| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Avira - Minecraft.exe enthält TR/agent?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
21.09.2015, 22:57
| #16 |
 |  Avira - Minecraft.exe enthält TR/agent? VirusTotal-Link: https://www.virustotal.com/de/file/688b5b5478ed0b53ff9ca7a7ce9290a865294b9476b68401f104a974cd14b742/analysis/1442871987/ Code:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:15-09-2015
durchgeführt von 302- (2015-09-21 23:48:07) Run:2
Gestartet von C:\Users\302-\Desktop
Geladene Profile: 302- (Verfügbare Profile: 302-)
Start-Modus: Normal
==============================================
fixlist Inhalt:
*****************
start
CloseProcesses:
C:\Program Files (x86)\Startfenster
DeleteKey: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Startfenster
DeleteKey: HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF
DeleteKey: HKLM\SOFTWARE\Classes\Wow6432Node\Interface\{884189CF-7C10-41E8-A014-F7B2BE40AADB}
DeleteKey: HKLM\SOFTWARE\Classes\Wow6432Node\Interface\{BD125908-5F10-409F-9C01-F2207CA18887}
RemoveProxy:
EmptyTemp:
end
*****************
Prozess erfolgreich geschlossen.
C:\Program Files (x86)\Startfenster => erfolgreich verschoben
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Startfenster => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Classes\Wow6432Node\Interface\{884189CF-7C10-41E8-A014-F7B2BE40AADB} => konnte nicht entfernt werden im ersten Versuch (ErrorCode: C0000121), siehe nächste Zeile.
HKLM\SOFTWARE\Classes\Wow6432Node\Interface\{884189CF-7C10-41E8-A014-F7B2BE40AADB} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Classes\Wow6432Node\Interface\{BD125908-5F10-409F-9C01-F2207CA18887} => konnte nicht entfernt werden im ersten Versuch (ErrorCode: C0000121), siehe nächste Zeile.
HKLM\SOFTWARE\Classes\Wow6432Node\Interface\{BD125908-5F10-409F-9C01-F2207CA18887} => Schlüssel erfolgreich entfernt
========= RemoveProxy: =========
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt
HKU\S-1-5-21-570197401-3978400442-3683679341-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\S-1-5-21-570197401-3978400442-3683679341-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt
========= Ende von RemoveProxy: =========
EmptyTemp: => 325.5 MB temporäre Dateien entfernt.
Das System musste neu gestartet werden..
==== Ende von Fixlog 23:48:11 ====
Code:
ATTFilter Results of screen317's Security Check version 1.008 Windows 7 Service Pack 1 x64 (UAC is disabled!) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Avira Antivirus Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Java 8 Update 51 Java version 32-bit out of Date! Adobe Reader XI Google Chrome (45.0.2454.85) Google Chrome (45.0.2454.93) ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbam.exe Avira Antivir avgnt.exe Avira Antivir avguard.exe Malwarebytes Anti-Malware mbamscheduler.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` Code:
ATTFilter Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.
Windows Firewall:
=============
Firewall Disabled Policy:
==================
System Restore:
============
System Restore Policy:
========================
Action Center:
============
Windows Update:
============
Windows Autoupdate Disabled Policy:
============================
Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.
Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1
Other Services:
==============
File Check:
========
C:\Windows\System32\nsisvc.dll => File is digitally signed
C:\Windows\System32\drivers\nsiproxy.sys => File is digitally signed
C:\Windows\System32\dhcpcore.dll => File is digitally signed
C:\Windows\System32\drivers\afd.sys => File is digitally signed
C:\Windows\System32\drivers\tdx.sys => File is digitally signed
C:\Windows\System32\Drivers\tcpip.sys => File is digitally signed
C:\Windows\System32\dnsrslvr.dll => File is digitally signed
C:\Windows\System32\mpssvc.dll => File is digitally signed
C:\Windows\System32\bfe.dll => File is digitally signed
C:\Windows\System32\drivers\mpsdrv.sys => File is digitally signed
C:\Windows\System32\SDRSVC.dll => File is digitally signed
C:\Windows\System32\vssvc.exe => File is digitally signed
C:\Windows\System32\wscsvc.dll => File is digitally signed
C:\Windows\System32\wbem\WMIsvc.dll => File is digitally signed
C:\Windows\System32\wuaueng.dll => File is digitally signed
C:\Windows\System32\qmgr.dll => File is digitally signed
C:\Windows\System32\es.dll => File is digitally signed
C:\Windows\System32\cryptsvc.dll => File is digitally signed
C:\Program Files\Windows Defender\MpSvc.dll => File is digitally signed
C:\Windows\System32\ipnathlp.dll => File is digitally signed
C:\Windows\System32\iphlpsvc.dll => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
**** End of log ****
Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:15-09-2015 durchgeführt von 302- (Administrator) auf KUNDEN-6P3VFCVU (21-09-2015 23:56:45) Gestartet von C:\Users\302-\Desktop Geladene Profile: 302- (Verfügbare Profile: 302-) Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Chrome) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (AMD) C:\Windows\System32\atiesrxx.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe (AMD) C:\Windows\System32\atieclxx.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (Creative Technology Ltd) C:\Windows\SysWOW64\CtHdaSvc.exe (Fitbit, Inc.) C:\Program Files (x86)\Fitbit Connect\FitbitConnectService.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe () C:\Windows\System32\PnkBstrA.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe (Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe () C:\Program Files (x86)\puush\puush.exe (Spotify Ltd) C:\Users\302-\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Z-Series\Sound Blaster Z-Series Control Panel\SBZ.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe (TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe (Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe (Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler64.exe (Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Spotify Ltd) C:\Users\302-\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd) C:\Users\302-\AppData\Roaming\Spotify\SpotifyCrashService.exe (Spotify Ltd) C:\Users\302-\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd) C:\Users\302-\AppData\Roaming\Spotify\Spotify.