Seite 1 von 1

DVR Studio Pro 1.75 startet nicht

Verfasst: 03.11.2007, 13:45
von drschlaumeier
Hallo,

ich habe nun zum ersten mal DVR Studio Pro 1.75 heruntergeladen und installiert (WinXP SP2). Die Installation verlief ohne Probleme.
Aber das Program will einfach nicht starten. weder im Start Menu noch wenn ich direkt auf die exe im DVR Studio Pro Verzeichnis klicke noch wenn ich den Command Promt starte und dann die exe ausführe.
Auch der Taskmenager zeigt nichts an. Es scheint so als ob sich das Program gleich wieder verabschiedet.
Mach ich was falsch?

Danke für die Hilfe

Grüsse

DrS

Verfasst: 03.11.2007, 16:33
von Ralf
Hallo drschlaumeier,

ich vermute es ist irgendetwas bei Installation schief gegangen.

Bitte lösche das Programm mit der Uninstall.exe aus dem Programmordner.

Danach lade Die die Version 1.75 noch mal neu herunter und installiere es noch mal.

Verfasst: 03.11.2007, 19:19
von drschlaumeier
Hab ich gemacht. Funktioniert immer noch nicht.
Habe die Deutsche und Englishe Pro Version installiert aber immer dasselbe.
Habe auch die normale Version installiert. Geht auch nicht.
Kann man nicht ein paar debug ausgaben bekommen um zu sehen was los ist?
Ich seh überhaupt nichts, nur das mein Mauszeiger kurz zuckt.
Auch das install log ist wenig aussagekräftig.

Hat noch niemand ausser mir das Problem gehabt?

Ich würde mich ja selber nicht als Anfänger betrachten. Ich schreibe auch selber Windoofs Programmer in VC++....aber sowas hatte ich noch nicht gehabt. Vielleicht hängs mit irgentwelchen System dll's oder .NET zusammen?

Gruss

DrS

Verfasst: 03.11.2007, 19:23
von Kimi
Falls überhaupt logs geschrieben werden, befinden sich diese in:
"C:\Programme und Einstellungen\<Benutzer>\Anwendungsdaten\Haenlein-Software\DVR-Studio Pro\logfiles"

Kann es sein, dass du evtl. mit eingeschränkten Benutzerrechten arbeitest?

Verfasst: 03.11.2007, 19:38
von drschlaumeier
Das Verzeichnis ist bei mir auf d:\
"D:\Programme und Einstellungen\<Benutzer>\Anwendungsdaten\Haenlein-Software\DVR-Studio Pro".
Das logfile existiert ober nicht.

Mein Rechner ist zwar ein Domain Rechner, ich bin aber in der Gruppe lokaler Administratoren. Habe also "fast" vollständigen Zugriff. Naja, ein paar Einstellungen werden vom Domain Admin verwaltet, das betrifft aber nicht die Installation von Programmen, registry usw.
Hatte noch nie Probleme damit.

Gruss

DrS

Verfasst: 03.11.2007, 20:55
von Kimi
Hast du die Software mit dem gleichen Benutzer installiert, mit dem du sie verwenden möchtest?

Verfasst: 04.11.2007, 10:58
von drschlaumeier
Ja, ich habe DVR-Studio Pro unter selben Namen installiert unter dem ich das Prog auch starte.
Ich habe mich auch sicherheitshalber mal als lokaler Admin eingeloggt und das Prog installiert und gestartet...aber selbes Problem.

Ich bin etwas ratlos :-(

Gruss

DrS

Verfasst: 04.11.2007, 11:42
von Ralf
Hallo drschlaumeier,

ist auf dem PC irgendeine Sicherheitssoftware, die da mit reinspielen könnte?

Unser Programm überprüft beim Programmstart alle Laufwerke des PC, ob vielleicht eine Receiverplatte vorhanden ist. Da diese Platten in der Regel kein Windowsformat haben, geschieht dies auf dem untersten Level mit Driektzugriffen. So manch eine Firewall oder Virenscanner könnte das als einen Virenangriff auslegen und das Programm einfach "abschießen".

Verfasst: 04.11.2007, 11:49
von drschlaumeier
Virenscanner hab ich gecheckt. Der hat nichts zum meckern. Hab hier VirusScan von Network Associates Techn.

Habe mal den Dependency Walker von VC++ 2005/Platform SDK laufen lassen. Scheint wirklich ein dll problem zu sein. Der Dependency Walker bemeckert irgendeine "HookDll.dll" die auf meinem System nirgends zu finden ist. Zuwas brauch ich die Dll?

