~ 3 BitCoin Miner, Avira + Malwarebytes finden nichts. Beim Start startet sich Browser "unsichtbar"

cosinus · 18.09.2014, 15:20

Hi,

woher weißt du denn, dass es Bitcoinminer sind und warum drei wenn angeblich kein Scanner etwas gefunden hat?

Sieht das nach ner Fake-Software aus?

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

PhesmanLP · 18.09.2014, 15:29

Zitat:

Zitat von cosinus

Hi,

woher weißt du denn, dass es Bitcoinminer sind und warum drei wenn angeblich kein Scanner etwas gefunden hat?

Sieht das nach ner Fake-Software aus?

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Hallo Schrauber,

Es waren unsichtbare Ordner in dem Roaming (%appdata%) Ordner.
In jedem Ordner war eine .exe Datei (in einem eine .jar) und eine Options.txt in der 2 BitCoin Nummern waren.

Avira hat aber einen auffälligen Registry Eintrag blockiert, sowie einen Miner gemeldet.

PhesmanLP · 18.09.2014, 15:38

FRST.txt:

Code:

ATTFilter

r Recovery Scan Tool (FRST.txt) (x64) Version: 12-09-2014
Ran by Kemnitz (administrator) on KEMNITZ-PC on 18-09-2014 16:30:18
Running from C:\Users\Kemnitz\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Atheros) C:\Program Files (x86)\Dell Wireless\Ath_CoexAgent.exe
(Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(Atheros Communications) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AthBtTray.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Visicom Media Inc.) C:\Program Files (x86)\ManyCam\ManyCam.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieCtrl.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [QuickSet] => C:\Program Files\Dell\QuickSet\QuickSet.exe [3668336 2011-02-10] (Dell Inc.)
HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe [617120 2011-03-31] (Atheros Communications)
HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AthBtTray.exe [379552 2011-03-31] (Atheros Commnucations)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2011-11-14] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-15] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [164656 2014-08-27] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-3854924114-3346429557-1109680193-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21650016 2014-07-24] (Skype Technologies S.A.)
HKU\S-1-5-21-3854924114-3346429557-1109680193-1000\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\Overwolf.exe [39712 2014-08-28] (Overwolf LTD)
HKU\S-1-5-21-3854924114-3346429557-1109680193-1000\...\Run: [ManyCam] => C:\Program Files (x86)\ManyCam\ManyCam.exe [8877232 2014-08-01] (Visicom Media Inc.)
HKU\S-1-5-21-3854924114-3346429557-1109680193-1000\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [784392 2014-05-29] (Sandboxie Holdings, LLC)
HKU\S-1-5-21-3854924114-3346429557-1109680193-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21650016 2014-07-24] (Skype Technologies S.A.)
HKU\S-1-5-21-3854924114-3346429557-1109680193-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\Overwolf.exe [39712 2014-08-28] (Overwolf LTD)
HKU\S-1-5-21-3854924114-3346429557-1109680193-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [ManyCam] => C:\Program Files (x86)\ManyCam\ManyCam.exe [8877232 2014-08-01] (Visicom Media Inc.)
HKU\S-1-5-21-3854924114-3346429557-1109680193-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [784392 2014-05-29] (Sandboxie Holdings, LLC)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF7A53E0BCDBECF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_20\bin\ssv.dll (Oracle Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_20\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Kemnitz\AppData\Roaming\Mozilla\Firefox\Profiles\5i1hw38q.default
FF Plugin: @java.com/DTPlugin,version=11.20.2 -> C:\Program Files\Java\jre1.8.0_20\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.20.2 -> C:\Program Files\Java\jre1.8.0_20\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @spoon.net/Spoon Plugin 3.33 -> C:\Users\Kemnitz\AppData\Local\Spoon\3.33.7.421\npMozillaSpoonPlugin.dll No File
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Avira Browser Safety - C:\Users\Kemnitz\AppData\Roaming\Mozilla\Firefox\Profiles\5i1hw38q.default\Extensions\abs@avira.com [2014-09-06]
FF Extension: WOT - C:\Users\Kemnitz\AppData\Roaming\Mozilla\Firefox\Profiles\5i1hw38q.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-09-16]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-07-14]

