Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Battle.net Passwort wurde durch dritte geändert

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.

Antwort
Alt 16.08.2014, 14:05   #1
Rubberfly
 
Battle.net Passwort wurde durch dritte geändert - Standard

Battle.net Passwort wurde durch dritte geändert



Gestern Abend wollte ich mich in meinen Battle.net Account einloggen. Leider scheint mein Passwort, sowie die Geheimfrage geändert worden zu sein. Aus dem Postfach der E-Mailadresse konnte ich entnehmen, dass eine Passwortzurücksetzung, sowie eine Änderung der Accountinformationen durchgeführt wurde. Mein Verdacht fällt dabei auf einen Keylogger, der sich in mein System eingeschlichen hat.

Ich bitte um Hilfe, und bedanke mich im Voraus.

Alt 16.08.2014, 14:33   #2
schrauber
/// the machine
/// TB-Ausbilder
 

Battle.net Passwort wurde durch dritte geändert - Standard

Battle.net Passwort wurde durch dritte geändert



Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.
Ich kann auf Arbeit keine Anhänge öffnen, danke.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
__________________

__________________

Alt 16.08.2014, 14:47   #3
Rubberfly
 
Battle.net Passwort wurde durch dritte geändert - Standard

Battle.net Passwort wurde durch dritte geändert



Verzeihung, hier sind die Logfiles in dem gewünschten Format.

GMER:
Code:
ATTFilter
GMER Logfile:
Code:
ATTFilter
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-08-16 13:49:58
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP4T0L0-6 Samsung_SSD_840_Series rev.DXT08B0Q 111,79GB
Running: Gmer-19357.exe; Driver: C:\Users\Richard\AppData\Local\Temp\ufliqfow.sys


---- User code sections - GMER 2.1 ----

.text  C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe[1768] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69    0000000074af1465 2 bytes [AF, 74]
.text  C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe[1768] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155   0000000074af14bb 2 bytes [AF, 74]
.text  ...                                                                                                                             * 2
.text  C:\Users\Richard\AppData\Roaming\Spotify\spotify.exe[344] C:\Windows\SysWOW64\ntdll.dll!DbgBreakPoint                           0000000076f1000c 1 byte [C3]
.text  C:\Users\Richard\AppData\Roaming\Spotify\spotify.exe[344] C:\Windows\SysWOW64\ntdll.dll!DbgUiRemoteBreakin                      0000000076f9f8ea 5 bytes JMP 0000000176f4d5c1
.text  C:\Users\Richard\AppData\Roaming\Spotify\spotify.exe[344] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69               0000000074af1465 2 bytes [AF, 74]
.text  C:\Users\Richard\AppData\Roaming\Spotify\spotify.exe[344] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155              0000000074af14bb 2 bytes [AF, 74]
.text  ...                                                                                                                             * 2
.text  C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe[2148] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69        0000000074af1465 2 bytes [AF, 74]
.text  C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe[2148] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155       0000000074af14bb 2 bytes [AF, 74]
.text  ...                                                                                                                             * 2
.text  C:\Users\Richard\AppData\Roaming\Spotify\Data\SpotifyHelper.exe[1072] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   0000000074af1465 2 bytes [AF, 74]
.text  C:\Users\Richard\AppData\Roaming\Spotify\Data\SpotifyHelper.exe[1072] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  0000000074af14bb 2 bytes [AF, 74]
.text  ...                                                                                                                             * 2
.text  C:\Users\Richard\AppData\Roaming\Spotify\Data\SpotifyHelper.exe[2948] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   0000000074af1465 2 bytes [AF, 74]
.text  C:\Users\Richard\AppData\Roaming\Spotify\Data\SpotifyHelper.exe[2948] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  0000000074af14bb 2 bytes [AF, 74]
.text  ...                                                                                                                             * 2
.text  C:\Users\Richard\AppData\Roaming\Spotify\Data\SpotifyHelper.exe[2412] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   0000000074af1465 2 bytes [AF, 74]
.text  C:\Users\Richard\AppData\Roaming\Spotify\Data\SpotifyHelper.exe[2412] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  0000000074af14bb 2 bytes [AF, 74]
.text  ...                                                                                                                             * 2
.text  C:\Users\Richard\AppData\Roaming\Spotify\Data\SpotifyHelper.exe[3248] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   0000000074af1465 2 bytes [AF, 74]
.text  C:\Users\Richard\AppData\Roaming\Spotify\Data\SpotifyHelper.exe[3248] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  0000000074af14bb 2 bytes [AF, 74]
.text  ...                                                                                                                             * 2
.text  C:\Users\Richard\AppData\Roaming\Spotify\Data\SpotifyHelper.exe[3356] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   0000000074af1465 2 bytes [AF, 74]
.text  C:\Users\Richard\AppData\Roaming\Spotify\Data\SpotifyHelper.exe[3356] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  0000000074af14bb 2 bytes [AF, 74]
.text  ...                                                                                                                             * 2

---- EOF - GMER 2.1 ----
         
--- --- ---
Addition:
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-08-2014 02
Ran by Richard at 2014-08-16 13:40:03
Running from C:\Users\Richard\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 13.30.100.40417 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2014.0417.2226.38446 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (HKLM\...\{6119B3A6-3603-9695-0398-CDF2AF0A13F8}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Fuel (Version: 2014.0417.2226.38446 - Ihr Firmenname) Hidden
AMD Media Foundation Decoders (Version: 1.0.81206.1620 - Advanced Micro Devices, Inc.) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.14 - Advanced Micro Devices, Inc.) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.15 - Advanced Micro Devices, Inc.) Hidden
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
Avira (HKLM-x32\...\{e67154a7-9cc5-4167-b782-f3982bc6c70d}) (Version: 1.1.19.30000 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.19.30000 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.6.552 - Avira)
AVM FRITZ!Box Dokumentation (HKLM-x32\...\AVMFBox) (Version:  - AVM Berlin)
BOSS (HKLM-x32\...\BOSS) (Version: 2.1.1 - BOSS Development Team)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
Creation Kit (HKLM-x32\...\Steam App 202480) (Version:  - bgs.bethsoft.com)
Curse (HKLM-x32\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 6.0.0.0 - Curse)
File Type Advisor 1.4 (HKLM-x32\...\File Type Advisor_is1) (Version:  - filetypeadvisor.com)
Free M4a to MP3 Converter 8.1 (HKLM-x32\...\Free M4a to MP3 Converter_is1) (Version:  - ManiacTools.com)
Free YouTube to MP3 Converter version 3.12.42.716 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.42.716 - DVDVideoSoft Ltd.)
Google Update Helper (x32 Version: 1.3.23.0 - PriceMeter) Hidden <==== ATTENTION
Gothic II - Die Rückkehr (HKLM-x32\...\Gothic II - Die Rückkehr) (Version: 1.1 - Übersetzer-Team Lonewulf & Co)
K-Lite Codec Pack 10.5.5 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.5.5 - )
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden
Microsoft Virtual PC 2007 (HKLM\...\{8A7CAA24-7B23-410B-A7C3-F994B0944160}) (Version: 6.0.156.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
MiniMod Balance (HKLM-x32\...\MiniMod Balance) (Version: 2.52 - Tricky)
Mozilla Firefox 31.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 31.0 (x86 de)) (Version: 31.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.49.3 - Black Tree Gaming)
nLite 1.4.9.3 (HKLM-x32\...\nLite_is1) (Version: 1.4.9.3 - Dino Nuhagic (nuhi))
No23 Recorder (HKLM-x32\...\{22B0E143-2B0B-435B-9F56-136A3D16065F}) (Version: 2.1.0.3 - No23)
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.11.2806 - Electronic Arts, Inc.)
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.7 - Pando Networks Inc.)
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.214.0 - Tracker Software Products Ltd)
Price Meter (remove only) (HKCU\...\Price Meter) (Version: 1.0.5.8 - Price Meter) <==== ATTENTION
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7246 - Realtek Semiconductor Corp.)
Skype™ 6.18 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.106 - Skype Technologies S.A.)
Spotify (HKCU\...\Spotify) (Version: 0.9.11.27.g2b1a638c - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)
The Sims 2: Ultimate Collection (HKLM-x32\...\{04450C18-F039-4B81-A621-70C3B0F523D5}) (Version: 1.0.0.0 - Electronic Arts)
Torchlight II Demo (HKLM-x32\...\Steam App 219850) (Version:  - Runic Games)
Undelete 360 (HKLM-x32\...\Undelete 360_is1) (Version:  - File Recovery Ltd.)
Update for PriceMeter (HKCU\...\PriceMeterUpdater) (Version:  - Update for PriceMeter) <==== ATTENTION
VDFManager v1.0.2 (HKLM-x32\...\VDF Manager für Gothic II_is1) (Version: 1.0.2 - Sumpfkrautjunkie)
VLC media player 2.1.1 (HKLM\...\VLC media player) (Version: 2.1.1 - VideoLAN)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
WinRAR 5.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
Wrye Bash (HKLM-x32\...\Wrye Bash) (Version: 3.0.4.3 - Wrye & Wrye Bash Development Team)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

31-07-2014 09:57:03 Windows Update
01-08-2014 14:22:29 Windows Update
11-08-2014 08:07:50 Windows Update
13-08-2014 16:37:06 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {1D5CCADA-A36A-4330-92E6-2371616C8B79} - System32\Tasks\FileAdvisorCheck => C:\Program Files (x86)\File Type Advisor\file-type-advisor.exe [2013-09-04] (filetypeadvisor.com                                         )
Task: {28B86973-72EC-4770-B660-D5E804E9E113} - \PC Speed Maximizer Schedule No Task File <==== ATTENTION
Task: {5561BE0E-59B2-4B4E-AF6C-8C05CA835E49} - System32\Tasks\PriceMeterUpdater => C:\Users\Richard\AppData\Roaming\PRICEM~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {5C5909EC-3225-406F-812C-2A1FA64F9C99} - System32\Tasks\DLL-Files FixerASKUSER => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
Task: {6EE4D695-9098-4263-B7D6-7DB6C12DDF90} - System32\Tasks\FileAdvisorUpdate => C:\Program Files (x86)\File Type Advisor\fileadvisor.exe [2013-09-04] (File Type Advisor)
Task: {9D872748-03EC-46D3-9F8A-F6EFD901DEE1} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09] (Adobe Systems Incorporated)
Task: {A7880E5C-964D-4DD9-AF76-2F5635BD3A13} - System32\Tasks\RDReminder => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
Task: {B81F0349-B99B-4D3F-84FF-EEA374B34E8F} - System32\Tasks\PriceMeterLiveUpdateUpdateTaskMachineCore => C:\Program Files (x86)\PriceMeterLiveUpdate\Update\PriceMeterLiveUpdate.exe
Task: {C50C289B-674F-4B0A-89AC-F68C23CD8632} - System32\Tasks\pricemeterdownloader => C:\Users\Richard\AppData\Local\PriceMeter\pricemeterd.exe [2014-03-13] (PriceMeter)
Task: {EBE811F0-025E-4171-9EBA-848A141256F3} - System32\Tasks\PriceMeterLiveUpdateUpdateTaskMachineUA => C:\Program Files (x86)\PriceMeterLiveUpdate\Update\PriceMeterLiveUpdate.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DLL-Files FixerASKUSER.job => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
Task: C:\Windows\Tasks\PriceMeterLiveUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\PriceMeterLiveUpdate\Update\PriceMeterLiveUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\PriceMeterLiveUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\PriceMeterLiveUpdate\Update\PriceMeterLiveUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\PriceMeterUpdater.job => C:\Users\Richard\AppData\Roaming\PRICEM~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2014-04-17 22:29 - 2014-04-17 22:29 - 00214528 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll
2014-02-11 07:08 - 2014-02-11 07:08 - 00817152 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll
2014-02-11 07:08 - 2014-02-11 07:08 - 03650560 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll
2014-04-17 22:29 - 2014-04-17 22:29 - 00127488 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2014-04-17 22:29 - 2014-04-17 22:29 - 00102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2014-01-28 20:33 - 2014-07-09 23:13 - 00601144 _____ () C:\Users\Richard\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
2014-08-16 13:37 - 2014-08-16 13:37 - 00050477 _____ () C:\Users\Richard\Downloads\Defogger.exe
2014-08-04 14:20 - 2014-08-04 14:20 - 00139056 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll
2014-08-04 14:20 - 2014-08-04 14:20 - 00067832 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.AvConnectorNative.dll
2014-01-28 20:33 - 2014-07-09 23:13 - 36966968 _____ () C:\Users\Richard\AppData\Roaming\Spotify\Data\libcef.dll
2014-08-16 13:16 - 2014-08-04 14:20 - 00052472 _____ () C:\Users\Richard\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
2014-07-09 23:13 - 2014-07-09 23:13 - 00867896 _____ () C:\Users\Richard\AppData\Roaming\Spotify\Data\ffmpegsumo.dll
2014-01-28 20:33 - 2014-07-09 23:13 - 00886840 _____ () C:\Users\Richard\AppData\Roaming\Spotify\Data\libglesv2.dll
2014-01-28 20:33 - 2014-07-09 23:13 - 00108600 _____ () C:\Users\Richard\AppData\Roaming\Spotify\Data\libegl.dll
2014-07-30 13:02 - 2014-07-30 13:02 - 03800688 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Microsoft-Adapter für Miniports virtueller WiFis
Description: Microsoft-Adapter für Miniports virtueller WiFis
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: vwifimp
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver


==================== Event log errors: =========================

Application errors:
==================
Error: (08/16/2014 01:21:41 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/16/2014 01:03:47 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/16/2014 01:32:46 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/16/2014 00:42:37 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/15/2014 04:39:29 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/15/2014 00:03:21 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/15/2014 01:22:22 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/14/2014 03:28:56 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/14/2014 11:31:33 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/14/2014 01:44:44 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (08/16/2014 01:19:50 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AODDriver4.3" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (08/16/2014 01:01:58 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AODDriver4.3" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (08/16/2014 01:30:56 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AODDriver4.3" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (08/16/2014 00:40:49 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AODDriver4.3" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (08/15/2014 04:37:38 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AODDriver4.3" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (08/15/2014 00:01:33 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AODDriver4.3" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (08/15/2014 01:20:31 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AODDriver4.3" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (08/14/2014 03:27:09 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AODDriver4.3" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (08/14/2014 01:42:15 PM) (Source: cdrom) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\CdRom0.

Error: (08/14/2014 01:42:09 PM) (Source: cdrom) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\CdRom0.


