------------------- Namespace Service Providers HKLM\SYSTEM\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++} 000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS] 000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS] 000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS] Transport Service Providers HKLM\SYSTEM\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++} 0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range: %SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 13 %SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05 Toolbars, Explorer Bars, Extensions: ------------------------------------ Toolbars HKCU\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\ "{5CBE3B7C-1E47-477E-A7DD-396DB0476E29}" -> {HKLM...CLSID} = "Acer eDataSecurity Management" \InProcServer32\(Default) = "C:\WINDOWS\system32\eDStoolbar.dll" ["HiTRUST"] HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\ "{855F3B16-6D32-4FE6-8A56-BBB695989046}" -> {HKLM...CLSID} = "ICQ Toolbar" \InProcServer32\(Default) = "C:\PROGRA~1\ICQTOO~1\toolbaru.dll" ["IE Toolbar"] "{2318C2B1-4965-11D4-9B18-009027A5CD4F}" -> {HKLM...CLSID} = "&Google" \InProcServer32\(Default) = "c:\programme\google\googletoolbar1.dll" ["Google Germany GmbH"] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\ "{5CBE3B7C-1E47-477E-A7DD-396DB0476E29}" = (no title provided) -> {HKLM...CLSID} = "Acer eDataSecurity Management" \InProcServer32\(Default) = "C:\WINDOWS\system32\eDStoolbar.dll" ["HiTRUST"] "{855F3B16-6D32-4FE6-8A56-BBB695989046}" = (no title provided) -> {HKLM...CLSID} = "ICQ Toolbar" \InProcServer32\(Default) = "C:\PROGRA~1\ICQTOO~1\toolbaru.dll" ["IE Toolbar"] "{2318C2B1-4965-11D4-9B18-009027A5CD4F}" = (no title provided) -> {HKLM...CLSID} = "&Google" \InProcServer32\(Default) = "c:\programme\google\googletoolbar1.dll" ["Google Germany GmbH"] Explorer Bars HKLM\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\ {FE54FA40-D68C-11D2-98FA-00C0F0318AFE}\(Default) = (no title provided) -> {HKLM...CLSID} = "Real.com" \InProcServer32\(Default) = "C:\WINDOWS\system32\Shdocvw.dll" [MS] HKLM\SOFTWARE\Classes\CLSID\{85E0B171-04FA-11D1-B7DA-00A0C90348D6}\(Default) = "Statistik für Web-Anti-Virus" Implemented Categories\{00021493-0000-0000-C000-000000000046}\ [vertical bar] InProcServer32\(Default) = "C:\Programme\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll" ["Kaspersky Lab"] Extensions (Tools menu items, main toolbar menu buttons) HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\ {08B0E5C0-4FCB-11CF-AAA5-00401C608501}\ "MenuText" = "Sun Java Konsole" "CLSIDExtension" = "{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}" -> {HKCU...CLSID} = "Java Plug-in 1.6.0_02" \InProcServer32\(Default) = "C:\Programme\Java\jre1.6.0_02\bin\ssv.dll" ["Sun Microsystems, Inc."] -> {HKLM...CLSID} = "Java Plug-in 1.6.0_02" \InProcServer32\(Default) = "C:\Programme\Java\jre1.6.0_02\bin\npjpi160_02.dll" ["Sun Microsystems, Inc."] {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E}\ "ButtonText" = "Statistik für Web-Anti-Virus" {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F}\ "ButtonText" = "Mobilen Favoriten erstellen" "CLSIDExtension" = "{2EAF5BB0-070F-11D3-9307-00C04FAE2D4F}" -> {HKLM...CLSID} = "Create Mobile Favorite" \InProcServer32\(Default) = "C:\Programme\Microsoft ActiveSync\inetrepl.dll" [MS] {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F}\ "MenuText" = "Mobilen Favoriten erstellen..." "CLSIDExtension" = "{2EAF5BB0-070F-11D3-9307-00C04FAE2D4F}" -> {HKLM...CLSID} = "Create Mobile Favorite" \InProcServer32\(Default) = "C:\Programme\Microsoft ActiveSync\inetrepl.dll" [MS] {92780B25-18CC-41C8-B9BE-3C9C571A8263}\ "ButtonText" = "Recherchieren" {B863453A-26C3-4E1F-A54D-A2CD196348E9}\ "ButtonText" = "ICQ Lite" "MenuText" = "ICQ Lite" "Exec" = "C:\Programme\ICQLite\ICQLite.exe" [file not found] {CD67F990-D8E9-11D2-98FE-00C0F0318AFE}\ "ButtonText" = "Real.com" {E59EB121-F339-4851-A3BA-FE49C35617C2}\ "ButtonText" = "ICQ6" "MenuText" = "ICQ6" "Exec" = "C:\Programme\ICQ6\ICQ.exe" ["ICQ, Inc."] {FB5F1910-F110-11D2-BB9E-00C04F795683}\ "ButtonText" = "Messenger" "MenuText" = "Windows Messenger" "Exec" = "C:\Programme\Messenger\msmsgs.exe" [MS] Miscellaneous IE Hijack Points ------------------------------ HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\ <<H>> "{855F3B16-6D32-4fe6-8A56-BBB695989046}" = (no title provided) -> {HKLM...CLSID} = "ICQ Toolbar" \InProcServer32\(Default) = "C:\PROGRA~1\ICQTOO~1\toolbaru.dll" ["IE Toolbar"] Running Services (Display Name, Service Name, Path {Service DLL}): ------------------------------------------------------------------ AdminWorks Agent X6, AWService, ""C:\Acer\Empowering Technology\admServ.exe"" ["Avocent Inc."] Cyberlink RichVideo Service(CRVS), RichVideo, ""C:\Programme\CyberLink\Shared Files\RichVideo.exe"" [empty string] Intel(R) PROSet/Wireless Event Log, EvtEng, "C:\Programme\Intel\Wireless\Bin\EvtEng.exe" ["Intel Corporation"] Intel(R) PROSet/Wireless Registry Service, RegSrvc, "C:\Programme\Intel\Wireless\Bin\RegSrvc.exe" ["Intel Corporation"] Intel(R) PROSet/Wireless Service, S24EventMonitor, "C:\Programme\Intel\Wireless\Bin\S24EvMon.exe" ["Intel Corporation "] Kaspersky Internet Security 7.0, AVP, ""C:\Programme\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe" -r" ["Kaspersky Lab"] Machine Debug Manager, MDM, ""C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE"" [MS] TuneUp Designerweiterung, UxTuneUp, "C:\WINDOWS\System32\svchost.exe -k netsvcs" {"C:\WINDOWS\System32\uxtuneup.dll" ["TuneUp Software GmbH"]} Windows Driver Foundation - User-mode Driver Framework, WudfSvc, "C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup" {"C:\WINDOWS\System32\WUDFSvc.dll" [MS]} Print Monitors: --------------- HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors\ avm:\Driver = "avmprmon.dll" ["AVM Berlin GmbH"] Microsoft Document Imaging Writer Monitor\Driver = "mdimon.dll" [MS] ---------- (launch time: 2008-03-08 12:18:45) <<!>>: Suspicious data at a malware launch point. <<H>>: Suspicious data at a browser hijack point. + This report excludes default entries except where indicated. + To see *everywhere* the script checks and *everything* it finds, launch it from a command prompt or a shortcut with the -all parameter. + To search all directories of local fixed drives for DESKTOP.INI DLL launch points, use the -supp parameter or answer "No" at the first message box and "Yes" at the second message box. ---------- (total run time: 39 seconds, including 8 seconds for message boxes) So also ich hoffe das ich hier alles richtig gemacht habe und das es jetz vorran geht mit der problembehebung.... Vielen Dank... hoffe auf weitere gute teamarbeit  |
|
08.03.2008, 12:17
| #9 |
| | Probleme mit avp.exe 03/08/08 12:14:22 [Info]: BlackLight Engine 1.0.67 initialized 03/08/08 12:14:22 [Info]: OS: 5.1 build 2600 (Service Pack 2) 03/08/08 12:14:22 [Note]: 7019 4 03/08/08 12:14:22 [Note]: 7005 0 03/08/08 12:14:26 [Note]: 7006 0 03/08/08 12:14:26 [Note]: 7011 1716 03/08/08 12:14:43 [Note]: 7026 0 03/08/08 12:14:43 [Note]: 7026 0 03/08/08 12:14:46 [Note]: FSRAW library version 1.7.1024 03/08/08 12:16:35 [Note]: 7007 0 |
|
07.03.2008, 22:13
| #10 |
| | Probleme mit avp.exe ----- Temp ----------------------------- Datentr„ger in Laufwerk C: ist ACER Volumeseriennummer: 0D2C-13DD Verzeichnis von C:\DOKUME~1\SEBAST~1\LOKALE~1\Temp 07.03.2008 22:05 131.016 filelist.txt 07.03.2008 22:02 16.384 ~DF8DE8.tmp 07.03.2008 21:17 692 jusched.log 07.03.2008 21:12 224 WCESCOMM.LOG 4 Datei(en) 148.316 Bytes 0 Verzeichnis(se), 6.736.494.592 Bytes frei |
|
08.03.2008, 12:13
| #11 |
| | Probleme mit avp.exe Schön guten Tag... Also Myrtille das mit dem eScan ist so ne sache, irgendwie sind das zuviel zeichen um das hier zu posten.... Aba hier mal das wichtigste.... Zahl der gescannten Objekte: 87781 Zahl der kritischen Objekte: 16 Zahl der desinfizierten Objekte: 0 Zahl der umbenannten Dateien: 0 Zahl der gelöschten Objekte: 0 Zahl der Fehler: 102 |
|
07.03.2008, 21:47
| #12 | |
| | Probleme mit avp.exeZitat:
 Sorry mein Fehler. Hab kein link eingefügt...