Chrome: 
=======
CHR HomePage: Default -> 
CHR DefaultSearchKeyword: Default -> 64A05C2524ED5B0FEDF1F7A9D69C9AA0F0DE49E8413EFC14D212DBA2CDCEA773
CHR DefaultSearchProvider: Default -> FE1ADF83A94C35F2EE5589708F1DAB66EED1DE1CC2C762096EB9128E8086472E
CHR DefaultSearchURL: Default -> C82F706162F09C37DB7127E865835A78ADC21585E465BC75B660827956B06FC0
CHR Profile: C:\Users\Kemnitz\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Kemnitz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-08-23]
CHR Extension: (Google Drive) - C:\Users\Kemnitz\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-23]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Kemnitz\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-14]
CHR Extension: (YouTube) - C:\Users\Kemnitz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-23]
CHR Extension: (Google-Suche) - C:\Users\Kemnitz\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-23]
CHR Extension: (Avira Browser Safety) - C:\Users\Kemnitz\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-23]
CHR Extension: (Google Wallet) - C:\Users\Kemnitz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-23]
CHR Extension: (Google Mail) - C:\Users\Kemnitz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-23]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2011-11-14] (Advanced Micro Devices, Inc.) [File not signed]
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-08-15] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-15] (Avira Operations GmbH & Co. KG)
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Dell Wireless\Ath_CoexAgent.exe [135168 2011-02-16] (Atheros) [File not signed]
R2 AtherosSvc; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe [77984 2011-03-31] (Atheros Commnucations) [File not signed]
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [160048 2014-08-27] (Avira Operations GmbH & Co. KG)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [998176 2014-08-28] (Overwolf LTD)
S2 Polar Daemon; C:\Program Files (x86)\Polar\Daemon\polard.exe [253760 2010-09-10] ()
R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [174088 2014-05-29] (Sandboxie Holdings, LLC)
S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [89232 2014-07-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-08-15] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-08-15] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-08-15] (Avira Operations GmbH & Co. KG)
R3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv.sys [49264 2014-07-28] (Visicom Media Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-09-18] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
R3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [35440 2014-05-13] (Visicom Media Inc.)
R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [185352 2014-05-29] (Sandboxie Holdings, LLC)
R3 VASDeviceDrm; C:\Windows\System32\drivers\vasdDev.sys [1454896 2012-03-19] (ShiningMorning Inc.)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-18 16:30 - 2014-09-18 16:31 - 00016019 _____ () C:\Users\Kemnitz\Desktop\FRST.txt
2014-09-18 16:30 - 2014-09-18 16:30 - 00000000 ____D () C:\FRST
2014-09-18 16:29 - 2014-09-18 16:29 - 02105856 _____ (Farbar) C:\Users\Kemnitz\Downloads\FRST64.exe
2014-09-18 16:29 - 2014-09-18 16:29 - 02105856 _____ (Farbar) C:\Users\Kemnitz\Desktop\FRST64.exe
2014-09-18 13:17 - 2014-09-18 13:17 - 00000000 ___RD () C:\Users\Kemnitz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-09-17 20:42 - 2014-09-17 20:42 - 00000690 _____ () C:\Users\Kemnitz\Downloads\giste1e843e30bf591615ee3-7d07dd326a03bd6ebc396fda79cf2601bd629da0 (1).tar.gz
2014-09-17 20:03 - 2014-09-17 20:03 - 00073553 _____ () C:\Users\Kemnitz\Downloads\TrustMe.jar
2014-09-17 19:43 - 2014-09-17 19:43 - 00005167 _____ () C:\Users\Kemnitz\Downloads\BukkitApiEnhancer.jar
2014-09-17 19:42 - 2014-09-17 19:43 - 00000690 _____ () C:\Users\Kemnitz\Downloads\giste1e843e30bf591615ee3-7d07dd326a03bd6ebc396fda79cf2601bd629da0.tar.gz
2014-09-17 14:16 - 2014-09-17 14:16 - 00000838 _____ () C:\Users\Kemnitz\Downloads\Walker_0.1_by_SkriptinFluffy.sk