Microsoft Office Sessions:
=========================
Error: (08/16/2014 01:21:41 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/16/2014 01:03:47 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/16/2014 01:32:46 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/16/2014 00:42:37 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/15/2014 04:39:29 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/15/2014 00:03:21 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/15/2014 01:22:22 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/14/2014 03:28:56 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/14/2014 11:31:33 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/14/2014 01:44:44 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info =========================== 

Processor: AMD Phenom(tm) II X4 940 Processor
Percentage of memory in use: 25%
Total physical RAM: 8191.18 MB
Available physical RAM: 6077.51 MB
Total Pagefile: 16380.54 MB
Available Pagefile: 13986 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:111.79 GB) (Free:43.25 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Warcraft III) (CDROM) (Total:0.62 GB) (Free:0 GB) CDFS
Drive e: (Games) (Fixed) (Total:393.67 GB) (Free:318.1 GB) NTFS
Drive f: (Multimedia) (Fixed) (Total:537.84 GB) (Free:523.57 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: EC7EEC7E)
Partition 1: (Not Active) - (Size=393.7 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=537.8 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 213C3FE0)
Partition 1: (Active) - (Size=111.8 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         
defogger disable:
Code:
ATTFilter
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 13:38 on 16/08/2014 (Richard)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         
__________________

Alt 16.08.2014, 14:48   #4
Rubberfly
 
Battle.net Passwort wurde durch dritte geändert - Standard

Battle.net Passwort wurde durch dritte geändert



FRST:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-08-2014 02
Ran by Richard (administrator) on RICHARD-PC on 16-08-2014 13:39:35
Running from C:\Users\Richard\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Spotify Ltd) C:\Users\Richard\AppData\Roaming\Spotify\spotify.exe
(Spotify Ltd) C:\Users\Richard\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
() C:\Users\Richard\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Richard\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Richard\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Richard\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Richard\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Chip Digital GmbH) C:\Users\Richard\AppData\Local\Temp\DMR\dmr_72.exe
(Trend Micro Inc.) C:\Users\Richard\AppData\Local\Temp\DMR\Downloads\fc14996dfa99adfc7baae624196888c5\7b4e384f5b096b9656fee276ba88bb81\HiJackThis204.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
() C:\Users\Richard\Downloads\Defogger.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-04-17] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [161584 2014-08-04] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-07-23] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-980856321-655405809-1415616281-1000\...\Run: [Spotify] => C:\Users\Richard\AppData\Roaming\Spotify\Spotify.exe [6162488 2014-07-09] (Spotify Ltd)
HKU\S-1-5-21-980856321-655405809-1415616281-1000\...\Run: [Spotify Web Helper] => C:\Users\Richard\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1178168 2014-07-09] (Spotify Ltd)
HKU\S-1-5-21-980856321-655405809-1415616281-1000\...\MountPoints2: {a094b4a4-8778-11e3-8f42-806e6f6e6963} - D:\autoplay.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp&fwLinkID=69157
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x99D56D90861BCF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - {31090377-0740-419E-BEFC-A56E50500D5B} URL = hxxp://speedial.com/results.php?f=4&q={searchTerms}&a=spd_ir_14_21_ff&cd=2XzuyEtN2Y1L1QzutDtDtByEzz0CtByCzytC0A0AyB0Bzy0CtN0D0Tzu0SzzyByCtN1L2XzutBtFtBtDtFtCyDtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyDtC0DtDtA0DtAyCtGtAyE0BtBtGyB0BtA0BtGzytCyE0EtGtByEyEyByE0FzyyEtA0EtB0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyB0DtAtAyE0Fzz0FtG0CyBtD0CtG0C0Czz0AtGyDtAtAtBtGyCyEyCzzyC0A0D0DtBzztBzz2Q&cr=2053013727&ir=
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - {31090377-0740-419E-BEFC-A56E50500D5B} URL = hxxp://speedial.com/results.php?f=4&q={searchTerms}&a=spd_ir_14_21_ff&cd=2XzuyEtN2Y1L1QzutDtDtByEzz0CtByCzytC0A0AyB0Bzy0CtN0D0Tzu0SzzyByCtN1L2XzutBtFtBtDtFtCyDtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyDtC0DtDtA0DtAyCtGtAyE0BtBtGyB0BtA0BtGzytCyE0EtGtByEyEyByE0FzyyEtA0EtB0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyB0DtAtAyE0Fzz0FtG0CyBtD0CtG0C0Czz0AtGyDtAtAtBtGyCyEyCzzyC0A0D0DtBzztBzz2Q&cr=2053013727&ir=
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Richard\AppData\Roaming\Mozilla\Firefox\Profiles\ruosa3z9.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.updatepm.com/PriceMeterLiveUpdate Update;version=3 -> C:\Program Files (x86)\PriceMeterLiveUpdate\Update\1.3.23.0\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.updatepm.com/PriceMeterLiveUpdate Update;version=9 -> C:\Program Files (x86)\PriceMeterLiveUpdate\Update\1.3.23.0\npGoogleUpdate3.dll No File
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Avira Browser Safety - C:\Users\Richard\AppData\Roaming\Mozilla\Firefox\Profiles\ruosa3z9.default\Extensions\abs@avira.com [2014-08-16]
FF Extension: Adblock Plus - C:\Users\Richard\AppData\Roaming\Mozilla\Firefox\Profiles\ruosa3z9.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-10]

