Planloser bittet um Logfile Überprüfung

bluschd

Servus MountainKing,
habe das Kopfwaschen nicht als "böse" aufgefasst. Bin absolut kritikfähig, also mach Dir darüber keinen Kopf, das passt schon
Hier die Loglist von escan:

Sun Sep 05 19:54:57 2004 => **********************************************************
Sun Sep 05 19:54:57 2004 => eScan AntiVirus Toolkit Utility.
Sun Sep 05 19:54:57 2004 => Copyright © 2003-2004, MicroWorld Technologies Inc.
Sun Sep 05 19:54:57 2004 => **********************************************************
Sun Sep 05 19:54:57 2004 => Version 4.4.7
Sun Sep 05 19:54:57 2004 => Log File: C:\bases\mwav.log
Sun Sep 05 19:54:57 2004 => Latest Date of files inside MWAV: 05 Sep 2004 21:01:48.
Sun Sep 05 19:54:58 2004 => AV Library Loaded...
Sun Sep 05 19:54:58 2004 => Scanning File C:\bases\kavss.exe
Sun Sep 05 19:54:59 2004 => Scanning File C:\bases\Getvlist.exe
Sun Sep 05 19:54:59 2004 => Scanning File C:\bases\kavss.dll
Sun Sep 05 19:54:59 2004 => Scanning File C:\bases\kavssdi.dll
Sun Sep 05 19:54:59 2004 => Scanning File C:\bases\kavssi.dll
Sun Sep 05 19:54:59 2004 => Scanning File C:\bases\kavvlg.dll
Sun Sep 05 19:54:59 2004 => Scanning File C:\bases\msvlclnt.dll
Sun Sep 05 19:54:59 2004 => Scanning File C:\bases\ipc.dll
Sun Sep 05 19:54:59 2004 => Scanning File C:\bases\main.avi
Sun Sep 05 19:54:59 2004 => Scanning File C:\bases\virus.avi
Sun Sep 05 19:54:59 2004 => Virus Database Date: 2004/09/05
Sun Sep 05 19:54:59 2004 => Virus Database Count: 103260
Sun Sep 05 19:56:37 2004 => Generating Virus List... getvlist.exe C:\bases\vlist.txt
Sun Sep 05 19:58:04 2004 => AV Library Unloaded (3)...
Sun Sep 05 20:05:04 2004 => **********************************************************
Sun Sep 05 20:05:04 2004 => eScan AntiVirus Toolkit Utility.
Sun Sep 05 20:05:04 2004 => Copyright © 2003-2004, MicroWorld Technologies Inc.
Sun Sep 05 20:05:04 2004 => **********************************************************
Sun Sep 05 20:05:04 2004 => Version 4.4.7
Sun Sep 05 20:05:04 2004 => Log File: C:\bases\mwav.log
Sun Sep 05 20:05:05 2004 => Latest Date of files inside MWAV: 05 Sep 2004 21:01:48.
Sun Sep 05 20:05:09 2004 => AV Library Loaded...
Sun Sep 05 20:05:09 2004 => Scanning File C:\bases\kavss.exe
Sun Sep 05 20:05:09 2004 => Scanning File C:\bases\Getvlist.exe
Sun Sep 05 20:05:09 2004 => Scanning File C:\bases\kavss.dll
Sun Sep 05 20:05:10 2004 => Scanning File C:\bases\kavssdi.dll
Sun Sep 05 20:05:10 2004 => Scanning File C:\bases\kavssi.dll
Sun Sep 05 20:05:10 2004 => Scanning File C:\bases\kavvlg.dll
Sun Sep 05 20:05:10 2004 => Scanning File C:\bases\msvlclnt.dll
Sun Sep 05 20:05:10 2004 => Scanning File C:\bases\ipc.dll
Sun Sep 05 20:05:10 2004 => Scanning File C:\bases\main.avi
Sun Sep 05 20:05:10 2004 => Scanning File C:\bases\virus.avi
Sun Sep 05 20:05:10 2004 => Virus Database Date: 2004/09/05
Sun Sep 05 20:05:10 2004 => Virus Database Count: 103260


Und hier die Einträge von HijackThis:
Wenn ich das Fixe was in der automatischen logfileauswertung rot angemeckert wird, ist das so in Ordnung und kommt da noch mehr dazu?