Hier das log:

-----------------------------------------------------------------
Warning: At least one module has an unresolved import due to a missing export function in a delay-load dependent module.

--------------------------------------------------------------------------------
Starting profile on 04.11.2007 at 10:30:31

Operating System: Microsoft Windows XP Professional (32-bit), version 5.01.2600 Service Pack 2
Program Executable: c:\program files\dvr-studio pro\DVR-STUDIOPRO.EXE
Program Arguments:
Starting Directory: C:\Program Files\DVR-Studio Pro\
Search Path: C:\Program Files\PC Connectivity Solution\;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\Common Files\GTK\2.0\bin;C:\Program Files\Common Files\Ulead Systems\MPEG;d:\Program Files\Omnikey;C:\Program Files\Utimaco\SafeGuard Easy\;H:\CONFIG\NOTES\DATA

Options Selected:
Simulate ShellExecute by inserting any App Paths directories into the PATH environment variable.
Log DllMain calls for process attach and process detach messages.
Hook the process to gather more detailed dependency information.
Log LoadLibrary function calls.
Log GetProcAddress function calls.
Log debug output messages.
Automatically open and profile child processes.
--------------------------------------------------------------------------------

Started "DVR-STUDIOPRO.EXE" (process 0x49C) at address 0x00400000. Successfully hooked module.
Loaded "NTDLL.DLL" at address 0x7C900000. Successfully hooked module.
Loaded "KERNEL32.DLL" at address 0x7C800000. Successfully hooked module.
DllMain(0x7C900000, DLL_PROCESS_ATTACH, 0x00000000) in "NTDLL.DLL" called.
DllMain(0x7C900000, DLL_PROCESS_ATTACH, 0x00000000) in "NTDLL.DLL" returned 1 (0x1).
DllMain(0x7C800000, DLL_PROCESS_ATTACH, 0x00000000) in "KERNEL32.DLL" called.
DllMain(0x7C800000, DLL_PROCESS_ATTACH, 0x00000000) in "KERNEL32.DLL" returned 1 (0x1).
Injected "DEPENDS.DLL" at address 0x08370000.
DllMain(0x08370000, DLL_PROCESS_ATTACH, 0x00000000) in "DEPENDS.DLL" called.
DllMain(0x08370000, DLL_PROCESS_ATTACH, 0x00000000) in "DEPENDS.DLL" returned 1 (0x1).
Loaded "USER32.DLL" at address 0x7E410000. Successfully hooked module.
Loaded "GDI32.DLL" at address 0x77F10000. Successfully hooked module.
DllMain(0x77F10000, DLL_PROCESS_ATTACH, 0x0012FD30) in "GDI32.DLL" called.
DllMain(0x77F10000, DLL_PROCESS_ATTACH, 0x0012FD30) in "GDI32.DLL" returned 1 (0x1).
DllMain(0x7E410000, DLL_PROCESS_ATTACH, 0x0012FD30) in "USER32.DLL" called.
LoadLibraryW("C:\WINDOWS\system32\IMM32.DLL") called from "USER32.DLL" at address 0x7E44DD59.
Loaded "IMM32.DLL" at address 0x76390000. Successfully hooked module.
Loaded "ADVAPI32.DLL" at address 0x77DD0000. Successfully hooked module.
Loaded "RPCRT4.DLL" at address 0x77E70000. Successfully hooked module.
DllMain(0x77E70000, DLL_PROCESS_ATTACH, 0x00000000) in "RPCRT4.DLL" called.
DllMain(0x77E70000, DLL_PROCESS_ATTACH, 0x00000000) in "RPCRT4.DLL" returned 1 (0x1).
DllMain(0x77DD0000, DLL_PROCESS_ATTACH, 0x00000000) in "ADVAPI32.DLL" called.
DllMain(0x77DD0000, DLL_PROCESS_ATTACH, 0x00000000) in "ADVAPI32.DLL" returned 1 (0x1).
DllMain(0x76390000, DLL_PROCESS_ATTACH, 0x00000000) in "IMM32.DLL" called.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmWINNLSEnableIME") called from "USER32.DLL" at address 0x7E43D43E and returned 0x7639E699.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmWINNLSGetEnableStatus") called from "USER32.DLL" at address 0x7E43D453 and returned 0x7639E6C0.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmSendIMEMessageExW") called from "USER32.DLL" at address 0x7E43D468 and returned 0x7639EB54.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmSendIMEMessageExA") called from "USER32.DLL" at address 0x7E43D47D and returned 0x7639EB6F.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmIMPGetIMEW") called from "USER32.DLL" at address 0x7E43D492 and returned 0x7639E789.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmIMPGetIMEA") called from "USER32.DLL" at address 0x7E43D4A7 and returned 0x7639E7BD.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmIMPQueryIMEW") called from "USER32.DLL" at address 0x7E43D4BC and returned 0x7639E824.