Chrome: 
=======

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-04-17] (Advanced Micro Devices, Inc.) [File not signed]
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-23] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-23] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [149296 2014-08-04] (Avira Operations GmbH & Co. KG)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
S2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-23] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-07-23] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-07-23] (Avira Operations GmbH & Co. KG)
R1 vmm; C:\Windows\system32\Treiber\vmm.sys [296816 2007-02-18] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-16 13:39 - 2014-08-16 13:39 - 00009437 _____ () C:\Users\Richard\Downloads\FRST.txt
2014-08-16 13:39 - 2014-08-16 13:39 - 00000000 ____D () C:\FRST
2014-08-16 13:38 - 2014-08-16 13:38 - 00000476 _____ () C:\Users\Richard\Downloads\defogger_disable.log
2014-08-16 13:38 - 2014-08-16 13:38 - 00000000 _____ () C:\Users\Richard\defogger_reenable
2014-08-16 13:37 - 2014-08-16 13:37 - 02101248 _____ (Farbar) C:\Users\Richard\Downloads\FRST64.exe
2014-08-16 13:37 - 2014-08-16 13:37 - 00380416 _____ () C:\Users\Richard\Downloads\Gmer-19357.exe
2014-08-16 13:37 - 2014-08-16 13:37 - 00050477 _____ () C:\Users\Richard\Downloads\Defogger.exe
2014-08-16 13:29 - 2014-08-16 13:29 - 01101648 _____ () C:\Users\Richard\Downloads\HijackThis - CHIP-Installer.exe
2014-08-16 13:17 - 2014-08-16 13:16 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-08-16 13:16 - 2014-08-16 13:16 - 00000000 ____D () C:\Users\Richard\AppData\Roaming\Avira
2014-08-16 13:16 - 2014-07-23 13:29 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-08-16 13:16 - 2014-07-23 13:29 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-08-16 13:16 - 2014-07-23 13:29 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-08-16 13:14 - 2014-08-16 13:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-08-16 13:14 - 2014-08-16 13:16 - 00000000 ____D () C:\ProgramData\Avira
2014-08-16 13:14 - 2014-08-16 13:16 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-08-16 13:14 - 2014-08-16 13:14 - 04574968 _____ (Avira Operations GmbH & Co. KG) C:\Users\Richard\Downloads\avira_de_av___ws.exe
2014-08-16 13:14 - 2014-08-16 13:14 - 00001137 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-08-14 13:32 - 2014-08-14 13:32 - 00483536 _____ () C:\Users\Richard\Desktop\msinfo.txt
2014-08-14 13:31 - 2014-08-14 13:31 - 00029197 _____ () C:\Users\Richard\Desktop\DxDiag.txt
2014-08-14 12:23 - 2014-08-14 12:23 - 00000000 ____D () C:\Users\Richard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gothic II
2014-08-14 12:22 - 2014-08-14 12:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gothic II
2014-08-14 12:21 - 2014-08-14 12:22 - 43501463 _____ (Übersetzer-Team Lonewulf & Co) C:\Users\Richard\Downloads\Returning_de_patch_1.0.1.build4.sleep.exe
2014-08-14 11:59 - 2014-08-14 12:12 - 00000000 ____D () C:\Users\Richard\Desktop\wc3
2014-08-14 11:53 - 2014-08-14 11:55 - 167217973 _____ (Übersetzer-Team Lonewulf & Co) C:\Users\Richard\Downloads\Returning_DE-1.1.exe
2014-08-13 18:37 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-13 18:37 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2014-08-13 18:37 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-08-13 18:37 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-13 18:37 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-13 18:37 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-13 18:37 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2014-08-13 18:37 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2014-08-13 13:21 - 2014-08-01 01:41 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-13 13:21 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-08-13 13:21 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-13 13:21 - 2014-07-25 16:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-13 13:21 - 2014-07-25 16:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-13 13:21 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-08-13 13:21 - 2014-07-25 15:30 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-13 13:21 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-13 13:21 - 2014-07-25 15:28 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-13 13:21 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-13 13:21 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-13 13:21 - 2014-07-25 15:11 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-13 13:21 - 2014-07-25 15:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-13 13:21 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-08-13 13:21 - 2014-07-25 15:03 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-13 13:21 - 2014-07-25 15:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-13 13:21 - 2014-07-25 15:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-13 13:21 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-13 13:21 - 2014-07-25 14:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-13 13:21 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-13 13:21 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-08-13 13:21 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-08-13 13:21 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-08-13 13:21 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-08-13 13:21 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-13 13:21 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-13 13:21 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-08-13 13:21 - 2014-07-25 14:19 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-13 13:21 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-08-13 13:21 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-13 13:21 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-08-13 13:21 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-08-13 13:21 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-13 13:21 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-08-13 13:21 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-08-13 13:21 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-08-13 13:21 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-08-13 13:21 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-13 13:21 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-13 13:21 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-13 13:21 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-13 13:21 - 2014-07-25 13:39 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-13 13:21 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-08-13 13:21 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-08-13 13:21 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-08-13 13:21 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-13 13:21 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-08-13 13:21 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-08-13 13:21 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-08-13 13:21 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-08-13 13:21 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-13 13:21 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-13 13:21 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-13 13:21 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-08-13 13:21 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-08-13 13:21 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-08-13 13:21 - 2014-07-16 05:25 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-13 13:21 - 2014-07-16 05:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-13 13:21 - 2014-07-16 04:46 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-13 13:21 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-08-13 13:21 - 2014-07-16 04:12 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-13 13:21 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-13 13:21 - 2014-06-03 12:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-13 13:21 - 2014-06-03 12:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-13 13:21 - 2014-06-03 12:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-13 13:21 - 2014-06-03 12:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-13 13:21 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-08-13 13:21 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-08-13 13:21 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-08-13 13:20 - 2014-07-14 04:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-13 13:20 - 2014-07-14 03:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-07-31 11:57 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-07-31 11:57 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-07-31 11:57 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-07-31 11:57 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-07-31 11:57 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-07-31 11:57 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-07-31 11:57 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-07-31 11:57 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-07-31 11:57 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-07-31 11:57 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-07-31 11:57 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-07-31 11:57 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-07-31 11:57 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-07-31 11:57 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-07-30 13:02 - 2014-07-30 13:02 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-28 00:19 - 2014-08-15 14:39 - 00000095 _____ () C:\Users\Richard\AppData\Roaming\WB.CFG
2014-07-27 19:18 - 2014-08-16 13:23 - 00000968 _____ () C:\Windows\Tasks\PriceMeterLiveUpdateUpdateTaskMachineUA.job
2014-07-27 19:18 - 2014-08-16 13:19 - 00000964 _____ () C:\Windows\Tasks\PriceMeterLiveUpdateUpdateTaskMachineCore.job
2014-07-27 19:18 - 2014-08-16 13:18 - 00000300 _____ () C:\Windows\Tasks\PriceMeterUpdater.job
2014-07-27 19:18 - 2014-07-27 19:18 - 00003964 _____ () C:\Windows\System32\Tasks\PriceMeterLiveUpdateUpdateTaskMachineUA
2014-07-27 19:18 - 2014-07-27 19:18 - 00003712 _____ () C:\Windows\System32\Tasks\PriceMeterLiveUpdateUpdateTaskMachineCore
2014-07-27 19:18 - 2014-07-27 19:18 - 00003308 _____ () C:\Windows\System32\Tasks\pricemeterdownloader
2014-07-27 19:18 - 2014-07-27 19:18 - 00003248 _____ () C:\Windows\System32\Tasks\PriceMeterUpdater
2014-07-27 19:18 - 2014-07-27 19:18 - 00000000 ____D () C:\Users\Richard\AppData\Roaming\OpenCandy
2014-07-27 19:18 - 2014-07-27 19:18 - 00000000 ____D () C:\Users\Richard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PriceMeter
2014-07-27 19:18 - 2014-07-27 19:18 - 00000000 ____D () C:\Users\Richard\AppData\Local\PriceMeterLiveUpdate
2014-07-27 19:18 - 2014-07-27 19:18 - 00000000 ____D () C:\Users\Richard\AppData\Local\PriceMeter
2014-07-24 14:17 - 2014-07-24 14:17 - 00000000 __RHD () C:\Users\Richard\AppData\Roaming\SecuROM
2014-07-24 14:17 - 2014-07-24 14:17 - 00000000 ____D () C:\Users\Richard\Documents\EA Games
2014-07-24 14:17 - 2014-07-24 14:17 - 00000000 ____D () C:\Users\Public\Documents\EA Games
2014-07-24 14:16 - 2014-07-24 14:16 - 00001682 _____ () C:\Users\Public\Desktop\The Sims 2 Ultimate Collection.lnk
2014-07-24 14:16 - 2014-07-24 14:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Sims 2 Ultimate Collection
2014-07-24 11:44 - 2014-07-24 13:02 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2014-07-24 11:43 - 2014-07-24 13:02 - 00000000 ____D () C:\ProgramData\Origin
2014-07-24 11:43 - 2014-07-24 11:44 - 00000000 ____D () C:\Users\Richard\AppData\Roaming\Origin
2014-07-24 11:43 - 2014-07-24 11:44 - 00000000 ____D () C:\Users\Richard\AppData\Local\Origin
2014-07-24 11:43 - 2014-07-24 11:43 - 00000979 _____ () C:\Users\Public\Desktop\Origin.lnk
2014-07-24 11:43 - 2014-07-24 11:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2014-07-24 11:43 - 2014-07-24 11:43 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-07-24 11:43 - 2014-07-24 11:43 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-07-24 11:42 - 2014-07-24 11:42 - 17089296 _____ (Electronic Arts, Inc.) C:\Users\Richard\Downloads\OriginThinSetup.exe
2014-07-23 12:11 - 2014-07-23 12:11 - 04415473 _____ () C:\Users\Richard\Documents\system.sff
2014-07-23 12:11 - 2014-07-23 12:11 - 02770896 _____ () C:\Users\Richard\Documents\TRUNKS.SND
2014-07-23 12:11 - 2014-07-23 12:11 - 02743402 _____ () C:\Users\Richard\Documents\Piccolo.snd
2014-07-23 12:11 - 2014-07-23 12:11 - 01504322 _____ () C:\Users\Richard\Documents\vegetahd.sff
2014-07-23 12:11 - 2014-07-23 12:11 - 01342598 _____ () C:\Users\Richard\Documents\paikuhan.sff
2014-07-23 12:11 - 2014-07-23 12:11 - 01000480 _____ () C:\Users\Richard\Documents\VegetaHd.snd
2014-07-23 12:11 - 2014-07-23 12:11 - 00992594 _____ () C:\Users\Richard\Documents\vegetto-n.snd
2014-07-23 12:11 - 2014-07-23 12:11 - 00764233 _____ () C:\Users\Richard\Documents\Piccolo.sff
2014-07-23 12:11 - 2014-07-23 12:11 - 00759491 _____ () C:\Users\Richard\Documents\vegetto-n.sff
2014-07-23 12:11 - 2014-07-23 12:11 - 00610203 _____ () C:\Users\Richard\Documents\son-trunks.sff
2014-07-23 12:11 - 2014-07-23 12:11 - 00545600 _____ () C:\Users\Richard\Documents\Trunks.sff
2014-07-23 12:11 - 2014-07-23 12:11 - 00418050 _____ () C:\Users\Richard\Documents\satan-son.snd
2014-07-23 12:11 - 2014-07-23 12:11 - 00304274 _____ () C:\Users\Richard\Documents\satan-son.sff
2014-07-23 12:11 - 2014-07-23 12:11 - 00298232 _____ () C:\Users\Richard\Documents\ending.sff
2014-07-23 12:11 - 2014-07-23 12:11 - 00261262 _____ () C:\Users\Richard\Documents\Picurin.sff
2014-07-23 12:11 - 2014-07-23 12:11 - 00208042 _____ () C:\Users\Richard\Documents\PiccoloAIR.air
2014-07-23 12:11 - 2014-07-23 12:11 - 00203718 _____ () C:\Users\Richard\Documents\VegetaHD.cns
2014-07-23 12:11 - 2014-07-23 12:11 - 00186256 _____ () C:\Users\Richard\Documents\son-trunks.snd
2014-07-23 12:11 - 2014-07-23 12:11 - 00183574 _____ () C:\Users\Richard\Documents\vegetto-n.cns
2014-07-23 12:11 - 2014-07-23 12:11 - 00148215 _____ () C:\Users\Richard\Documents\fightfx.sff
2014-07-23 12:11 - 2014-07-23 12:11 - 00112197 _____ () C:\Users\Richard\Documents\vegetto-n.air
2014-07-23 12:11 - 2014-07-23 12:11 - 00091601 _____ () C:\Users\Richard\Documents\VegetaHD.air
2014-07-23 12:11 - 2014-07-23 12:11 - 00089579 _____ () C:\Users\Richard\Documents\fight.snd
2014-07-23 12:11 - 2014-07-23 12:11 - 00088629 _____ () C:\Users\Richard\Documents\Feature.cns
2014-07-23 12:11 - 2014-07-23 12:11 - 00085220 _____ () C:\Users\Richard\Documents\PiccoloCMD.cmd
2014-07-23 12:11 - 2014-07-23 12:11 - 00075317 _____ () C:\Users\Richard\Documents\paikuhan.cns
2014-07-23 12:11 - 2014-07-23 12:11 - 00072705 _____ () C:\Users\Richard\Documents\common.snd
2014-07-23 12:11 - 2014-07-23 12:11 - 00069516 _____ () C:\Users\Richard\Documents\son-trunks.air
2014-07-23 12:11 - 2014-07-23 12:11 - 00055298 _____ () C:\Users\Richard\Documents\Trunks.air
2014-07-23 12:11 - 2014-07-23 12:11 - 00045418 _____ () C:\Users\Richard\Documents\VegetaHD.cmd
2014-07-23 12:11 - 2014-07-23 12:11 - 00044929 _____ () C:\Users\Richard\Documents\logo.sff
2014-07-23 12:11 - 2014-07-23 12:11 - 00037726 _____ () C:\Users\Richard\Documents\fight.sff
2014-07-23 12:11 - 2014-07-23 12:11 - 00036881 _____ () C:\Users\Richard\Documents\vegetto-n.cmd
2014-07-23 12:11 - 2014-07-23 12:11 - 00036637 _____ () C:\Users\Richard\Documents\paikuhan.air
2014-07-23 12:11 - 2014-07-23 12:11 - 00034035 _____ () C:\Users\Richard\Documents\Misc.cns
2014-07-23 12:11 - 2014-07-23 12:11 - 00031105 _____ () C:\Users\Richard\Documents\satan-son.cns
2014-07-23 12:11 - 2014-07-23 12:11 - 00029080 _____ () C:\Users\Richard\Documents\Constants.cns
2014-07-23 12:11 - 2014-07-23 12:11 - 00028965 _____ () C:\Users\Richard\Documents\credits.sff
2014-07-23 12:11 - 2014-07-23 12:11 - 00028125 _____ () C:\Users\Richard\Documents\satan-son.air
2014-07-23 12:11 - 2014-07-23 12:11 - 00027504 _____ () C:\Users\Richard\Documents\paikuhan.cmd
2014-07-23 12:11 - 2014-07-23 12:11 - 00026200 _____ () C:\Users\Richard\Documents\son-trunks.cmd
2014-07-23 12:11 - 2014-07-23 12:11 - 00021557 _____ () C:\Users\Richard\Documents\Trunks.cmd
2014-07-23 12:11 - 2014-07-23 12:11 - 00021121 _____ () C:\Users\Richard\Documents\basico-ssj.cns
2014-07-23 12:11 - 2014-07-23 12:11 - 00017969 _____ () C:\Users\Richard\Documents\MiscHelper.cns
2014-07-23 12:11 - 2014-07-23 12:11 - 00014070 _____ () C:\Users\Richard\Documents\satan-son.cmd
2014-07-23 12:11 - 2014-07-23 12:11 - 00013752 _____ () C:\Users\Richard\Documents\system.def
2014-07-23 12:11 - 2014-07-23 12:11 - 00011937 _____ () C:\Users\Richard\Documents\movelist.txt
2014-07-23 12:11 - 2014-07-23 12:11 - 00010986 _____ () C:\Users\Richard\Documents\fight.def
2014-07-23 12:11 - 2014-07-23 12:11 - 00010510 _____ () C:\Users\Richard\Documents\Super.cns
2014-07-23 12:11 - 2014-07-23 12:11 - 00009760 _____ () C:\Users\Richard\Documents\Basic.cns
2014-07-23 12:11 - 2014-07-23 12:11 - 00009368 _____ () C:\Users\Richard\Documents\mugen.cfg
2014-07-23 12:11 - 2014-07-23 12:11 - 00009265 _____ () C:\Users\Richard\Documents\especiais-ssj.cns
2014-07-23 12:11 - 2014-07-23 12:11 - 00009246 _____ () C:\Users\Richard\Documents\especiais.cns
2014-07-23 12:11 - 2014-07-23 12:11 - 00008976 _____ () C:\Users\Richard\Documents\system.snd
2014-07-23 12:11 - 2014-07-23 12:11 - 00007885 _____ () C:\Users\Richard\Documents\1.pcx
2014-07-23 12:11 - 2014-07-23 12:11 - 00007029 _____ () C:\Users\Richard\Documents\jg.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00006848 _____ () C:\Users\Richard\Documents\hd.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00006848 _____ () C:\Users\Richard\Documents\dbz-hd-fonts.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00006385 _____ () C:\Users\Richard\Documents\ub1.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00006385 _____ () C:\Users\Richard\Documents\dbzub22-verm.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00006385 _____ () C:\Users\Richard\Documents\dbzub22-cinsa.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00006385 _____ () C:\Users\Richard\Documents\dbub22-blue.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00006368 _____ () C:\Users\Richard\Documents\ub2.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00006368 _____ () C:\Users\Richard\Documents\dbz-ub22.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00006367 _____ () C:\Users\Richard\Documents\f-6x8f.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00005741 _____ () C:\Users\Richard\Documents\ending.def
2014-07-23 12:11 - 2014-07-23 12:11 - 00005495 _____ () C:\Users\Richard\Documents\hypers.cns
2014-07-23 12:11 - 2014-07-23 12:11 - 00005315 _____ () C:\Users\Richard\Documents\hypers-ssj.cns
2014-07-23 12:11 - 2014-07-23 12:11 - 00005103 _____ () C:\Users\Richard\Documents\gameover.sff
2014-07-23 12:11 - 2014-07-23 12:11 - 00004942 _____ () C:\Users\Richard\Documents\f-6x9.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00004307 _____ () C:\Users\Richard\Documents\f-6x9f.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00003921 _____ () C:\Users\Richard\Documents\fightfx.air
2014-07-23 12:11 - 2014-07-23 12:11 - 00003859 _____ () C:\Users\Richard\Documents\name1.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00003655 _____ () C:\Users\Richard\Documents\hit-num-db.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00003170 _____ () C:\Users\Richard\Documents\Piccolo2.def
2014-07-23 12:11 - 2014-07-23 12:11 - 00003028 _____ () C:\Users\Richard\Documents\f-4x6.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00002477 _____ () C:\Users\Richard\Documents\num1.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00001962 _____ () C:\Users\Richard\Documents\select.def
2014-07-23 12:11 - 2014-07-23 12:11 - 00001648 _____ () C:\Users\Richard\Documents\f-pad.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00001547 _____ () C:\Users\Richard\Documents\credits.def
2014-07-23 12:11 - 2014-07-23 12:11 - 00001374 _____ () C:\Users\Richard\Documents\balls-font-p2.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00001374 _____ () C:\Users\Richard\Documents\balls-font-p1.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00001186 _____ () C:\Users\Richard\Documents\Moves.txt
2014-07-23 12:11 - 2014-07-23 12:11 - 00001045 _____ () C:\Users\Richard\Documents\gameover.def
2014-07-23 12:11 - 2014-07-23 12:11 - 00000866 _____ () C:\Users\Richard\Documents\paikuhan.def
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\vegetto8.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\vegetto7.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\vegetto6.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\vegetto5.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\vegetto4.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\vegetto3.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\vegetto2.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\vegetto1.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\vegetahd5.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\vegetahd4.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\vegetahd3.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\vegetahd2.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\vegetahd1.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\vegetahd.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\showcolours.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\sb2.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\picollodb2.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\Piccolo06.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\Piccolo05.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\Piccolo04.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\Piccolo03.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\Piccolo02.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\Piccolo01.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\pic.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\paikuhan1.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\paikuhan.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\1.ACT
