Aso oke
FRST Logfile:
Code:
Alles auswählen Aufklappen ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:08-08-2015 01
durchgeführt von Administrator (Administrator) auf OLEG (08-08-2015 17:41:18)
Gestartet von C:\Users\Administrator\Downloads
Geladene Profile: Administrator (Verfügbare Profile: Administrator)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forum
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(MSI) C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Nicht auf der Ausnahmeliste) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7637208 2014-07-15] (Realtek Semiconductor)
HKLM\...\Run: [ISCT Tray] => C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe [5860656 2014-08-25] (Intel Corporation)
HKLM-x32\...\Run: [winDL] => "C:\Windows\system32\config\systemprofile\AppData\Roaming\winDL"
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5579624 2015-08-03] (LogMeIn Inc.)
HKU\S-1-5-21-2191931038-3256374100-2060679559-500\...\Run: [winDL] => "C:\Users\Administrator\AppData\Roaming\winDL"
HKU\S-1-5-18\...\Run: [winDL] => "C:\Windows\system32\config\systemprofile\AppData\Roaming\winDL"
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = MSN Deutschland ? mit Hotmail Nachfolger Outlook und Messenger Skype
HKU\S-1-5-21-2191931038-3256374100-2060679559-500\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-08-02] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-08-02] (Oracle Corporation)
Toolbar: HKU\S-1-5-21-2191931038-3256374100-2060679559-500 -> Kein Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Keine Datei
Toolbar: HKU\S-1-5-21-2191931038-3256374100-2060679559-500 -> Kein Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Keine Datei
Tcpip\..\Interfaces\{2F496DC7-DC04-4051-9D96-3459870624F0}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{31862F27-ADAA-4112-A282-18F22410A0ED}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{51E58278-6273-4519-9D44-B199C99D5CF0}: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\fIJUrdmx.default
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-09-03] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-09-03] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-08-02] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-08-02] (Oracle Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll [2015-05-22] (Nexon)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-25] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-25] (Google Inc.)
FF Plugin HKU\S-1-5-21-2191931038-3256374100-2060679559-500: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Administrator\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-06-08] (Unity Technologies ApS)
FF Extension: Avira Browser Safety - C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\fIJUrdmx.default\Extensions\abs@avira.com [2015-05-26]
Chrome:
=======
CHR Profile: C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avira Browser Safety) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2015-07-25]
CHR Extension: (AdBlock) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-07-25]
CHR Extension: (agar.io server browser) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\hongpdkjnjhijmdnogoicadboadgllhi [2015-07-25]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-07-25]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-27]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [0 ] (Avira Operations GmbH & Co. KG) <==== ACHTUNG (Null Byte Datei/Ordner)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [0 ] (Avira Operations GmbH & Co. KG) <==== ACHTUNG (Null Byte Datei/Ordner)
S2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [0 ] (Avira Operations GmbH & Co. KG) <==== ACHTUNG (Null Byte Datei/Ordner)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [0 ] (Avira Operations GmbH & Co. KG) <==== ACHTUNG (Null Byte Datei/Ordner)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1128448 2015-07-27] ()
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887256 2014-05-13] (Intel(R) Corporation)
R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [209712 2014-08-25] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-09-03] (Intel Corporation)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-08-03] (LogMeIn, Inc.)
R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [162800 2014-03-17] (MSI)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [117264 2010-06-25] (CACE Technologies, Inc.)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-10-13] (DEVGURU Co., LTD.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5491984 2015-05-20] (TeamViewer GmbH)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 Avira.ServiceHost; "C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe" [X]
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [162528 2015-07-30] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [141416 2015-07-30] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2015-04-16] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [44088 2015-04-16] (Avira Operations GmbH & Co. KG)
R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [22216 2014-05-27] ()
R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [22728 2014-05-27] ()
R3 INETMON; C:\Windows\System32\Drivers\INETMON.sys [25800 2014-05-27] ()
R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD.sys [44744 2014-05-27] ()
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [126976 2014-09-03] (Intel Corporation)
R2 NPF; C:\Windows\System32\drivers\npf.sys [35344 2010-06-25] (CACE Technologies, Inc.)