__________________ http://de.youtube.com/watch?v=5O14JsggUFI |
|
07.03.2008, 22:10
| #13 |
| | Probleme mit avp.exe ----- Prefetch ------------------------- Datentr„ger in Laufwerk C: ist ACER Volumeseriennummer: 0D2C-13DD Verzeichnis von C:\WINDOWS\Prefetch 07.03.2008 22:05 15.644 CMD.EXE-034B0549.pf 07.03.2008 22:05 14.848 FIND.EXE-0EEAD1A7.pf 07.03.2008 22:05 56.060 WINRAR.EXE-1F2395DA.pf 07.03.2008 21:52 17.408 IGFXSRVC.EXE-1D88F978.pf 07.03.2008 21:52 48.726 RUNDLL32.EXE-3CADD0BA.pf 07.03.2008 21:52 73.372 FIREFOX.EXE-28BE8AE1.pf 07.03.2008 21:52 986.446 NTOSBOOT-B00DFAAD.pf 07.03.2008 21:52 25.978 WUAUCLT.EXE-1360D60A.pf 07.03.2008 21:49 24.310 LOGONUI.EXE-312BE1BF.pf 07.03.2008 21:20 108.974 ICQ.EXE-09964922.pf 07.03.2008 21:18 19.776 VERCLSID.EXE-28F52AD2.pf 07.03.2008 21:16 77.490 AVP.EXE-13CAE754.pf 07.03.2008 21:13 34.086 WMIPRVSE.EXE-0D449B4F.pf 07.03.2008 21:13 44.670 WGATRAY.EXE-350D4455.pf 07.03.2008 21:08 22.154 TASKMGR.EXE-06144C13.pf 07.03.2008 20:40 37.982 ADMTRAY.EXE-261081D2.pf 07.03.2008 20:40 12.154 JUSCHED.EXE-0B0E1AD0.pf 07.03.2008 20:40 26.710 REGSVR32.EXE-396DEA2C.pf 07.03.2008 20:40 28.360 ACER EPOWER MANAGEMENT.EXE-269102ED.pf 07.03.2008 20:40 35.116 IMAPI.EXE-201490BB.pf 07.03.2008 20:40 30.952 EPM-DM.EXE-3472C0E6.pf 07.03.2008 20:40 21.446 LAUNAPP.EXE-1B5E2140.pf 07.03.2008 20:40 8.702 IMSCINST.EXE-2B626103.pf 07.03.2008 20:40 79.340 EXPLORER.EXE-02121B1A.pf 07.03.2008 20:40 3.806 RUNXMLPL.EXE-2046072A.pf 07.03.2008 20:40 9.532 XMLAUNCH.EXE-086AA80B.pf 07.03.2008 20:40 7.634 TINTSETP.EXE-2DD83AEF.pf 07.03.2008 20:40 15.328 USERINIT.EXE-0743FDA9.pf 07.03.2008 20:39 12.824 MPNOTIFY.EXE-240461D6.pf 07.03.2008 20:35 52.236 SVCHOST.EXE-2D5FBD18.pf 07.03.2008 20:35 29.310 CSRSS.EXE-22452D1B.pf 07.03.2008 20:35 41.348 WINLOGON.EXE-0957F9B2.pf 07.03.2008 20:35 19.722 SERVICES.EXE-3019B50A.pf 07.03.2008 20:35 25.184 LSASS.EXE-306A65C3.pf 07.03.2008 20:35 25.916 ALG.EXE-275708CF.pf 07.03.2008 20:35 41.356 ADMSERV.EXE-098B4307.pf 07.03.2008 20:35 30.810 EVTENG.EXE-06E52AC2.pf 07.03.2008 20:35 12.876 SPOOLSV.EXE-3A613CE3.pf 07.03.2008 20:35 15.204 MDM.EXE-36577249.pf 07.03.2008 20:35 14.874 REGSRVC.EXE-0AD6D6D2.pf 07.03.2008 20:35 13.800 RICHVIDEO.EXE-22863F01.pf 07.03.2008 20:30 115.296 AU_.EXE-39693040.pf 07.03.2008 15:50 17.256 FINDSTR.EXE-1A4FC238.pf 07.03.2008 15:49 19.016 REGEDIT.EXE-2AE3423E.pf 