Programme starten langsam. Logfiles.

#1 Hallo,
manche Programme brauchen ewig, bis sie gestartet sind (z.B. Word, Excel und auch einige andere Programme, die nicht zu Windows gehören wie Norton Utilities). Andere Programme starten normal, wie gehabt (z.B. Outlook).

Habe mit AVG gescannt und den Downloader Generic gefunden (eied_s7.cab und eied_s7_c.exe). Beide wurden in die Quarantäne verschoben. Die Quarantäne habe ich geleert. Bei älteren scans wurden eine eid.exe (ehemals in c:\windows\system) und eine bgk.exe (ehemals in c:\windows) gefunden. Beide sind gelöscht.

Spybot und AdAware haben über alle Maßen viel gefunden. Alles wurde bereinigt.


Ein Scan mir eScan hat folgendes gefunden: C:\WINDOWS\SYSTEM\mshlpa.exe infiziert von "Trojan-Downloader.Win32.Mediket.df" Virus. Aktion vorgenommen: Keine Aktion vorgenommen.

Habe mir darauf hin lauter Programme runtergeladen und scannen lassen: CWShredder, Stinger, Reanimator, Remover - ohne Ergebnis.

Hier die letzten aktuellen log files:
Hijackthis:
Logfile of HijackThis v1.99.1
Scan saved at 16:40:49, on 01.10.06
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\ZONELABS\MINILOG.EXE
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAMME\MEDIA KEY\MAGICKEY.EXE
C:\PROGRAMME\MEDIA KEY\OSD.EXE
C:\PROGRAMME\GEMEINSAME DATEIEN\REAL\UPDATE_OB\REALSCHED.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\SYSTEM\LEXBCES.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAMME\NORTON CRASHGUARD\CGMENU.EXE
C:\PROGRAMME\GRISOFT\AVG FREE\AVGCC.EXE
C:\WINDOWS\SYSTEM\RPCSS.EXE
C:\PROGRAMME\GRISOFT\AVG FREE\AVGAMSVR.EXE
C:\WINDOWS\DIT.EXE
C:\PROGRAMME\SPAMIHILATOR\SPAMIHILATOR.EXE
C:\PROGRAMME\INTEL\INTEL PSNCU\CPUNUMBER.EXE
C:\WINDOWS\DITEXP.EXE
C:\PROGRAMME\AUDIOSYSTEM EWX 2496\EWXCPL.EXE
C:\PROGRAMME\RAIN\RAIN.EXE
C:\PROGRAMME\RAIN\RAIN.EXE
C:\PROGRAMME\NORTON CRASHGUARD\CG16EH.EXE
C:\PROGRAMME\ZONE LABS\ZONEALARM\ZONEALARM.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAMME\MOZILLA FIREFOX\FIREFOX.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\DESKTOP\SCANNER\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = about:blank
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\windows\downloaded program files\googletoolbar2.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\windows\downloaded program files\googletoolbar2.dll
O4 - HKLM\..\Run: [MagicKey] C:\PROGRA~1\MEDIAK~1\MAGICKEY.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [LexStart] Lexstart.exe
O4 - HKLM\..\Run: [ScanRegistry] c:\windows\scanregw.exe /autorun
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [WheelMouse] C:\Programme\A4tech\Mouse\AWMMAIN.EXE
O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [Norton CrashGuard Monitor] "C:\PROGRAMME\NORTON CRASHGUARD\CGMenu.EXE"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGCC.EXE /STARTUP
O4 - HKLM\..\Run: [AVG7_AMSVR] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGAMSVR.EXE
O4 - HKLM\..\Run: [mdac_runonce] C:\WINDOWS\SYSTEM\runonce.exe
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\RunServices: [MiniLog] C:\WINDOWS\SYSTEM\ZONELABS\MINILOG.EXE -service
O4 - HKLM\..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKCU\..\Run: [Spamihilator] "C:\Programme\Spamihilator\spamihilator.exe"
O4 - HKCU\..\Run: [IntelProcNumUtility] "C:\Programme\Intel\Intel PSNCU\CPUNumber.exe" /nosplash
O4 - Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office\OSA9.EXE
O4 - Startup: EWX 2496 ControlPanel.lnk = C:\Programme\AudioSystem EWX 2496\EwxCpl.exe
O4 - Startup: Rain.lnk = C:\Programme\rain\Rain.exe
O4 - Startup: ZoneAlarm.lnk = C:\Programme\Zone Labs\ZoneAlarm\zonealarm.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: EWX 2496 ControlPanel.lnk = C:\Programme\AudioSystem EWX 2496\EwxCpl.exe
O4 - Global Startup: Rain.lnk = C:\Programme\rain\Rain.exe
O4 - Global Startup: ZoneAlarm.lnk = C:\Programme\Zone Labs\ZoneAlarm\zonealarm.exe
O4 - Global User Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office\OSA9.EXE
O4 - Global User Startup: EWX 2496 ControlPanel.lnk = C:\Programme\AudioSystem EWX 2496\EwxCpl.exe
O4 - Global User Startup: Rain.lnk = C:\Programme\rain\Rain.exe
O4 - Global User Startup: ZoneAlarm.lnk = C:\Programme\Zone Labs\ZoneAlarm\zonealarm.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Zur Filterliste hinzufügen (WebWasher) - http://-Web.Washer-/ie_add
O8 - Extra context menu item: &Google-Suche - res://C:\WINDOWS\DOWNLOADED PROGRAM FILES\GOOGLETOOLBAR2.DLL/cmsearch.html
O8 - Extra context menu item: &Ins Deutsche übersetzen - res://C:\WINDOWS\DOWNLOADED PROGRAM FILES\GOOGLETOOLBAR2.DLL/cmwordtrans.html
O8 - Extra context menu item: Im Cache gespeicherte Seite - res://C:\WINDOWS\DOWNLOADED PROGRAM FILES\GOOGLETOOLBAR2.DLL/cmcache.html
O8 - Extra context menu item: Ähnliche Seiten - res://C:\WINDOWS\DOWNLOADED PROGRAM FILES\GOOGLETOOLBAR2.DLL/cmsimilar.html
O8 - Extra context menu item: Verweisseiten - res://C:\WINDOWS\DOWNLOADED PROGRAM FILES\GOOGLETOOLBAR2.DLL/cmbacklinks.html
O8 - Extra context menu item: Mit FDM herunterladen - file://C:\Programme\Free Download Manager\dllink.htm
O8 - Extra context menu item: Webseiten mit FDM herunterladen - file://C:\Programme\Free Download Manager\dlpage.htm
O8 - Extra context menu item: Alles mit FDM herunterladen - file://C:\Programme\Free Download Manager\dlall.htm
O8 - Extra context menu item: Auswahl mit FDM herunterladen - file://C:\Programme\Free Download Manager\dlselected.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM\Shdocvw.dll
O9 - Extra button: Net2Phone - {4B30061A-5B39-11D3-80F8-0090276F843F} - C:\Program Files\Net2Phone\Net2fone.exe
O9 - Extra 'Tools' menuitem: Net2Phone - {4B30061A-5B39-11D3-80F8-0090276F843F} - C:\Program Files\Net2Phone\Net2fone.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRAMME\YAHOO!\MESSENGER\YAHOOMESSENGER.EXE
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRAMME\YAHOO!\MESSENGER\YAHOOMESSENGER.EXE
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: The Infinity Button - {E4143585-2688-4EBC-B264-27C774F600D5} - C:\Programme\Foxie Suite\Resources\HTML\Infinity.htm
O9 - Extra 'Tools' menuitem: The Infinity Button - {E4143585-2688-4EBC-B264-27C774F600D5} - C:\Programme\Foxie Suite\Resources\HTML\Infinity.htm
O9 - Extra button: Swift Sweeper - {61039B22-563D-4922-B844-B076C318A66A} - C:\Programme\Foxie Suite\Sweeper.exe
O9 - Extra 'Tools' menuitem: Swift Sweeper - {61039B22-563D-4922-B844-B076C318A66A} - C:\Programme\Foxie Suite\Sweeper.exe
O9 - Extra button: Privacy Cleaner - {546E08AA-809F-4F1A-BE1A-6B122EBFCD5A} - C:\Programme\Foxie Suite\Cleaner.exe
O9 - Extra 'Tools' menuitem: Privacy Cleaner - {546E08AA-809F-4F1A-BE1A-6B122EBFCD5A} - C:\Programme\Foxie Suite\Cleaner.exe
O12 - Plugin for .cgi: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin3.dll
O12 - Plugin for .com/v1/8BbWQNWKdtxEie2khyLrdqZRXNpsY-38V1kYAp6LKkvVbBT3-EeOeFxtZ0STe-Ztm8NyzC5DbQfepcqhDNl4F4MtorsBg5dqHNC6SQoh/005 VIDEO/KAROLA 001: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll
O16 - DPF: {03F998B2-0E00-11D3-A498-00104B6EB52E} (MetaStreamCtl Class) - https://components.viewpoint.com/MTSInstallers/MetaStream3.cab
O16 - DPF: {E89366AF-2E44-11D1-91AE-006097D602F7} (FileAccess Control) - http://www41.visto.com/static/activex/vfile06.dll
O16 - DPF: {73020B72-CDD6-4F80-8098-1B2ECD9CA4CA} (HearMe VoiceCREATOR) - http://vp.hearme.com/products/vp/embedded/plugins/evp.cab
O16 - DPF: {C1BAC744-8F0B-11D0-89E7-00C0A8295197} (Cameractl Class) - http://www.lochness.scotland.net/push.cab
O16 - DPF: {C3DFA998-A486-11D4-AA25-00C04F72DAEB} (MSN Photo Upload Tool) - http://sc.groups.msn.com/controls/PhotoUC/MsnPUpld.cab
O16 - DPF: {5C8E2DE3-C9BD-11D3-BAFD-009027A36778} (Lipstream3 Control) - http://lipstream.www.conxion.com/customers/webcamnow/fender.cab
O16 - DPF: {ADC3EA10-8A28-41A9-96B4-534ADFC3CA0A} (Configuratore Auto Control) - http://www.buy@fiat.de/components/ocx/autopricer/configuratoreauto.cab
O16 - DPF: {BB95299D-B65B-47E0-8DDB-697A66298C3A} (UniVoiceX Control) - http://www.webcamnow.com/voice/voice.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/c381/chat.cab
O16 - DPF: {C36112BF-2FA3-4694-8603-3B510EA3B465} (Lycos File Upload Component) - http://f012.mail.lycos.de/app/uploader/FileUploader.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.de/scan8/oscan8.cab