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmIMPQueryIMEA") called from "USER32.DLL" at address 0x7E43D4D1 and returned 0x7639E92C.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmIMPSetIMEW") called from "USER32.DLL" at address 0x7E43D4E6 and returned 0x7639E9B5.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmIMPSetIMEA") called from "USER32.DLL" at address 0x7E43D4FB and returned 0x7639EAD9.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmAssociateContext") called from "USER32.DLL" at address 0x7E43D510 and returned 0x763923BF.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmEscapeA") called from "USER32.DLL" at address 0x7E43D525 and returned 0x76397C45.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmEscapeW") called from "USER32.DLL" at address 0x7E43D53A and returned 0x76397EC1.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmGetCompositionStringA") called from "USER32.DLL" at address 0x7E43D54F and returned 0x76395B82.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmGetCompositionStringW") called from "USER32.DLL" at address 0x7E43D564 and returned 0x763954AA.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmGetCompositionWindow") called from "USER32.DLL" at address 0x7E43D579 and returned 0x76393B68.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmGetContext") called from "USER32.DLL" at address 0x7E43D58E and returned 0x763922B3.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmGetDefaultIMEWnd") called from "USER32.DLL" at address 0x7E43D5A3 and returned 0x763997DE.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmIsIME") called from "USER32.DLL" at address 0x7E43D5B8 and returned 0x76398C74.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmReleaseContext") called from "USER32.DLL" at address 0x7E43D5CD and returned 0x763929F3.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmRegisterClient") called from "USER32.DLL" at address 0x7E43D5E2 and returned 0x763922FA.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmGetCompositionFontW") called from "USER32.DLL" at address 0x7E43D5F7 and returned 0x76394849.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmGetCompositionFontA") called from "USER32.DLL" at address 0x7E43D60C and returned 0x763947B1.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmSetCompositionFontW") called from "USER32.DLL" at address 0x7E43D621 and returned 0x763949EE.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmSetCompositionFontA") called from "USER32.DLL" at address 0x7E43D636 and returned 0x763948E1.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmSetCompositionWindow") called from "USER32.DLL" at address 0x7E43D64B and returned 0x76394DF6.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmNotifyIME") called from "USER32.DLL" at address 0x7E43D660 and returned 0x76396FF8.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmLockIMC") called from "USER32.DLL" at address 0x7E43D675 and returned 0x76399F4D.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmUnlockIMC") called from "USER32.DLL" at address 0x7E43D68A and returned 0x76399F65.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmLoadIME") called from "USER32.DLL" at address 0x7E43D69F and returned 0x7639778F.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmSetOpenStatus") called from "USER32.DLL" at address 0x7E43D6B4 and returned 0x7639472B.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmFreeLayout") called from "USER32.DLL" at address 0x7E43D6C9 and returned 0x76396E63.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmActivateLayout") called from "USER32.DLL" at address 0x7E43D6DE and returned 0x763977ED.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmGetCandidateWindow") called from "USER32.DLL" at address 0x7E43D6F3 and returned 0x76393BB3.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmSetCandidateWindow") called from "USER32.DLL" at address 0x7E43D708 and returned 0x76394E74.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmConfigureIMEW") called from "USER32.DLL" at address 0x7E43D71D and returned 0x76397A9B.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmGetConversionStatus") called from "USER32.DLL" at address 0x7E43D732 and returned 0x76393AA6.