2014-09-17 14:15 - 2014-09-17 14:15 - 00000590 _____ () C:\Users\Kemnitz\Downloads\DoubleJump.sk
2014-09-17 14:05 - 2014-09-17 14:05 - 00002513 _____ () C:\Users\Kemnitz\Downloads\nyancat.sk
2014-09-17 14:04 - 2014-09-17 14:04 - 00004688 _____ () C:\Users\Kemnitz\Downloads\DiscoDisco (1).sk
2014-09-17 13:56 - 2014-09-17 13:57 - 00001501 _____ () C:\Users\Kemnitz\Downloads\SimpleMessages.sk
2014-09-17 12:57 - 2014-09-17 12:58 - 00000633 _____ () C:\Users\Kemnitz\Downloads\Anti_Spam.sk
2014-09-17 11:06 - 2014-09-17 11:06 - 00005329 _____ () C:\Users\Kemnitz\Downloads\bot2.py
2014-09-17 10:24 - 2014-09-17 10:24 - 00049282 _____ () C:\Users\Kemnitz\Downloads\HWID Grabber.jar
2014-09-17 08:48 - 2014-09-17 08:52 - 00000000 ____D () C:\Users\Kemnitz\Kinky
2014-09-16 21:37 - 2014-09-16 21:37 - 00000657 _____ () C:\Users\Kemnitz\Downloads\'Hoffbosss
2014-09-16 20:30 - 2014-09-16 20:39 - 00000000 ____D () C:\Users\Kemnitz\Desktop\SkypeBot2
2014-09-16 20:25 - 2014-09-16 20:25 - 00000000 ____D () C:\Users\Kemnitz\Desktop\src
2014-09-16 19:59 - 2014-09-16 19:59 - 00001472 _____ () C:\Users\Kemnitz\Downloads\novoid.sk
2014-09-16 19:36 - 2014-09-16 19:36 - 00002523 _____ () C:\Users\Kemnitz\Downloads\forcechat.sk
2014-09-16 19:34 - 2014-09-16 19:34 - 00000793 _____ () C:\Users\Kemnitz\Downloads\teamchat.sk
2014-09-16 19:31 - 2014-09-16 19:31 - 00003491 _____ () C:\Users\Kemnitz\Downloads\Punishment_Tools.sk
2014-09-16 19:16 - 2014-09-16 19:16 - 00000089 _____ () C:\Users\Kemnitz\Downloads\antilaggggg.sk
2014-09-16 19:16 - 2014-09-16 19:16 - 00000083 _____ () C:\Users\Kemnitz\Downloads\easy-griefing.sk
2014-09-16 19:14 - 2014-09-16 19:14 - 00000478 _____ () C:\Users\Kemnitz\Downloads\WChat.sk
2014-09-16 19:07 - 2014-09-16 19:07 - 00000522 _____ () C:\Users\Kemnitz\Downloads\Bed_Reality.rar
2014-09-16 18:28 - 2014-09-16 18:28 - 00890594 _____ () C:\Users\Kemnitz\Downloads\SkyPvP Map.zip
2014-09-16 18:02 - 2014-09-16 18:08 - 00004899 _____ () C:\Users\Kemnitz\Downloads\chatbot.sk
2014-09-16 17:43 - 2014-09-16 17:43 - 00012293 _____ () C:\Users\Kemnitz\Downloads\Halo.sk
2014-09-16 17:40 - 2014-09-16 17:40 - 00009294 _____ () C:\Users\Kemnitz\Downloads\Footsteps.sk
2014-09-16 17:39 - 2014-09-16 17:39 - 00002555 _____ () C:\Users\Kemnitz\Downloads\Chat_v2.1_EN.sk
2014-09-16 17:38 - 2014-09-16 17:38 - 00009244 _____ () C:\Users\Kemnitz\Downloads\LobbySystem (1).sk
2014-09-16 17:35 - 2014-09-16 17:38 - 00015414 _____ () C:\Users\Kemnitz\Downloads\Chat_Sk.sk
2014-09-16 17:17 - 2014-09-16 17:17 - 00003000 _____ () C:\Users\Kemnitz\Downloads\BanManager.sk
2014-09-16 17:15 - 2014-09-16 17:15 - 00004029 _____ () C:\Users\Kemnitz\Downloads\Player_Stats.sk
2014-09-16 17:04 - 2014-09-16 19:04 - 00000963 _____ () C:\Users\Kemnitz\Desktop\wartung.sk
2014-09-16 17:03 - 2014-09-16 17:03 - 00000698 _____ () C:\Users\Kemnitz\Downloads\TheTrollerPLUS.sk
2014-09-16 16:59 - 2014-09-16 16:59 - 00001619 _____ () C:\Users\Kemnitz\Downloads\Warn_V1.0_Deutsch.sk
2014-09-16 16:16 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-09-16 16:13 - 2014-09-16 20:10 - 00000000 ____D () C:\AdwCleaner
2014-09-16 16:13 - 2014-09-16 16:13 - 01373475 _____ () C:\Users\Kemnitz\Downloads\adwcleaner_3.310.exe
2014-09-16 16:07 - 2014-09-16 16:07 - 322595556 _____ () C:\Windows\MEMORY.DMP
2014-09-16 16:07 - 2014-09-16 16:07 - 00275496 _____ () C:\Windows\Minidump\091614-35131-01.dmp
2014-09-16 16:07 - 2014-09-16 16:07 - 00000000 ____D () C:\Windows\Minidump
2014-09-16 14:52 - 2014-09-16 14:52 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 12.0
2014-09-16 14:51 - 2014-09-16 14:57 - 00000000 ____D () C:\Program Files (x86)\Microsoft SDKs
2014-09-16 14:51 - 2014-09-16 14:51 - 00000000 ____D () C:\Windows\system32\1033
2014-09-16 14:51 - 2014-09-16 14:51 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio 12.0
2014-09-16 14:39 - 2014-09-16 14:39 - 01236880 _____ (Microsoft Corporation) C:\Users\Kemnitz\Downloads\vs_ultimate.exe