Danach habe ich CleanUp ausgeführt und den Rechner neu gestartet.

Combofix sagt mir: Unsuported Operating System.

Die Logfiles von Datfind.bat sehen so aus:

system32:

Datentr„ger in Laufwerk C: FESTPLATTE
Seriennummer des Datentr„gers: 2126-11D6
Verzeichnis von C:\WINDOWS\SYSTEM32

MFC71 DLL 1,060,864 07-04-05 9:51a mfc71.dll
MSVCR71 DLL 348,160 07-04-05 9:51a msvcr71.dll
MSCOREE DLL 131,072 07-15-02 2:21p mscoree.dll
FOLDER HTT 13,085 08-18-99 10:26a folder.htt
DESKTOP INI 266 08-18-99 10:26a desktop.ini
5 Datei(en) 1,553,447 Bytes
0 Verzeichnis(se) 1,012,55 MB frei

temp:


Datentr„ger in Laufwerk C: FESTPLATTE
Seriennummer des Datentr„gers: 2126-11D6
Verzeichnis von C:\WINDOWS\TEMP

1,012,55 MB frei


windows:

Datentr„ger in Laufwerk C: FESTPLATTE
Seriennummer des Datentr„gers: 2126-11D6
Verzeichnis von C:\WINDOWS

USER DAT 2,392,096 10-01-06 4:55p USER.DAT
SYSTEM DAT 11,005,984 10-01-06 4:54p SYSTEM.DAT
WIN386 SWP 159,383,552 10-01-06 4:51p WIN386.SWP
(XXX) PWL 1,642 10-01-06 4:49p (XXX).PWL
SCHEDLOG TXT 32,703 10-01-06 4:45p SchedLog.Txt
SYSTEM INI 3,178 10-01-06 4:45p SYSTEM.INI
WAVEMIX INI 54 10-01-06 4:45p WAVEMIX.INI
POWERPNT INI 60 10-01-06 4:45p POWERPNT.INI
NDISLOG TXT 0 10-01-06 4:44p NDISLOG.TXT
WININIT BAK 44 10-01-06 4:42p WININIT.BAK
ATMFONTS QLC 7,844 10-01-06 7:36a ATMFONTS.QLC
TTFCACHE 17,385 10-01-06 7:36a ttfCache
SHELLI~1 363,063 09-30-06 4:32p ShellIconCache
USER RSC 2,392,096 09-30-06 2:52p user.rsc
SYSTEM RSC 10,977,312 09-30-06 2:52p system.rsc
HKLMSW REG 15,157,939 09-30-06 2:45a hklmSW.reg
HKCRRT REG 5,640,272 09-30-06 2:42a hkcrRT.reg
REGBK00 ZIP 90,505 09-30-06 2:39a REGBK00.ZIP
LIC XXX 50 09-30-06 1:55a Lic.xxx
WIN INI 9,939 09-30-06 1:55a WIN.INI
WINAMP INI 2,297 09-29-06 9:26p winamp.ini
TWAIN001 MTX 5 09-29-06 9:18p Twain001.Mtx
SYSTEM CB 116 09-29-06 7:59p SYSTEM.CB
LEXSTAT INI 858 09-27-06 12:35p LEXSTAT.INI
QTFONT QFN 54,156 09-27-06 3:56a QTFont.qfn
PLUGIN~2 TRA 627 09-21-06 2:58a plugin131.trace
QTFONT FOR 1,308 09-13-06 3:54a QTFont.for
MOZVER DAT 8,397 09-11-06 10:43p mozver.dat
REASON~1 PRF 5,952 08-28-06 2:35p Reason Preferences.prf
CDPLAYER INI 65 08-13-06 2:50a cdPlayer.ini
ULEAD32 INI 1,432 08-04-06 11:21a Ulead32.ini
SUSFAIL TXT 120 07-07-06 1:44p SUSFAIL.TXT
REASON~1 DAT 30,087 07-01-06 2:00a Reason Data.dat
RECYCL~1 DAT 22,465 07-01-06 2:00a ReCycle20.dat
TM INI 3,360 06-19-06 6:08p tm.ini
TDF DII 120 06-19-06 6:07p tdf.dii
CDEX INI 4,986 06-04-06 4:36a CDEX.INI
ODBCINST INI 3,111 06-03-06 1:59a ODBCINST.INI
ODBC INI 1,275 06-03-06 1:59a ODBC.INI
MSIMGSIZ DAT 16,384 05-28-06 1:15p MSIMGSIZ.DAT
BDOSCA~1 EXE 53,248 05-25-06 1:22a bdoscandel.exe
CJBMF INI 214 05-05-06 11:41p CJBMF.INI
INTERN~1 BMP 2,875,254 03-17-06 4:51a Internet Explorer Wallpaper.bmp
HOSTS NEW 0 02-23-06 3:50a hosts.new
WININIT SAV 9,550 11-29-05 1:57a WININIT.SAV
WMSYSPR9 PRX 316,640 11-29-05 1:38a WMSysPr9.prx
MMC INI 0 11-25-05 1:22p MMC.INI
SWITCH~1 TXT 6,036 11-24-05 3:52a switchagreement.txt
TWAINX BIN 2 11-24-05 3:52a twainx.bin
UNENG EXE 57,344 08-02-05 5:07a uneng.exe
USERMI~1 BIN 851,968 08-02-05 5:07a UserMigratedStore_59R.bin
DEFAUL~1 BIN 720,896 08-02-05 5:07a DefaultStore_59R.bin
APCJBJDA 0 07-02-05 3:41p APCJBJDA
WMPLIB~1 DB 823,296 07-02-05 3:40p wmplibrary_v_0_12.db
TEFVIEW INI 1,681 06-11-05 2:09a tefview.ini
CDLABEL2 INI 736 06-07-05 3:24p CDLABEL2.INI
RESTREG BAT 792 03-09-05 1:30a RESTREG.BAT
ICCLR INF 639 03-05-05 9:43a ICCLR.INF
DIT DLL 266,240 03-05-05 9:43a Dit.DLL
DIT INI 269 03-05-05 9:43a Dit.INI
BDOSCA~1 INI 483 03-02-05 1:12p bdoscandellang.ini
DIT EXE 90,112 08-05-04 7:28p Dit.exe
ACDSEE INI 215 04-24-04 4:14a ACDSee.ini
HPLJP_V4 WPX 11,068 02-12-04 12:38a HPLJP_V4.WPX
WPXINDEX LST 93 02-12-04 12:38a WPXINDEX.LST
PPDINDEX LST 207 02-12-04 12:38a PPDINDEX.LST
FONTS MFD 11,742 02-12-04 12:38a FONTS.MFD
HPFCSS20 INI 2,389 02-12-04 12:17a HPFCSS20.INI
HPFDJC20 INI 1,184 02-12-04 12:17a HPFdjc20.ini
NIKNAK WPX 9,725 02-11-04 11:59p NIKNAK.WPX
$005F9E2 WPX 7,772 02-11-04 11:40p $005F9E2.WPX
GSVIEW32 INI 8,388 02-11-04 11:11p gsview32.ini
GSWIN32 INI 43 02-11-04 10:56p gswin32.ini
HH DAT 10,378 02-11-04 10:12p hh.dat
MODEMDET TXT 72 02-07-04 1:27a MODEMDET.TXT
WISO INI 1,351 12-17-03 2:18a WISO.INI
TMPDELIS BAT 122 12-17-03 12:50a tmpdelis.bat
BUHL INI 124 12-17-03 12:47a BUHL.INI
COMMAND PIF 967 12-14-03 4:53a COMMAND.PIF
IWDATA INI 24 12-14-03 4:51a IWDATA.INI
GOLDWAVE INI 2,383 11-29-03 6:37a goldwave.ini
WMSYSPRX PRX 288,880 07-29-03 3:38p WMSysPrx.prx
DITEXP EXE 61,440 07-11-03 10:31a DitExp.exe
STORPG98 DLL 8,192 05-30-03 3:14p storpg98.dll
REM EXE 16,896 03-28-03 4:23p REM.EXE
UNVISE32 EXE 90,112 03-15-03 11:15p unvise32.exe
WJVIEW EXE 171,792 02-28-03 6:26p WJVIEW.EXE
SETDEBUG EXE 46,352 02-28-03 6:26p SETDEBUG.EXE
JVIEW EXE 172,304 02-28-03 6:26p JVIEW.EXE
CLSPACK EXE 49,424 02-28-03 6:26p CLSPACK.EXE
JAUTOEXP DAT 6,550 02-28-03 4:35p JAUTOEXP.DAT
QVSTWR~1 EXE 40,960 01-03-03 4:22p qvstwrapper_ui.exe
EXTRAC32 EXE 132,608 08-29-02 12:00a EXTRAC32.EXE
GRPCONV EXE 38,160 08-29-02 12:00a GRPCONV.EXE