R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\Super Charger\NTIOLib_X64.sys [13368 2012-10-25] (MSI)
S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [115208 2015-05-13] (Oracle Corporation)
U3 Winsock; kein ImagePath
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]
S3 X6va029; \??\C:\Windows\SysWOW64\Drivers\X6va029 [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-08-08 17:41 - 2015-08-08 17:41 - 02169856 _____ (Farbar) C:\Users\Administrator\Downloads\FRST64 (1).exe
2015-08-08 17:41 - 2015-08-08 17:41 - 00012378 _____ C:\Users\Administrator\Downloads\FRST.txt
2015-08-08 17:40 - 2015-08-08 17:40 - 02169856 _____ (Farbar) C:\Users\Administrator\Downloads\FRST64.exe
2015-08-08 17:40 - 2015-08-08 17:40 - 01673216 _____ (Farbar) C:\Users\Administrator\Downloads\FRST (1).exe
2015-08-08 17:39 - 2015-08-08 17:39 - 01673216 _____ (Farbar) C:\Users\Administrator\Downloads\FRST.exe
2015-08-08 13:54 - 2015-08-08 13:54 - 00938324 _____ C:\Users\Administrator\Downloads\Thumbnail Rahmen Pack (by Exa).rar
2015-08-08 13:49 - 2015-08-08 13:49 - 90758866 _____ C:\Users\Administrator\Downloads\TG-PACK#1.zip
2015-08-08 13:46 - 2015-08-08 13:46 - 00000000 ____D C:\Users\Administrator\Desktop\Neuer Ordner
2015-08-08 13:40 - 2015-08-08 13:42 - 93367241 _____ C:\Users\Administrator\Downloads\Photoshop Pack.psd
2015-08-07 22:32 - 2015-08-07 22:34 - 28917914 _____ C:\Users\Administrator\Downloads\The CraftingFabo Pack V.2.zip
2015-08-05 12:44 - 2015-08-05 12:44 - 00000000 ____D C:\Program Files (x86)\ESET
2015-08-05 12:35 - 2015-06-23 13:30 - 00300704 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-08-05 01:51 - 2015-08-08 13:06 - 00006426 _____ C:\Windows\setupact.log
2015-08-05 01:51 - 2015-08-05 01:51 - 00000000 _____ C:\Windows\setuperr.log
2015-08-04 12:30 - 2015-08-04 12:30 - 00000000 ____D C:\Users\Administrator\Desktop\DMPintro7
2015-08-04 11:32 - 2015-08-04 11:32 - 00046328 _____ C:\Users\Administrator\Desktop\deads.veg
2015-08-04 11:09 - 2015-08-04 11:09 - 00000000 ____D C:\AdwCleaner
2015-08-03 17:44 - 2015-08-03 17:44 - 00036118 _____ C:\ComboFix.txt
2015-08-03 17:40 - 2015-08-03 17:44 - 00000000 ____D C:\Qoobox
2015-08-03 17:40 - 2015-08-03 17:43 - 00000000 ____D C:\Windows\erdnt
2015-08-03 17:40 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2015-08-03 17:40 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2015-08-03 17:40 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-08-03 17:40 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-08-03 17:40 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-08-03 17:40 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2015-08-03 17:40 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2015-08-03 17:40 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2015-08-03 17:38 - 2015-08-03 17:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2015-08-03 17:38 - 2015-08-03 17:38 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2015-08-03 11:57 - 2015-08-03 17:37 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-08-03 00:19 - 2015-08-03 00:19 - 00000000 ____D C:\ProgramData\AVAST Software
2015-08-03 00:17 - 2015-08-03 00:17 - 05481344 _____ C:\Users\Administrator\Downloads\avast_free_antivirus_setup.exe
2015-08-02 23:50 - 2015-08-03 11:58 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-08-02 23:46 - 2015-08-08 17:41 - 00000000 ____D C:\FRST
2015-08-02 23:35 - 2015-03-14 05:21 - 01632768 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-08-02 23:35 - 2015-03-14 05:21 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2015-08-02 23:35 - 2015-03-14 05:04 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2015-08-02 23:35 - 2015-03-14 05:04 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2015-08-02 23:34 - 2015-05-09 20:26 - 00493504 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2015-08-02 22:44 - 2015-08-02 22:57 - 00000000 ____D C:\Windows\Minidump
2015-08-02 22:37 - 2015-08-02 22:37 - 00000000 ____D C:\Default Folder
2015-08-02 22:36 - 2015-08-02 22:47 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\zSILlzC
2015-08-02 20:16 - 2015-08-02 20:16 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Mirillis
2015-08-02 20:16 - 2015-08-02 20:16 - 00000000 ____D C:\Users\Administrator\AppData\Local\Mirillis
2015-08-02 20:16 - 2015-08-02 20:16 - 00000000 ____D C:\ProgramData\Mirillis
2015-08-02 20:16 - 2013-05-28 22:23 - 00652288 _____ C:\Windows\system32\ficvdec_x64.dll
2015-08-02 20:16 - 2013-05-28 22:22 - 00641024 _____ C:\Windows\SysWOW64\ficvdec_x86.dll
2015-08-02 20:14 - 2015-08-02 20:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mirillis
2015-08-01 11:39 - 2015-08-04 19:14 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Audacity
2015-08-01 11:36 - 2015-08-08 13:45 - 00000132 _____ C:\Users\Administrator\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen
2015-07-30 21:48 - 2015-07-18 16:27 - 00000000 ____D C:\Users\Administrator\Desktop\Takania2-Client
2015-07-28 10:29 - 2015-07-25 20:07 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-07-28 10:29 - 2015-07-25 20:04 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-07-28 10:29 - 2015-07-25 20:04 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-07-28 10:29 - 2015-07-25 20:03 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-07-28 10:29 - 2015-07-25 20:03 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-07-28 10:29 - 2015-07-25 20:03 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-07-28 10:29 - 2015-07-25 20:03 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-07-28 10:29 - 2015-07-25 19:55 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-07-27 20:15 - 2015-04-09 05:23 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2015-07-27 20:15 - 2015-04-09 05:09 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2015-07-27 20:15 - 2015-03-20 05:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-07-27 20:15 - 2015-03-20 05:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2015-07-27 20:15 - 2014-09-10 00:16 - 00377784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2015-07-27 20:15 - 2013-07-05 04:53 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2015-07-27 20:15 - 2013-02-27 07:25 - 00180584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2015-07-27 20:15 - 2012-07-30 20:38 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\dot3svc.dll
2015-07-27 20:15 - 2012-07-30 20:38 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\dot3msm.dll
2015-07-27 20:15 - 2012-07-30 19:40 - 00115200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dot3msm.dll
2015-07-27 12:27 - 2015-07-27 12:27 - 00003104 _____ C:\Windows\System32\Tasks\{CDF820F4-DC58-43F0-9F10-8D34F8D02643}
2015-07-27 11:16 - 2015-07-02 14:14 - 00022030 _____ C:\Users\Administrator\Desktop\Reflector.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00009815 _____ C:\Users\Administrator\Desktop\TextureAnimations.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00009327 _____ C:\Users\Administrator\Desktop\PlayerItemParser.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00008793 _____ C:\Users\Administrator\Desktop\WorldServerOF.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00008538 _____ C:\Users\Administrator\Desktop\mq.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00007433 _____ C:\Users\Administrator\Desktop\RandomMobs.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00006435 _____ C:\Users\Administrator\Desktop\qh.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00006089 _____ C:\Users\Administrator\Desktop\NaturalTextures.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00005683 _____ C:\Users\Administrator\Desktop\mr.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00005297 _____ C:\Users\Administrator\Desktop\qi.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00004342 _____ C:\Users\Administrator\Desktop\PlayerConfigurationParser.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00003657 _____ C:\Users\Administrator\Desktop\TextureAnimation.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00003440 _____ C:\Users\Administrator\Desktop\qd.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00003320 _____ C:\Users\Administrator\Desktop\ModelSprite.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00003015 _____ C:\Users\Administrator\Desktop\PlayerItemModel.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00003001 _____ C:\Users\Administrator\Desktop\VersionCheckThread.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00002936 _____ C:\Users\Administrator\Desktop\Json.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00002561 _____ C:\Users\Administrator\Desktop\RenderPlayerOF.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00002490 _____ C:\Users\Administrator\Desktop\ReflectorMethod.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00002340 _____ C:\Users\Administrator\Desktop\NextTickHashSet.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00002329 _____ C:\Users\Administrator\Desktop\ReflectorConstructor.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00002290 _____ C:\Users\Administrator\Desktop\PlayerConfigurations.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00002249 _____ C:\Users\Administrator\Desktop\ReflectorField.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00001899 _____ C:\Users\Administrator\Desktop\WrDisplayListAllocator.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00001829 _____ C:\Users\Administrator\Desktop\ReflectorClass.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00001728 _____ C:\Users\Administrator\Desktop\qe.