2014-09-16 14:33 - 2014-09-16 14:33 - 00718381 _____ () C:\Users\Kemnitz\Downloads\Sinnloser Knopf.zip
2014-09-16 14:33 - 2014-09-16 14:33 - 00000000 ____D () C:\Users\Kemnitz\Desktop\Sinnloser Knopf
2014-09-14 23:25 - 2014-09-17 11:13 - 00005329 _____ () C:\Users\Kemnitz\Desktop\bot2.py
2014-09-14 23:20 - 2014-09-14 23:20 - 00014017 _____ () C:\Users\Kemnitz\Downloads\skybot-master.zip
2014-09-14 23:10 - 2014-09-14 23:10 - 00173489 _____ () C:\Users\Kemnitz\Downloads\Skype4Py-1.0.35.zip
2014-09-14 23:05 - 2014-09-14 23:18 - 00021986 _____ () C:\Users\Kemnitz\Desktop\skypetestbot.py.py
2014-09-14 23:04 - 2014-09-14 23:04 - 00001645 _____ () C:\Users\Kemnitz\Downloads\skype-bot_with_message_in_file.tar.gz
2014-09-14 22:38 - 2014-09-14 22:38 - 01172027 _____ () C:\Users\Kemnitz\Downloads\sevabot-master.zip
2014-09-14 22:29 - 2014-09-14 22:30 - 20118938 _____ () C:\Users\Kemnitz\Downloads\skype-debian_4.3.0.37-1_i386.deb
2014-09-14 18:46 - 2014-09-14 18:46 - 00000000 ____D () C:\Users\Kemnitz\AppData\Roaming\java
2014-09-14 18:45 - 2014-09-14 18:44 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-09-14 18:44 - 2014-09-14 18:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2014-09-14 18:43 - 2014-09-14 18:44 - 00000000 ____D () C:\Program Files\Java
2014-09-14 18:37 - 2014-09-14 18:36 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-09-14 18:37 - 2014-09-14 18:36 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-09-14 18:37 - 2014-09-14 18:36 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-09-14 18:37 - 2014-09-14 18:36 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-09-14 18:36 - 2014-09-14 18:36 - 00000000 ____D () C:\Program Files (x86)\Java
2014-09-14 18:33 - 2014-09-14 18:40 - 181484960 _____ (Oracle Corporation) C:\Users\Kemnitz\Downloads\jdk-8u20-windows-x64 (1).exe
2014-09-14 18:32 - 2014-09-14 18:32 - 00918440 _____ (Oracle Corporation) C:\Users\Kemnitz\Downloads\chromeinstall-7u67.exe
2014-09-14 18:00 - 2014-09-14 18:00 - 00000836 _____ () C:\Users\Kemnitz\Desktop\HTTrack Website Copier.lnk
2014-09-14 14:42 - 2014-09-18 13:58 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-14 14:41 - 2014-09-14 14:41 - 00001106 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-09-14 14:41 - 2014-09-14 14:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-09-14 14:41 - 2014-09-14 14:41 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-14 14:41 - 2014-09-14 14:41 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-09-14 14:41 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-09-14 14:41 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-09-14 14:41 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-09-14 14:07 - 2014-09-14 14:08 - 00149265 _____ () C:\Users\Kemnitz\Downloads\Respawn Resolver v1.zip
2014-09-14 14:02 - 2014-09-14 14:02 - 00000000 ____D () C:\Users\Kemnitz\Downloads\CyberFelix
2014-09-14 14:02 - 2014-09-14 14:02 - 00000000 ____D () C:\Users\Kemnitz\Desktop\Neues Verzeichnis
2014-09-14 14:01 - 2014-09-14 14:01 - 00053701 _____ () C:\Users\Kemnitz\Downloads\CyberFelix.rar
2014-09-14 13:49 - 2014-09-14 13:56 - 00000000 ____D () C:\Users\Kemnitz\Desktop\Resolver
2014-09-14 13:49 - 2014-09-14 13:49 - 00119094 _____ () C:\Users\Kemnitz\Downloads\Premium NotoriousResolve source.zip
2014-09-14 11:57 - 2014-09-14 11:57 - 00517760 _____ () C:\Users\Kemnitz\Downloads\1.rar
2014-09-14 11:57 - 2014-09-14 11:57 - 00000000 ____D () C:\Users\Kemnitz\Desktop\Resollver
2014-09-13 23:32 - 2014-09-13 23:32 - 00005442 _____ () C:\Users\Kemnitz\Downloads\launch.pyc
2014-09-13 22:37 - 2014-09-13 22:37 - 00028626 _____ () C:\Users\Kemnitz\Desktop\proxy.txt
2014-09-13 22:36 - 2014-09-13 22:36 - 00001290 _____ () C:\Users\Kemnitz\Desktop\Accs.txt
2014-09-13 22:34 - 2014-09-13 22:34 - 01227628 _____ () C:\Users\Kemnitz\Downloads\Cracker.rar
2014-09-13 20:36 - 2014-09-13 20:10 - 00001334 _____ () C:\Users\Kemnitz\Desktop\Scraped-Users.txt
2014-09-13 20:25 - 2014-09-13 20:32 - 181484960 _____ (Oracle Corporation) C:\Users\Kemnitz\Downloads\jdk-8u20-windows-x64.exe