2014-07-23 12:11 - 2014-07-23 12:11 - 00000746 _____ () C:\Users\Richard\Documents\Trunks.def
2014-07-23 12:11 - 2014-07-23 12:11 - 00000641 _____ () C:\Users\Richard\Documents\Son-Trunks.def
2014-07-23 12:11 - 2014-07-23 12:11 - 00000537 _____ () C:\Users\Richard\Documents\Picurin.def
2014-07-23 12:11 - 2014-07-23 12:11 - 00000516 _____ () C:\Users\Richard\Documents\satan-son.def
2014-07-23 12:11 - 2014-07-23 12:11 - 00000479 _____ () C:\Users\Richard\Documents\Read This!.txt
2014-07-23 12:11 - 2014-07-23 12:11 - 00000425 _____ () C:\Users\Richard\Documents\logo.def
2014-07-23 12:11 - 2014-07-23 12:11 - 00000315 _____ () C:\Users\Richard\Documents\vegeta.def
2014-07-23 12:11 - 2014-07-23 12:11 - 00000000 _____ () C:\Users\Richard\Documents\cwsdpmi.swp.txt
2014-07-23 12:10 - 2014-07-23 12:11 - 00446099 _____ () C:\Users\Richard\Documents\intro.sff
2014-07-23 12:10 - 2014-07-23 12:11 - 00274072 _____ () C:\Users\Richard\Documents\kuririn.snd
2014-07-23 12:10 - 2014-07-23 12:11 - 00056288 _____ () C:\Users\Richard\Documents\kuririn.cns
2014-07-23 12:10 - 2014-07-23 12:11 - 00055107 _____ () C:\Users\Richard\Documents\trunks.cns
2014-07-23 12:10 - 2014-07-23 12:11 - 00041172 _____ () C:\Users\Richard\Documents\kuririn.air
2014-07-23 12:10 - 2014-07-23 12:11 - 00036133 _____ () C:\Users\Richard\Documents\Basico.cns
2014-07-23 12:10 - 2014-07-23 12:11 - 00028327 _____ () C:\Users\Richard\Documents\kuririn.cmd
2014-07-23 12:10 - 2014-07-23 12:11 - 00024369 _____ () C:\Users\Richard\Documents\kuririn-2.cns
2014-07-23 12:10 - 2014-07-23 12:11 - 00013417 _____ () C:\Users\Richard\Documents\Intro.def
2014-07-23 12:10 - 2014-07-23 12:11 - 00010717 _____ () C:\Users\Richard\Documents\helpers.cns
2014-07-23 12:10 - 2014-07-23 12:11 - 00000825 _____ () C:\Users\Richard\Documents\readme.txt
2014-07-23 12:10 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\vegetto-n.act
2014-07-23 12:10 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\kuririn3.act
2014-07-23 12:10 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\kuririn2.act
2014-07-23 12:10 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\kuririn.act
2014-07-23 12:10 - 2014-07-23 12:10 - 03538319 _____ () C:\Users\Richard\Documents\GokuSSJ.sff
2014-07-23 12:10 - 2014-07-23 12:10 - 02601661 _____ () C:\Users\Richard\Documents\kakaroto.sff
2014-07-23 12:10 - 2014-07-23 12:10 - 02210185 _____ () C:\Users\Richard\Documents\gogeta-ssj4.sff
2014-07-23 12:10 - 2014-07-23 12:10 - 01983549 _____ () C:\Users\Richard\Documents\GokuSSJ.snd
2014-07-23 12:10 - 2014-07-23 12:10 - 01940117 _____ () C:\Users\Richard\Documents\kakaroto.snd
2014-07-23 12:10 - 2014-07-23 12:10 - 01935670 _____ () C:\Users\Richard\Documents\Freeza.snd
2014-07-23 12:10 - 2014-07-23 12:10 - 01860003 _____ () C:\Users\Richard\Documents\gogeta-ssj4.snd
2014-07-23 12:10 - 2014-07-23 12:10 - 01571192 _____ () C:\Users\Richard\Documents\gokuGT(classic).sff
2014-07-23 12:10 - 2014-07-23 12:10 - 01352538 _____ () C:\Users\Richard\Documents\Kaioshin.snd
2014-07-23 12:10 - 2014-07-23 12:10 - 00940190 _____ () C:\Users\Richard\Documents\Final.sff
2014-07-23 12:10 - 2014-07-23 12:10 - 00934775 _____ () C:\Users\Richard\Documents\gohanex.snd
2014-07-23 12:10 - 2014-07-23 12:10 - 00904631 _____ () C:\Users\Richard\Documents\Gohan.sff
2014-07-23 12:10 - 2014-07-23 12:10 - 00842854 _____ () C:\Users\Richard\Documents\n-gotenks.snd
2014-07-23 12:10 - 2014-07-23 12:10 - 00814648 _____ () C:\Users\Richard\Documents\gx2.sff
2014-07-23 12:10 - 2014-07-23 12:10 - 00814648 _____ () C:\Users\Richard\Documents\gohanex.sff
2014-07-23 12:10 - 2014-07-23 12:10 - 00810878 _____ () C:\Users\Richard\Documents\GokuGT.snd
2014-07-23 12:10 - 2014-07-23 12:10 - 00809015 _____ () C:\Users\Richard\Documents\Majin.sff
2014-07-23 12:10 - 2014-07-23 12:10 - 00659912 _____ () C:\Users\Richard\Documents\Freeza.sff
2014-07-23 12:10 - 2014-07-23 12:10 - 00603032 _____ () C:\Users\Richard\Documents\gogetassj2.sff
2014-07-23 12:10 - 2014-07-23 12:10 - 00517194 _____ () C:\Users\Richard\Documents\goten-n.sff
2014-07-23 12:10 - 2014-07-23 12:10 - 00451285 _____ () C:\Users\Richard\Documents\Gohan.snd
2014-07-23 12:10 - 2014-07-23 12:10 - 00443894 _____ () C:\Users\Richard\Documents\n-gotenks.sff
2014-07-23 12:10 - 2014-07-23 12:10 - 00433519 _____ () C:\Users\Richard\Documents\gohan-zeta.sff
2014-07-23 12:10 - 2014-07-23 12:10 - 00419598 _____ () C:\Users\Richard\Documents\Majin.snd
2014-07-23 12:10 - 2014-07-23 12:10 - 00397728 _____ () C:\Users\Richard\Documents\goten-n.snd
2014-07-23 12:10 - 2014-07-23 12:10 - 00388863 _____ () C:\Users\Richard\Documents\Kaioshin.sff
2014-07-23 12:10 - 2014-07-23 12:10 - 00276720 _____ () C:\Users\Richard\Documents\gohan-zeta.snd
2014-07-23 12:10 - 2014-07-23 12:10 - 00260724 _____ () C:\Users\Richard\Documents\gogetassj2.snd
2014-07-23 12:10 - 2014-07-23 12:10 - 00233729 _____ () C:\Users\Richard\Documents\GokuSSJ.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00223746 _____ () C:\Users\Richard\Documents\kakaroto.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00214720 _____ () C:\Users\Richard\Documents\kuririn.sff
2014-07-23 12:10 - 2014-07-23 12:10 - 00182094 _____ () C:\Users\Richard\Documents\GokuSSJ.air
2014-07-23 12:10 - 2014-07-23 12:10 - 00177676 _____ () C:\Users\Richard\Documents\gohanex.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00165623 _____ () C:\Users\Richard\Documents\gohanex.air
2014-07-23 12:10 - 2014-07-23 12:10 - 00135439 _____ () C:\Users\Richard\Documents\GokuGT.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00132381 _____ () C:\Users\Richard\Documents\gogeta-ssj4.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00127812 _____ () C:\Users\Richard\Documents\Majin.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00120632 _____ () C:\Users\Richard\Documents\SSJ4.st
2014-07-23 12:10 - 2014-07-23 12:10 - 00087607 _____ () C:\Users\Richard\Documents\Gohan.AIR
2014-07-23 12:10 - 2014-07-23 12:10 - 00084076 _____ () C:\Users\Richard\Documents\kakaroto.air
2014-07-23 12:10 - 2014-07-23 12:10 - 00077690 _____ () C:\Users\Richard\Documents\gogeta-ssj4.air
2014-07-23 12:10 - 2014-07-23 12:10 - 00072381 _____ () C:\Users\Richard\Documents\Majin.air
2014-07-23 12:10 - 2014-07-23 12:10 - 00070761 _____ () C:\Users\Richard\Documents\GokuGT.air
2014-07-23 12:10 - 2014-07-23 12:10 - 00065074 _____ () C:\Users\Richard\Documents\commonst.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00062735 _____ () C:\Users\Richard\Documents\gogetassj2.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00061398 _____ () C:\Users\Richard\Documents\GokuSSJ.cmd
2014-07-23 12:10 - 2014-07-23 12:10 - 00057645 _____ () C:\Users\Richard\Documents\goten-n.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00054395 _____ () C:\Users\Richard\Documents\Kaioshin.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00052478 _____ () C:\Users\Richard\Documents\Especiais.st
2014-07-23 12:10 - 2014-07-23 12:10 - 00051278 _____ () C:\Users\Richard\Documents\gohan-zeta.air
2014-07-23 12:10 - 2014-07-23 12:10 - 00049315 _____ () C:\Users\Richard\Documents\Kaioshin.air
2014-07-23 12:10 - 2014-07-23 12:10 - 00047423 _____ () C:\Users\Richard\Documents\gogetassj2.air
2014-07-23 12:10 - 2014-07-23 12:10 - 00042953 _____ () C:\Users\Richard\Documents\Gohan.CMD
2014-07-23 12:10 - 2014-07-23 12:10 - 00042867 _____ () C:\Users\Richard\Documents\GokuGT.cmd
2014-07-23 12:10 - 2014-07-23 12:10 - 00042859 _____ () C:\Users\Richard\Documents\Golpes.st
2014-07-23 12:10 - 2014-07-23 12:10 - 00040283 _____ () C:\Users\Richard\Documents\goten-n.air
2014-07-23 12:10 - 2014-07-23 12:10 - 00037570 _____ () C:\Users\Richard\Documents\common21.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00037238 _____ () C:\Users\Richard\Documents\n-gotenks.air
2014-07-23 12:10 - 2014-07-23 12:10 - 00036525 _____ () C:\Users\Richard\Documents\n-gotenks.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00035051 _____ () C:\Users\Richard\Documents\gohanex.cmd
2014-07-23 12:10 - 2014-07-23 12:10 - 00034563 _____ () C:\Users\Richard\Documents\gogeta-ssj4-2.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00033959 _____ () C:\Users\Richard\Documents\gogeta-ssj4.cmd
2014-07-23 12:10 - 2014-07-23 12:10 - 00031147 _____ () C:\Users\Richard\Documents\gohan-zeta.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00028472 _____ () C:\Users\Richard\Documents\Striker.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00025750 _____ () C:\Users\Richard\Documents\vegetto-n-2.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00025489 _____ () C:\Users\Richard\Documents\Basico.st
2014-07-23 12:10 - 2014-07-23 12:10 - 00024791 _____ () C:\Users\Richard\Documents\kakaroto.cmd
2014-07-23 12:10 - 2014-07-23 12:10 - 00024703 _____ () C:\Users\Richard\Documents\Kaioshin.cmd
2014-07-23 12:10 - 2014-07-23 12:10 - 00024461 _____ () C:\Users\Richard\Documents\fly.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00023986 _____ () C:\Users\Richard\Documents\n-gotenks.cmd
2014-07-23 12:10 - 2014-07-23 12:10 - 00023558 _____ () C:\Users\Richard\Documents\SSJ.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00022357 _____ () C:\Users\Richard\Documents\Majin.cmd
2014-07-23 12:10 - 2014-07-23 12:10 - 00020310 _____ () C:\Users\Richard\Documents\gohan-zeta.cmd
2014-07-23 12:10 - 2014-07-23 12:10 - 00018646 _____ () C:\Users\Richard\Documents\kaioken.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00017945 _____ () C:\Users\Richard\Documents\goten-n.cmd
2014-07-23 12:10 - 2014-07-23 12:10 - 00016886 _____ () C:\Users\Richard\Documents\gogetassj2.cmd
2014-07-23 12:10 - 2014-07-23 12:10 - 00009736 _____ () C:\Users\Richard\Documents\BigCombo.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00008667 _____ () C:\Users\Richard\Documents\Piccolo.st
2014-07-23 12:10 - 2014-07-23 12:10 - 00007267 _____ () C:\Users\Richard\Documents\kaio-shin.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00007246 _____ () C:\Users\Richard\Documents\Computer.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00005774 _____ () C:\Users\Richard\Documents\kamehameha.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00005749 _____ () C:\Users\Richard\Documents\AI.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00003604 _____ () C:\Users\Richard\Documents\sspecial.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00003220 _____ () C:\Users\Richard\Documents\n-gotenks.pal
2014-07-23 12:10 - 2014-07-23 12:10 - 00002434 _____ () C:\Users\Richard\Documents\Commandos.txt
2014-07-23 12:10 - 2014-07-23 12:10 - 00002364 _____ () C:\Users\Richard\Documents\Gohan.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00001895 _____ () C:\Users\Richard\Documents\Kaioshin.def
2014-07-23 12:10 - 2014-07-23 12:10 - 00001849 _____ () C:\Users\Richard\Documents\Final.def
2014-07-23 12:10 - 2014-07-23 12:10 - 00001837 _____ () C:\Users\Richard\Documents\vegeta.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00001836 _____ () C:\Users\Richard\Documents\trunksp.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00001831 _____ () C:\Users\Richard\Documents\ftrunks.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00001829 _____ () C:\Users\Richard\Documents\bojack.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00001825 _____ () C:\Users\Richard\Documents\pcell.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00001822 _____ () C:\Users\Richard\Documents\piccolo.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00001806 _____ () C:\Users\Richard\Documents\goku.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00001730 _____ () C:\Users\Richard\Documents\Freeza.txt
2014-07-23 12:10 - 2014-07-23 12:10 - 00001719 _____ () C:\Users\Richard\Documents\Kaioshin.txt
2014-07-23 12:10 - 2014-07-23 12:10 - 00001688 _____ () C:\Users\Richard\Documents\Freeza.def
2014-07-23 12:10 - 2014-07-23 12:10 - 00001495 _____ () C:\Users\Richard\Documents\Leia-me.txt
2014-07-23 12:10 - 2014-07-23 12:10 - 00001224 _____ () C:\Users\Richard\Documents\goten-n.def
2014-07-23 12:10 - 2014-07-23 12:10 - 00001193 _____ () C:\Users\Richard\Documents\kakaroto.def
2014-07-23 12:10 - 2014-07-23 12:10 - 00001177 _____ () C:\Users\Richard\Documents\gohanex.def
2014-07-23 12:10 - 2014-07-23 12:10 - 00001163 _____ () C:\Users\Richard\Documents\Gotenks Moves.txt
2014-07-23 12:10 - 2014-07-23 12:10 - 00000987 _____ () C:\Users\Richard\Documents\nvegetto.def
2014-07-23 12:10 - 2014-07-23 12:10 - 00000863 _____ () C:\Users\Richard\Documents\n-gotenks.def
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\vermelho.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\verde.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\purple.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\preto.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\normal.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Majin5.ACT
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Majin4.ACT
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Majin3.ACT
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Majin2.ACT
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Majin1.ACT
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Majin.ACT
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\laranja.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\kakaroto9.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\kakaroto8.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\kakaroto7.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\kakaroto6.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\kakaroto5.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\kakaroto4.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\kakaroto3.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\kakaroto2.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\kakaroto11.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\kakaroto10.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\kakaroto1.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\kakaroto.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Kaioshin09.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Kaioshin08.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Kaioshin07.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Kaioshin06.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Kaioshin05.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Kaioshin04.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Kaioshin03.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Kaioshin02.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Kaioshin012.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Kaioshin011.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Kaioshin010.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Kaioshin01.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\goten-n.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\GokuSSJ4.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\GokuSSJ3.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\GokuSSJ2.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\GokuSSJ.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\gokuGT4.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\GokuGT3.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\gokuGT2.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\gokuGT.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\gohan-2.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\gohan.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\gogeta-ssj4.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\gogeta3.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\gogeta2.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\gogeta1.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\gogeta.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Freeza06.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Freeza05.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Freeza04.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Freeza03.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Freeza02.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Freeza01.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\evil.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\dpurple.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\blue.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\black.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000726 _____ () C:\Users\Richard\Documents\m-gohan.DEF
2014-07-23 12:10 - 2014-07-23 12:10 - 00000717 _____ () C:\Users\Richard\Documents\GokuSSJ.def
2014-07-23 12:10 - 2014-07-23 12:10 - 00000694 _____ () C:\Users\Richard\Documents\Mystic Gohan.DEF
2014-07-23 12:10 - 2014-07-23 12:10 - 00000679 _____ () C:\Users\Richard\Documents\gohan-zeta.def
2014-07-23 12:10 - 2014-07-23 12:10 - 00000662 _____ () C:\Users\Richard\Documents\gogeta-ssj4.def
2014-07-23 12:10 - 2014-07-23 12:10 - 00000562 _____ () C:\Users\Richard\Documents\GokuGT.def
2014-07-23 12:10 - 2014-07-23 12:10 - 00000479 _____ () C:\Users\Richard\Documents\goten-n.txt
2014-07-23 12:10 - 2014-07-23 12:10 - 00000461 _____ () C:\Users\Richard\Documents\Majin.def
2014-07-23 12:10 - 2014-07-23 12:10 - 00000454 _____ () C:\Users\Richard\Documents\kuriringt.def
2014-07-23 12:10 - 2014-07-23 12:10 - 00000331 _____ () C:\Users\Richard\Documents\gogetassj2.def
2014-07-23 12:09 - 2014-07-23 12:11 - 00048362 _____ () C:\Users\Richard\Documents\common.cns
2014-07-23 12:09 - 2014-07-23 12:11 - 00038333 _____ () C:\Users\Richard\Documents\common1.cns
2014-07-23 12:09 - 2014-07-23 12:11 - 00020595 _____ () C:\Users\Richard\Documents\special.cns
2014-07-23 12:09 - 2014-07-23 12:11 - 00014463 _____ () C:\Users\Richard\Documents\hyper.cns
2014-07-23 12:09 - 2014-07-23 12:10 - 00038487 _____ () C:\Users\Richard\Documents\Freeza.cns
2014-07-23 12:09 - 2014-07-23 12:10 - 00008952 _____ () C:\Users\Richard\Documents\custom.cns
2014-07-23 12:09 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\original.act
2014-07-23 12:09 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\azul.act
2014-07-23 12:09 - 2014-07-23 12:09 - 01651296 _____ () C:\Users\Richard\Documents\cellform2.snd
2014-07-23 12:09 - 2014-07-23 12:09 - 01113250 _____ () C:\Users\Richard\Documents\Chiaotzu.snd
2014-07-23 12:09 - 2014-07-23 12:09 - 00689138 _____ () C:\Users\Richard\Documents\cellform2.sff
2014-07-23 12:09 - 2014-07-23 12:09 - 00618006 _____ () C:\Users\Richard\Documents\cellhd.sff
2014-07-23 12:09 - 2014-07-23 12:09 - 00286272 _____ () C:\Users\Richard\Documents\chichi.snd
2014-07-23 12:09 - 2014-07-23 12:09 - 00222381 _____ () C:\Users\Richard\Documents\chichi.sff
2014-07-23 12:09 - 2014-07-23 12:09 - 00195857 _____ () C:\Users\Richard\Documents\Chiaotzu.sff
2014-07-23 12:09 - 2014-07-23 12:09 - 00136818 _____ () C:\Users\Richard\Documents\cellhd.snd
2014-07-23 12:09 - 2014-07-23 12:09 - 00082982 _____ () C:\Users\Richard\Documents\cellhd.cns
2014-07-23 12:09 - 2014-07-23 12:09 - 00070553 _____ () C:\Users\Richard\Documents\Chiaotzu.cns
2014-07-23 12:09 - 2014-07-23 12:09 - 00065592 _____ () C:\Users\Richard\Documents\chichi.cns
2014-07-23 12:09 - 2014-07-23 12:09 - 00054238 _____ () C:\Users\Richard\Documents\cellform2.cns
2014-07-23 12:09 - 2014-07-23 12:09 - 00043545 _____ () C:\Users\Richard\Documents\nandato.cns
2014-07-23 12:09 - 2014-07-23 12:09 - 00039202 _____ () C:\Users\Richard\Documents\cellform2.air
2014-07-23 12:09 - 2014-07-23 12:09 - 00036165 _____ () C:\Users\Richard\Documents\chichi.air
2014-07-23 12:09 - 2014-07-23 12:09 - 00035649 _____ () C:\Users\Richard\Documents\Freeza.air
2014-07-23 12:09 - 2014-07-23 12:09 - 00034094 _____ () C:\Users\Richard\Documents\cellhd.air
2014-07-23 12:09 - 2014-07-23 12:09 - 00026749 _____ () C:\Users\Richard\Documents\cellhd.cmd
2014-07-23 12:09 - 2014-07-23 12:09 - 00024913 _____ () C:\Users\Richard\Documents\Chiaotzu.air
2014-07-23 12:09 - 2014-07-23 12:09 - 00022847 _____ () C:\Users\Richard\Documents\cellform2.cmd
2014-07-23 12:09 - 2014-07-23 12:09 - 00021559 _____ () C:\Users\Richard\Documents\chichi.cmd
2014-07-23 12:09 - 2014-07-23 12:09 - 00020426 _____ () C:\Users\Richard\Documents\Chiaotzu.cmd
2014-07-23 12:09 - 2014-07-23 12:09 - 00019644 _____ () C:\Users\Richard\Documents\normal.cns
2014-07-23 12:09 - 2014-07-23 12:09 - 00014787 _____ () C:\Users\Richard\Documents\Freeza.cmd
2014-07-23 12:09 - 2014-07-23 12:09 - 00011654 _____ () C:\Users\Richard\Documents\ChargeBomb.cns
2014-07-23 12:09 - 2014-07-23 12:09 - 00003280 _____ () C:\Users\Richard\Documents\chiaotzu.pal
2014-07-23 12:09 - 2014-07-23 12:09 - 00001378 _____ () C:\Users\Richard\Documents\Chiaotzu Moves.txt
2014-07-23 12:09 - 2014-07-23 12:09 - 00001135 _____ () C:\Users\Richard\Documents\manual.txt
2014-07-23 12:09 - 2014-07-23 12:09 - 00000797 _____ () C:\Users\Richard\Documents\Chiaotzu.def
2014-07-23 12:09 - 2014-07-23 12:09 - 00000768 _____ () C:\Users\Richard\Documents\original2.act
2014-07-23 12:09 - 2014-07-23 12:09 - 00000768 _____ () C:\Users\Richard\Documents\marron.act
2014-07-23 12:09 - 2014-07-23 12:09 - 00000768 _____ () C:\Users\Richard\Documents\flamenguista.act
2014-07-23 12:09 - 2014-07-23 12:09 - 00000768 _____ () C:\Users\Richard\Documents\broli9.act
2014-07-23 12:09 - 2014-07-23 12:09 - 00000768 _____ () C:\Users\Richard\Documents\broli8.act
2014-07-23 12:09 - 2014-07-23 12:09 - 00000768 _____ () C:\Users\Richard\Documents\broli7.act
2014-07-23 12:09 - 2014-07-23 12:09 - 00000649 _____ () C:\Users\Richard\Documents\cellhd.def
2014-07-23 12:09 - 2014-07-23 12:09 - 00000366 _____ () C:\Users\Richard\Documents\Chichi.def
2014-07-23 12:09 - 2014-07-23 12:09 - 00000244 _____ () C:\Users\Richard\Documents\cellform2.def
2014-07-23 12:01 - 2014-07-23 12:01 - 00001214 _____ () C:\Users\Richard\Desktop\Undelete 360.lnk
2014-07-23 12:01 - 2014-07-23 12:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Undelete360
2014-07-23 12:01 - 2014-07-23 12:01 - 00000000 ____D () C:\Program Files (x86)\File Recovery
2014-07-23 12:00 - 2014-07-23 12:01 - 02572304 _____ (File Recovery Ltd. ) C:\Users\Richard\Downloads\undelete-360-setup.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-16 13:39 - 2014-08-16 13:39 - 00009437 _____ () C:\Users\Richard\Downloads\FRST.txt
2014-08-16 13:39 - 2014-08-16 13:39 - 00000000 ____D () C:\FRST