07.03.2008 15:29 20.958 NOTEPAD.EXE-2F2D61E1.pf 07.03.2008 15:00 62.286 NSS.EXE-05F0FC65.pf 07.03.2008 12:52 114.630 DUMPREP.EXE-0AF2BF67.pf 07.03.2008 12:52 47.086 DWWIN.EXE-2C373FB7.pf 07.03.2008 08:50 17.924 DEFRAG.EXE-2858C7E2.pf 07.03.2008 08:50 18.824 DFRGFAT.EXE-22605FE5.pf 07.03.2008 08:50 518.450 Layout.ini 06.03.2008 15:56 18.942 RUNDLL32.EXE-6E8D4657.pf 06.03.2008 15:10 15.222 SOUNDMAN.EXE-2979F3F4.pf 06.03.2008 15:10 24.252 WCESCOMM.EXE-1136DA72.pf 06.03.2008 15:10 19.688 CTFMON.EXE-05E57A5E.pf 06.03.2008 13:24 23.018 RUNONCE.EXE-01CA3A2F.pf 06.03.2008 12:58 26.990 NMBGMONITOR.EXE-02E00695.pf 06.03.2008 12:58 34.884 NMIndexStoreSvr.exe-28939A55.pf 06.03.2008 12:58 30.274 NMINDEXINGSERVICE.EXE-28305D0E.pf 06.03.2008 12:54 105.336 MSIEXEC.EXE-330626DC.pf 05.03.2008 17:39 59.016 WOW.EXE-17BAA5BF.pf 05.03.2008 17:38 71.770 LAUNCHER.EXE-32D64558.pf 05.03.2008 16:24 54.326 PHOTOSNAPVIEWER.EXE-291CBF3B.pf 04.03.2008 15:33 8.550 SCRNSAVE.SCR-22431769.pf 04.03.2008 12:14 12.594 CTRLVOL.EXE-222434B3.pf 04.03.2008 11:41 68.200 SKYPEPM.EXE-1D416A14.pf 04.03.2008 11:40 31.662 REALPLAY.EXE-03CE29F7.pf 04.03.2008 11:25 98.536 WMPLAYER.EXE-017735B2.pf 03.03.2008 17:41 38.996 ICQUPDATER.EXE-04E46188.pf 03.03.2008 13:00 32.190 READER_SL.EXE-2A604B5A.pf 03.03.2008 12:08 47.346 EVEREST POKER.EXE-1F328E21.pf 03.03.2008 12:08 29.510 CSTART.EXE-30D3DE5B.pf 03.03.2008 08:06 12.952 OSDCTRL.EXE-093CCC74.pf 03.03.2008 08:06 11.298 QTTASK.EXE-0C419446.pf 03.03.2008 08:06 27.882 HOTKEYAPP.EXE-10516BC3.pf 03.03.2008 08:06 19.004 WBUTTON.EXE-045E3177.pf 28.02.2008 18:37 12.902 LAUNCHAP.EXE-00D3576E.pf 28.02.2008 18:37 23.542 ADOBEUPDATEMANAGER.EXE-123A1126.pf 28.02.2008 10:40 46.966 SKYPE.EXE-0D322358.pf 28.02.2008 10:40 9.378 NEROCHECK.EXE-0711BC9F.pf 28.02.2008 09:29 4.598 FIFA MANAGER 07_UNINST.EXE-129CD17D.pf 28.02.2008 09:29 15.166 SHORTCUTEDITOR_UNINST.EXE-1CD1CA30.pf 28.02.2008 09:29 22.744 EAUNINSTALL.EXE-14753D3D.pf 28.02.2008 09:29 19.188 EAUNINSTALL.EXE-173B3DAE.pf 28.02.2008 09:28 18.776 UNINSTALL.EXE-0631D5A3.pf 27.02.2008 16:51 23.490 RASAUTOU.EXE-10B4F92F.pf 27.02.2008 16:51 58.218 NETCFG.EXE-3024F63E.pf 27.02.2008 16:50 35.954 SETUP.EXE-10A5252C.pf 27.02.2008 16:50 20.192 RUNDLL32.EXE-6F4FA512.pf 27.02.2008 16:50 16.902 KIS7.0.1.325DE.EXE-15932F8C.pf 27.02.2008 16:37 28.050 SETUP.EXE-0A67EF27.pf 27.02.2008 16:37 33.764 