2014-09-13 20:24 - 2014-09-13 20:25 - 04453906 _____ () C:\Users\Kemnitz\Downloads\DarkBot.7z
2014-09-13 20:02 - 2014-09-13 20:03 - 04934994 _____ () C:\Users\Kemnitz\Downloads\DarkBot-master (1).zip
2014-09-13 19:55 - 2014-09-13 19:55 - 00000000 ____D () C:\Users\Kemnitz\git
2014-09-13 19:45 - 2014-09-13 19:46 - 04373541 _____ () C:\Users\Kemnitz\Downloads\DarkBotFiles.rar
2014-09-13 19:30 - 2014-09-13 19:31 - 21231343 _____ () C:\Users\Kemnitz\Downloads\Kronos_3.5_1.7.10.zip
2014-09-13 19:24 - 2014-09-13 19:24 - 21211015 _____ () C:\Users\Kemnitz\Downloads\Kronos_3.4_1.7.10.zip
2014-09-13 19:17 - 2014-04-29 23:14 - 00000000 ____D () C:\Users\Kemnitz\Desktop\apache-ant-1.9.4
2014-09-13 19:15 - 2014-09-13 19:16 - 08309406 _____ () C:\Users\Kemnitz\Downloads\apache-ant-1.9.4-bin.zip
2014-09-13 19:05 - 2014-07-02 15:04 - 00000000 ____D () C:\Users\Kemnitz\Desktop\DarkBot-master
2014-09-13 19:04 - 2014-09-13 19:05 - 04934994 _____ () C:\Users\Kemnitz\Downloads\DarkBot-master.zip
2014-09-13 18:53 - 2014-09-13 18:54 - 03337315 _____ () C:\Users\Kemnitz\Downloads\release.r21.zip
2014-09-13 18:44 - 2014-09-13 18:44 - 00000000 ____D () C:\Users\Kemnitz\AppData\Roaming\MinecraftBots
2014-09-13 18:43 - 2014-09-13 18:43 - 00416210 _____ () C:\Users\Kemnitz\Downloads\McBotManagerBETA.zip
2014-09-13 18:39 - 2014-09-13 18:39 - 00257223 _____ () C:\Users\Kemnitz\Downloads\Builder Bot - Cloaked9000.zip
2014-09-13 18:39 - 2014-09-13 18:39 - 00000000 ____D () C:\Users\Kemnitz\Desktop\Minecraft Bots
2014-09-13 18:38 - 2014-09-13 18:38 - 00210535 _____ () C:\Users\Kemnitz\Downloads\Minecraft Bot Launcher.rar
2014-09-13 15:31 - 2014-09-14 23:13 - 00000000 ____D () C:\Users\Kemnitz\.idlerc
2014-09-13 15:07 - 2014-09-13 15:07 - 00031235 _____ () C:\Users\Kemnitz\Downloads\CandyBot 1.5.zip
2014-09-13 14:35 - 2014-09-13 14:35 - 00538101 _____ () C:\Users\Kemnitz\Downloads\mcrtoolkit10a15_3.zip
2014-09-13 14:29 - 2014-09-13 14:29 - 04106264 _____ () C:\Users\Kemnitz\Downloads\UltimateSpawnWorld.zip
2014-09-13 14:25 - 2014-09-13 14:28 - 69723441 _____ () C:\Users\Kemnitz\Downloads\Minecraft Bukkit Server 1.7.2.zip
2014-09-13 14:14 - 2014-09-13 14:15 - 00528550 _____ () C:\Users\Kemnitz\Downloads\world.rar
2014-09-13 14:13 - 2014-09-13 14:14 - 06057862 _____ (Tim Kosse) C:\Users\Kemnitz\Downloads\FileZilla_3.9.0.5_win32-setup.exe
2014-09-11 23:28 - 2014-09-11 23:28 - 00011224 _____ () C:\Users\Kemnitz\Downloads\Minecraft Spambot_mpgh.net.zip
2014-09-11 23:26 - 2014-09-11 23:26 - 00126828 _____ () C:\Users\Kemnitz\Downloads\-{Beta} GrAvY BoT [1.5]_mpgh.net.rar
2014-09-11 23:20 - 2014-09-11 23:20 - 00033234 _____ () C:\Users\Kemnitz\Downloads\node-minecraft-protocol-master.zip
2014-09-11 23:16 - 2014-09-11 23:16 - 00343672 _____ () C:\Users\Kemnitz\Downloads\MinecraftClient1.8.0.zip
2014-09-11 21:35 - 2014-09-11 21:35 - 00003945 _____ () C:\Users\Kemnitz\Downloads\ddos.sh
2014-09-11 19:32 - 2014-09-11 19:32 - 00670263 _____ () C:\Users\Kemnitz\Downloads\FunnyCube Lobby.zip
2014-09-11 19:31 - 2014-09-11 19:35 - 73354226 _____ () C:\Users\Kemnitz\Downloads\An Adventure Through TV and Space.zip
2014-09-11 19:11 - 2014-09-11 19:12 - 07487129 _____ () C:\Users\Kemnitz\Downloads\Skypvp-Map[By deepbluescreen and Luke_LT].zip
2014-09-11 19:09 - 2014-09-11 19:09 - 00291893 _____ () C:\Users\Kemnitz\Downloads\Starter Spawn - RedstoneZombie.zip
2014-09-11 12:37 - 2014-09-11 12:39 - 08324424 _____ () C:\Users\Kemnitz\Downloads\KinkyCrackH&E.rar
2014-09-11 12:37 - 2014-09-11 12:38 - 06703015 _____ () C:\Users\Kemnitz\Downloads\cicada_cracked.7z
2014-09-11 12:36 - 2014-09-11 12:37 - 06090881 _____ () C:\Users\Kemnitz\Downloads\Huzuni321CrackH&E.rar