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmSetConversionStatus") called from "USER32.DLL" at address 0x7E43D747 and returned 0x76394617.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmSetStatusWindowPos") called from "USER32.DLL" at address 0x7E43D75C and returned 0x76394D8E.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmGetImeInfoEx") called from "USER32.DLL" at address 0x7E43D771 and returned 0x76399C9F.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmLockImeDpi") called from "USER32.DLL" at address 0x7E43D786 and returned 0x76399BCC.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmUnlockImeDpi") called from "USER32.DLL" at address 0x7E43D79B and returned 0x76399C1C.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmGetOpenStatus") called from "USER32.DLL" at address 0x7E43D7B0 and returned 0x76393AE3.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmSetActiveContext") called from "USER32.DLL" at address 0x7E43D7C5 and returned 0x763929FE.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmTranslateMessage") called from "USER32.DLL" at address 0x7E43D7DA and returned 0x7639DE85.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmLoadLayout") called from "USER32.DLL" at address 0x7E43D7EF and returned 0x76398739.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmProcessKey") called from "USER32.DLL" at address 0x7E43D804 and returned 0x7639E0F3.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmPutImeMenuItemsIntoMappedFile") called from "USER32.DLL" at address 0x7E43D819 and returned 0x763A2E24.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmGetProperty") called from "USER32.DLL" at address 0x7E43D82E and returned 0x76398BAE.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmSetCompositionStringA") called from "USER32.DLL" at address 0x7E43D843 and returned 0x763967F5.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmSetCompositionStringW") called from "USER32.DLL" at address 0x7E43D858 and returned 0x7639681C.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmEnumInputContext") called from "USER32.DLL" at address 0x7E43D86D and returned 0x763937EA.
GetProcAddress(0x76390000 [IMM32.DLL], "ImmSystemHandler") called from "USER32.DLL" at address 0x7E43D882 and returned 0x76399D94.
GetProcAddress(0x76390000 [IMM32.DLL], "CtfImmTIMActivate") called from "USER32.DLL" at address 0x7E43D897 and returned 0x763A3F2B.
GetProcAddress(0x76390000 [IMM32.DLL], "CtfImmRestoreToolbarWnd") called from "USER32.DLL" at address 0x7E43D8AC and returned 0x763A34FA.
GetProcAddress(0x76390000 [IMM32.DLL], "CtfImmHideToolbarWnd") called from "USER32.DLL" at address 0x7E43D8C1 and returned 0x763A3531.
GetProcAddress(0x76390000 [IMM32.DLL], "CtfImmDispatchDefImeMessage") called from "USER32.DLL" at address 0x7E43D8D6 and returned 0x763A4324.
DllMain(0x76390000, DLL_PROCESS_ATTACH, 0x00000000) in "IMM32.DLL" returned 1 (0x1).
LoadLibraryW("C:\WINDOWS\system32\IMM32.DLL") returned 0x76390000.
LoadLibraryW("LPK.DLL") called from "GDI32.DLL" at address 0x77F3D16E.
Loaded "LPK.DLL" at address 0x629C0000. Successfully hooked module.
Loaded "USP10.DLL" at address 0x74D90000. Successfully hooked module.
Loaded "MSVCRT.DLL" at address 0x77C10000. Successfully hooked module.
DllMain(0x77C10000, DLL_PROCESS_ATTACH, 0x00000000) in "MSVCRT.DLL" called.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "InitializeCriticalSectionAndSpinCount") called from "MSVCRT.DLL" at address 0x77C379C2 and returned 0x7C80B829.
DllMain(0x77C10000, DLL_PROCESS_ATTACH, 0x00000000) in "MSVCRT.DLL" returned 1 (0x1).
DllMain(0x74D90000, DLL_PROCESS_ATTACH, 0x00000000) in "USP10.DLL" called.
LoadLibraryA("gdi32.dll") called from "USP10.DLL" at address 0x74DAE21F.
LoadLibraryA("gdi32.dll") returned 0x77F10000.
GetProcAddress(0x77F10000 [GDI32.DLL], "GetCharABCWidthsI") called from "USP10.DLL" at address 0x74DAE23F and returned 0x77F3DDEA.
DllMain(0x74D90000, DLL_PROCESS_ATTACH, 0x00000000) in "USP10.DLL" returned 1 (0x1).
DllMain(0x629C0000, DLL_PROCESS_ATTACH, 0x00000000) in "LPK.DLL" called.
DllMain(0x629C0000, DLL_PROCESS_ATTACH, 0x00000000) in "LPK.DLL" returned 1 (0x1).