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00001598 _____ C:\Users\Administrator\Desktop\PlayerConfigurationReceiver.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00001507 _____ C:\Users\Administrator\Desktop\ReflectorForge.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00001348 _____ C:\Users\Administrator\Desktop\PlayerConfiguration.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00001227 _____ C:\Users\Administrator\Desktop\WrDisplayListBlock.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00001215 _____ C:\Users\Administrator\Desktop\RangeListInt.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00001091 _____ C:\Users\Administrator\Desktop\NaturalProperties.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00001046 _____ C:\Users\Administrator\Desktop\qj.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00001015 _____ C:\Users\Administrator\Desktop\WorldServerMultiOF.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00000925 _____ C:\Users\Administrator\Desktop\PlayerItemRenderer.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00000903 _____ C:\Users\Administrator\Desktop\j.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00000855 _____ C:\Users\Administrator\Desktop\RangeInt.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00000732 _____ C:\Users\Administrator\Desktop\TextureUtils$2.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00000575 _____ C:\Users\Administrator\Desktop\NbtTagValue.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00000528 _____ C:\Users\Administrator\Desktop\TextureUtils$1.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00000368 _____ C:\Users\Administrator\Desktop\VertexData.class
2015-07-27 11:16 - 2015-07-02 14:14 - 00000296 _____ C:\Users\Administrator\Desktop\ModelPlayerItem.class
2015-07-27 11:16 - 1980-01-01 00:00 - 00008391 ____N C:\Users\Administrator\Desktop\TextureUtils.class
2015-07-27 11:16 - 1980-01-01 00:00 - 00001170 ____N C:\Users\Administrator\Desktop\ResourceUtils.class
2015-07-25 18:22 - 2015-07-25 18:22 - 00000000 ____D C:\Users\Administrator\AppData\Local\CEF
2015-07-25 15:35 - 2015-07-15 05:19 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-07-25 15:35 - 2015-07-15 05:19 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-25 15:35 - 2015-07-15 05:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-07-25 15:35 - 2015-07-15 05:19 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-07-25 15:35 - 2015-07-15 04:55 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-07-25 15:35 - 2015-07-15 04:55 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-07-25 15:35 - 2015-07-15 04:55 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-07-25 15:35 - 2015-07-15 04:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-07-25 15:35 - 2015-07-15 03:59 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-07-25 15:35 - 2015-07-15 03:52 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-07-25 15:35 - 2015-07-09 19:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-07-25 15:35 - 2015-07-09 19:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-07-25 15:35 - 2015-07-09 19:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-07-25 15:35 - 2015-07-09 19:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-07-25 15:35 - 2015-07-09 19:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-07-25 15:35 - 2015-07-09 19:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-07-25 15:35 - 2015-07-09 19:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-07-25 15:35 - 2015-07-09 19:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-07-25 15:35 - 2015-07-09 19:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-07-25 15:35 - 2015-07-09 19:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-07-25 15:35 - 2015-07-09 19:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-07-25 15:35 - 2015-07-09 19:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-07-25 15:35 - 2015-07-09 19:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-07-25 15:35 - 2015-07-09 19:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-07-25 15:35 - 2015-07-09 19:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-07-25 15:35 - 2015-07-09 19:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-07-25 15:35 - 2015-06-27 04:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-07-25 15:35 - 2015-06-27 04:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-07-25 15:35 - 2015-06-27 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-07-25 15:35 - 2015-06-27 03:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-07-25 15:35 - 2015-06-25 10:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-07-25 15:35 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-25 15:35 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-07-25 15:35 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-07-25 15:35 