2014-08-16 13:38 - 2014-08-16 13:38 - 00000476 _____ () C:\Users\Richard\Downloads\defogger_disable.log
2014-08-16 13:38 - 2014-08-16 13:38 - 00000000 _____ () C:\Users\Richard\defogger_reenable
2014-08-16 13:38 - 2014-01-27 19:34 - 00000000 ____D () C:\Users\Richard
2014-08-16 13:37 - 2014-08-16 13:37 - 02101248 _____ (Farbar) C:\Users\Richard\Downloads\FRST64.exe
2014-08-16 13:37 - 2014-08-16 13:37 - 00380416 _____ () C:\Users\Richard\Downloads\Gmer-19357.exe
2014-08-16 13:37 - 2014-08-16 13:37 - 00050477 _____ () C:\Users\Richard\Downloads\Defogger.exe
2014-08-16 13:29 - 2014-08-16 13:29 - 01101648 _____ () C:\Users\Richard\Downloads\HijackThis - CHIP-Installer.exe
2014-08-16 13:27 - 2009-07-14 06:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-16 13:27 - 2009-07-14 06:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-16 13:24 - 2014-01-28 20:33 - 00000000 ____D () C:\Users\Richard\AppData\Roaming\Spotify
2014-08-16 13:23 - 2014-07-27 19:18 - 00000968 _____ () C:\Windows\Tasks\PriceMeterLiveUpdateUpdateTaskMachineUA.job
2014-08-16 13:23 - 2014-01-27 19:36 - 01444445 _____ () C:\Windows\WindowsUpdate.log
2014-08-16 13:23 - 2011-04-12 09:43 - 00700364 _____ () C:\Windows\system32\perfh007.dat
2014-08-16 13:23 - 2011-04-12 09:43 - 00149544 _____ () C:\Windows\system32\perfc007.dat
2014-08-16 13:23 - 2009-07-14 07:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-16 13:19 - 2014-07-27 19:18 - 00000964 _____ () C:\Windows\Tasks\PriceMeterLiveUpdateUpdateTaskMachineCore.job
2014-08-16 13:19 - 2010-11-21 05:47 - 00245054 _____ () C:\Windows\PFRO.log
2014-08-16 13:19 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-08-16 13:19 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-16 13:19 - 2009-07-14 06:51 - 00055953 _____ () C:\Windows\setupact.log
2014-08-16 13:18 - 2014-07-27 19:18 - 00000300 _____ () C:\Windows\Tasks\PriceMeterUpdater.job
2014-08-16 13:16 - 2014-08-16 13:17 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-08-16 13:16 - 2014-08-16 13:16 - 00000000 ____D () C:\Users\Richard\AppData\Roaming\Avira
2014-08-16 13:16 - 2014-08-16 13:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-08-16 13:16 - 2014-08-16 13:14 - 00000000 ____D () C:\ProgramData\Avira
2014-08-16 13:16 - 2014-08-16 13:14 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-08-16 13:14 - 2014-08-16 13:14 - 04574968 _____ (Avira Operations GmbH & Co. KG) C:\Users\Richard\Downloads\avira_de_av___ws.exe
2014-08-16 13:14 - 2014-08-16 13:14 - 00001137 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-08-16 13:14 - 2014-01-27 20:33 - 00000000 ____D () C:\ProgramData\Package Cache
2014-08-16 13:03 - 2014-01-27 19:47 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-16 13:01 - 2009-07-14 06:45 - 00302608 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-16 01:37 - 2014-02-03 00:56 - 00000000 ____D () C:\Users\Richard\AppData\Roaming\Skype
2014-08-15 14:39 - 2014-07-28 00:19 - 00000095 _____ () C:\Users\Richard\AppData\Roaming\WB.CFG
2014-08-15 12:35 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-08-14 16:34 - 2014-06-22 16:34 - 00000000 ____D () C:\Users\Richard\AppData\Roaming\FileAdvisor
2014-08-14 16:34 - 2014-06-21 16:34 - 00000000 ____D () C:\Program Files (x86)\File Type Advisor
2014-08-14 13:32 - 2014-08-14 13:32 - 00483536 _____ () C:\Users\Richard\Desktop\msinfo.txt
2014-08-14 13:31 - 2014-08-14 13:31 - 00029197 _____ () C:\Users\Richard\Desktop\DxDiag.txt
2014-08-14 12:23 - 2014-08-14 12:23 - 00000000 ____D () C:\Users\Richard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gothic II
2014-08-14 12:22 - 2014-08-14 12:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gothic II
2014-08-14 12:22 - 2014-08-14 12:21 - 43501463 _____ (Übersetzer-Team Lonewulf & Co) C:\Users\Richard\Downloads\Returning_de_patch_1.0.1.build4.sleep.exe
2014-08-14 12:12 - 2014-08-14 11:59 - 00000000 ____D () C:\Users\Richard\Desktop\wc3
2014-08-14 11:55 - 2014-08-14 11:53 - 167217973 _____ (Übersetzer-Team Lonewulf & Co) C:\Users\Richard\Downloads\Returning_DE-1.1.exe
2014-08-14 01:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-08-13 18:39 - 2014-03-07 15:35 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-13 18:38 - 2014-03-07 15:35 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-12 12:36 - 2014-02-03 00:56 - 00000000 ____D () C:\ProgramData\Skype
2014-08-11 09:14 - 2014-01-28 20:33 - 00000000 ____D () C:\Users\Richard\AppData\Local\Spotify
2014-08-01 01:41 - 2014-08-13 13:21 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-01 01:16 - 2014-08-13 13:21 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-31 23:30 - 2014-02-08 22:30 - 00000288 _____ () C:\Windows\Tasks\DLL-Files FixerASKUSER.job
2014-07-31 11:53 - 2014-01-27 19:41 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-07-30 13:02 - 2014-07-30 13:02 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-27 19:18 - 2014-07-27 19:18 - 00003964 _____ () C:\Windows\System32\Tasks\PriceMeterLiveUpdateUpdateTaskMachineUA
2014-07-27 19:18 - 2014-07-27 19:18 - 00003712 _____ () C:\Windows\System32\Tasks\PriceMeterLiveUpdateUpdateTaskMachineCore
2014-07-27 19:18 - 2014-07-27 19:18 - 00003308 _____ () C:\Windows\System32\Tasks\pricemeterdownloader
2014-07-27 19:18 - 2014-07-27 19:18 - 00003248 _____ () C:\Windows\System32\Tasks\PriceMeterUpdater
2014-07-27 19:18 - 2014-07-27 19:18 - 00000000 ____D () C:\Users\Richard\AppData\Roaming\OpenCandy
2014-07-27 19:18 - 2014-07-27 19:18 - 00000000 ____D () C:\Users\Richard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PriceMeter
2014-07-27 19:18 - 2014-07-27 19:18 - 00000000 ____D () C:\Users\Richard\AppData\Local\PriceMeterLiveUpdate
2014-07-27 19:18 - 2014-07-27 19:18 - 00000000 ____D () C:\Users\Richard\AppData\Local\PriceMeter
2014-07-27 19:18 - 2014-06-21 13:56 - 00001532 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-07-27 19:18 - 2014-06-21 13:56 - 00001239 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-07-27 19:18 - 2014-06-21 13:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-07-27 19:18 - 2014-06-21 13:56 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-07-27 19:18 - 2014-06-21 13:55 - 00000000 ____D () C:\Users\Richard\AppData\Roaming\DVDVideoSoft
2014-07-25 16:52 - 2014-08-13 13:21 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-25 16:02 - 2014-08-13 13:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-25 16:01 - 2014-08-13 13:21 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-25 15:51 - 2014-08-13 13:21 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-25 15:30 - 2014-08-13 13:21 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-25 15:28 - 2014-08-13 13:21 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-25 15:28 - 2014-08-13 13:21 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-25 15:25 - 2014-08-13 13:21 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-25 15:25 - 2014-08-13 13:21 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-25 15:11 - 2014-08-13 13:21 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-25 15:10 - 2014-08-13 13:21 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-25 15:04 - 2014-08-13 13:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-07-25 15:03 - 2014-08-13 13:21 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-25 15:00 - 2014-08-13 13:21 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-25 15:00 - 2014-08-13 13:21 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-25 14:59 - 2014-08-13 13:21 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-25 14:47 - 2014-08-13 13:21 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-25 14:40 - 2014-08-13 13:21 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-25 14:34 - 2014-08-13 13:21 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-25 14:34 - 2014-08-13 13:21 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-07-25 14:33 - 2014-08-13 13:21 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-07-25 14:30 - 2014-08-13 13:21 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-07-25 14:28 - 2014-08-13 13:21 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-25 14:28 - 2014-08-13 13:21 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-25 14:21 - 2014-08-13 13:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-25 14:19 - 2014-08-13 13:21 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-25 14:18 - 2014-08-13 13:21 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-07-25 14:17 - 2014-08-13 13:21 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-25 14:17 - 2014-08-13 13:21 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-07-25 14:12 - 2014-08-13 13:21 - 00438784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-07-25 14:10 - 2014-08-13 13:21 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-25 14:10 - 2014-08-13 13:21 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-07-25 14:08 - 2014-08-13 13:21 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-07-25 14:06 - 2014-08-13 13:21 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-25 13:52 - 2014-08-13 13:21 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-25 13:47 - 2014-08-13 13:21 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-25 13:43 - 2014-08-13 13:21 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-25 13:42 - 2014-08-13 13:21 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-25 13:39 - 2014-08-13 13:21 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-25 13:39 - 2014-08-13 13:21 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-25 13:36 - 2014-08-13 13:21 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-07-25 13:34 - 2014-08-13 13:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-25 13:29 - 2014-08-13 13:21 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-25 13:23 - 2014-08-13 13:21 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-25 13:13 - 2014-08-13 13:21 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-25 13:07 - 2014-08-13 13:21 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-25 13:07 - 2014-08-13 13:21 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-07-25 13:03 - 2014-08-13 13:21 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-25 12:52 - 2014-08-13 13:21 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-25 12:26 - 2014-08-13 13:21 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-25 12:17 - 2014-08-13 13:21 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-25 12:09 - 2014-08-13 13:21 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-25 12:05 - 2014-08-13 13:21 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-25 12:00 - 2014-08-13 13:21 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-24 14:17 - 2014-07-24 14:17 - 00000000 __RHD () C:\Users\Richard\AppData\Roaming\SecuROM
2014-07-24 14:17 - 2014-07-24 14:17 - 00000000 ____D () C:\Users\Richard\Documents\EA Games
2014-07-24 14:17 - 2014-07-24 14:17 - 00000000 ____D () C:\Users\Public\Documents\EA Games
2014-07-24 14:16 - 2014-07-24 14:16 - 00001682 _____ () C:\Users\Public\Desktop\The Sims 2 Ultimate Collection.lnk
2014-07-24 14:16 - 2014-07-24 14:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Sims 2 Ultimate Collection
2014-07-24 14:16 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-07-24 13:02 - 2014-07-24 11:44 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2014-07-24 13:02 - 2014-07-24 11:43 - 00000000 ____D () C:\ProgramData\Origin
2014-07-24 11:44 - 2014-07-24 11:43 - 00000000 ____D () C:\Users\Richard\AppData\Roaming\Origin
2014-07-24 11:44 - 2014-07-24 11:43 - 00000000 ____D () C:\Users\Richard\AppData\Local\Origin
2014-07-24 11:43 - 2014-07-24 11:43 - 00000979 _____ () C:\Users\Public\Desktop\Origin.lnk
2014-07-24 11:43 - 2014-07-24 11:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2014-07-24 11:43 - 2014-07-24 11:43 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-07-24 11:43 - 2014-07-24 11:43 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-07-24 11:42 - 2014-07-24 11:42 - 17089296 _____ (Electronic Arts, Inc.) C:\Users\Richard\Downloads\OriginThinSetup.exe
2014-07-23 13:29 - 2014-08-16 13:16 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-07-23 13:29 - 2014-08-16 13:16 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-07-23 13:29 - 2014-08-16 13:16 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-07-23 12:11 - 2014-07-23 12:11 - 04415473 _____ () C:\Users\Richard\Documents\system.sff
2014-07-23 12:11 - 2014-07-23 12:11 - 02770896 _____ () C:\Users\Richard\Documents\TRUNKS.SND
2014-07-23 12:11 - 2014-07-23 12:11 - 02743402 _____ () C:\Users\Richard\Documents\Piccolo.snd
2014-07-23 12:11 - 2014-07-23 12:11 - 01504322 _____ () C:\Users\Richard\Documents\vegetahd.sff
2014-07-23 12:11 - 2014-07-23 12:11 - 01342598 _____ () C:\Users\Richard\Documents\paikuhan.sff
2014-07-23 12:11 - 2014-07-23 12:11 - 01000480 _____ () C:\Users\Richard\Documents\VegetaHd.snd
2014-07-23 12:11 - 2014-07-23 12:11 - 00992594 _____ () C:\Users\Richard\Documents\vegetto-n.snd
2014-07-23 12:11 - 2014-07-23 12:11 - 00764233 _____ () C:\Users\Richard\Documents\Piccolo.sff
2014-07-23 12:11 - 2014-07-23 12:11 - 00759491 _____ () C:\Users\Richard\Documents\vegetto-n.sff
2014-07-23 12:11 - 2014-07-23 12:11 - 00610203 _____ () C:\Users\Richard\Documents\son-trunks.sff
2014-07-23 12:11 - 2014-07-23 12:11 - 00545600 _____ () C:\Users\Richard\Documents\Trunks.sff
2014-07-23 12:11 - 2014-07-23 12:11 - 00418050 _____ () C:\Users\Richard\Documents\satan-son.snd
2014-07-23 12:11 - 2014-07-23 12:11 - 00304274 _____ () C:\Users\Richard\Documents\satan-son.sff
2014-07-23 12:11 - 2014-07-23 12:11 - 00298232 _____ () C:\Users\Richard\Documents\ending.sff
2014-07-23 12:11 - 2014-07-23 12:11 - 00261262 _____ () C:\Users\Richard\Documents\Picurin.sff
2014-07-23 12:11 - 2014-07-23 12:11 - 00208042 _____ () C:\Users\Richard\Documents\PiccoloAIR.air
2014-07-23 12:11 - 2014-07-23 12:11 - 00203718 _____ () C:\Users\Richard\Documents\VegetaHD.cns
2014-07-23 12:11 - 2014-07-23 12:11 - 00186256 _____ () C:\Users\Richard\Documents\son-trunks.snd
2014-07-23 12:11 - 2014-07-23 12:11 - 00183574 _____ () C:\Users\Richard\Documents\vegetto-n.cns
2014-07-23 12:11 - 2014-07-23 12:11 - 00148215 _____ () C:\Users\Richard\Documents\fightfx.sff
2014-07-23 12:11 - 2014-07-23 12:11 - 00112197 _____ () C:\Users\Richard\Documents\vegetto-n.air
2014-07-23 12:11 - 2014-07-23 12:11 - 00091601 _____ () C:\Users\Richard\Documents\VegetaHD.air
2014-07-23 12:11 - 2014-07-23 12:11 - 00089579 _____ () C:\Users\Richard\Documents\fight.snd
2014-07-23 12:11 - 2014-07-23 12:11 - 00088629 _____ () C:\Users\Richard\Documents\Feature.cns
2014-07-23 12:11 - 2014-07-23 12:11 - 00085220 _____ () C:\Users\Richard\Documents\PiccoloCMD.cmd
2014-07-23 12:11 - 2014-07-23 12:11 - 00075317 _____ () C:\Users\Richard\Documents\paikuhan.cns
2014-07-23 12:11 - 2014-07-23 12:11 - 00072705 _____ () C:\Users\Richard\Documents\common.snd
2014-07-23 12:11 - 2014-07-23 12:11 - 00069516 _____ () C:\Users\Richard\Documents\son-trunks.air
2014-07-23 12:11 - 2014-07-23 12:11 - 00055298 _____ () C:\Users\Richard\Documents\Trunks.air
2014-07-23 12:11 - 2014-07-23 12:11 - 00045418 _____ () C:\Users\Richard\Documents\VegetaHD.cmd
2014-07-23 12:11 - 2014-07-23 12:11 - 00044929 _____ () C:\Users\Richard\Documents\logo.sff
2014-07-23 12:11 - 2014-07-23 12:11 - 00037726 _____ () C:\Users\Richard\Documents\fight.sff
2014-07-23 12:11 - 2014-07-23 12:11 - 00036881 _____ () C:\Users\Richard\Documents\vegetto-n.cmd
2014-07-23 12:11 - 2014-07-23 12:11 - 00036637 _____ () C:\Users\Richard\Documents\paikuhan.air
2014-07-23 12:11 - 2014-07-23 12:11 - 00034035 _____ () C:\Users\Richard\Documents\Misc.cns
2014-07-23 12:11 - 2014-07-23 12:11 - 00031105 _____ () C:\Users\Richard\Documents\satan-son.cns
2014-07-23 12:11 - 2014-07-23 12:11 - 00029080 _____ () C:\Users\Richard\Documents\Constants.cns
2014-07-23 12:11 - 2014-07-23 12:11 - 00028965 _____ () C:\Users\Richard\Documents\credits.sff
2014-07-23 12:11 - 2014-07-23 12:11 - 00028125 _____ () C:\Users\Richard\Documents\satan-son.air
2014-07-23 12:11 - 2014-07-23 12:11 - 00027504 _____ () C:\Users\Richard\Documents\paikuhan.cmd
2014-07-23 12:11 - 2014-07-23 12:11 - 00026200 _____ () C:\Users\Richard\Documents\son-trunks.cmd
2014-07-23 12:11 - 2014-07-23 12:11 - 00021557 _____ () C:\Users\Richard\Documents\Trunks.cmd
2014-07-23 12:11 - 2014-07-23 12:11 - 00021121 _____ () C:\Users\Richard\Documents\basico-ssj.cns
2014-07-23 12:11 - 2014-07-23 12:11 - 00017969 _____ () C:\Users\Richard\Documents\MiscHelper.cns
2014-07-23 12:11 - 2014-07-23 12:11 - 00014070 _____ () C:\Users\Richard\Documents\satan-son.cmd
2014-07-23 12:11 - 2014-07-23 12:11 - 00013752 _____ () C:\Users\Richard\Documents\system.def
2014-07-23 12:11 - 2014-07-23 12:11 - 00011937 _____ () C:\Users\Richard\Documents\movelist.txt
2014-07-23 12:11 - 2014-07-23 12:11 - 00010986 _____ () C:\Users\Richard\Documents\fight.def
2014-07-23 12:11 - 2014-07-23 12:11 - 00010510 _____ () C:\Users\Richard\Documents\Super.cns
2014-07-23 12:11 - 2014-07-23 12:11 - 00009760 _____ () C:\Users\Richard\Documents\Basic.cns
2014-07-23 12:11 - 2014-07-23 12:11 - 00009368 _____ () C:\Users\Richard\Documents\mugen.cfg
2014-07-23 12:11 - 2014-07-23 12:11 - 00009265 _____ () C:\Users\Richard\Documents\especiais-ssj.cns
2014-07-23 12:11 - 2014-07-23 12:11 - 00009246 _____ () C:\Users\Richard\Documents\especiais.cns
2014-07-23 12:11 - 2014-07-23 12:11 - 00008976 _____ () C:\Users\Richard\Documents\system.snd
2014-07-23 12:11 - 2014-07-23 12:11 - 00007885 _____ () C:\Users\Richard\Documents\1.pcx
2014-07-23 12:11 - 2014-07-23 12:11 - 00007029 _____ () C:\Users\Richard\Documents\jg.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00006848 _____ () C:\Users\Richard\Documents\hd.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00006848 _____ () C:\Users\Richard\Documents\dbz-hd-fonts.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00006385 _____ () C:\Users\Richard\Documents\ub1.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00006385 _____ () C:\Users\Richard\Documents\dbzub22-verm.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00006385 _____ () C:\Users\Richard\Documents\dbzub22-cinsa.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00006385 _____ () C:\Users\Richard\Documents\dbub22-blue.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00006368 _____ () C:\Users\Richard\Documents\ub2.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00006368 _____ () C:\Users\Richard\Documents\dbz-ub22.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00006367 _____ () C:\Users\Richard\Documents\f-6x8f.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00005741 _____ () C:\Users\Richard\Documents\ending.def
2014-07-23 12:11 - 2014-07-23 12:11 - 00005495 _____ () C:\Users\Richard\Documents\hypers.cns
2014-07-23 12:11 - 2014-07-23 12:11 - 00005315 _____ () C:\Users\Richard\Documents\hypers-ssj.cns
2014-07-23 12:11 - 2014-07-23 12:11 - 00005103 _____ () C:\Users\Richard\Documents\gameover.sff
2014-07-23 12:11 - 2014-07-23 12:11 - 00004942 _____ () C:\Users\Richard\Documents\f-6x9.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00004307 _____ () C:\Users\Richard\Documents\f-6x9f.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00003921 _____ () C:\Users\Richard\Documents\fightfx.air
2014-07-23 12:11 - 2014-07-23 12:11 - 00003859 _____ () C:\Users\Richard\Documents\name1.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00003655 _____ () C:\Users\Richard\Documents\hit-num-db.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00003170 _____ () C:\Users\Richard\Documents\Piccolo2.def
2014-07-23 12:11 - 2014-07-23 12:11 - 00003028 _____ () C:\Users\Richard\Documents\f-4x6.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00002477 _____ () C:\Users\Richard\Documents\num1.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00001962 _____ () C:\Users\Richard\Documents\select.def
2014-07-23 12:11 - 2014-07-23 12:11 - 00001648 _____ () C:\Users\Richard\Documents\f-pad.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00001547 _____ () C:\Users\Richard\Documents\credits.def
2014-07-23 12:11 - 2014-07-23 12:11 - 00001374 _____ () C:\Users\Richard\Documents\balls-font-p2.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00001374 _____ () C:\Users\Richard\Documents\balls-font-p1.fnt
2014-07-23 12:11 - 2014-07-23 12:11 - 00001186 _____ () C:\Users\Richard\Documents\Moves.txt
2014-07-23 12:11 - 2014-07-23 12:11 - 00001045 _____ () C:\Users\Richard\Documents\gameover.def
2014-07-23 12:11 - 2014-07-23 12:11 - 00000866 _____ () C:\Users\Richard\Documents\paikuhan.def
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\vegetto8.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\vegetto7.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\vegetto6.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\vegetto5.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\vegetto4.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\vegetto3.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\vegetto2.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\vegetto1.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\vegetahd5.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\vegetahd4.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\vegetahd3.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\vegetahd2.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\vegetahd1.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\vegetahd.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\showcolours.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\sb2.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\picollodb2.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\Piccolo06.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\Piccolo05.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\Piccolo04.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\Piccolo03.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\Piccolo02.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\Piccolo01.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\pic.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\paikuhan1.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\paikuhan.act
2014-07-23 12:11 - 2014-07-23 12:11 - 00000768 _____ () C:\Users\Richard\Documents\1.ACT