2014-09-11 12:23 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-09-11 12:23 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-09-11 12:23 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-09-11 12:23 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-09-11 12:23 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-09-11 12:23 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-09-11 12:23 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-09-11 12:23 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-09-11 12:23 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-09-11 12:23 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-09-11 12:23 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-09-11 12:23 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-09-11 12:23 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-09-11 12:23 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-09-11 12:23 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-09-11 12:23 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-09-11 12:23 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-09-11 12:23 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-09-11 12:23 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-09-11 12:23 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-09-11 12:23 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-09-11 12:23 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-09-11 12:23 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-09-11 12:23 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-09-11 12:23 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-09-11 12:23 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-09-11 12:23 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-09-11 12:23 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-09-11 12:23 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-09-11 12:23 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-09-11 12:23 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-09-11 12:23 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-09-11 12:23 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-09-11 12:23 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-09-11 12:23 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-09-11 12:23 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-09-11 12:23 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-09-11 12:23 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-09-11 12:23 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-09-11 12:23 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-09-11 12:23 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-09-11 12:23 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-09-11 12:23 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-09-11 12:23 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-09-11 12:23 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-09-11 12:23 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-09-11 12:23 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-09-11 12:23 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-09-11 12:23 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-09-11 12:23 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-09-11 12:23 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-09-11 12:23 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-09-11 12:23 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-09-11 12:23 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-09-11 12:23 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-09-11 12:23 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-09-11 12:16 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-09-11 12:16 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-09-10 22:24 - 2012-12-11 14:36 - 00000000 ____D () C:\Users\Kemnitz\Desktop\Pastel 1.0.1
2014-09-10 22:19 - 2014-09-10 22:21 - 32580675 _____ () C:\Users\Kemnitz\Downloads\Pastel 1.0.1.rar
2014-09-10 21:56 - 2014-09-10 22:11 - 270379892 _____ () C:\Users\Kemnitz\Downloads\1054_Must_Have_PHP_Scripts_By_Emperor_At_The_Viper_Files.rar
2014-09-10 21:43 - 2014-09-10 21:11 - 00004043 _____ () C:\Users\Kemnitz\Desktop\index - Kopie.html
2014-09-10 21:13 - 2014-06-29 07:11 - 00000000 ____D () C:\Users\Kemnitz\Desktop\Resolver by NeoxiZ
2014-09-10 21:12 - 2014-09-10 21:12 - 00599713 _____ () C:\Users\Kemnitz\Downloads\Resolver by NeoxiZ.rar