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13671792 2014-03-14] (Realtek Semiconductor) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-04-11] (Intel Corporation) HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2014-02-21] (Intel Corporation) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [782008 2015-08-26] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [164656 2014-08-27] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.) HKLM-x32\...\Run: [Sound Blaster Z-Series Control Panel] => C:\Program Files (x86)\Creative\Sound Blaster Z-Series\Sound Blaster Z-Series Control Panel\SBZ.exe [735744 2013-02-27] (Creative Technology Ltd) HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [56080 2015-07-27] (Raptr, Inc) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-04] (Advanced Micro Devices, Inc.) HKU\S-1-5-21-570197401-3978400442-3683679341-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3638256 2015-09-02] (Electronic Arts) HKU\S-1-5-21-570197401-3978400442-3683679341-1000\...\Run: [puush] => C:\Program Files (x86)\puush\puush.exe [568904 2015-08-05] () HKU\S-1-5-21-570197401-3978400442-3683679341-1000\...\Run: [Spotify Web Helper] => C:\Users\302-\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2025016 2015-09-18] (Spotify Ltd) HKU\S-1-5-21-570197401-3978400442-3683679341-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53737488 2015-08-07] (Skype Technologies S.A.) HKU\S-1-5-21-570197401-3978400442-3683679341-1000\...\Run: [Dxtory Update Checker 2.0] => C:\Program Files (x86)\ExKode\Dxtory2.0\UpdateChecker.exe [93696 2010-10-17] (Dxtory Software) ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{1D4920EC-6CB7-4635-8A61-89687EE6ACAE}: [DhcpNameServer] 172.20.10.1 Tcpip\..\Interfaces\{44F3AFEE-D438-4A5F-A52D-A77C72C530FF}: [DhcpNameServer] 192.168.178.1 Internet Explorer: ================== HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome HKU\S-1-5-21-570197401-3978400442-3683679341-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-570197401-3978400442-3683679341-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://syb.msn.com hxxp://www.tecstore.net SearchScopes: HKLM -> DefaultScope {34967B44-CCED-4AF4-863B-BE4A81A9732D} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM -> {34967B44-CCED-4AF4-863B-BE4A81A9732D} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox SearchScopes: HKLM-x32 -> DefaultScope {571503CC-1BD6-463E-9EE0-2C1F4E8E8399} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> {571503CC-1BD6-463E-9EE0-2C1F4E8E8399} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox SearchScopes: HKU\S-1-5-21-570197401-3978400442-3683679341-1000 -> DefaultScope {34967B44-CCED-4AF4-863B-BE4A81A9732D} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox SearchScopes: HKU\S-1-5-21-570197401-3978400442-3683679341-1000 -> {34967B44-CCED-4AF4-863B-BE4A81A9732D} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox SearchScopes: HKU\S-1-5-21-570197401-3978400442-3683679341-1000 -> {571503CC-1BD6-463E-9EE0-2C1F4E8E8399} URL = BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll [2015-07-23] (Oracle Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-23] (Oracle Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-07-23] (Oracle Corporation) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-23] (Oracle Corporation) Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\302-\AppData\Roaming\Mozilla\Firefox\Profiles\qsNAI5es.default FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [Keine Datei] FF Plugin: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-23] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-23] (Oracle Corporation) FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-18] () FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [Keine Datei] FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google) FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-23] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-23] (Oracle Corporation) FF Plugin-x32: @live.heroesandgenerals.com/npretox -> C:\Program Files (x86)\Heroes & Generals\live\npretox-1.0.6.1\npretoxlive-1.0.6.1.dll [Keine Datei] FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-14] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-14] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.) FF Extension: Avira Browser Safety - C:\Users\302-\AppData\Roaming\Mozilla\Firefox\Profiles\qsNAI5es.default\Extensions\abs@avira.com [2014-08-26] Chrome: ======= CHR Profile: C:\Users\302-\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Chrome Hotword Shared Module) - C:\Users\302-\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-13] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\302-\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-25] CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01] ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [887128 2015-07-23] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [461672 2015-08-26] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [461672 2015-08-26] (Avira Operations GmbH & Co. KG) S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1213072 2015-08-26] (Avira Operations GmbH & Co. KG) S2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [160048 2014-08-27] (Avira Operations GmbH & Co. KG) R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation) S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2014-10-02] (Creative Labs) [Datei ist nicht signiert] S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2014-10-02] (Creative Labs) [Datei ist nicht signiert] R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [423424 2012-10-08] (Creative Technology Ltd) [Datei ist nicht signiert] R2 CtHdaSvc; C:\Windows\sysWow64\CtHdaSvc.exe [112640 2013-05-22] (Creative Technology Ltd) R2 Fitbit Connect; C:\Program Files (x86)\Fitbit Connect\FitbitConnectService.exe [5738528 2014-12-12] (Fitbit, Inc.) [Datei ist nicht signiert] R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-04-11] (Intel Corporation) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2057736 2015-09-02] (Electronic Arts) S3 PAExec; C:\Windows\PAExec.exe [207872 2015-09-09] (Power Admin LLC) [Datei ist nicht