2014-07-23 12:11 - 2014-07-23 12:11 - 00000746 _____ () C:\Users\Richard\Documents\Trunks.def
2014-07-23 12:11 - 2014-07-23 12:11 - 00000641 _____ () C:\Users\Richard\Documents\Son-Trunks.def
2014-07-23 12:11 - 2014-07-23 12:11 - 00000537 _____ () C:\Users\Richard\Documents\Picurin.def
2014-07-23 12:11 - 2014-07-23 12:11 - 00000516 _____ () C:\Users\Richard\Documents\satan-son.def
2014-07-23 12:11 - 2014-07-23 12:11 - 00000479 _____ () C:\Users\Richard\Documents\Read This!.txt
2014-07-23 12:11 - 2014-07-23 12:11 - 00000425 _____ () C:\Users\Richard\Documents\logo.def
2014-07-23 12:11 - 2014-07-23 12:11 - 00000315 _____ () C:\Users\Richard\Documents\vegeta.def
2014-07-23 12:11 - 2014-07-23 12:11 - 00000000 _____ () C:\Users\Richard\Documents\cwsdpmi.swp.txt
2014-07-23 12:11 - 2014-07-23 12:10 - 00446099 _____ () C:\Users\Richard\Documents\intro.sff
2014-07-23 12:11 - 2014-07-23 12:10 - 00274072 _____ () C:\Users\Richard\Documents\kuririn.snd
2014-07-23 12:11 - 2014-07-23 12:10 - 00056288 _____ () C:\Users\Richard\Documents\kuririn.cns
2014-07-23 12:11 - 2014-07-23 12:10 - 00055107 _____ () C:\Users\Richard\Documents\trunks.cns
2014-07-23 12:11 - 2014-07-23 12:10 - 00041172 _____ () C:\Users\Richard\Documents\kuririn.air
2014-07-23 12:11 - 2014-07-23 12:10 - 00036133 _____ () C:\Users\Richard\Documents\Basico.cns
2014-07-23 12:11 - 2014-07-23 12:10 - 00028327 _____ () C:\Users\Richard\Documents\kuririn.cmd
2014-07-23 12:11 - 2014-07-23 12:10 - 00024369 _____ () C:\Users\Richard\Documents\kuririn-2.cns
2014-07-23 12:11 - 2014-07-23 12:10 - 00013417 _____ () C:\Users\Richard\Documents\Intro.def
2014-07-23 12:11 - 2014-07-23 12:10 - 00010717 _____ () C:\Users\Richard\Documents\helpers.cns
2014-07-23 12:11 - 2014-07-23 12:10 - 00000825 _____ () C:\Users\Richard\Documents\readme.txt
2014-07-23 12:11 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\vegetto-n.act
2014-07-23 12:11 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\kuririn3.act
2014-07-23 12:11 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\kuririn2.act
2014-07-23 12:11 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\kuririn.act
2014-07-23 12:11 - 2014-07-23 12:09 - 00048362 _____ () C:\Users\Richard\Documents\common.cns
2014-07-23 12:11 - 2014-07-23 12:09 - 00038333 _____ () C:\Users\Richard\Documents\common1.cns
2014-07-23 12:11 - 2014-07-23 12:09 - 00020595 _____ () C:\Users\Richard\Documents\special.cns
2014-07-23 12:11 - 2014-07-23 12:09 - 00014463 _____ () C:\Users\Richard\Documents\hyper.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 03538319 _____ () C:\Users\Richard\Documents\GokuSSJ.sff
2014-07-23 12:10 - 2014-07-23 12:10 - 02601661 _____ () C:\Users\Richard\Documents\kakaroto.sff
2014-07-23 12:10 - 2014-07-23 12:10 - 02210185 _____ () C:\Users\Richard\Documents\gogeta-ssj4.sff
2014-07-23 12:10 - 2014-07-23 12:10 - 01983549 _____ () C:\Users\Richard\Documents\GokuSSJ.snd
2014-07-23 12:10 - 2014-07-23 12:10 - 01940117 _____ () C:\Users\Richard\Documents\kakaroto.snd
2014-07-23 12:10 - 2014-07-23 12:10 - 01935670 _____ () C:\Users\Richard\Documents\Freeza.snd
2014-07-23 12:10 - 2014-07-23 12:10 - 01860003 _____ () C:\Users\Richard\Documents\gogeta-ssj4.snd
2014-07-23 12:10 - 2014-07-23 12:10 - 01571192 _____ () C:\Users\Richard\Documents\gokuGT(classic).sff
2014-07-23 12:10 - 2014-07-23 12:10 - 01352538 _____ () C:\Users\Richard\Documents\Kaioshin.snd
2014-07-23 12:10 - 2014-07-23 12:10 - 00940190 _____ () C:\Users\Richard\Documents\Final.sff
2014-07-23 12:10 - 2014-07-23 12:10 - 00934775 _____ () C:\Users\Richard\Documents\gohanex.snd
2014-07-23 12:10 - 2014-07-23 12:10 - 00904631 _____ () C:\Users\Richard\Documents\Gohan.sff
2014-07-23 12:10 - 2014-07-23 12:10 - 00842854 _____ () C:\Users\Richard\Documents\n-gotenks.snd
2014-07-23 12:10 - 2014-07-23 12:10 - 00814648 _____ () C:\Users\Richard\Documents\gx2.sff
2014-07-23 12:10 - 2014-07-23 12:10 - 00814648 _____ () C:\Users\Richard\Documents\gohanex.sff
2014-07-23 12:10 - 2014-07-23 12:10 - 00810878 _____ () C:\Users\Richard\Documents\GokuGT.snd
2014-07-23 12:10 - 2014-07-23 12:10 - 00809015 _____ () C:\Users\Richard\Documents\Majin.sff
2014-07-23 12:10 - 2014-07-23 12:10 - 00659912 _____ () C:\Users\Richard\Documents\Freeza.sff
2014-07-23 12:10 - 2014-07-23 12:10 - 00603032 _____ () C:\Users\Richard\Documents\gogetassj2.sff
2014-07-23 12:10 - 2014-07-23 12:10 - 00517194 _____ () C:\Users\Richard\Documents\goten-n.sff
2014-07-23 12:10 - 2014-07-23 12:10 - 00451285 _____ () C:\Users\Richard\Documents\Gohan.snd
2014-07-23 12:10 - 2014-07-23 12:10 - 00443894 _____ () C:\Users\Richard\Documents\n-gotenks.sff
2014-07-23 12:10 - 2014-07-23 12:10 - 00433519 _____ () C:\Users\Richard\Documents\gohan-zeta.sff
2014-07-23 12:10 - 2014-07-23 12:10 - 00419598 _____ () C:\Users\Richard\Documents\Majin.snd
2014-07-23 12:10 - 2014-07-23 12:10 - 00397728 _____ () C:\Users\Richard\Documents\goten-n.snd
2014-07-23 12:10 - 2014-07-23 12:10 - 00388863 _____ () C:\Users\Richard\Documents\Kaioshin.sff
2014-07-23 12:10 - 2014-07-23 12:10 - 00276720 _____ () C:\Users\Richard\Documents\gohan-zeta.snd
2014-07-23 12:10 - 2014-07-23 12:10 - 00260724 _____ () C:\Users\Richard\Documents\gogetassj2.snd
2014-07-23 12:10 - 2014-07-23 12:10 - 00233729 _____ () C:\Users\Richard\Documents\GokuSSJ.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00223746 _____ () C:\Users\Richard\Documents\kakaroto.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00214720 _____ () C:\Users\Richard\Documents\kuririn.sff
2014-07-23 12:10 - 2014-07-23 12:10 - 00182094 _____ () C:\Users\Richard\Documents\GokuSSJ.air
2014-07-23 12:10 - 2014-07-23 12:10 - 00177676 _____ () C:\Users\Richard\Documents\gohanex.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00165623 _____ () C:\Users\Richard\Documents\gohanex.air
2014-07-23 12:10 - 2014-07-23 12:10 - 00135439 _____ () C:\Users\Richard\Documents\GokuGT.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00132381 _____ () C:\Users\Richard\Documents\gogeta-ssj4.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00127812 _____ () C:\Users\Richard\Documents\Majin.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00120632 _____ () C:\Users\Richard\Documents\SSJ4.st
2014-07-23 12:10 - 2014-07-23 12:10 - 00087607 _____ () C:\Users\Richard\Documents\Gohan.AIR
2014-07-23 12:10 - 2014-07-23 12:10 - 00084076 _____ () C:\Users\Richard\Documents\kakaroto.air
2014-07-23 12:10 - 2014-07-23 12:10 - 00077690 _____ () C:\Users\Richard\Documents\gogeta-ssj4.air
2014-07-23 12:10 - 2014-07-23 12:10 - 00072381 _____ () C:\Users\Richard\Documents\Majin.air
2014-07-23 12:10 - 2014-07-23 12:10 - 00070761 _____ () C:\Users\Richard\Documents\GokuGT.air
2014-07-23 12:10 - 2014-07-23 12:10 - 00065074 _____ () C:\Users\Richard\Documents\commonst.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00062735 _____ () C:\Users\Richard\Documents\gogetassj2.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00061398 _____ () C:\Users\Richard\Documents\GokuSSJ.cmd
2014-07-23 12:10 - 2014-07-23 12:10 - 00057645 _____ () C:\Users\Richard\Documents\goten-n.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00054395 _____ () C:\Users\Richard\Documents\Kaioshin.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00052478 _____ () C:\Users\Richard\Documents\Especiais.st
2014-07-23 12:10 - 2014-07-23 12:10 - 00051278 _____ () C:\Users\Richard\Documents\gohan-zeta.air
2014-07-23 12:10 - 2014-07-23 12:10 - 00049315 _____ () C:\Users\Richard\Documents\Kaioshin.air
2014-07-23 12:10 - 2014-07-23 12:10 - 00047423 _____ () C:\Users\Richard\Documents\gogetassj2.air
2014-07-23 12:10 - 2014-07-23 12:10 - 00042953 _____ () C:\Users\Richard\Documents\Gohan.CMD
2014-07-23 12:10 - 2014-07-23 12:10 - 00042867 _____ () C:\Users\Richard\Documents\GokuGT.cmd
2014-07-23 12:10 - 2014-07-23 12:10 - 00042859 _____ () C:\Users\Richard\Documents\Golpes.st
2014-07-23 12:10 - 2014-07-23 12:10 - 00040283 _____ () C:\Users\Richard\Documents\goten-n.air
2014-07-23 12:10 - 2014-07-23 12:10 - 00037570 _____ () C:\Users\Richard\Documents\common21.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00037238 _____ () C:\Users\Richard\Documents\n-gotenks.air
2014-07-23 12:10 - 2014-07-23 12:10 - 00036525 _____ () C:\Users\Richard\Documents\n-gotenks.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00035051 _____ () C:\Users\Richard\Documents\gohanex.cmd
2014-07-23 12:10 - 2014-07-23 12:10 - 00034563 _____ () C:\Users\Richard\Documents\gogeta-ssj4-2.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00033959 _____ () C:\Users\Richard\Documents\gogeta-ssj4.cmd
2014-07-23 12:10 - 2014-07-23 12:10 - 00031147 _____ () C:\Users\Richard\Documents\gohan-zeta.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00028472 _____ () C:\Users\Richard\Documents\Striker.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00025750 _____ () C:\Users\Richard\Documents\vegetto-n-2.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00025489 _____ () C:\Users\Richard\Documents\Basico.st
2014-07-23 12:10 - 2014-07-23 12:10 - 00024791 _____ () C:\Users\Richard\Documents\kakaroto.cmd
2014-07-23 12:10 - 2014-07-23 12:10 - 00024703 _____ () C:\Users\Richard\Documents\Kaioshin.cmd
2014-07-23 12:10 - 2014-07-23 12:10 - 00024461 _____ () C:\Users\Richard\Documents\fly.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00023986 _____ () C:\Users\Richard\Documents\n-gotenks.cmd
2014-07-23 12:10 - 2014-07-23 12:10 - 00023558 _____ () C:\Users\Richard\Documents\SSJ.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00022357 _____ () C:\Users\Richard\Documents\Majin.cmd
2014-07-23 12:10 - 2014-07-23 12:10 - 00020310 _____ () C:\Users\Richard\Documents\gohan-zeta.cmd
2014-07-23 12:10 - 2014-07-23 12:10 - 00018646 _____ () C:\Users\Richard\Documents\kaioken.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00017945 _____ () C:\Users\Richard\Documents\goten-n.cmd
2014-07-23 12:10 - 2014-07-23 12:10 - 00016886 _____ () C:\Users\Richard\Documents\gogetassj2.cmd
2014-07-23 12:10 - 2014-07-23 12:10 - 00009736 _____ () C:\Users\Richard\Documents\BigCombo.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00008667 _____ () C:\Users\Richard\Documents\Piccolo.st
2014-07-23 12:10 - 2014-07-23 12:10 - 00007267 _____ () C:\Users\Richard\Documents\kaio-shin.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00007246 _____ () C:\Users\Richard\Documents\Computer.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00005774 _____ () C:\Users\Richard\Documents\kamehameha.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00005749 _____ () C:\Users\Richard\Documents\AI.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00003604 _____ () C:\Users\Richard\Documents\sspecial.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00003220 _____ () C:\Users\Richard\Documents\n-gotenks.pal
2014-07-23 12:10 - 2014-07-23 12:10 - 00002434 _____ () C:\Users\Richard\Documents\Commandos.txt
2014-07-23 12:10 - 2014-07-23 12:10 - 00002364 _____ () C:\Users\Richard\Documents\Gohan.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00001895 _____ () C:\Users\Richard\Documents\Kaioshin.def
2014-07-23 12:10 - 2014-07-23 12:10 - 00001849 _____ () C:\Users\Richard\Documents\Final.def
2014-07-23 12:10 - 2014-07-23 12:10 - 00001837 _____ () C:\Users\Richard\Documents\vegeta.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00001836 _____ () C:\Users\Richard\Documents\trunksp.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00001831 _____ () C:\Users\Richard\Documents\ftrunks.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00001829 _____ () C:\Users\Richard\Documents\bojack.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00001825 _____ () C:\Users\Richard\Documents\pcell.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00001822 _____ () C:\Users\Richard\Documents\piccolo.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00001806 _____ () C:\Users\Richard\Documents\goku.cns
2014-07-23 12:10 - 2014-07-23 12:10 - 00001730 _____ () C:\Users\Richard\Documents\Freeza.txt
2014-07-23 12:10 - 2014-07-23 12:10 - 00001719 _____ () C:\Users\Richard\Documents\Kaioshin.txt
2014-07-23 12:10 - 2014-07-23 12:10 - 00001688 _____ () C:\Users\Richard\Documents\Freeza.def
2014-07-23 12:10 - 2014-07-23 12:10 - 00001495 _____ () C:\Users\Richard\Documents\Leia-me.txt
2014-07-23 12:10 - 2014-07-23 12:10 - 00001224 _____ () C:\Users\Richard\Documents\goten-n.def
2014-07-23 12:10 - 2014-07-23 12:10 - 00001193 _____ () C:\Users\Richard\Documents\kakaroto.def
2014-07-23 12:10 - 2014-07-23 12:10 - 00001177 _____ () C:\Users\Richard\Documents\gohanex.def
2014-07-23 12:10 - 2014-07-23 12:10 - 00001163 _____ () C:\Users\Richard\Documents\Gotenks Moves.txt
2014-07-23 12:10 - 2014-07-23 12:10 - 00000987 _____ () C:\Users\Richard\Documents\nvegetto.def
2014-07-23 12:10 - 2014-07-23 12:10 - 00000863 _____ () C:\Users\Richard\Documents\n-gotenks.def
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\vermelho.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\verde.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\purple.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\preto.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\normal.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Majin5.ACT
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Majin4.ACT
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Majin3.ACT
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Majin2.ACT
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Majin1.ACT
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Majin.ACT
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\laranja.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\kakaroto9.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\kakaroto8.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\kakaroto7.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\kakaroto6.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\kakaroto5.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\kakaroto4.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\kakaroto3.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\kakaroto2.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\kakaroto11.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\kakaroto10.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\kakaroto1.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\kakaroto.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Kaioshin09.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Kaioshin08.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Kaioshin07.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Kaioshin06.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Kaioshin05.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Kaioshin04.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Kaioshin03.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Kaioshin02.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Kaioshin012.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Kaioshin011.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Kaioshin010.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Kaioshin01.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\goten-n.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\GokuSSJ4.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\GokuSSJ3.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\GokuSSJ2.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\GokuSSJ.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\gokuGT4.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\GokuGT3.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\gokuGT2.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\gokuGT.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\gohan-2.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\gohan.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\gogeta-ssj4.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\gogeta3.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\gogeta2.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\gogeta1.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\gogeta.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Freeza06.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Freeza05.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Freeza04.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Freeza03.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Freeza02.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\Freeza01.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\evil.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\dpurple.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\blue.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000768 _____ () C:\Users\Richard\Documents\black.act
2014-07-23 12:10 - 2014-07-23 12:10 - 00000726 _____ () C:\Users\Richard\Documents\m-gohan.DEF
2014-07-23 12:10 - 2014-07-23 12:10 - 00000717 _____ () C:\Users\Richard\Documents\GokuSSJ.def
2014-07-23 12:10 - 2014-07-23 12:10 - 00000694 _____ () C:\Users\Richard\Documents\Mystic Gohan.DEF
2014-07-23 12:10 - 2014-07-23 12:10 - 00000679 _____ () C:\Users\Richard\Documents\gohan-zeta.def
2014-07-23 12:10 - 2014-07-23 12:10 - 00000662 _____ () C:\Users\Richard\Documents\gogeta-ssj4.def
2014-07-23 12:10 - 2014-07-23 12:10 - 00000562 _____ () C:\Users\Richard\Documents\GokuGT.def
2014-07-23 12:10 - 2014-07-23 12:10 - 00000479 _____ () C:\Users\Richard\Documents\goten-n.txt
2014-07-23 12:10 - 2014-07-23 12:10 - 00000461 _____ () C:\Users\Richard\Documents\Majin.def
2014-07-23 12:10 - 2014-07-23 12:10 - 00000454 _____ () C:\Users\Richard\Documents\kuriringt.def
2014-07-23 12:10 - 2014-07-23 12:10 - 00000331 _____ () C:\Users\Richard\Documents\gogetassj2.def
2014-07-23 12:10 - 2014-07-23 12:09 - 00038487 _____ () C:\Users\Richard\Documents\Freeza.cns
2014-07-23 12:10 - 2014-07-23 12:09 - 00008952 _____ () C:\Users\Richard\Documents\custom.cns
2014-07-23 12:10 - 2014-07-23 12:09 - 00000768 _____ () C:\Users\Richard\Documents\original.act
2014-07-23 12:10 - 2014-07-23 12:09 - 00000768 _____ () C:\Users\Richard\Documents\azul.act
2014-07-23 12:09 - 2014-07-23 12:09 - 01651296 _____ () C:\Users\Richard\Documents\cellform2.snd
2014-07-23 12:09 - 2014-07-23 12:09 - 01113250 _____ () C:\Users\Richard\Documents\Chiaotzu.snd
2014-07-23 12:09 - 2014-07-23 12:09 - 00689138 _____ () C:\Users\Richard\Documents\cellform2.sff
2014-07-23 12:09 - 2014-07-23 12:09 - 00618006 _____ () C:\Users\Richard\Documents\cellhd.sff
2014-07-23 12:09 - 2014-07-23 12:09 - 00286272 _____ () C:\Users\Richard\Documents\chichi.snd
2014-07-23 12:09 - 2014-07-23 12:09 - 00222381 _____ () C:\Users\Richard\Documents\chichi.sff
2014-07-23 12:09 - 2014-07-23 12:09 - 00195857 _____ () C:\Users\Richard\Documents\Chiaotzu.sff
2014-07-23 12:09 - 2014-07-23 12:09 - 00136818 _____ () C:\Users\Richard\Documents\cellhd.snd
2014-07-23 12:09 - 2014-07-23 12:09 - 00082982 _____ () C:\Users\Richard\Documents\cellhd.cns
2014-07-23 12:09 - 2014-07-23 12:09 - 00070553 _____ () C:\Users\Richard\Documents\Chiaotzu.cns
2014-07-23 12:09 - 2014-07-23 12:09 - 00065592 _____ () C:\Users\Richard\Documents\chichi.cns
2014-07-23 12:09 - 2014-07-23 12:09 - 00054238 _____ () C:\Users\Richard\Documents\cellform2.cns
2014-07-23 12:09 - 2014-07-23 12:09 - 00043545 _____ () C:\Users\Richard\Documents\nandato.cns
2014-07-23 12:09 - 2014-07-23 12:09 - 00039202 _____ () C:\Users\Richard\Documents\cellform2.air
2014-07-23 12:09 - 2014-07-23 12:09 - 00036165 _____ () C:\Users\Richard\Documents\chichi.air
2014-07-23 12:09 - 2014-07-23 12:09 - 00035649 _____ () C:\Users\Richard\Documents\Freeza.air
2014-07-23 12:09 - 2014-07-23 12:09 - 00034094 _____ () C:\Users\Richard\Documents\cellhd.air
2014-07-23 12:09 - 2014-07-23 12:09 - 00026749 _____ () C:\Users\Richard\Documents\cellhd.cmd
2014-07-23 12:09 - 2014-07-23 12:09 - 00024913 _____ () C:\Users\Richard\Documents\Chiaotzu.air
2014-07-23 12:09 - 2014-07-23 12:09 - 00022847 _____ () C:\Users\Richard\Documents\cellform2.cmd
2014-07-23 12:09 - 2014-07-23 12:09 - 00021559 _____ () C:\Users\Richard\Documents\chichi.cmd
2014-07-23 12:09 - 2014-07-23 12:09 - 00020426 _____ () C:\Users\Richard\Documents\Chiaotzu.cmd
2014-07-23 12:09 - 2014-07-23 12:09 - 00019644 _____ () C:\Users\Richard\Documents\normal.cns
2014-07-23 12:09 - 2014-07-23 12:09 - 00014787 _____ () C:\Users\Richard\Documents\Freeza.cmd
2014-07-23 12:09 - 2014-07-23 12:09 - 00011654 _____ () C:\Users\Richard\Documents\ChargeBomb.cns
2014-07-23 12:09 - 2014-07-23 12:09 - 00003280 _____ () C:\Users\Richard\Documents\chiaotzu.pal
2014-07-23 12:09 - 2014-07-23 12:09 - 00001378 _____ () C:\Users\Richard\Documents\Chiaotzu Moves.txt
2014-07-23 12:09 - 2014-07-23 12:09 - 00001135 _____ () C:\Users\Richard\Documents\manual.txt
2014-07-23 12:09 - 2014-07-23 12:09 - 00000797 _____ () C:\Users\Richard\Documents\Chiaotzu.def
2014-07-23 12:09 - 2014-07-23 12:09 - 00000768 _____ () C:\Users\Richard\Documents\original2.act
2014-07-23 12:09 - 2014-07-23 12:09 - 00000768 _____ () C:\Users\Richard\Documents\marron.act
2014-07-23 12:09 - 2014-07-23 12:09 - 00000768 _____ () C:\Users\Richard\Documents\flamenguista.act
2014-07-23 12:09 - 2014-07-23 12:09 - 00000768 _____ () C:\Users\Richard\Documents\broli9.act
2014-07-23 12:09 - 2014-07-23 12:09 - 00000768 _____ () C:\Users\Richard\Documents\broli8.act
2014-07-23 12:09 - 2014-07-23 12:09 - 00000768 _____ () C:\Users\Richard\Documents\broli7.act
2014-07-23 12:09 - 2014-07-23 12:09 - 00000649 _____ () C:\Users\Richard\Documents\cellhd.def
2014-07-23 12:09 - 2014-07-23 12:09 - 00000366 _____ () C:\Users\Richard\Documents\Chichi.def
2014-07-23 12:09 - 2014-07-23 12:09 - 00000244 _____ () C:\Users\Richard\Documents\cellform2.def
2014-07-23 12:01 - 2014-07-23 12:01 - 00001214 _____ () C:\Users\Richard\Desktop\Undelete 360.lnk
2014-07-23 12:01 - 2014-07-23 12:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Undelete360
2014-07-23 12:01 - 2014-07-23 12:01 - 00000000 ____D () C:\Program Files (x86)\File Recovery
2014-07-23 12:01 - 2014-07-23 12:00 - 02572304 _____ (File Recovery Ltd. ) C:\Users\Richard\Downloads\undelete-360-setup.exe
2014-07-23 11:58 - 2014-04-10 20:55 - 00000000 ____D () C:\Program Files (x86)\DOSBox-0.74
2014-07-19 13:45 - 2014-06-21 14:15 - 00000000 ____D () C:\Users\Richard\Desktop\muzzik