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2015-07-25 15:34 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-07-25 15:34 - 2015-07-02 23:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-07-25 15:34 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-07-25 15:34 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-07-25 15:34 - 2015-07-02 22:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-07-25 15:34 - 2015-07-02 22:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-07-25 15:34 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-07-25 15:34 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-07-25 15:34 - 2015-07-02 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-07-25 15:34 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-07-25 15:34 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-07-25 15:34 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-07-25 15:34 - 2015-06-25 20:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-07-25 15:34 - 2015-06-25 19:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-07-25 15:34 - 2015-06-20 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-07-25 15:34 - 2015-06-20 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-07-25 15:34 - 2015-06-20 21:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-25 15:34 - 2015-06-20 21:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-07-25 15:34 - 2015-06-20 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-07-25 15:34 - 2015-06-20 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-07-25 15:34 - 2015-06-20 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-07-25 15:34 - 2015-06-20 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-07-25 15:34 - 2015-06-20 21:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-25 15:34 - 2015-06-20 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-07-25 15:34 - 2015-06-20 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-07-25 15:34 - 2015-06-20 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-07-25 15:34 - 2015-06-20 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-07-25 15:34 - 2015-06-20 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-07-25 15:34 - 2015-06-20 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-07-25 15:34 - 2015-06-20 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-07-25 15:34 - 2015-06-20 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-07-25 15:34 - 2015-06-20 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-07-25 15:34 - 2015-06-20 20:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-07-25 15:34 - 2015-06-20 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-07-25 15:34 - 2015-06-20 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-07-25 15:34 - 2015-06-20 20:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-07-25 15:34 - 2015-06-20 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-07-25 15:34 - 2015-06-19 20:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-07-25 15:34 - 2015-06-19 20:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-07-25 15:34 - 2015-06-19 20:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-07-25 15:34 - 2015-06-19 20:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-07-25 15:34 - 2015-06-19 20:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-07-25 15:34 - 2015-06-19 20:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-07-25 15:34 - 2015-06-19 20:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-07-25 15:34 - 2015-06-19 20:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-07-25 15:34 - 2015-06-19 20:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-07-25 15:34 - 2015-06-19 20:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-07-25 15:34 - 2015-06-19 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-07-25 15:34 - 2015-06-19 19:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-07-25 15:34 - 2015-06-19 19:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-07-25 15:34 - 2015-06-19 19:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-07-25 15:34 - 2015-06-19 19:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-07-25 15:34 - 2015-06-19 19:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-07-25 15:34 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-07-25 15:34 - 2015-06-19 19:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-07-25 15:34 - 2015-06-19 19:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-07-25 15:33 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-25 15:33 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2015-07-25 15:33 - 2015-07-01 20:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-07-25 15:33 - 2015-07-01 20:25 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-07-25 15:33 - 2015-07-01 20:21 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-07-25 15:33 - 2015-07-01 