2014-09-10 20:50 - 2014-09-10 20:51 - 00000371 _____ () C:\Users\Kemnitz\Desktop\antiddos.php.html
2014-09-10 19:14 - 2014-09-10 19:14 - 01889616 _____ (SurfRight B.V.) C:\Users\Kemnitz\Downloads\hmpalert.exe
2014-09-10 17:10 - 2014-09-10 17:10 - 00034272 _____ () C:\Users\Kemnitz\Downloads\Pixelator Sr..mcv
2014-09-10 16:18 - 2014-09-10 16:19 - 05576885 _____ (Swearware) C:\Users\Kemnitz\Downloads\ComboFix.exe
2014-09-10 16:02 - 2014-09-10 16:03 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Kemnitz\Downloads\mbam-setup-2.0.2.1012.exe
2014-09-10 15:50 - 2014-09-10 15:50 - 00065815 _____ () C:\Users\Kemnitz\Downloads\xClans.jar
2014-09-10 15:43 - 2014-09-10 15:43 - 00001137 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-09-10 09:37 - 2014-09-05 04:10 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-10 09:37 - 2014-09-05 04:05 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-09-10 09:37 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-09-10 09:37 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-09-10 09:37 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-09-10 09:37 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-09-10 09:37 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-09-10 09:37 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-09-10 09:37 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-09-10 09:37 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-09-10 09:37 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-09-09 21:26 - 2014-09-09 21:26 - 00000145 _____ () C:\Users\Kemnitz\Downloads\I Love Mashup Radio (www.iloveradio.de)).pls
2014-09-09 08:37 - 2014-09-14 18:17 - 00000000 ____D () C:\Windows\pss
2014-09-08 21:07 - 2014-09-14 19:18 - 00000000 ____D () C:\Meine Webseiten
2014-09-08 21:06 - 2014-09-14 18:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinHTTrack
2014-09-08 21:06 - 2014-09-14 18:00 - 00000000 ____D () C:\Program Files\WinHTTrack
2014-09-08 21:03 - 2014-09-08 21:04 - 04464640 _____ (HTTrack ) C:\Users\Kemnitz\Downloads\httrack_x64-3.48.19.exe
2014-09-08 20:44 - 2014-09-08 20:44 - 01428934 _____ () C:\Users\Kemnitz\Downloads\DDoS Protect v3.rar
2014-09-07 20:09 - 2014-09-07 20:10 - 00000301 _____ () C:\Users\Kemnitz\Downloads\Opme.sk
2014-09-07 19:53 - 2014-09-07 19:53 - 01648928 _____ () C:\Users\Kemnitz\Downloads\Skript.jar
2014-09-07 15:04 - 2014-09-07 15:04 - 00060822 _____ () C:\Users\Kemnitz\Downloads\Essentials.sk
2014-09-07 10:18 - 2014-09-07 10:18 - 00000000 __SHD () C:\Users\Kemnitz\AppData\Local\EmieUserList
2014-09-07 10:18 - 2014-09-07 10:18 - 00000000 __SHD () C:\Users\Kemnitz\AppData\Local\EmieSiteList
2014-09-07 10:16 - 2014-09-07 10:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Virtual Audio Streaming
2014-09-07 10:16 - 2014-09-07 10:16 - 00000000 ____D () C:\Program Files (x86)\ShiningMorning
2014-09-07 10:16 - 2012-03-19 15:12 - 01454896 _____ (ShiningMorning Inc.) C:\Windows\system32\Drivers\vasdDev.sys
2014-09-07 10:14 - 2014-09-07 10:15 - 03475297 _____ () C:\Users\Kemnitz\Downloads\virtual audio cable v 4.12 crack .zip
2014-09-06 22:19 - 2014-09-06 22:21 - 34532476 _____ () C:\Users\Kemnitz\Downloads\twine.zip
2014-09-06 17:44 - 2014-08-31 21:54 - 00000532 _____ () C:\Users\Kemnitz\Desktop\(Die die klappen).txt
2014-09-06 17:44 - 2014-08-22 01:05 - 00000069 _____ () C:\Users\Kemnitz\Desktop\Accounts.txt
2014-09-06 17:35 - 2014-09-09 09:57 - 00000000 ____D () C:\ProgramData\boost_interprocess
2014-09-06 17:34 - 2014-09-06 17:34 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_PolarFLWpdDriver_01_00_00.Wdf
2014-09-06 17:33 - 2014-09-06 17:34 - 19626920 _____ (Polar Electro Oy ) C:\Users\Kemnitz\Downloads\FlowSync_2.1.5 (1).exe
2014-09-06 17:32 - 2014-09-06 17:32 - 00000000 ____D () C:\Program Files\Polar
2014-09-06 17:32 - 2010-11-10 15:19 - 01743168 _____ () C:\Windows\system32\LibPolar.dll
2014-09-06 17:32 - 2010-11-10 15:19 - 01463104 _____ () C:\Windows\system32\PolarFLWpdDriver.dll