signiert] R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2015-02-17] () R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2015-02-16] () S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [162528 2015-07-23] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [141416 2015-07-23] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-08-15] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [44088 2015-03-10] (Avira Operations GmbH & Co. KG) R3 cthda; C:\Windows\System32\drivers\cthda.sys [1060632 2013-05-22] (Creative Technology Ltd) R3 cthdb; C:\Windows\System32\DRIVERS\cthdb.sys [33560 2013-05-22] (Creative Technology Ltd) S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) R3 ElgatoGC656Y; C:\Windows\System32\Drivers\ElgatoGC656.sys [94440 2014-07-07] (UB658) R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2014-04-11] (Intel Corporation) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-09-21] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation) R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [118272 2014-03-20] (Intel Corporation) R3 ScpVBus; C:\Windows\System32\DRIVERS\ScpVBus.sys [39168 2013-05-05] (Scarlet.Crush Productions) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X] S3 gdrv; \??\C:\Windows\gdrv.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-09-21 23:54 - 2015-09-21 23:54 - 00002746 _____ C:\Users\302-\Desktop\FSS.txt 2015-09-21 23:53 - 2015-09-21 23:53 - 00899072 _____ (Farbar) C:\Users\302-\Desktop\FSS.exe 2015-09-21 23:51 - 2015-09-21 23:51 - 00852704 _____ C:\Users\302-\Desktop\SecurityCheck.exe 2015-09-21 23:49 - 2015-09-21 23:50 - 108359463 _____ C:\Users\302-\Desktop\Random.rar 2015-09-21 23:45 - 2015-09-21 23:45 - 02314240 _____ C:\Users\302-\Desktop\MinecraftInstaller (1).msi 2015-09-21 23:38 - 2015-09-21 23:38 - 00126666 _____ C:\Users\302-\Desktop\mb und sb.aup 2015-09-21 23:38 - 2015-09-21 23:38 - 00000000 ____D C:\Users\302-\Desktop\mb und sb_data 2015-09-21 18:53 - 2015-09-21 18:53 - 03364667 _____ C:\Users\302-\Desktop\bfhdelay.xcf 2015-09-21 18:53 - 2015-09-21 18:53 - 00076652 _____ C:\Users\302-\AppData\Local\recently-used.xbel 2015-09-21 18:44 - 2015-09-21 18:44 - 00308078 _____ C:\Users\302-\Desktop\bfh.jpeg 2015-09-21 18:39 - 2015-09-21 18:40 - 00222160 _____ C:\Users\302-\Downloads\Heavyweight.mp3.sfk 2015-09-21 18:33 - 2015-09-21 18:33 - 01020176 _____ C:\Users\302-\Desktop\delay.ogg.sfk 2015-09-21 18:33 - 2015-09-21 18:33 - 00039998 _____ C:\Users\302-\Desktop\delay.aup 2015-09-21 18:33 - 2015-09-21 18:33 - 00000000 ____D C:\Users\302-\Desktop\delay_data 2015-09-21 18:32 - 2015-09-21 18:33 - 12716859 _____ C:\Users\302-\Desktop\delay.ogg 2015-09-21 14:23 - 2015-09-21 14:28 - 00368200 _____ C:\Users\302-\Desktop\Different Heaven & EH!DE - My Heart [NCS Release].mp3.sfk 2015-09-21 13:59 - 2015-09-21 14:12 - 01378328 _____ C:\Users\302-\Desktop\c5.ogg.sfk 2015-09-21 13:59 - 2015-09-21 14:12 - 01375344 _____ C:\Users\302-\Desktop\Captive 5.ogg.sfk 2015-09-21 13:59 - 2015-09-21 13:59 - 14995717 _____ C:\Users\302-\Desktop\Captive 5.ogg 2015-09-21 13:56 - 2015-09-21 13:56 - 16121517 _____ C:\Users\302-\Desktop\c5.ogg 2015-09-21 02:10 - 2015-09-21 02:04 - 00000000 ____D C:\Users\302-\Desktop\Captive 5_data 2015-09-21 02:09 - 2015-09-21 02:09 - 44341641 _____ C:\Users\302-\Desktop\Captive 5.rar 2015-09-21 02:06 - 2015-09-21 14:32 - 00053385 _____ C:\Users\302-\Desktop\Captive 5.aup 2015-09-21 00:35 - 2015-09-21 13:56 - 00053700 _____ C:\Users\302-\Desktop\c5.aup 2015-09-21 00:35 - 2015-09-21 00:35 - 00000000 ____D C:\Users\302-\Desktop\c5_data 2015-09-20 22:14 - 2015-09-20 22:14 - 01138202 _____ C:\Users\302-\Desktop\OptiFine_1.8.8_HD_U_F3.jar 2015-09-20 22:08 - 2015-09-21 23:44 - 00000000 ____D C:\Users\302-\Desktop\.minecraft 2015-09-20 22:07 - 2015-09-20 22:08 - 02314240 _____ C:\Users\302-\Desktop\MinecraftInstaller.msi 2015-09-20 17:26 - 2015-09-20 17:26 - 02870984 _____ (ESET) C:\Users\302-\Desktop\esetsmartinstaller_deu.exe 2015-09-20 17:24 - 2015-09-20 17:24 - 00039640 _____ C:\Users\302-\Desktop\HitmanPro_20150920_1724.log 2015-09-20 17:22 - 2015-09-20 17:24 - 00000000 ____D C:\ProgramData\HitmanPro 2015-09-20 17:22 - 2015-09-20 17:22 - 11352032 _____ (SurfRight B.V.) C:\Users\302-\Desktop\HitmanPro_x64.exe 2015-09-20 17:18 - 2015-09-20 17:18 - 00000743 _____ C:\Users\302-\Desktop\Start Emsisoft Emergency Kit.lnk 2015-09-20 17:17 - 2015-09-20 17:18 - 00000000 ____D C:\EEK 2015-09-20 17:17 - 2015-09-20 17:17 - 166992304 _____ C:\Users\302-\Desktop\EmsisoftEmergencyKit.exe 2015-09-20 14:32 - 2015-09-20 14:32 - 00018057 _____ C:\Users\302-\Desktop\Search.txt 2015-09-19 19:39 - 2015-09-19 19:39 - 00001389 _____ C:\Users\302-\Desktop\JRT.txt 2015-09-19 19:37 - 2015-09-19 19:37 - 01798976 _____ (Malwarebytes) C:\Users\302-\Desktop\JRT.exe 2015-09-19 19:35 - 2015-09-19 19:35 - 00001769 _____ C:\Users\302-\Desktop\mbam.txt 2015-09-19 19:28 - 2015-09-21 23:49 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-09-19 19:28 - 2015-09-19 19:28 - 00001102 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-09-19 19:28 - 2015-09-19 19:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-09-19 19:28 - 2015-09-19 19:28 - 00000000 ____D C:\ProgramData\Malwarebytes 2015-09-19 19:28 - 2015-09-19 19:28 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-09-19 19:28 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-09-19 19:28 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-09-19 19:28 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2015-09-19 19:26 - 2015-09-19 19:27 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\302-\Desktop\mbam-setup-2.1.8.1057 (1).exe 2015-09-19 19:22 - 2015-09-19 19:23 - 00000000 ____D C:\AdwCleaner 2015-09-19 19:21 - 2015-09-19 19:22 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\302-\Desktop\mbam-setup-2.1.8.1057.exe 2015-09-19 19:21 - 2015-09-19 19:21 - 01662976 _____ C:\Users\302-\Desktop\AdwCleaner_5.008.exe 2015-09-19 18:05 - 2015-09-19 18:05 - 04006981 _____ C:\Users\302-\Desktop\Mw1.xcf 2015-09-19 17:26 - 2015-09-19 17:26 - 02083157 _____ C:\Users\302-\Desktop\Masterbuilders.xcf 2015-09-19 17:17 - 2015-09-19 17:17 - 00026677 _____ C:\ComboFix.txt 2015-09-19 17:12 - 2015-09-19 17:17 - 00000000 ____D C:\Qoobox 2015-09-19 17:12 - 2015-09-19 17:16 - 00000000 ____D C:\Windows\erdnt 2015-09-19 17:12 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe 2015-09-19 17:12 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe 2015-09-19 17:12 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2015-09-19 17:12 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2015-09-19 17:12 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2015-09-19 17:12 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe 2015-09-19 17:12 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe 2015-09-19 17:12 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe 2015-09-19 17:10 - 2015-09-19 17:10 - 05635119 ____R (Swearware) C:\Users\302-\Desktop\ComboFix.exe 2015-09-19 16:24 - 2015-09-19 17:08 - 02261752 _____ C:\Users\302-\Desktop\mw1.ogg.sfk 2015-09-19 16:24 - 2015-09-19 16:24 - 25655906 _____ C:\Users\302-\Desktop\mw1.ogg 2015-09-19 16:21 - 2015-09-19 16:24 - 00087295 _____ C:\Users\302-\Desktop\mw1.aup 2015-09-19 16:21 - 2015-09-19 16:21 - 00000000 ____D C:\Users\302-\Desktop\mw1_data 2015-09-19 15:09 - 2015-09-19 15:09 - 04404952 _____ (Kaspersky Lab ZAO) C:\Users\302-\Desktop\tdsskiller.exe 2015-09-19 15:04 - 2015-09-21 23:56 - 00019718 _____ C:\Users\302-\Desktop\FRST.txt 2015-09-19 15:04 - 2015-09-21 23:56 - 00000000 ____D C:\FRST 2015-09-19 15:04 - 2015-09-19 19:40 - 00047873 _____ C:\Users\302-\Desktop\Addition.txt 2015-09-19 15:03 - 2015-09-19 15:03 - 02191360 _____ (Farbar) C:\Users\302-\Desktop\FRST64.exe 2015-09-19 15:02 - 2015-09-19 15:02 - 02191360 _____ (Farbar) C:\Users\302-\Downloads\FRST64.exe 2015-09-19 14:45 - 2015-09-21 15:43 - 00979455 _____ C:\Users\302-\Documents\Captive4.xcf 2015-09-19 14:37 - 2015-09-19 14:37 - 00000772 _____ C:\Users\302-\Documents\Ereignisse.txt 2015-09-19 14:20 - 2015-09-19 14:20 - 02314240 _____ C:\Users\302-\Downloads\MinecraftInstaller (1).msi 2015-09-19 14:16 - 2015-09-19 14:16 - 02314240 _____ C:\Users\302-\Downloads\MinecraftInstaller.msi 2015-09-19 00:41 - 2015-09-19 00:42 - 00002880 _____ C:\Users\302-\Downloads\FACEPALM [HD] (1).mp4.sfk 2015-09-18 21:37 - 2015-09-18 21:37 - 07076424 _____ C:\Users\302-\Downloads\Smaug.rar 2015-09-18 17:32 - 2015-09-18 17:32 - 00105362 _____ C:\Users\302-\Documents\JWSchrift2.xcf 2015-09-18 17:24 - 2015-09-18 17:24 - 00023870 _____ C:\Users\302-\Downloads\ventilla_script.zip 2015-09-18 17:24 - 2015-09-18 17:24 - 00000000 ____D C:\Users\302-\Downloads\JW_files 2015-09-18 15:42 - 2015-09-18 15:42 - 13668628 _____ C:\Users\302-\Downloads\sbs.xcf 2015-09-18 14:24 - 2015-09-18 14:24 - 10973286 _____ C:\Users\302-\Downloads\tntop10.xcf 2015-09-18 03:11 - 2015-09-18 03:11 - 00100458 _____ C:\Users\302-\Downloads\the_minion.zip 2015-09-18 02:08 - 2015-09-18 02:08 - 00000000 ____D C:\Users\302-\Documents\OFX Presets 2015-09-18 02:01 - 2015-09-18 02:01 - 00109651 _____ C:\Users\302-\Downloads\old_london.zip 2015-09-18 00:24 - 2015-09-18 00:24 - 101167727 _____ C:\Users\302-\Downloads\DuKannstVerkaufenGehn.rar 2015-09-17 14:59 - 2015-09-17 15:01 - 00038368 _____ C:\Users\302-\Downloads\Allahu Akbar Sound Effect.mp3.sfk 2015-09-16 22:00 - 2015-09-16 22:00 - 00918328 _____ C:\Windows\Minidump\091615-6786-01.dmp 2015-09-16 03:23 - 2015-09-16 03:23 - 00007016 _____ C:\Users\302-\Downloads\Diamanten!!! - Captive Minecraft 2 #6 - DieBuddiesZocken.mp3.sfk 2015-09-16 01:53 - 2015-09-16 01:53 - 15488826 _____ C:\Users\302-\Downloads\Killduell324141.rar 2015-09-16 01:24 - 2015-09-16 01:24 - 04235110 _____ C:\Users\302-\Downloads\TNSchaf.xcf 2015-09-16 01:15 - 2015-09-16 01:15 - 00108443 _____ C:\Users\302-\Downloads\Fertig ohne Hintergrundk.xcf 2015-09-16 01:06 - 2015-09-16 01:06 - 00518160 _____ C:\Users\302-\Downloads\Fertig ohne Hintergrund.xcf 2015-09-16 00:14 - 2015-09-16 00:16 - 157760736 _____ C:\Users\302-\Downloads\AufdieNahme.rar 2015-09-15 22:00 - 2015-09-15 22:01 - 02853166 _____ C:\Users\302-\Downloads\Tourismusterroristen.xcf 2015-09-15 21:47 - 2015-09-15 21:49 - 02445994 _____ C:\Users\302-\Downloads\mw3.xcf 2015-09-15 21:15 - 2015-09-15 21:29 - 02178366 _____ C:\Users\302-\Downloads\sir.xcf 2015-09-15 21:14 - 2015-09-15 21:14 - 00029442 _____ C:\Users\302-\Downloads\cartoon.zip 2015-09-15 20:59 - 2015-09-15 21:00 - 02343327 _____ C:\Users\302-\Downloads\GK2F.xcf 2015-09-15 20:57 - 2015-09-15 20:57 - 06360873 _____ C:\Users\302-\Downloads\GK2R.xcf 2015-09-15 20:53 - 2015-09-15 20:53 - 06368456 _____ C:\Users\302-\Downloads\GK2H.xcf 2015-09-15 20:37 - 2015-09-15 20:37 - 05428462 _____ C:\Users\302-\Downloads\GK2.xcf 2015-09-15 20:36 - 2015-09-15 20:36 - 00176676 _____ C:\Users\302-\Downloads\plane_crash.zip 2015-09-15 20:31 - 2015-09-15 20:31 - 00815586 _____ C:\Users\302-\Downloads\Me262.jpeg 2015-09-15 20:23 - 2015-09-15 20:23 - 02812464 _____ C:\Users\302-\Downloads\GK1H.xcf 2015-09-15 20:17 - 2015-09-15 20:18 - 02774868 _____ C:\Users\302-\Downloads\GK1R.xcf 2015-09-15 20:12 - 2015-09-15 20:21 - 02793449 _____ C:\Users\302-\Downloads\GK1.xcf 2015-09-15 20:03 - 2015-09-15 20:03 - 00487638 _____ C:\Users\302-\Downloads\cf_nuclear_war.zip 2015-09-15 19:58 - 2015-09-15 20:03 - 07830183 _____ C:\Users\302-\Downloads\tiger.xcf 2015-09-15 19:58 - 2015-09-15 19:58 - 00399765 _____ C:\Users\302-\Downloads\defused.zip 2015-09-15 01:16 - 2015-09-15 01:16 - 00009112 _____ C:\Users\302-\Downloads\badaboom_bb.zip 2015-09-15 01:07 - 2015-09-15 01:07 - 00327869 _____ C:\Users\302-\Documents\DÖ2.xcf 2015-09-15 01:01 - 2015-09-15 01:01 - 00136904 _____ C:\Users\302-\Downloads\DÖ.pdn 2015-09-15 00:51 - 2015-09-15 00:51 - 00194676 _____ C:\Users\302-\Downloads\Flagge Ö.pdn 2015-09-14 23:32 - 2015-09-14 23:37 - 00012504 _____ C:\Users\302-\Downloads\Spongebob Time Cards.mp4.sfk 2015-09-14 23:32 - 2015-09-14 23:32 - 00655235 _____ C:\Users\302-\Downloads\Spongebob Time Cards.mp4 2015-09-14 23:31 - 2015-09-14 23:31 - 00012520 _____ C:\Users\302-\Downloads\Spongebob Time Cards.mp3.sfk 2015-09-14 20:10 - 2015-09-14 20:10 - 00064857 _____ C:\Users\302-\Downloads\bad_grunge.zip 2015-09-14 20:01 - 2015-09-14 20:01 - 00000000 ____D C:\Users\302-\AppData\Local\webkit 2015-09-14 19:56 - 2015-09-14 20:23 - 00959668 _____ C:\Users\302-\Downloads\Bands.xcf 2015-09-14 19:56 - 2015-09-14 19:56 - 00132321 _____ C:\Users\302-\Downloads\germanica_family.zip 2015-09-14 18:04 - 2015-09-14 18:04 - 00176072 _____ C:\Users\302-\Downloads\Pomade.mp3.sfk 2015-09-14 18:04 - 2015-09-14 18:04 - 00161632 _____ C:\Users\302-\Downloads\Dude_Bro.mp3.sfk 