20:21 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-07-25 15:33 - 2015-07-01 20:21 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-07-25 15:33 - 2015-07-01 20:21 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-07-25 15:33 - 2015-07-01 20:20 - 01464832 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-07-25 15:33 - 2015-07-01 20:20 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-25 15:33 - 2015-07-01 20:20 - 00730112 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-25 15:33 - 2015-07-01 20:20 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-07-25 15:33 - 2015-07-01 20:20 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-07-25 15:33 - 2015-07-01 20:20 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-25 15:33 - 2015-07-01 20:20 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-07-25 15:33 - 2015-07-01 20:20 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2015-07-25 15:33 - 2015-07-01 20:20 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-07-25 15:33 - 2015-07-01 20:20 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-07-25 15:33 - 2015-07-01 20:20 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-07-25 15:33 - 2015-07-01 20:20 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-07-25 15:33 - 2015-07-01 20:19 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-07-25 15:33 - 2015-07-01 20:15 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-07-25 15:33 - 2015-07-01 20:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-07-25 15:33 - 2015-07-01 20:10 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-07-25 15:33 - 2015-07-01 19:52 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-07-25 15:33 - 2015-07-01 19:52 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2015-07-25 15:33 - 2015-07-01 19:52 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-07-25 15:33 - 2015-07-01 19:52 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-07-25 15:33 - 2015-07-01 19:52 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-07-25 15:33 - 2015-07-01 19:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-07-25 15:33 - 2015-07-01 19:52 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2015-07-25 15:33 - 2015-07-01 19:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-07-25 15:33 - 2015-07-01 19:52 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-07-25 15:33 - 2015-07-01 19:52 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-07-25 15:33 - 2015-07-01 19:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-07-25 15:33 - 2015-07-01 19:51 - 00665600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-07-25 15:33 - 2015-07-01 19:51 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-07-25 15:33 - 2015-07-01 19:51 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-07-25 15:33 - 2015-07-01 19:48 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-07-25 15:33 - 2015-07-01 19:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-07-25 15:33 - 2015-07-01 19:42 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-07-25 15:33 - 2015-07-01 18:55 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-25 15:33 - 2015-07-01 18:55 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-25 15:33 - 2015-07-01 18:54 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-25 15:33 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-07-25 15:33 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-25 15:33 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-07-25 15:33 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-07-25 15:33 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-07-25 15:33 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-25 15:33 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-07-25 15:33 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-07-25 15:33 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-07-25 15:33 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-07-25 15:33 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-07-25 15:33 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2015-07-25 15:33 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-07-25 15:33 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-07-25 15:33 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-07-25 15:33 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-07-25 15:33 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-07-25 15:33 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-07-25 15:33 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-07-25 15:33 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-07-25 15:26 - 2015-08-03 17:38 - 00000926 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2015-07-25 15:26 - 2015-08-03 12:12 - 00033856 ____H (LogMeIn, Inc.) C:\Windows\system32\hamachi.sys