TELEPHON INI 225 07-16-02 4:01p TELEPHON.INI
NCVK32 INI 32 07-08-02 8:54p ncvk32.ini
SOFTEK INI 221 07-05-02 11:40p SOFTEK.INI
HH EXE 10,752 06-10-02 8:56p hh.exe
STANDARD PWL 1,672 02-22-02 3:02p STANDARD.PWL
PLUGIN~1 TRA 604 01-05-02 2:27a plugin130_01.trace
MMPROX~1 MDB 204,800 12-13-01 5:15a mmproxy_301.mdb
MMPROX~2 MDB 100,352 12-13-01 5:08a mmproxy_301_Backup.mdb
ACROREAD INI 2,407 11-21-01 2:03a ACROREAD.INI
REASON~2 DAT 5,402,406 09-16-01 12:59a Reason Graphics Cache.dat
NAVWNT MIF 1,502 08-18-01 1:38a NAVWNT.MIF
AVPM INI 383 08-16-01 4:34p avpm.ini
AVPSETUP INI 1,922 08-16-01 3:44p avpsetup.ini
EXPRESS EQX 3,362 08-14-01 12:26a express.eqx
GWPRESET INI 6,592 08-14-01 12:26a gwpreset.ini
__PP_D~1 M3D 27,086 07-21-01 8:57a __pp_database30.m3d
M3PPRE~1 DTB 4 07-21-01 8:21a m3pprender.dtb
DDCLIP INI 3,523 07-21-01 3:20a DDCLIP.INI
ST6UNST EXE 74,752 07-01-01 12:44p ST6UNST.EXE
WSCRIPT EXE 118,834 06-26-01 5:53p WSCRIPT.EXE
NET2FONE INI 470 06-21-01 2:11a net2fone.ini
SERVICES 1,143 06-18-01 4:27a SERVICES
FFMRICJ PLD 11,562 06-15-01 2:08a ffmricj.pld
KCEUVMX UHP 11,625 06-15-01 2:08a kceuvmx.uhp
XPQFHJ DUU 11,724 06-15-01 2:06a xpqfhj.duu
CJOEXOPI NHL 46,592 06-15-01 2:00a cjoexopi.nhl
AVP32 INI 766 06-08-01 11:14p avp32.ini
REX DLL 258,048 05-18-01 5:43p REX.dll
REWIRE DLL 180,224 05-09-01 11:49a ReWire.dll
JAVA EXE 20,547 05-06-01 11:14a java.exe
JAVAW EXE 20,549 05-06-01 11:14a javaw.exe
MIDICO~1 INI 0 04-23-01 1:03a MIDI CONTROLLER MAPPER.INI
IFILTSET INI 4,305 04-10-01 1:41a IFiltSet.Ini
REGTLIB EXE 40,960 03-16-01 12:45a REGTLIB.EXE
LITEON EXE 174,947 03-08-01 8:39p liteon.exe
MOZREG~1 DAT 543 02-20-01 3:28p mozregistry.dat
WACAM INI 724 02-16-01 3:51p wacam.ini
CONTROL INI 1,263 01-26-01 10:56p CONTROL.INI
ICEASIO DLL 61,440 12-12-00 1:39p ICEASIO.DLL
UNGINS EXE 122,880 12-08-00 10:59p UnGins.exe
NSREG DAT 335 12-07-00 3:01a nsreg.dat
NPS6301 ICO 2,870 11-29-00 4:06a nps6301.ico
NPS6300 ICO 2,870 11-29-00 4:06a nps6300.ico
GPINST~1 EXE 764,416 10-17-00 10:38a GPInstall.exe
DELMEEWX INI 1,199 10-13-00 11:09a DELMEEWX.INI
DELMEEWS INI 1,178 10-13-00 11:07a DELMEEWS.INI
DELME32 EXE 40,960 10-13-00 10:58a DELME32.EXE
DOSSTART BAT 19 10-07-00 5:02a DOSSTART.BAT
SNDSCAPE INI 198 10-07-00 5:02a sndscape.ini
ILTWAIN INI 33 09-26-00 12:32a iltwain.ini
IMAGEN~1 BMP 38,454 09-22-00 7:13p imageN-Wallpaper.bmp
WINFILE INI 10 09-22-00 12:58p winfile.ini
ABDLADFC 0 09-12-00 1:59a ABDLADFC
QTW QTW 28 09-05-00 10:52p QTW.QTW
QTW INI 76 09-05-00 10:51p QTW.INI
WININI QTW 9,257 09-05-00 10:51p WININI.QTW
SYSINI QTW 2,666 09-05-00 10:51p SYSINI.QTW
OMCAMDIB DLL 73,728 08-31-00 12:00p OMCAMDIB.DLL
OMCAMCAP EXE 135,168 08-31-00 12:00p OMCAMCAP.EXE
ADDACOFB 5,292,064 07-27-00 3:48a ADDACOFB
NPSC3A0 ICO 0 07-17-00 8:13p npsC3A0.ico
TESTBE~1 INI 0 07-08-00 5:05p TESTBEELD.INI
RNA PWL 722 07-07-00 7:44p Rna.PWL
CPUNUM~1 INI 0 06-19-00 6:11a CPUNUMBER.INI
MICROS~1 RTF 255 05-06-00 7:37a Microsoft Outlook Internet Settings.rtf
LOADQM EXE 7,536 05-03-00 5:23p LOADQM.EXE
RMTEMP~ EXE 736 04-29-00 1:53p RMTEMP~.EXE
IPPIE BMP 2,359,350 04-27-00 5:28a ippie.bmp
NPS32C4 ICO 0 04-15-00 6:19a nps32C4.ico
HWINFO DAT 356,384 03-26-00 2:44p HWINFO.DAT
MSOFFICE INI 28 03-26-00 1:32a msoffice.ini
CFOS INI 19 03-06-00 10:07p CFOS.INI
SYSTEM 003 2,212 02-22-00 1:22a system.003
SYSTEM 002 2,168 02-19-00 12:38a system.002
DEFAULT SFC 104,694 02-17-00 10:44p Default.sfc
ADBCDLBE 622,624 02-15-00 3:19a ADBCDLBE
SHAREMEM INI 22 02-14-00 3:34a SHAREMEM.INI
AVK8 INI 25 02-13-00 3:52a AVK8.INI
NREGEDIT INI 0 02-12-00 6:01p NREGEDIT.INI
PROGMAN INI 37 02-01-00 9:57p progman.ini
VBADDIN INI 35 01-26-00 8:49p vbaddin.ini
GRAMIT32 CFG 1,080 01-24-00 1:51a gramit32.cfg
SYSTEM 001 2,116 01-17-00 10:39p system.001
ATM INI 1,841 01-15-00 4:09a ATM.INI
SY______ PFB 31,586 01-15-00 4:09a SY______.PFB
ZD______ PFB 40,858 01-15-00 4:09a ZD______.PFB
ZX______ PFB 74,870 01-15-00 4:09a ZX______.PFB
ZY______ PFB 95,283 01-15-00 4:09a ZY______.PFB
MAXLINK INI 116 01-15-00 4:02a maxlink.ini
TB96 INI 81 01-15-00 4:02a TB96.INI
UNVISE~1 EXE 86,016 01-05-00 12:21a unvise32qt.exe
WATCH INI 0 01-02-00 5:47p WATCH.INI
TWUNK002 MTX 0 01-02-00 5:30p Twunk002.MTX
TWUNK003 MTX 0 01-02-00 5:30p TWUNK003.MTX
SPORDER DLL 11,264 12-23-99 2:12p sporder.dll
WMSYSPRF PRX 140,158 12-15-99 8:21p WMSYSPRF.PRX
SYSTEM NU4 3,780,640 12-04-99 8:54p SYSTEM.NU4
USER NU4 393,248 12-02-99 1:15p USER.NU4
CDMAN EXE 115,216 11-29-99 6:54p cdman.exe
UNARJ DLL 32,784 11-29-99 6:54p UNARJ.DLL
MICKEY32 DLL 29,696 11-23-99 9:03p MICKEY32.DLL
499SAVER EXE 2,612,576 11-23-99 9:03p 499SAVER.exe
499SAVER SCR 642,792 11-23-99 9:03p 499SAVER.scr
PORT_DE GPL 9,271 10-23-99 8:59p Port_DE.gpl
DEFAULT SF0 92,451 09-01-99 12:47p Default.sf0
HPFSCHED INI 195 09-01-99 12:27p hpfsched.ini
HPC INI 199 09-01-99 12:25p hpc.ini
MSINFO32 INI 0 08-20-99 5:35p MSINFO32.INI
STI_TR~1 LOG 0 08-20-99 12:42p Sti_Trace.log
MS-DOS~3 PIF 967 08-20-99 12:38p MS-DOS-Modus.PIF
IOS INI 12,369 08-20-99 12:34p IOS.INI
INFMODM INI 20 08-20-99 12:31p InfModM.ini
WGEDIT INI 29 08-20-99 12:29p wgedit.ini