LoadLibraryW("LPK.DLL") returned 0x629C0000.
GetProcAddress(0x629C0000 [LPK.DLL], "LpkInitialize") called from "GDI32.DLL" at address 0x77F3D189 and returned 0x629C2EC8.
GetProcAddress(0x629C0000 [LPK.DLL], "LpkExtTextOut") called from "GDI32.DLL" at address 0x77F3D194 and returned 0x629C3203.
GetProcAddress(0x629C0000 [LPK.DLL], "LpkGetCharacterPlacement") called from "GDI32.DLL" at address 0x77F3D1A1 and returned 0x629C387A.
GetProcAddress(0x629C0000 [LPK.DLL], "LpkGetTextExtentExPoint") called from "GDI32.DLL" at address 0x77F3D1AE and returned 0x629C3235.
GetProcAddress(0x629C0000 [LPK.DLL], "LpkUseGDIWidthCache") called from "GDI32.DLL" at address 0x77F3D1BB and returned 0x629C3D92.
GetProcAddress(0x629C0000 [LPK.DLL], "LpkTabbedTextOut") called from "GDI32.DLL" at address 0x77F3D1C8 and returned 0x629C3E53.
GetProcAddress(0x629C0000 [LPK.DLL], "LpkPSMTextOut") called from "GDI32.DLL" at address 0x77F3D1D3 and returned 0x629C1282.
GetProcAddress(0x629C0000 [LPK.DLL], "LpkDrawTextEx") called from "GDI32.DLL" at address 0x77F3D1DE and returned 0x629C1235.
GetProcAddress(0x629C0000 [LPK.DLL], "LpkEditControl") called from "GDI32.DLL" at address 0x77F3D1E9 and returned 0x629C6004.
LoadLibraryW("HookDLL.DLL") called from "USER32.DLL" at address 0x7E44541A.
LoadLibraryW("HookDLL.DLL") returned NULL. Error: The specified module could not be found (126).
LoadLibraryW("cahooknt.dll") called from "USER32.DLL" at address 0x7E44541A.
Loaded "CAHOOKNT.DLL" at address 0x10000000. Successfully hooked module.
DllMain(0x10000000, DLL_PROCESS_ATTACH, 0x00000000) in "CAHOOKNT.DLL" called.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "CreateProcessA") called from "CAHOOKNT.DLL" at address 0x100069FF and returned 0x7C802367.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "CreateProcessW") called from "CAHOOKNT.DLL" at address 0x100069FF and returned 0x7C802332.
DllMain(0x10000000, DLL_PROCESS_ATTACH, 0x00000000) in "CAHOOKNT.DLL" returned 1 (0x1).
LoadLibraryW("cahooknt.dll") returned 0x10000000.
DllMain(0x7E410000, DLL_PROCESS_ATTACH, 0x0012FD30) in "USER32.DLL" returned 1 (0x1).
DllMain(0x10000000, DLL_PROCESS_DETACH, 0x00000001) in "CAHOOKNT.DLL" called.
DllMain(0x10000000, DLL_PROCESS_DETACH, 0x00000001) in "CAHOOKNT.DLL" returned 1 (0x1).
DllMain(0x629C0000, DLL_PROCESS_DETACH, 0x00000001) in "LPK.DLL" called.
DllMain(0x629C0000, DLL_PROCESS_DETACH, 0x00000001) in "LPK.DLL" returned 1 (0x1).
DllMain(0x74D90000, DLL_PROCESS_DETACH, 0x00000001) in "USP10.DLL" called.
DllMain(0x74D90000, DLL_PROCESS_DETACH, 0x00000001) in "USP10.DLL" returned 1 (0x1).
DllMain(0x77C10000, DLL_PROCESS_DETACH, 0x00000001) in "MSVCRT.DLL" called.
DllMain(0x77C10000, DLL_PROCESS_DETACH, 0x00000001) in "MSVCRT.DLL" returned 1 (0x1).
DllMain(0x76390000, DLL_PROCESS_DETACH, 0x00000001) in "IMM32.DLL" called.
DllMain(0x76390000, DLL_PROCESS_DETACH, 0x00000001) in "IMM32.DLL" returned 1 (0x1).
DllMain(0x77DD0000, DLL_PROCESS_DETACH, 0x00000001) in "ADVAPI32.DLL" called.
DllMain(0x77DD0000, DLL_PROCESS_DETACH, 0x00000001) in "ADVAPI32.DLL" returned 1 (0x1).
DllMain(0x77E70000, DLL_PROCESS_DETACH, 0x00000001) in "RPCRT4.DLL" called.
DllMain(0x77E70000, DLL_PROCESS_DETACH, 0x00000001) in "RPCRT4.DLL" returned 1 (0x1).
DllMain(0x7E410000, DLL_PROCESS_DETACH, 0x00000001) in "USER32.DLL" called.
DllMain(0x7E410000, DLL_PROCESS_DETACH, 0x00000001) in "USER32.DLL" returned 1 (0x1).
DllMain(0x77F10000, DLL_PROCESS_DETACH, 0x00000001) in "GDI32.DLL" called.
DllMain(0x77F10000, DLL_PROCESS_DETACH, 0x00000001) in "GDI32.DLL" returned 1 (0x1).
DllMain(0x08370000, DLL_PROCESS_DETACH, 0x00000001) in "DEPENDS.DLL" called.
DllMain(0x08370000, DLL_PROCESS_DETACH, 0x00000001) in "DEPENDS.DLL" returned 1 (0x1).
DllMain(0x7C800000, DLL_PROCESS_DETACH, 0x00000001) in "KERNEL32.DLL" called.
DllMain(0x7C800000, DLL_PROCESS_DETACH, 0x00000001) in "KERNEL32.DLL" returned 1 (0x1).
DllMain(0x7C900000, DLL_PROCESS_DETACH, 0x00000001) in "NTDLL.DLL" called.
DllMain(0x7C900000, DLL_PROCESS_DETACH, 0x00000001) in "NTDLL.DLL" returned 1 (0x1).
Exited "DVR-STUDIOPRO.EXE" (process 0x49C) with code 96 (0x60).
Entrypoint reached. All implicit modules have been loaded.