2015-09-14 18:04 - 2015-09-14 18:04 - 00161600 _____ C:\Users\302-\Downloads\Fire_Breather.mp3.sfk 2015-09-14 17:51 - 2015-09-14 17:51 - 21414792 _____ C:\Users\302-\Downloads\Aufnahme.rar 2015-09-13 21:25 - 2015-09-13 21:42 - 74100176 _____ C:\Users\302-\Downloads\§4Mercury§c Pack §4Animated.zip 2015-09-13 20:32 - 2015-09-21 14:29 - 00617269 _____ C:\Users\302-\Documents\Captive.xcf 2015-09-13 18:02 - 2015-09-13 18:02 - 101426665 _____ C:\Users\302-\Downloads\Captive.rar 2015-09-13 17:05 - 2015-09-13 17:05 - 09605800 _____ C:\Users\302-\Downloads\Captive-Minecraft-Beta1_6.zip 2015-09-13 16:22 - 2015-09-13 16:22 - 09706665 _____ C:\Users\302-\Downloads\Captive-Minecraft-III-Beta1_3_1.zip 2015-09-13 00:50 - 2015-09-17 21:01 - 00529671 _____ C:\Users\302-\Downloads\DdnTN.xcf 2015-09-13 00:49 - 2015-09-13 00:49 - 00198034 _____ C:\Users\302-\Downloads\28_days_later.zip 2015-09-12 17:18 - 2015-09-12 17:21 - 00358552 _____ C:\Users\302-\Downloads\Alan Walker - Fade [NCS Release].mp3.sfk 2015-09-12 17:17 - 2015-09-12 17:17 - 00353048 _____ C:\Users\302-\Downloads\Tobu - Infectious [NCS Release].mp3.sfk 2015-09-12 17:17 - 2015-09-12 17:17 - 00252392 _____ C:\Users\302-\Downloads\Tobu - Life [NCS Release].mp3.sfk 2015-09-12 16:04 - 2015-09-12 16:04 - 66872007 _____ C:\Users\302-\Downloads\MC Killduell.rar 2015-09-10 19:21 - 2015-09-10 19:21 - 00000000 ____D C:\Windows\rescache 2015-09-10 17:47 - 2015-09-10 17:50 - 00288248 _____ C:\Users\302-\Downloads\Krys Talk - Fly Away (JPB Remix) [NCS Release].mp3.sfk 2015-09-10 17:47 - 2015-09-10 17:50 - 00228920 _____ C:\Users\302-\Downloads\Different Heaven - Nekozilla [NCS Release] (1).mp3.sfk 2015-09-10 17:47 - 2015-09-10 17:47 - 00263408 _____ C:\Users\302-\Downloads\William Ekh - Adventures (feat. Alexa Lusader) [NCS Release] (1).mp3.sfk 2015-09-10 17:30 - 2015-09-10 17:30 - 30264527 _____ C:\Users\302-\Downloads\CalleFicktGerneTiere.rar 2015-09-09 23:34 - 2015-09-09 23:34 - 00000000 ____D C:\Users\302-\AppData\Roaming\ATI 2015-09-09 23:34 - 2015-09-09 23:34 - 00000000 ____D C:\Users\302-\AppData\Local\ATI 2015-09-09 23:34 - 2015-09-09 23:34 - 00000000 ____D C:\ProgramData\ATI 2015-09-09 23:33 - 2015-09-09 23:33 - 00053615 _____ C:\Windows\SysWOW64\CCCInstall_201509092333135219.log 2015-09-09 23:33 - 2015-09-09 23:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center 2015-09-09 23:33 - 2015-09-09 23:33 - 00000000 _____ C:\Windows\ativpsrm.bin 2015-09-09 23:32 - 2015-09-09 23:32 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies 2015-09-09 23:32 - 2015-09-09 23:32 - 00000000 ____D C:\Program Files\AMD 2015-09-09 23:32 - 2015-09-09 23:32 - 00000000 ____D C:\Program Files (x86)\AMD 2015-09-09 23:31 - 2015-09-09 23:31 - 04944608 _____ (Advanced Micro Devices, Inc.) C:\Users\302-\Downloads\autodetectutility (1).exe 2015-09-09 23:29 - 2015-09-09 23:30 - 00207872 _____ (Power Admin LLC) C:\Windows\PAExec.exe 2015-09-09 23:29 - 2015-09-09 23:29 - 01427043 _____ C:\Users\302-\Downloads\DDU v15.4.1.1 (1).zip 2015-09-09 23:28 - 2015-09-09 23:28 - 01427043 _____ C:\Users\302-\Downloads\DDU v15.4.1.1.zip 2015-09-09 23:10 - 2015-09-09 23:10 - 00782824 _____ C:\Windows\Minidump\090915-8642-01.dmp 2015-09-09 23:01 - 2015-09-09 23:01 - 04944608 _____ (Advanced Micro Devices, Inc.) C:\Users\302-\Downloads\autodetectutility.exe 2015-09-09 22:51 - 2015-09-09 22:51 - 01046528 _____ C:\Users\302-\Downloads\MicrosoftFixit50848.msi 2015-09-09 22:49 - 2015-09-09 22:49 - 00918352 _____ C:\Windows\Minidump\090915-8876-01.dmp 2015-09-09 22:21 - 2015-09-09 22:21 - 00782856 _____ C:\Windows\Minidump\090915-16239-01.dmp 2015-09-09 19:19 - 2015-09-09 19:19 - 00782968 _____ C:\Windows\Minidump\090915-21574-01.dmp 2015-09-09 18:57 - 2015-09-09 18:57 - 00271864 _____ C:\Users\302-\Downloads\e-dubble - Let Me Oh (Freestyle Friday #9).mp3.sfk 2015-09-09 18:55 - 2015-09-09 18:55 - 00416480 _____ C:\Users\302-\Downloads\e-dubble - Be A King.mp3.sfk 2015-09-09 18:55 - 2015-09-09 18:55 - 00220672 _____ C:\Users\302-\Downloads\Otis McMusic - Otis McDonald.mp3.sfk 2015-09-09 17:45 - 2015-09-09 17:46 - 25470651 _____ C:\Users\302-\Downloads\SchwarzeSchwänze.rar 2015-09-09 16:32 - 2015-09-09 16:33 - 03595280 _____ C:\Users\302-\Downloads\Top 10 NoCopyRightSounds [NCS].mp3.sfk 2015-09-09 12:26 - 2015-08-18 03:42 - 00393304 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-09-09 12:26 - 2015-08-18 03:14 - 00344168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-09-09 12:26 - 2015-08-15 08:48 - 25190400 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-09-09 12:26 - 2015-08-15 08:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-09-09 12:26 - 2015-08-15 08:33 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-09-09 12:26 - 2015-08-15 08:18 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-09-09 12:26 - 2015-08-15 08:18 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-09-09 12:26 - 2015-08-15 08:17 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-09-09 12:26 - 2015-08-15 08:17 - 00585216 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-09-09 12:26 - 2015-08-15 08:17 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-09-09 12:26 - 2015-08-15 08:17 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-09-09 12:26 - 2015-08-15 08:10 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-09-09 12:26 - 2015-08-15 08:09 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-09-09 12:26 - 2015-08-15 08:06 - 19856896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-09-09 12:26 - 2015-08-15 08:06 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-09-09 12:26 - 2015-08-15 08:04 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-09-09 12:26 - 2015-08-15 08:04 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-09-09 12:26 - 2015-08-15 08:04 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-09-09 12:26 - 2015-08-15 08:04 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-09-09 12:26 - 2015-08-15 08:00 - 05923328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-09-09 12:26 - 2015-08-15 07:57 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-09-09 12:26 - 2015-08-15 07:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2015-09-09 12:26 - 2015-08-15 07:53 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-09-09 12:26 - 2015-08-15 