DOSSTART 000 46 08-20-99 12:17p DOSSTART.000
SYSTEM 000 1,916 08-20-99 12:13p SYSTEM.000
FOLDER HTT 13,085 08-18-99 10:26a folder.htt
DESKTOP INI 266 08-18-99 10:26a desktop.ini
PROTOCOL INI 120 08-18-99 10:22a PROTOCOL.INI
SETVER EXE 19,131 08-18-99 10:20a SETVER.EXE
HIDCI DLL 3,216 08-18-99 10:19a HIDCI.DLL
PIDGEN DLL 27,616 08-18-99 10:14a PIDGEN.DLL
WINSOCK DLL 21,504 08-18-99 10:13a WINSOCK.DLL
MSBATCH INF 5,243 08-18-99 9:48a MSBATCH.INF
ISK3RO EXE 6,528 07-02-99 2:35p isk3ro.exe
WELC EXE 11,200 07-02-99 2:35p welc.exe
ADDLFNPR REG 115 05-05-99 10:22p ADDLFNPR.REG
MSDOS SYS 1,646 05-05-99 10:22p MSDOS.SYS
HWINFO EXE 114,688 05-05-99 10:22p HWINFO.EXE
NETDET INI 7,885 05-05-99 10:22p NETDET.INI
LICENSE TXT 25,158 05-05-99 10:22p LICENSE.TXT
SUPPORT TXT 933 05-05-99 10:22p SUPPORT.TXT
MPLAYER EXE 159,744 05-05-99 10:22p MPLAYER.EXE
RUNHELP CAB 6,325 05-05-99 10:22p RUNHELP.CAB
NDDEAPI DLL 14,327 05-05-99 10:22p NDDEAPI.DLL
NDDENB DLL 10,976 05-05-99 10:22p NDDENB.DLL
SCRIPT DOC 28,160 05-05-99 10:22p SCRIPT.DOC
DOSREP EXE 89,147 05-05-99 10:22p DOSREP.EXE
DRWATSON EXE 143,360 05-05-99 10:22p DRWATSON.EXE
EXPLORER EXE 180,224 05-05-99 10:22p EXPLORER.EXE
FONTVIEW EXE 49,152 05-05-99 10:22p FONTVIEW.EXE
MSNMGSR1 EXE 65,536 05-05-99 10:22p MSNMGSR1.EXE
NETDDE EXE 56,880 05-05-99 10:22p NETDDE.EXE
PIDSET EXE 40,960 05-05-99 10:22p PIDSET.EXE
SIGVERIF EXE 131,072 05-05-99 10:22p SIGVERIF.EXE
TUNEUP EXE 110,592 05-05-99 10:22p TUNEUP.EXE
UPWIZUN EXE 57,344 05-05-99 10:22p UPWIZUN.EXE
WINREP EXE 442,368 05-05-99 10:22p WINREP.EXE
BACKGRND GIF 103,582 05-05-99 10:22p BACKGRND.GIF
CLOUD GIF 11,306 05-05-99 10:22p CLOUD.GIF
CONTENT GIF 262 05-05-99 10:22p CONTENT.GIF
HLPBELL GIF 1,407 05-05-99 10:22p HLPBELL.GIF
HLPCD GIF 1,492 05-05-99 10:22p HLPCD.GIF
HLPGLOBE GIF 1,603 05-05-99 10:22p HLPGLOBE.GIF
HLPLOGO GIF 1,185 05-05-99 10:22p HLPLOGO.GIF
HLPSTEP1 GIF 1,107 05-05-99 10:22p HLPSTEP1.GIF
HLPSTEP2 GIF 1,154 05-05-99 10:22p HLPSTEP2.GIF
HLPSTEP3 GIF 1,249 05-05-99 10:22p HLPSTEP3.GIF
WINLOGO GIF 1,434 05-05-99 10:22p WINLOGO.GIF
HTMLHELP HTM 520 05-05-99 10:22p HTMLHELP.HTM
README HTM 626 05-05-99 10:22p README.HTM
READM_01 HTZ 621 05-05-99 10:22p READM_01.HTZ
READM_02 HTZ 4,848 05-05-99 10:22p READM_02.HTZ
DELETEFI INI 5,120 05-05-99 10:22p DELETEFI.INI
DOSREP INI 865 05-05-99 10:22p DOSREP.INI
HTMLHELP INI 3,598 05-05-99 10:22p HTMLHELP.INI
DELUXECD MDB 143,360 05-05-99 10:22p DELUXECD.MDB
DOSPRMPT PIF 545 05-05-99 10:22p DOSPRMPT.PIF
EXPLORER SCF 80 05-05-99 10:22p EXPLORER.SCF
ALLGEM TXT 49,597 05-05-99 10:22p ALLGEM.TXT
ANTWORT TXT 16,709 05-05-99 10:22p ANTWORT.TXT
ANZEIGE TXT 25,256 05-05-99 10:22p ANZEIGE.TXT
CONFIG TXT 19,838 05-05-99 10:22p CONFIG.TXT
DRUCKER TXT 27,816 05-05-99 10:22p DRUCKER.TXT
HARDWARE TXT 41,217 05-05-99 10:22p HARDWARE.TXT
MAUS TXT 6,848 05-05-99 10:22p MAUS.TXT
MSDOSDRV TXT 50,441 05-05-99 10:22p MSDOSDRV.TXT
NETZWERK TXT 38,518 05-05-99 10:22p NETZWERK.TXT
PROGRAMM TXT 53,845 05-05-99 10:22p PROGRAMM.TXT
RECOVER TXT 5,211 05-05-99 10:22p RECOVER.TXT
TIPS TXT 16,798 05-05-99 10:22p TIPS.TXT
SMARTDRV EXE 45,379 05-05-99 10:22p SMARTDRV.EXE
HIMEM SYS 33,447 05-05-99 10:22p HIMEM.SYS
RAMDRIVE SYS 12,823 05-05-99 10:22p RAMDRIVE.SYS
LOGOS SYS 129,078 05-05-99 10:22p LOGOS.SYS
LOGOW SYS 129,080 05-05-99 10:22p LOGOW.SYS
1STBOOT BMP 1,518 05-05-99 10:22p 1STBOOT.BMP
KREISE BMP 190 05-05-99 10:22p Kreise.bmp
WALD BMP 66,146 05-05-99 10:22p Wald.bmp
METALL BMP 36,182 05-05-99 10:22p Metall.bmp
STREIFEN BMP 578 05-05-99 10:22p Streifen.bmp
KACHELN BMP 578 05-05-99 10:22p Kacheln.bmp
SETUP BMP 308,280 05-05-99 10:22p Setup.bmp
WOLKEN BMP 307,514 05-05-99 10:22p Wolken.bmp
WIN COM 25,399 05-05-99 10:22p WIN.COM
CONFDENT CPE 4,627 05-05-99 10:22p CONFDENT.CPE
FYI CPE 4,878 05-05-99 10:22p FYI.CPE
GENERIC CPE 6,366 05-05-99 10:22p GENERIC.CPE
URGENT CPE 4,772 05-05-99 10:22p URGENT.CPE
MORICONS DLL 84,416 05-05-99 10:22p MORICONS.DLL
MSOWS407 DLL 127,032 05-05-99 10:22p MSOWS407.DLL
ACCSTAT EXE 40,960 05-05-99 10:22p ACCSTAT.EXE
ASD EXE 61,440 05-05-99 10:22p ASD.EXE
CALC EXE 94,208 05-05-99 10:22p CALC.EXE
CLEANMGR EXE 131,072 05-05-99 10:22p CLEANMGR.EXE
CONTROL EXE 2,151 05-05-99 10:22p CONTROL.EXE
CVT1 EXE 118,784 05-05-99 10:22p CVT1.EXE
CVTAPLOG EXE 77,824 05-05-99 10:22p CVTAPLOG.EXE
DEFRAG EXE 253,991 05-05-99 10:22p DEFRAG.EXE
DRVSPACE EXE 414,123 05-05-99 10:22p DRVSPACE.EXE
EMM386 EXE 126,695 05-05-99 10:22p EMM386.EXE
REGEDIT EXE 122,880 05-05-99 10:22p REGEDIT.EXE
MM2ENT EXE 32,768 05-05-99 10:22p MM2ENT.EXE
NOTEPAD EXE 57,344 05-05-99 10:22p NOTEPAD.EXE
PACKAGER EXE 81,920 05-05-99 10:22p PACKAGER.EXE
PBRUSH EXE 20,480 05-05-99 10:22p PBRUSH.EXE
PROGMAN EXE 114,039 05-05-99 10:22p PROGMAN.EXE
RG2CATDB EXE 40,960 05-05-99 10:22p RG2CATDB.EXE
RUNDLL EXE 5,191 05-05-99 10:22p RUNDLL.EXE
RUNDLL32 EXE 24,576 05-05-99 10:22p RUNDLL32.EXE
SCANDSKW EXE 5,051 05-05-99 10:22p SCANDSKW.EXE
SCANREGW EXE 90,112 05-05-99 10:22p SCANREGW.EXE
SNDREC32 EXE 114,688 05-05-99 10:22p SNDREC32.EXE
SNDVOL32 EXE 69,632 05-05-99 10:22p SNDVOL32.EXE