Verfasst: 04.11.2007, 11:55
von Ralf
Hallo drschlaumeier,

hast Du diese Version von unserem Server geladen? :?

Diese DLL verwenden wir meines Wissen nicht. Näheres kann aber nur Kimi sagen.

Verfasst: 04.11.2007, 11:58
von drschlaumeier
Natürlich habe ich die Version von eurem Server.

Naja, ob man die dll nun braucht oder nicht ... man sieht zumindest dass DVR Studio startet und irgendwas geladen wird. Dann auf einmal überlegt es sich DVR Studio anders und beendet sich einfach.
Keine Ahnung wieso....

Gruss

Verfasst: 04.11.2007, 16:38
von Kimi
Diese HookDLL wird nicht durch DVR-Studio Pro geladen. Sie wird auch nicht benötigt, zumindest ist sie auf meinem PC nicht vorhanden und unsere Software läuft trotzdem.

Diese Hookdll kann von einigen Rootkits verwendet werden um Tasteneingaben aufzuzeichnen:
http://www.file.net/prozess/hookdll.dll.html

Die gehört aber auch zu Programmen wie "Logitech Setpoint" oder "Wyse Installation Studio" etc.

Nun stellt sich die Frage weshalb diese Hookdll geladen werden soll. Da ist vermutlich irgendein System-Hook installiert. Evtl. wird dies durch den Dependency-Walker selbst ausgelöst. Ein Hook würde von unserer Software bzw. dem verwendeten Protector nämlich als Hacker-Versuch gewertet.
Aus den Logs ersehe ich, dass Hookdll aus User32dll heraus geladen wird. Die direkt zuvor geladene Funktion ist "LpkEditControl". Das lässt darauf schliessen, dass irgendeine Software versucht Tastatureingaben über die Hookdll abzufangen. Dazu hab ich das hier gefunden:
http://www.file.net/prozess/lpk.dll.html

Danach wird LPK häufig manipuliert, um Tastatureingaben abzuhören.

Ich würde deshalb einen umfangreichen Mal-Ware und Virusscan empfehlen.

Verfasst: 04.11.2007, 19:39
von drschlaumeier
Ich habe keinen Virus oder Rootkit gefunden. Würde mich auch wundern, Firewall und Virusscanner sind ständig aktiv.
Trotzdem war das die richtige Spur: "HijackThis" hat mir komische Einträge unter
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Windows\AppInit_DLLs
angezeigt.
Dort war "HookDLL.DLL cahooknt.dll" eingetragen. Die waren also ständig im Speicher und wurden zu jedem Program mitgeladen. Wie immer das auch dahin gekommen ist. Ich habe es einfach gelöscht, neu gebootet und nun startet auch DVR Studio Pro.
Da habt ihr ja nen ganz schönen Protector um euer Progrämmchen gebaut :-)

Danke für die Hilfe obwohl ich nun noch rausbekommen muss wie die Einträge dort reingekommen sind ...
und DVR Studio Pro werd ich auch noch testen.

Grüsse

DrS

Verfasst: 04.11.2007, 20:20
von Kimi
Hochinteressant - da dient unsere Software indirekt noch als Malware-Detektor... ;).