07:46 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-09-09 12:26 - 2015-08-15 07:42 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-09-09 12:26 - 2015-08-15 07:41 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-09-09 12:26 - 2015-08-15 07:40 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-09-09 12:26 - 2015-08-15 07:40 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-09-09 12:26 - 2015-08-15 07:39 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-09-09 12:26 - 2015-08-15 07:39 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-09-09 12:26 - 2015-08-15 07:39 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-09-09 12:26 - 2015-08-15 07:38 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-09-09 12:26 - 2015-08-15 07:35 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-09-09 12:26 - 2015-08-15 07:33 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-09-09 12:26 - 2015-08-15 07:32 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-09-09 12:26 - 2015-08-15 07:30 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-09-09 12:26 - 2015-08-15 07:29 - 00665600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-09-09 12:26 - 2015-08-15 07:29 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-09-09 12:26 - 2015-08-15 07:29 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-09-09 12:26 - 2015-08-15 07:24 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-09-09 12:26 - 2015-08-15 07:23 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-09-09 12:26 - 2015-08-15 07:22 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-09-09 12:26 - 2015-08-15 07:22 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-09-09 12:26 - 2015-08-15 07:21 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-09-09 12:26 - 2015-08-15 07:16 - 14451712 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-09-09 12:26 - 2015-08-15 07:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-09-09 12:26 - 2015-08-15 07:14 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-09-09 12:26 - 2015-08-15 07:12 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-09-09 12:26 - 2015-08-15 07:11 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-09-09 12:26 - 2015-08-15 07:10 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-09-09 12:26 - 2015-08-15 07:07 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-09-09 12:26 - 2015-08-15 07:04 - 12857344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-09-09 12:26 - 2015-08-15 07:02 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-09-09 12:26 - 2015-08-15 07:01 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-09-09 12:26 - 2015-08-15 07:01 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2015-09-09 12:26 - 2015-08-15 06:55 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-09-09 12:26 - 2015-08-15 06:43 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-09-09 12:26 - 2015-08-15 06:43 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-09-09 12:26 - 2015-08-15 06:39 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-09-09 12:26 - 2015-08-15 06:37 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-09-09 12:26 - 2015-08-05 19:56 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll 2015-09-09 12:26 - 2015-08-05 19:56 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll 2015-09-09 12:26 - 2015-08-05 19:56 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll 2015-09-09 12:26 - 2015-08-05 19:40 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll 2015-09-09 12:26 - 2015-07-15 05:17 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2015-09-09 12:26 - 2015-07-15 04:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2015-09-09 12:26 - 2015-07-09 19:58 - 01632256 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll 2015-09-09 12:26 - 2015-07-09 19:58 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll 2015-09-09 12:26 - 2015-07-09 19:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll 2015-09-09 12:26 - 2015-07-09 19:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll 2015-09-09 12:24 - 2015-08-27 20:18 - 02004480 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2015-09-09 12:24 - 2015-07-23 02:06 - 05568960 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-09-09 12:24 - 2015-07-23 02:06 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-09-09 12:24 - 2015-07-23 02:06 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-09-09 12:24 - 2015-07-23 02:03 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2015-09-09 12:24 - 2015-07-23 02:03 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2015-09-09 12:24 - 2015-07-23 02:03 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2015-09-09 12:24 - 2015-07-23 02:03 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2015-09-09 12:24 - 2015-07-23 02:03 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2015-09-09 12:24 - 2015-07-23 02:02 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-09-09 12:24 - 2015-07-23 02:02 - 01390592 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll 2015-09-09 12:24 - 2015-07-23 02:02 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2015-09-09 12:24 - 2015-07-23 02:02 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2015-09-09 12:24 - 2015-07-23 02:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2015-09-09 12:24 - 2015-07-23 02:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2015-09-09 12:24 - 2015-07-23 02:02 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-09-09 12:24 - 2015-07-23 02:02 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2015-09-09 12:24 - 2015-07-23 02:02 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2015-09-09 12:24 - 2015-07-23 02:02 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-09-09 12:24 - 2015-07-23 02:02 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-09-09 12:24 - 2015-07-23 02:02 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-09-09 12:24 - 2015-07-23 02:02 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2015-09-09 12:24 - 2015-07-23 02:02 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2015-09-09 12:24 - 2015-07-23 02:02 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2015-09-09 12:24 - 2015-07-23 02:02 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2015-09-09 12:24 - 2015-07-23 02:02 