RUNDLL32.EXE-4969EAD3.pf 27.02.2008 16:14 19.294 NIRCMD.EXE-1736E4E8.pf 27.02.2008 16:14 14.084 ATTRIB.EXE-15ACDFFE.pf 27.02.2008 16:14 8.630 SWREG.EXE-2F718D6B.pf 27.02.2008 16:14 35.836 DUMPHIVE.EXE-3AD4BCDB.pf 27.02.2008 16:14 22.034 AVGNT.EXE-34DB0DF2.pf 27.02.2008 16:14 2.980 VFIND.EXE-1DA5ED22.pf 27.02.2008 16:11 17.246 RESTARTIT.EXE-05CF6554.pf 27.02.2008 16:11 13.696 SC.EXE-28F2B663.pf 27.02.2008 16:10 22.334 IPCONFIG.EXE-05D7908C.pf 27.02.2008 16:10 34.718 IS-0KGKJ.TMP-1F5416AD.pf 27.02.2008 16:10 18.278 FIXWAREOUT.EXE-262887B6.pf 27.02.2008 16:04 52.156 AVSCAN.EXE-1702C14B.pf 27.02.2008 15:29 57.230 54D33C8748D1E2F36A7A75EF818FB-3220AEAF.pf 27.02.2008 15:10 47.210 AVCENTER.EXE-12E38D18.pf 27.02.2008 14:56 84.008 AVNOTIFY.EXE-278D3CE0.pf 27.02.2008 14:45 42.552 UPDATE.EXE-16715754.pf 27.02.2008 14:45 18.172 PREUPD.EXE-0B43CCF7.pf 27.02.2008 14:44 22.770 SCHED.EXE-35555958.pf 27.02.2008 14:44 50.430 AVGUARD.EXE-081AFD34.pf 27.02.2008 14:43 26.802 SETUP.EXE-39A7749B.pf 27.02.2008 14:42 45.810 ANTIVIR_WORKSTATION_WIN7U_DE_-11DB3719.pf 27.02.2008 14:41 89.622 AZUREUS.EXE-3461541A.pf 27.02.2008 14:06 5.480 NTVDM.EXE-0A81AB7B.pf 27.02.2008 14:05 40.986 RUNDLL32.EXE-627E1A01.pf 27.02.2008 14:02 96.776 TEAMSPEAK.EXE-16AE4E70.pf 27.02.2008 13:39 18.374 UNINSTALL.EXE-0E491E3A.pf 27.02.2008 13:39 21.624 MOONCODEC4005.EXE-05726EFA.pf 27.02.2008 13:38 38.312 CALC.EXE-2A219509.pf 27.02.2008 13:38 7.614 NS9.TMP-2796EA64.pf 27.02.2008 13:38 9.564 NOTEPAD.EXE-14C006D0.pf 27.02.2008 09:11 36.498 MMC.EXE-3D339B16.pf 25.02.2008 17:10 44.900 WMPLAYER.EXE-017735AB.pf 25.02.2008 17:10 31.446 RUNDLL32.EXE-69287798.pf 24.02.2008 19:04 22.646 RUNDLL32.EXE-41FB74E5.pf 24.02.2008 19:04 18.814 RUNDLL32.EXE-462BD3F2.pf 24.02.2008 17:47 77.458 WINWORD.EXE-1220CCA8.pf 24.02.2008 16:26 32.828 JUCHECK.EXE-3566B877.pf 24.02.2008 16:26 8.494 JAVA.EXE-39FFA1DC.pf 130 Datei(en) 5.744.164 Bytes 0 Verzeichnis(se), 6.736.510.976 Bytes frei |
|
| Themen zu Probleme mit avp.exe |
| adobe, appinit_dlls, ask toolbar, avp.exe, bho, excel, explorer, firefox, google, gservice, helfen, helper, heulen, hijack, icq, internet, internet explorer, internet security, kaspersky, microsoft, mozilla, mozilla firefox, pdf, problem, programme, prozess, registry, security, software, system, task-manager, tuneup.defrag, urlsearchhook, windows, windows xp |
Hybrid-Darstellung