TASKMAN EXE 49,152 05-05-99 10:22p TASKMAN.EXE
TASKMON EXE 28,672 05-05-99 10:22p TASKMON.EXE
VCMUI EXE 45,056 05-05-99 10:22p VCMUI.EXE
WELCOME EXE 282,624 05-05-99 10:22p WELCOME.EXE
WINFILE EXE 158,039 05-05-99 10:22p WINFILE.EXE
WINHELP EXE 2,519 05-05-99 10:22p WINHELP.EXE
WINHLP32 EXE 323,584 05-05-99 10:22p WINHLP32.EXE
WININIT EXE 42,181 05-05-99 10:22p WININIT.EXE
WINVER EXE 3,751 05-05-99 10:22p WINVER.EXE
WRITE EXE 20,480 05-05-99 10:22p WRITE.EXE
WUPDMGR EXE 57,344 05-05-99 10:22p WUPDMGR.EXE
WINUPD ICO 10,134 05-05-99 10:22p WINUPD.ICO
DRVSPACE INF 1,121 05-05-99 10:22p DRVSPACE.INF
SCANREG INI 787 05-05-99 10:22p SCANREG.INI
KUGELN BMP 2,118 05-05-99 10:22p Kugeln.bmp
ASPI2HLP SYS 1,105 05-05-99 10:22p ASPI2HLP.SYS
CMD640X SYS 24,626 05-05-99 10:22p CMD640X.SYS
CMD640X2 SYS 20,901 05-05-99 10:22p CMD640X2.SYS
DBLBUFF SYS 2,614 05-05-99 10:22p DBLBUFF.SYS
IFSHLP SYS 3,708 05-05-99 10:22p IFSHLP.SYS
SFCSYNC TXT 1,750 05-05-99 10:22p SFCSYNC.TXT
CDPLAYER EXE 106,496 05-05-99 10:22p CDPLAYER.EXE
CHARMAP EXE 17,431 05-05-99 10:22p CHARMAP.EXE
CLIPBRD EXE 18,871 05-05-99 10:22p CLIPBRD.EXE
DIALER EXE 69,935 05-05-99 10:22p DIALER.EXE
FREECELL EXE 29,019 05-05-99 10:22p FREECELL.EXE
KODAKIMG EXE 536,576 05-05-99 10:22p KODAKIMG.EXE
KODAKPRV EXE 114,688 05-05-99 10:22p KODAKPRV.EXE
MSHEARTS EXE 122,683 05-05-99 10:22p MSHEARTS.EXE
NETWATCH EXE 77,824 05-05-99 10:22p NETWATCH.EXE
RSRCMTR EXE 32,768 05-05-99 10:22p RSRCMTR.EXE
SOL EXE 171,699 05-05-99 10:22p SOL.EXE
SYSMON EXE 81,920 05-05-99 10:22p SYSMON.EXE
TOUR98 EXE 188,416 05-05-99 10:22p TOUR98.EXE
TWUNK_16 EXE 48,560 05-05-99 10:22p TWUNK_16.EXE
TWUNK_32 EXE 90,112 05-05-99 10:22p TWUNK_32.EXE
WINMINE EXE 24,391 05-05-99 10:22p WINMINE.EXE
SERVICES TXT 3,580 05-05-99 10:22p SERVICES.TXT
COMMAND COM 96,370 05-05-99 10:22p COMMAND.COM
SNMPAPI DLL 32,768 05-05-99 10:22p SNMPAPI.DLL
FTP EXE 45,056 05-05-99 10:22p FTP.EXE
INETMIB1 DLL 53,248 05-05-99 10:22p INETMIB1.DLL
HOSTS SAM 736 05-05-99 10:22p HOSTS.SAM
LMHOSTS SAM 3,717 05-05-99 10:22p LMHOSTS.SAM
NETSTAT EXE 32,768 05-05-99 10:22p NETSTAT.EXE
PING EXE 24,576 05-05-99 10:22p PING.EXE
ROUTE EXE 32,768 05-05-99 10:22p ROUTE.EXE
TELNET EXE 77,824 05-05-99 10:22p TELNET.EXE
TRACERT EXE 20,480 05-05-99 10:22p TRACERT.EXE
WINIPCFG EXE 53,248 05-05-99 10:22p WINIPCFG.EXE
IPCONFIG EXE 53,248 05-05-99 10:22p IPCONFIG.EXE
NBTSTAT EXE 34,543 05-05-99 10:22p NBTSTAT.EXE
ARP EXE 28,672 05-05-99 10:22p ARP.EXE
MS-DOS~1 PIF 3,181 05-05-99 10:22p MS-DOS-Modus f�r Spiele.pif
MS-DOS~2 PIF 3,372 05-05-99 10:22p MS-DOS-Modus f�r Spiele mit EMS- und XMS-Unterst�tzung.pif
STROHM~1 BMP 590 05-05-99 10:22p Strohmatte.bmp
ŽGYPTEN BMP 582 05-05-99 10:22p Žgypten.bmp
WELLEN BMP 190 05-05-99 10:22p Wellen.bmp
HAHNEN~1 BMP 470 05-05-99 10:22p Hahnentritt.bmp
DREIECKE BMP 198 05-05-99 10:22p Dreiecke.bmp
BLAUEN~1 BMP 194 05-05-99 10:22p Blaue Noppen.bmp
SCHWAR~1 BMP 182 05-05-99 10:22p Schwarzes Geflecht.bmp
ROTEST~1 BMP 2,754 05-05-99 10:22p Rote Steine.bmp
GOLDGE~1 BMP 32,850 05-05-99 10:22p Goldgeflecht.bmp
SANDST~1 BMP 32,854 05-05-99 10:22p Sandstein.bmp
MASCHEN BMP 4,678 05-05-99 10:22p Maschen.bmp
CHANNE~1 SCR 91,888 05-05-99 10:22p Channelbildschirmschoner.SCR
REGEDIT COM 122,880 05-05-99 10:22p REGEDIT.COM
DIRECTCC EXE 73,728 05-05-99 10:22p DIRECTCC.EXE
NET MSG 117,024 05-05-99 10:22p NET.MSG
NETH MSG 74,001 05-05-99 10:22p NETH.MSG
WINPOPUP EXE 28,299 05-05-99 10:22p WINPOPUP.EXE
NET EXE 356,134 05-05-99 10:22p NET.EXE
R COM 122,880 05-05-99 10:22p R.COM
HPFTBX20 EXE 178,944 03-05-99 1:42p HPFtbx20.exe
HPFSCHED EXE 36,352 03-03-99 2:54p hpfsched.exe
MSDFMAP INI 1,405 01-12-99 7:53p MSDFMAP.INI
DELTTSUL EXE 6,656 01-12-99 11:39a DELTTSUL.EXE
EYECAND3 INI 373,248 12-18-98 4:04p EyeCand3.INI
ISUN0407 EXE 328,704 11-17-98 1:44p IsUn0407.exe
ISUNINST EXE 306,688 10-29-98 4:45p IsUninst.exe
QFECHECK EXE 37,376 09-30-98 2:27p QFECHECK.EXE
EXE1 EXE 57,344 09-08-98 9:13a exe1.exe
STARTER EXE 22,528 08-26-98 3:10p STARTER.EXE
ENSMIX32 EXE 229,888 08-14-98 2:20p ENSMIX32.EXE
MIXRES32 DLL 280,576 08-07-98 1:00a MIXRES32.DLL
PROTOCOL 822 05-16-98 4:01a PROTOCOL
NETWORKS 466 05-16-98 4:01a NETWORKS
UNISTB32 EXE 34,304 03-13-98 1:02a UNISTB32.EXE
ILRC SCR 54 01-13-98 12:00a ilrc.scr
UNIN0407 EXE 299,008 10-13-97 8:55p unin0407.exe
UNINST EXE 299,520 04-08-97 8:08p uninst.exe
ULEADI~1 SCR 21,504 01-30-97 9:08p Ulead iPhoto Plus 4.SCR
ST5UNST EXE 71,680 01-16-97 12:00a ST5UNST.EXE
UN160407 EXE 252,928 11-06-96 12:46p UN160407.EXE
TWAIN DLL 87,392 10-21-96 2:51p TWAIN.DLL
TWAIN_32 DLL 77,312 10-21-96 2:51p TWAIN_32.DLL
ACROGRAF INI 27 06-25-96 2:46p ACROGRAF.INI
PLAYER EXE 61,024 06-16-95 2:03a PLAYER.EXE
README EXE 141,206 06-16-95 2:03a README.EXE
PLAYENU DLL 16,912 06-16-95 2:03a PLAYENU.DLL
VIEWENU DLL 17,536 06-16-95 2:03a VIEWENU.DLL
MCENU HLP 43,875 06-16-95 2:03a MCENU.HLP
SAMPLE MOV 234,594 06-16-95 2:03a SAMPLE.MOV
PLAYENU HLP 67,415 06-16-95 2:03a PLAYENU.HLP
VIEWENU HLP 36,412 06-16-95 2:03a VIEWENU.HLP
423 Datei(en) 253,875,576 Bytes
0 Verzeichnis(se) 1,012,54 MB frei