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2015-09-09 12:24 - 2015-07-23 02:02 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2015-09-09 12:24 - 2015-07-23 02:02 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2015-09-09 12:24 - 2015-07-23 02:02 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2015-09-09 12:24 - 2015-07-23 02:02 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2015-09-09 12:24 - 2015-07-23 02:02 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-09-09 12:24 - 2015-07-23 02:02 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2015-09-09 12:24 - 2015-07-23 02:02 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2015-09-09 12:24 - 2015-07-23 02:01 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2015-09-09 12:24 - 2015-07-23 02:01 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-09-09 12:24 - 2015-07-23 02:01 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2015-09-09 12:24 - 2015-07-23 01:58 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2015-09-09 12:24 - 2015-07-23 01:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-09-09 12:24 - 2015-07-23 01:52 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2015-09-09 12:24 - 2015-07-23 01:52 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2015-09-09 12:24 - 2015-07-23 01:52 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2015-09-09 12:24 - 2015-07-23 01:52 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2015-09-09 12:24 - 2015-07-23 01:52 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2015-09-09 12:24 - 2015-07-23 01:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2015-09-09 12:24 - 2015-07-23 01:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2015-09-09 12:24 - 2015-07-23 01:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2015-09-09 12:24 - 2015-07-23 01:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2015-09-09 12:24 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-09-09 12:24 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2015-09-09 12:24 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2015-09-09 12:24 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2015-09-09 12:24 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2015-09-09 12:24 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2015-09-09 12:24 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2015-09-09 12:24 - 2015-07-23 01:51 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-09-09 12:24 - 2015-07-22 19:57 - 03989952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2015-09-09 12:24 - 2015-07-22 19:57 - 03934656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2015-09-09 12:24 - 2015-07-22 19:54 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2015-09-09 12:24 - 2015-07-22 19:53 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2015-09-09 12:24 - 2015-07-22 19:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2015-09-09 12:24 - 2015-07-22 19:53 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-09-09 12:24 - 2015-07-22 19:53 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2015-09-09 12:24 - 2015-07-22 19:53 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-09-09 12:24 - 2015-07-22 19:53 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2015-09-09 12:24 - 2015-07-22 19:53 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2015-09-09 12:24 - 2015-07-22 19:53 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2015-09-09 12:24 - 2015-07-22 19:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2015-09-09 12:24 - 2015-07-22 19:53 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll 2015-09-09 12:24 - 2015-07-22 19:53 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2015-09-09 12:24 - 2015-07-22 19:53 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2015-09-09 12:24 - 2015-07-22 19:53 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2015-09-09 12:24 - 2015-07-22 19:52 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2015-09-09 12:24 - 2015-07-22 19:52 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2015-09-09 12:24 - 2015-07-22 19:52 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2015-09-09 12:24 - 2015-07-22 19:52 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2015-09-09 12:24 - 2015-07-22 19:52 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2015-09-09 12:24 - 2015-07-22 19:52 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2015-09-09 12:24 - 2015-07-22 19:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2015-09-09 12:24 - 2015-07-22 19:47 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2015-09-09 12:24 - 2015-07-22 19:46 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-09-09 12:24 - 2015-07-22 19:42 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-09-09 12:24 - 2015-07-22 19:42 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2015-09-09 12:24 - 2015-07-22 19:42 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2015-09-09 12:24 - 2015-07-22 19:42 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2015-09-09 12:24 - 2015-07-22 19:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2015-09-09 12:24 - 2015-07-22 19:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2015-09-09 12:24 - 2015-07-22 19:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2015-09-09 12:24 - 2015-07-22 19:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2015-09-09 12:24 - 2015-07-22 19:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2015-09-09 12:24 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2015-09-09 12:24 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2015-09-09 12:24 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2015-09-09 12:24 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2015-09-09 12:24 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2015-09-09 12:24 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2015-09-09 12:24 - 2015-07-22 18:48 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll 2015-09-09 12:24 - 2015-07-22 18:45 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2015-09-09 12:24 - 2015-07-22 18:44 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2015-09-09 12:24 - 2015-07-22 18:44 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2015-09-09 12:24 - 2015-07-22 18:34 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2015-09-09 