Logfile of HijackThis v1.98.2
Scan saved at 20:15:19, on 05.09.2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\DSentry.exe
C:\Programme\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Programme\D-Tools\daemon.exe
C:\PROGRA~1\SysExplr.EXE
C:\Programme\Ahead\InCD\InCD.exe
C:\PROGRA~1\GEMEIN~1\PCSuite\DATALA~1\DATALA~1.EXE
C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXE
C:\Programme\Softwin\BitDefender Free Edition\bdmcon.exe
C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
C:\PROGRA~1\GEMEIN~1\PCSuite\Services\SERVIC~1.EXE
C:\Programme\Creative\SBLive\Diagnostics\diagent.exe
C:\WINDOWS\System32\ctfmon.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Programme\Gemeinsame Dateien\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Programme\Gemeinsame Dateien\Softwin\BitDefender Scan Server\bdss.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Programme\ArcorDSL\ArcorDSL.exe
C:\Programme\Internet Explorer\iexplore.exe
C:\DOKUME~1\blustd\LOKALE~1\Temp\Rar$EX00.953\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.euro.dell.com/countries/d...en/default.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = file://C:\DOKUME~1\blustd\LOKALE~1\Temp\sp.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = file://C:\DOKUME~1\blustd\LOKALE~1\Temp\sp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.arcor.de
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = file://C:\DOKUME~1\blustd\LOKALE~1\Temp\sp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = file://C:\DOKUME~1\blustd\LOKALE~1\Temp\sp.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://C:\DOKUME~1\blustd\LOKALE~1\Temp\sp.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://C:\DOKUME~1\blustd\LOKALE~1\Temp\sp.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer von Arcor
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [diagent] C:\Programme\Creative\SBLive\Diagnostics\diagent.exe startup
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Programme\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Programme\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [SysExplr] c:\PROGRA~1\SysExplr.EXE
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Programme\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [DataLayer] C:\PROGRA~1\GEMEIN~1\PCSuite\DATALA~1\DATALA~1.EXE
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXE
O4 - HKLM\..\Run: [BDMCon] C:\Programme\Softwin\BitDefender Free Edition\\bdmcon.exe
O4 - HKLM\..\Run: [BDNewsAgent] C:\Programme\Softwin\BitDefender Free Edition\\bdnagent.exe
O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
O4 - HKLM\..\Run: [mwavscan] "C:\bases\mwavscan.com" /s
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - C:\Programme\ICQ\ICQ.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\Programme\ICQ\ICQ.exe (file missing)
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\MSMSGS.EXE
O14 - IERESET.INF: START_PAGE_URL=http://www.arcor.de
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
O16 - DPF: {54B52E52-8000-4413-BD67-FC7FE24B59F2} (EARTPatchX Class) - http://files.ea.com/downloads/rtpatch/v2/EARTPX.cab
O16 - DPF: {5D8844F9-1CB8-11D2-A0A0-00600859EB9F} (PatchCtl Class) - ftp://ftp.pt.ea.com/QA/pub/easports/...DE/patchx2.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{F428360C-1D89-4332-B7EF-5E7EA5EA236C}: NameServer = 145.253.2.11 145.253.2.203
O18 - Filter: text/html - {CA11A370-67EE-4B54-8294-F12E612710B3} - C:\WINDOWS\System32\mnhda.dll
O18 - Filter: text/plain - {CA11A370-67EE-4B54-8294-F12E612710B3} - C:\WINDOWS\System32\mnhda.dll

Noch eine Frage habe ich zu:
Was das Windows Update betrifft, da hast du gerade Glück, schau mal in den zeitungsladen, die neuen Ausgaben der einschlägigen Magazine haben eigentlich alle das Windows Service Pack 2 drauf, wenn du dann mal neu installierst (oder auch so, wenn du reparieren wilklst) und das gleich danach ebenfalls installierst ist dein System nahezu auf dem aktuellsten Patchstand.

Du kannst auch evrsuchen, wenn du DSL hast, das komplette Update herunterzuladen (vielleicht mit einem downloadmanager oder einem alternativen Browser):

Kann ich das einfach so installieren? Muss ich vorher nicht irgendwas deinstallieren? Downloadmanager und alternativer Browser sind für mich absolute Fremdworte, also da kauf ich mir doch lieber ne zeitschrift mit dem zeugs.