2015-07-10 19:28 - 2015-08-02 17:02 - 00000000 ____D C:\$Windows.~BT
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-08-08 17:22 - 2015-05-22 15:45 - 01852383 _____ C:\Windows\WindowsUpdate.log
2015-08-08 17:08 - 2015-05-22 16:10 - 00045395 _____ C:\Windows\SysWOW64\Gms.log
2015-08-08 16:51 - 2015-06-05 17:41 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\.minecraft
2015-08-08 16:48 - 2015-05-28 16:20 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\TS3Client
2015-08-08 16:47 - 2015-06-05 10:57 - 00000000 ____D C:\Program Files (x86)\Steam
2015-08-08 15:33 - 2015-05-22 15:54 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-08 15:33 - 2009-07-14 06:45 - 00019488 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-08-08 15:33 - 2009-07-14 06:45 - 00019488 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-08-08 13:12 - 2009-07-14 19:58 - 00699092 _____ C:\Windows\system32\perfh007.dat
2015-08-08 13:12 - 2009-07-14 19:58 - 00149232 _____ C:\Windows\system32\perfc007.dat
2015-08-08 13:12 - 2009-07-14 07:13 - 01619284 _____ C:\Windows\system32\PerfStringBackup.INI
2015-08-08 13:06 - 2015-05-25 17:24 - 00000000 ____D C:\Users\Administrator\AppData\Local\LogMeIn Hamachi
2015-08-08 13:06 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-07 23:43 - 2015-05-25 20:39 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Skype
2015-08-05 01:51 - 2009-07-14 06:45 - 00275568 _____ C:\Windows\system32\FNTCACHE.DAT
2015-08-05 01:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2015-08-04 12:31 - 2015-05-25 17:24 - 00060408 _____ C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT
2015-08-04 11:17 - 2015-06-06 19:16 - 00000000 ____D C:\Users\Administrator\AppData\Local\CrashDumps
2015-08-04 11:00 - 2015-05-22 15:52 - 00000000 ____D C:\Program Files (x86)\MSI
2015-08-03 17:44 - 2015-06-09 21:16 - 00000000 ____D C:\Users\Terence
2015-08-03 17:44 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2015-08-03 17:43 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2015-08-03 12:03 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-08-03 12:02 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Globalization
2015-08-02 23:44 - 2015-05-22 17:18 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-08-02 23:44 - 2015-05-22 17:18 - 00000000 ____D C:\ProgramData\Oracle
2015-08-02 23:44 - 2015-05-22 17:18 - 00000000 ____D C:\Program Files (x86)\Java
2015-08-02 23:42 - 2015-05-26 17:24 - 00000000 ___RD C:\Program Files (x86)\Avira
2015-08-02 23:18 - 2015-05-22 15:49 - 01592628 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2015-08-02 20:23 - 2015-06-13 16:44 - 00000000 ____D C:\Users\Administrator\Desktop\Alle Ordner
2015-08-02 17:05 - 2015-05-22 22:40 - 00000000 ____D C:\Windows\Panther
2015-08-01 21:04 - 2015-05-25 17:24 - 00000000 ____D C:\Users\Administrator\AppData\Local\Google
2015-07-30 13:04 - 2015-05-26 17:29 - 00162528 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-07-30 13:04 - 2015-05-26 17:29 - 00141416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-07-30 13:04 - 2015-05-26 17:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-07-30 12:51 - 2015-05-22 15:52 - 00000000 ____D C:\ProgramData\Package Cache
2015-07-28 17:33 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-07-28 11:56 - 2015-05-23 21:59 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-07-25 16:54 - 2015-05-23 22:26 - 00000000 ____D C:\ProgramData\Riot Games
2015-07-25 16:52 - 2015-05-31 09:51 - 00000000 ___SD C:\Windows\system32\GWX
2015-07-25 16:50 - 2015-05-31 09:51 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-07-25 16:50 - 2015-05-23 21:59 - 00000000 ____D C:\Windows\system32\appraiser
2015-07-25 16:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-07-25 16:02 - 2015-05-26 19:38 - 00000000 ____D C:\Windows\system32\MRT
2015-07-25 15:28 - 2015-05-22 15:54 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-07-25 15:28 - 2015-05-22 15:54 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-07-25 15:28 - 2015-05-22 15:54 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2015-08-01 11:36 - 2015-08-08 13:45 - 0000132 _____ () C:\Users\Administrator\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen
2015-05-25 21:41 - 2015-06-14 19:01 - 0000600 _____ () C:\Users\Administrator\AppData\Local\PUTTY.RND
2015-05-30 13:53 - 2015-05-30 13:53 - 0000017 _____ () C:\Users\Administrator\AppData\Local\resmon.resmoncfg
2015-05-22 15:54 - 2015-05-22 15:54 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
Einige Dateien in TEMP:
====================
C:\Users\Administrator\AppData\Local\Temp\Quarantine.exe
C:\Users\Administrator\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Administrator\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2015-08-04 13:03
==================== Ende von log ============================
--- --- ---