Some content of TEMP:
====================
C:\Users\Richard\AppData\Local\Temp\avgnt.exe
C:\Users\Richard\AppData\Local\Temp\drm_dyndata_7400009.dll
C:\Users\Richard\AppData\Local\Temp\ICReinstall_PDFWriterSetup.exe
C:\Users\Richard\AppData\Local\Temp\msxml6-KB927977-enu-amd64.exe
C:\Users\Richard\AppData\Local\Temp\msxml6-KB927977-enu-x86.exe
C:\Users\Richard\AppData\Local\Temp\Nexus%20Mod%20Manager-0.48.1.exe
C:\Users\Richard\AppData\Local\Temp\Nexus%20Mod%20Manager-0.48.2.exe
C:\Users\Richard\AppData\Local\Temp\Nexus%20Mod%20Manager-0.49.2.exe
C:\Users\Richard\AppData\Local\Temp\Nexus%20Mod%20Manager-0.49.3.exe
C:\Users\Richard\AppData\Local\Temp\Quarantine.exe
C:\Users\Richard\AppData\Local\Temp\raptrpatch.exe
C:\Users\Richard\AppData\Local\Temp\raptr_stub.exe
C:\Users\Richard\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\Richard\AppData\Local\Temp\war3_Install.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-11 16:50