2014-09-06 17:31 - 2014-09-06 17:32 - 07311952 _____ (Polar Electro Oy ) C:\Users\Kemnitz\Downloads\Polar_FL_HVCC_drv.exe
2014-09-06 16:34 - 2014-09-08 12:49 - 00000000 ____D () C:\Fraps
2014-09-06 16:34 - 2014-09-06 16:34 - 00000562 _____ () C:\Users\Public\Desktop\Fraps.lnk
2014-09-06 16:34 - 2014-09-06 16:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2014-09-06 16:14 - 2014-09-06 16:14 - 00002287 _____ () C:\Users\Kemnitz\Downloads\FreeOP.zip
2014-09-06 14:28 - 2014-09-06 14:29 - 00000473 _____ () C:\Users\Kemnitz\Desktop\System.sk
2014-09-06 14:28 - 2014-09-06 14:28 - 00000000 _____ () C:\Users\Kemnitz\Desktop\Neues Textdokument.txt
2014-09-06 14:08 - 2014-09-06 14:09 - 00001849 _____ () C:\Users\Kemnitz\Downloads\IceBukkitChallenge.sk
2014-09-06 11:58 - 2014-09-06 11:58 - 00000000 ____D () C:\Users\Kemnitz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Python 3.4
2014-09-06 11:57 - 2014-09-06 11:58 - 00000000 ____D () C:\Python34
2014-09-06 11:54 - 2014-09-06 11:55 - 24408064 _____ () C:\Users\Kemnitz\Downloads\python-3.4.1.msi
2014-09-06 11:53 - 2014-09-06 11:53 - 00230216 _____ () C:\Users\Kemnitz\Downloads\Gravy-1.6.2-beta.rar
2014-09-06 10:08 - 2014-09-06 10:08 - 00018351 _____ () C:\Users\Kemnitz\Downloads\KillStreak.jar
2014-09-06 09:39 - 2014-09-06 09:39 - 00040451 _____ () C:\Users\Kemnitz\Downloads\JoeSkyBlock_v1.0.4 (2).zip
2014-09-06 09:39 - 2014-04-18 19:52 - 00041787 _____ () C:\Users\Kemnitz\Desktop\JoeSkyBlock.jar
2014-09-06 09:29 - 2014-09-06 09:29 - 02782320 _____ (Beepa Pty Ltd) C:\Users\Kemnitz\Downloads\Fraps_v3.5.9.9.exe
2014-09-06 09:08 - 2014-09-06 17:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Polar
2014-09-06 09:08 - 2014-09-06 17:32 - 00000000 ____D () C:\Program Files (x86)\Polar
2014-09-06 09:08 - 2014-09-06 09:08 - 00001159 _____ () C:\Users\Public\Desktop\Polar FlowSync.lnk
2014-09-06 08:42 - 2014-09-06 08:44 - 19626920 _____ (Polar Electro Oy ) C:\Users\Kemnitz\Downloads\FlowSync_2.1.5.exe
2014-09-05 23:19 - 2014-09-05 23:19 - 00011652 _____ () C:\Users\Kemnitz\Downloads\OpMenu_V3.0.jar
2014-09-05 23:13 - 2014-09-05 23:13 - 00033625 _____ () C:\Users\Kemnitz\Downloads\CashPloit 1.7.X (1).rar
2014-09-05 22:58 - 2014-09-05 22:58 - 00077809 _____ () C:\Users\Kemnitz\Downloads\ParticleMenu (1).jar
2014-09-05 22:44 - 2014-09-05 22:44 - 00003420 _____ () C:\Users\Kemnitz\Downloads\RealSex.jar
2014-09-05 22:34 - 2014-09-05 22:34 - 00004790 _____ () C:\Users\Kemnitz\Downloads\SupportX_2.0.3.jar
2014-09-05 22:28 - 2014-09-05 22:28 - 00001955 _____ () C:\Users\Kemnitz\Downloads\DeathByVoid.jar
2014-09-05 22:22 - 2014-09-05 22:22 - 00020667 _____ () C:\Users\Kemnitz\Downloads\DevJoined.jar
2014-09-05 22:14 - 2014-09-05 22:14 - 00002400 _____ () C:\Users\Kemnitz\Desktop\FloMode.jar
2014-09-05 22:10 - 2014-09-05 22:10 - 00002484 _____ () C:\Users\Kemnitz\Downloads\Gommemode-OP-only.jar
2014-09-05 22:05 - 2014-09-05 22:05 - 00002187 _____ () C:\Users\Kemnitz\Downloads\Leiche (2).jar
2014-09-05 21:51 - 2014-09-05 21:51 - 00011341 _____ () C:\Users\Kemnitz\Downloads\GermanClans.jar
2014-09-05 21:00 - 2014-09-05 21:00 - 00002695 _____ () C:\Users\Kemnitz\Desktop\Bankraub.jar
2014-09-05 20:55 - 2014-09-05 20:55 - 00002691 _____ () C:\Users\Kemnitz\Desktop\Bankraub2.jar
2014-09-05 20:53 - 2014-09-05 20:53 - 00141143 _____ () C:\Users\Kemnitz\Downloads\Bukkit Plugin Creator.zip
2014-09-05 20:47 - 2014-09-05 20:50 - 00000000 ____D () C:\Users\Kemnitz\Desktop\TestServer
2014-09-05 20:10 - 2014-09-05 20:10 - 00079410 _____ () C:\Users\Kemnitz\Downloads\TagAPI.jar
2014-09-05 20:06 - 2014-09-05 20:06 - 00054695 _____ () C:\Users\Kemnitz\Downloads\TheWallsMiniGame-master.zip
2014-09-05 19:59 - 2014-09-17 20:10 - 00000000 ____D () C:\Users\Kemnitz\workspace
2014-09-05 19:49 - 2014-09-05 19:59 - 00000000 ____D () C:\Users\Kemnitz\Downloads\eclipse

~ 3 BitCoin Miner, Avira + Malwarebytes finden nichts. Beim Start startet sich Browser "unsichtbar"

Plagegeister aller Art und deren Bekämpfung: ~ 3 BitCoin Miner, Avira + Malwarebytes finden nichts. Beim Start startet sich Browser "unsichtbar"