c:

Datentr„ger in Laufwerk C: FESTPLATTE
Seriennummer des Datentr„gers: 2126-11D6
Verzeichnis von C:\

SYS TXT 0 10-01-06 4:56p sys.txt
SYSTEM TXT 24,469 10-01-06 4:55p system.txt
SYSTEM~1 TXT 165 10-01-06 4:55p systemtemp.txt
SYSTEM32 TXT 510 10-01-06 4:54p system32.txt
INDEX INI 96 10-01-06 4:07p index.ini
PMDRV LOG 1,723,968 10-01-06 4:08a PMDRV.LOG
IMAGE IDX 29 09-30-06 2:32p IMAGE.IDX
IMAGE DAT 57,344 09-30-06 2:32p IMAGE.DAT
IMAGE BAK 57,344 09-30-06 2:32p IMAGE.BAK
SAFEOR~1 LNK 236 09-30-06 2:06p SafeOriginal-Verkn�pfung mit PMDRV.LOG.lnk
23990098 $$$ 357 09-30-06 2:49a 23990098.$$$
AVPCAL~1 LOG 4 09-30-06 2:49a AVPCallback.log
BOOTLOG TXT 62,481 09-29-06 9:33p BOOTLOG.TXT
BOOTLOG PRV 64,467 09-29-06 9:27p BOOTLOG.PRV
SCANDISK LOG 516 09-29-06 8:11p SCANDISK.LOG
ASD LOG 1,429 09-16-06 12:56a ASD.LOG
YSERVER TXT 206 09-02-06 5:25a YServer.txt
SETUPXLG TXT 3,067 08-14-06 11:24p SETUPXLG.TXT
CONFIG SY_ 14 08-07-06 1:25a config.sy_
AVG7QT DAT 2,069,761 03-27-06 12:08p AVG7QT.DAT
AUTOEXEC BAT 357 03-27-06 11:48a AUTOEXEC.BAT
BERICHT2 2,789 02-02-06 1:14a BERICHT2
BERICHT0 5,337 02-02-06 1:13a BERICHT0
FILE0139 _DD 147,456 12-07-05 1:42p FILE0139._DD
FILE0140 _DD 4,096 12-07-05 1:42p FILE0140._DD
FILE0141 _DD 147,456 12-07-05 1:42p FILE0141._DD
FILE0142 _DD 4,096 12-07-05 1:42p FILE0142._DD
FILE0081 _DD 4,096 12-07-05 1:42p FILE0081._DD
FILE0082 _DD 4,096 12-07-05 1:42p FILE0082._DD
FILE0083 _DD 4,096 12-07-05 1:42p FILE0083._DD
FILE0084 _DD 20,480 12-07-05 1:42p FILE0084._DD
FILE0085 _DD 4,096 12-07-05 1:42p FILE0085._DD
FILE0086 _DD 12,288 12-07-05 1:42p FILE0086._DD
FILE0087 _DD 147,456 12-07-05 1:42p FILE0087._DD
FILE0088 _DD 4,096 12-07-05 1:42p FILE0088._DD
FILE0089 _DD 147,456 12-07-05 1:42p FILE0089._DD
FILE0090 _DD 4,096 12-07-05 1:42p FILE0090._DD
FILE0091 _DD 4,096 12-07-05 1:42p FILE0091._DD
FILE0092 _DD 61,440 12-07-05 1:42p FILE0092._DD
FILE0093 _DD 53,248 12-07-05 1:42p FILE0093._DD
FILE0094 _DD 380,928 12-07-05 1:42p FILE0094._DD
FILE0095 _DD 4,096 12-07-05 1:42p FILE0095._DD
FILE0096 _DD 147,456 12-07-05 1:42p FILE0096._DD
FILE0097 _DD 147,456 12-07-05 1:42p FILE0097._DD
FILE0098 _DD 4,096 12-07-05 1:42p FILE0098._DD
FILE0099 _DD 20,480 12-07-05 1:42p FILE0099._DD
FILE0100 _DD 36,864 12-07-05 1:42p FILE0100._DD
FILE0133 _DD 147,456 12-07-05 1:42p FILE0133._DD
FILE0134 _DD 20,480 12-07-05 1:42p FILE0134._DD
FILE0135 _DD 4,096 12-07-05 1:42p FILE0135._DD
FILE0136 _DD 4,096 12-07-05 1:42p FILE0136._DD
FILE0137 _DD 4,096 12-07-05 1:42p FILE0137._DD
FILE0138 _DD 2,048,000 12-07-05 1:42p FILE0138._DD
FILE0068 _DD 73,728 12-07-05 1:42p FILE0068._DD
FILE0069 _DD 4,096 12-07-05 1:42p FILE0069._DD
FILE0070 _DD 4,096 12-07-05 1:42p FILE0070._DD
FILE0073 _DD 4,096 12-07-05 1:42p FILE0073._DD
FILE0074 _DD 4,096 12-07-05 1:42p FILE0074._DD
FILE0075 _DD 4,096 12-07-05 1:42p FILE0075._DD
FILE0076 _DD 4,096 12-07-05 1:42p FILE0076._DD
FILE0077 _DD 4,096 12-07-05 1:42p FILE0077._DD
FILE0078 _DD 4,096 12-07-05 1:42p FILE0078._DD
FILE0079 _DD 4,096 12-07-05 1:42p FILE0079._DD
FILE0071 _DD 4,096 12-07-05 1:42p FILE0071._DD
FILE0072 _DD 4,096 12-07-05 1:42p FILE0072._DD
FILE0080 _DD 4,096 12-07-05 1:42p FILE0080._DD
EYECAN~1 TXT 15,008 11-09-05 2:15a EyeCandyLog.txt
BERICHTN 7,985 11-01-05 1:31a BERICHTN
BERICHT1 7,507 10-20-05 1:44a BERICHT1
FILE0050 _DD 147,456 10-20-05 1:41a FILE0050._DD
FILE0051 _DD 147,456 10-20-05 1:41a FILE0051._DD
FILE0052 _DD 4,096 10-20-05 1:41a FILE0052._DD
FILE0053 _DD 16,384 10-20-05 1:41a FILE0053._DD
FILE0054 _DD 147,456 10-20-05 1:41a FILE0054._DD
FILE0055 _DD 4,096 10-20-05 1:41a FILE0055._DD
FILE0056 _DD 147,456 10-20-05 1:41a FILE0056._DD
FILE0057 _DD 147,456 10-20-05 1:41a FILE0057._DD
FILE0058 _DD 4,096 10-20-05 1:41a FILE0058._DD
FILE0059 _DD 147,456 10-20-05 1:41a FILE0059._DD
FILE0060 _DD 8,192 10-20-05 1:41a FILE0060._DD
FILE0061 _DD 20,480 10-20-05 1:41a FILE0061._DD
FILE0062 _DD 16,384 10-20-05 1:41a FILE0062._DD
FILE0063 _DD 4,096 10-20-05 1:41a FILE0063._DD
FILE0064 _DD 147,456 10-20-05 1:41a FILE0064._DD
FILE0065 _DD 4,096 10-20-05 1:41a FILE0065._DD