==================== End Of Log ============================
         
--- --- ---

Alt 17.08.2014, 08:18   #5
schrauber
/// the machine
/// TB-Ausbilder
 

Battle.net Passwort wurde durch dritte geändert - Standard

Battle.net Passwort wurde durch dritte geändert



Der Account wurde einfach Online gehackt.

Adware & Co. deinstallieren
  • Lade Dir bitte von hier Revo Uninstaller herunter.
  • Installiere und starte das Programm.
  • Suche im Uninstallerfeld nach den Programmen, die unter:

    diesen Zusatz haben:
  • Wähle die Programme nacheinander aus und klicke jedesmal auf Uninstall.
  • Wähle anschließend den Modus "Moderat" aus.
  • Reste löschen:
    Klicke auf dann auf und dann auf .





Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.


__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu Battle.net Passwort wurde durch dritte geändert
abend, account, bat, battle.net, bitte um hilfe, durchgeführt, gestern, geändert, hilfe, informationen, keylogger, konnte, passwort, postfach, schei, system, verdacht



Ähnliche Themen: Battle.net Passwort wurde durch dritte geändert


  1. Zugriff auf GMX durch dritte. Trojaner o.ä.?
    Log-Analyse und Auswertung - 24.05.2015 (5)
  2. Amazon-Konto: Jemand hat mein Passwort geändert & Gutscheine bestellt
    Alles rund um Mac OSX & Linux - 12.01.2015 (5)
  3. Browser- und Googleverlauf durch Dritte verändert
    Plagegeister aller Art und deren Bekämpfung - 29.12.2014 (1)
  4. Internet Game, Passwort wird immer geändert
    Log-Analyse und Auswertung - 23.10.2013 (17)
  5. Studie: Gut jeder Dritte nutzt mobiles Gerät ohne Passwort
    Nachrichten - 04.04.2013 (0)
  6. Amazon-Konto gehackt, Passwort geändert
    Log-Analyse und Auswertung - 02.11.2012 (12)
  7. Admin Passwort wurde geändert
    Plagegeister aller Art und deren Bekämpfung - 18.10.2012 (3)
  8. Battle.net-Acc wurde gehackt nach Echtgeldeinkauf
    Log-Analyse und Auswertung - 21.08.2012 (21)
  9. Spammails von meinem GMX-Account gesendet, Passwort von fremder Hand geändert
    Log-Analyse und Auswertung - 08.08.2012 (15)
  10. PayPal Phishing Mail -> Passwort geändert Frage zu weitere Folgen
    Plagegeister aller Art und deren Bekämpfung - 19.06.2012 (1)
  11. mein computer passwort wurde geändert....
    Plagegeister aller Art und deren Bekämpfung - 18.01.2011 (2)
  12. Passwort geändert - besorgt
    Log-Analyse und Auswertung - 03.02.2010 (0)
  13. kein login nach dropper.gen mehr möglich, hat er mein Passwort geändert?
    Plagegeister aller Art und deren Bekämpfung - 12.12.2009 (1)
  14. Router passwort geändert
    Netzwerk und Hardware - 19.05.2009 (3)
  15. ICQ-Passwort geändert - Trojaner?
    Log-Analyse und Auswertung - 29.07.2008 (1)
  16. E-Mail passwort geändert
    Alles rund um Windows - 20.11.2007 (1)
  17. Kein Zugriff auf XP-Passwort geändert-HILFE!!!
    Plagegeister aller Art und deren Bekämpfung - 19.02.2006 (2)

Zum Thema Battle.net Passwort wurde durch dritte geändert - Gestern Abend wollte ich mich in meinen Battle.net Account einloggen. Leider scheint mein Passwort, sowie die Geheimfrage geändert worden zu sein. Aus dem Postfach der E-Mailadresse konnte ich entnehmen, dass - Battle.net Passwort wurde durch dritte geändert...
Archiv
Du betrachtest: Battle.net Passwort wurde durch dritte geändert auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.