FILE0066 _DD 147,456 10-20-05 1:41a FILE0066._DD
FILE0067 _DD 4,096 10-20-05 1:41a FILE0067._DD
FILE0035 _DD 4,096 10-20-05 1:41a FILE0035._DD
FILE0036 _DD 4,096 10-20-05 1:41a FILE0036._DD
FILE0037 _DD 4,096 10-20-05 1:41a FILE0037._DD
FILE0038 _DD 4,096 10-20-05 1:41a FILE0038._DD
FILE0039 _DD 4,096 10-20-05 1:41a FILE0039._DD
FILE0040 _DD 4,096 10-20-05 1:41a FILE0040._DD
FILE0046 _DD 352,256 10-20-05 1:41a FILE0046._DD
FILE0047 _DD 20,480 10-20-05 1:41a FILE0047._DD
FILE0048 _DD 4,096 10-20-05 1:41a FILE0048._DD
FILE0049 _DD 4,096 10-20-05 1:41a FILE0049._DD
FILE0041 _DD 4,096 10-20-05 1:41a FILE0041._DD
FILE0042 _DD 4,096 10-20-05 1:41a FILE0042._DD
FILE0043 _DD 4,096 10-20-05 1:41a FILE0043._DD
FILE0044 _DD 4,096 10-20-05 1:41a FILE0044._DD
FILE0045 _DD 4,096 10-20-05 1:41a FILE0045._DD
FRONTPG LOG 1,416 10-19-05 3:36a FRONTPG.LOG
DATEI58 TXT 45,056 04-02-05 6:58p Datei58.txt
FILE0031 _DD 4,096 02-13-05 8:31p FILE0031._DD
FILE0032 _DD 8,192 02-13-05 8:31p FILE0032._DD
FILE0033 _DD 8,192 02-13-05 8:31p FILE0033._DD
FILE0034 _DD 8,192 02-13-05 8:31p FILE0034._DD
DETLOG TXT 75,516 02-07-04 1:26a DETLOG.TXT
TMP___ 32,622 12-09-03 5:56a tmp___
AUTOST~1 EXE 2,520,091 09-21-03 1:07p autostartmanager-setup.exe
ADRESS~1 TXT 3,142 09-19-03 12:55a adressen_export.txt
COMMAND PIF 967 09-19-03 12:41a COMMAND.PIF
CONFIG SYS 299 07-29-03 2:55p Config.sys
PSPBRWSE JBF 6,699 06-09-02 4:08p pspbrwse.jbf
MOZI HTM 807 07-11-01 3:32a mozi.htm
MPFULL EXE 3,603,440 07-09-01 4:24a mpfull.exe
MPG4C32 ZIP 137,359 07-09-01 4:11a Mpg4c32.zip
OS524657 BIN 440 02-15-01 4:24a os524657.bin
DETLOG OLD 72,663 12-22-00 1:52a DETLOG.OLD
N2PINST LOG 10,379 12-07-00 2:58a N2pInst.log
N2PACT~1 LOG 0 12-07-00 2:58a N2PActiveX.log
WINZIP LOG 8,889 11-23-00 9:22p winzip.log
FILE0030 _DD 53,248 09-15-00 2:38a FILE0030._DD
FILE0027 _DD 3,637,248 09-15-00 2:29a FILE0027._DD
FILE0028 _DD 4,096 09-15-00 2:29a FILE0028._DD
FILE0029 _DD 4,096 09-15-00 2:29a FILE0029._DD
CONFIG TSH 111 09-06-00 3:25a CONFIG.TSH
AUTOEXEC TSH 178 09-06-00 3:25a AUTOEXEC.TSH
CONFIG CTL 240 09-06-00 3:25a Config.ctl
FILE0021 _DD 20,480 09-06-00 1:35a FILE0021._DD
FILE0024 _DD 20,480 09-06-00 1:35a FILE0024._DD
FILE0025 _DD 24,576 09-06-00 1:35a FILE0025._DD
FILE0026 _DD 3,293,184 09-06-00 1:35a FILE0026._DD
MSDOS SYS 1,684 08-24-00 4:34a MSDOS.SYS
FILE0019 _DD 278,528 07-31-00 3:39a FILE0019._DD
FILE0020 _DD 270,336 07-31-00 3:39a FILE0020._DD
FILE0022 _DD 282,624 07-31-00 3:39a FILE0022._DD
FILE0023 _DD 172,032 07-31-00 3:39a FILE0023._DD
FILE0014 _DD 8,192 07-27-00 3:51a FILE0014._DD
FILE0015 _DD 8,192 07-27-00 3:51a FILE0015._DD
FILE0016 _DD 4,096 07-27-00 3:51a FILE0016._DD
FILE0017 _DD 86,016 07-27-00 3:51a FILE0017._DD
FILE0018 _DD 2,494,464 07-27-00 3:51a FILE0018._DD
FILE0013 _DD 53,248 07-06-00 5:16a FILE0013._DD
FILE0011 _DD 1,576,960 05-20-00 1:34a FILE0011._DD
FILE0009 _DD 2,048,000 05-19-00 2:35a FILE0009._DD
FILE0010 _DD 53,248 05-19-00 2:35a FILE0010._DD
FILE0012 _DD 188,416 05-19-00 2:35a FILE0012._DD
FILE0008 _DD 53,248 05-15-00 2:50a FILE0008._DD
FILE0007 _DD 53,248 05-07-00 3:12a FILE0007._DD
BERICHT 2,906 05-04-00 3:38a BERICHT
CLUSTER 3,176 04-27-00 2:51a CLUSTER
FILE0004 _DD 4,096 04-27-00 2:50a FILE0004._DD
FILE0005 _DD 53,248 04-27-00 2:50a FILE0005._DD
FILE0006 _DD 16,384 04-27-00 2:50a FILE0006._DD
FILE0003 _DD 53,248 04-22-00 3:01a FILE0003._DD
FILE0001 _DD 53,248 04-16-00 3:36a FILE0001._DD
FILE0002 _DD 8,192 04-16-00 3:36a FILE0002._DD
RKEXT DLL 6,103,040 03-22-00 10:54p RkExt.dll
RKEXTFX DLL 6,103,040 03-22-00 10:54p RkExtfx.dll
FILE0000 _DD 40,960 02-12-00 7:01p FILE0000._DD
AUTOEXEC NU4 178 12-04-99 8:56p AUTOEXEC.NU4
RESETLOG TXT 225 09-12-99 4:07p RESETLOG.TXT
NETLOG TXT 440 09-01-99 5:21p NETLOG.TXT
SUHDLOG DAT 7,809 08-18-99 10:20a SUHDLOG.DAT
SYSTEM 1ST 679,968 08-18-99 10:20a SYSTEM.1ST
LOGO SYS 129,078 08-18-99 9:57a LOGO.SYS
UNWISE EXE 149,504 06-25-99 10:55a UNWISE.EXE
IO SYS 222,390 05-05-99 10:22p IO.SYS
COMMAND COM 96,370 05-05-99 10:22p COMMAND.COM
3AVJAW3W SYS 960 05-05-99 10:22p 3avjaw3w.sys
172 Datei(en) 44,631,104 Bytes
0 Verzeichnis(se) 1,012,52 MB frei


Persönliche Daten hab ich mit (XXX) unkenntlich gemacht. Diese ganzen FILE000_DD stammen, glaube ich, von Norton nach zahlreichen Abstürzen der letzten Monate (verlorene Cluster etc.).

Bin jetzt schon für Tipps dankbar!

Grüße
Ruebezahl

#2 an Win98 gehe ich nicht ran, weil ich mich damit nicht auskenne, du kannst nur machen, was du schon getan hast- scannen, in der Hoffnung, dass die virenscanner alle Malware rausholen

McAfee FreeScan
Trend-Micro/HouseCall
Panda
http://virus-protect.org/onlinescan.html
__________
MfG Sabina

rund um die PC-Sicherheit

#3 Danke für die Antwort! Dann scanne ich mal lustig weiter.

Die infizierte Datei C:\WINDOWS\SYSTEM\mshlpa.exe , die eScan als "Trojan-Downloader.Win32.Mediket.df" identifiziert hat, hab ich ja noch ...

Ob ich die von Hand löschen kann?

Grüße
Ruebezahl

#4

Zitat

Ob ich die von Hand löschen kann?

Sollte kein Problem sein.
Mach einen Online-Scan @ http://www.kaspersky.com/virusscanner
und checke ein paar Files, die bei der Auswertung deines Logs auf hijackthis.de als "unbekannt" markiert sind.
__________
Durchsuchen --> Aussuchen --> Untersuchen

#5 Die Files, die hijackthis als unbekannt markiert hat, habe ich gecheckt. Keine
Probleme damit. Der Online-Scan von Panda hat etwas gefunden, das aber
auf meinem Rechner nicht zu finden ist. Die ersten Meldungen sind "desinfiziert". Hat mein üblicher Virenscanner möglicherweise mal gefunden und bereinigt. Die Quarantäne hab ich allerdings schon längst geleert.

Panda:

Virus:Trj/dmRandom.DV Disinfected C:\WINDOWS\SYSTEM\csims.exe

Virus:Trj/dmRandom.DV Disinfected C:\WINDOWS\SYSTEM\csxcv.exe

Virus:Trj/dmRandom.DV Disinfected C:\WINDOWS\SYSTEM\cszmi.exe

Virus:Trj/dmRandom.DV Disinfected C:\WINDOWS\SYSTEM\csxef.exe

Wie kann Panda die Dateien finden und ich nicht?

Grüße
Ruebezahl

#6 die dateien vom Wareout sind versteckt.- ich kann sie sichtbar machen, aber nicht bei Win98

schau, ob das auf deinem System funktioniert
http://virus-protect.org/artikel/tools/fixwareout.html
wenn ja, poste den repeort
__________
MfG Sabina

rund um die PC-Sicherheit

#7 Danke für den Tipp!

Hier der Report von fixwareout:

Reg Entries that were deleted
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\casmd
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\0mdm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\1mdm


Random Runs removed from HKLM
"dmsac.exe"=-
"csuet.exe"=-
...

PLEASE NOTE THAT ALL FILES FOUND BY THIS METHOD ARE NOT BAD FILES, There WILL be legitimate FILES LISTED. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE.

»»»»» Search by size and names...

»»»»» Misc files

»»»»»
Search five digit cs, dm and jb files
This WILL/CAN also list Legit Files, Submit them at Virustotal
C:\WINDOWS\SYSTEM\CSUET.EXE 51,800 2006-09-27
C:\WINDOWS\SYSTEM\DMSAC.EXE 61,027 1999-05-05

Immerhin was gefunden, wenn auch nicht die Dateien, auf die Panda hingewiesen hat. Hmmm ...

Grüße
Popeye

#8 killboxhttp://virus-protect.org/killbox.html
Options: "Delete on Reboot" und "Single File"--> anhaken
und klicke auf das rote Kreuz, wenn gefragt wird, ob "Do you want to reboot? "---- klicke auf "no",und kopiere das nächste rein, erst beim letzten auf "yes"
reinkopieren: ............

C:\WINDOWS\SYSTEM\CSUET.EXE
C:\WINDOWS\SYSTEM\DMSAC.EXE

PC neustarten

scanne mit Trend-Micro/HouseCall
http://virus-protect.org/onlinescan.html
__________
MfG Sabina

rund um die PC-Sicherheit

#9 Hallo Sabina,

habe die beiden Dateien mit Killbox entfernt. Beim Booten kam die Norton-Scanroutine mit dem Hinweis, eine Systemdatei hätte nicht wieder hergestellt werden können. Windows hat aber trotzdem gestartet. Ich habe dann Norton Utilities nach Fehlern suchen und einige ungültige Registrierungseinträge löschen lassen. Der nächste Neustart hat problemlos geklappt.

Die von Killbox gelöschten Dateien befinden sich jetzt im Ordner C:\!Killbox - dort wo sich auch das Logfile von Killbox befindet. Soll ich die beiden .exe-Dateien jetzt von Hand löschen?

Soll ich die Dateien, die Panda gefunden hat ebenfalls von Killbox entfernen lassen?

Das waren die hier:

Virus:Trj/dmRandom.DV Disinfected C:\WINDOWS\SYSTEM\csims.exe

Virus:Trj/dmRandom.DV Disinfected C:\WINDOWS\SYSTEM\csxcv.exe

Virus:Trj/dmRandom.DV Disinfected C:\WINDOWS\SYSTEM\cszmi.exe

Virus:Trj/dmRandom.DV Disinfected C:\WINDOWS\SYSTEM\csxef.exe

Die sind ja laut Panda "desinfiziert" und auf meinem Rechner für mich nicht zu finden ...

Danke und Grüße
Ruebezahl

#10 panda hat die dateien uebrigens schon deinfiziert....ansonsten, loesche alles in der killbox
__________
MfG Sabina

rund um die PC-Sicherheit