12:24 - 2015-07-22 18:34 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2015-09-09 12:24 - 2015-07-22 18:31 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2015-09-09 12:24 - 2015-07-22 18:31 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2015-09-09 12:24 - 2015-07-22 18:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2015-09-09 12:24 - 2015-07-22 18:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2015-09-09 12:24 - 2015-06-25 12:06 - 00115136 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2015-09-09 12:24 - 2015-06-25 12:01 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2015-09-09 12:24 - 2015-06-25 12:01 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2015-09-09 12:24 - 2015-06-25 11:44 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2015-09-09 12:23 - 2015-09-02 05:04 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2015-09-09 12:23 - 2015-09-02 05:04 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2015-09-09 12:23 - 2015-09-02 05:04 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2015-09-09 12:23 - 2015-09-02 05:04 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2015-09-09 12:23 - 2015-09-02 04:48 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2015-09-09 12:23 - 2015-09-02 04:48 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2015-09-09 12:23 - 2015-09-02 04:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2015-09-09 12:23 - 2015-09-02 04:47 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2015-09-09 12:23 - 2015-09-02 03:51 - 03209216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-09-09 12:23 - 2015-09-02 03:47 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2015-09-09 12:23 - 2015-09-02 03:33 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2015-09-09 12:23 - 2015-08-27 20:18 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2015-09-09 12:23 - 2015-08-27 20:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll 2015-09-09 12:23 - 2015-08-27 20:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2015-09-09 12:23 - 2015-08-27 19:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2015-09-09 12:23 - 2015-08-27 19:58 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2015-09-09 12:23 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll 2015-09-09 12:23 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2015-09-09 12:23 - 2015-08-26 20:07 - 03165696 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-09-09 12:23 - 2015-08-26 20:07 - 02606080 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-09-09 12:23 - 2015-08-26 20:07 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-09-09 12:23 - 2015-08-26 20:07 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-09-09 12:23 - 2015-08-26 20:07 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-09-09 12:23 - 2015-08-26 20:07 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-09-09 12:23 - 2015-08-26 20:07 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-09-09 12:23 - 2015-08-26 20:06 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-09-09 12:23 - 2015-08-26 20:06 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2015-09-09 12:23 - 2015-08-26 20:06 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-09-09 12:23 - 2015-08-26 20:06 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll 2015-09-09 12:23 - 2015-08-26 19:56 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2015-09-09 12:23 - 2015-08-26 19:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2015-09-09 12:23 - 2015-08-26 19:56 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2015-09-09 12:23 - 2015-08-26 19:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2015-09-09 12:23 - 2015-08-26 19:55 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2015-09-09 12:23 - 2015-08-04 20:03 - 00692672 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2015-09-09 12:23 - 2015-08-04 20:00 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2015-09-09 12:23 - 2015-08-04 19:56 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2015-09-09 12:23 - 2015-08-04 19:56 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2015-09-09 12:23 - 2015-08-04 19:56 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2015-09-09 12:23 - 2015-08-04 19:55 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2015-09-09 12:23 - 2015-08-04 19:55 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2015-09-09 12:23 - 2015-08-04 19:47 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll 2015-09-09 12:23 - 2015-08-04 18:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2015-09-08 23:26 - 2015-09-08 23:26 - 00266216 _____ C:\Users\302-\Downloads\K-391 - Everybody [NCS Release].mp3.sfk 2015-09-08 23:24 - 2015-09-08 23:24 - 00353080 _____ C:\Users\302-\Downloads\Jim Yosef - Firefly [NCS Release].mp3.sfk 2015-09-08 23:24 - 2015-09-08 23:24 - 00263408 _____ C:\Users\302-\Downloads\William Ekh - Adventures (feat. Alexa Lusader) [NCS Release].mp3.sfk 2015-09-08 22:17 - 2015-09-08 22:20 - 00219664 _____ C:\Users\302-\Downloads\Your_Voice_Is_American.mp3.sfk 2015-09-08 22:17 - 2015-09-08 22:20 - 00115304 _____ C:\Users\302-\Downloads\Burnt.mp3.sfk 2015-09-07 22:28 - 2015-09-07 22:38 - 02073750 _____ C:\Users\302-\Downloads\SETN2.xcf 2015-09-07 22:04 - 2015-09-07 22:10 - 00228920 _____ C:\Users\302-\Downloads\Different Heaven - Nekozilla [NCS Release].mp3.sfk 2015-09-07 19:31 - 2015-09-07 19:31 - 90479094 _____ C:\Users\302-\Downloads\Revo Aufnahme.rar 2015-09-07 17:52 - 2015-09-07 17:52 - 27599935 _____ C:\Users\302-\Downloads\Sphax Max Edit.zip 2015-09-06 23:02 - 2015-09-06 23:06 - 00002408 _____ C:\Users\302-\Downloads\Censor Beep Sound Effect.mp3.sfk 2015-09-06 22:57 - 2015-09-06 23:01 - 03080840 _____ C:\Users\302-\Downloads\Best of No Copyright Sounds - February 2015 - Gaming Mix - NCS PixelMusic.mp3.sfk 2015-09-06 22:36 - 2015-09-06 22:36 - 00001904 _____ C:\Users\302-\Downloads\WINDOWS XP ERROR SOUND.wmv.mp3.sfk 2015-09-06 22:30 - 2015-09-06 22:33 - 00020800 _____ C:\Users\302-\Downloads\Whoosh Hits Sound Effect In High Quality.mp3.sfk 2015-09-06 02:09 - 2015-09-06 02:09 - 00000000 ____D C:\Users\302-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Blender 2015-09-06 02:09 - 2015-09-06 02:09 - 00000000 ____D C:\Program Files\Blender Foundation 2015-09-06 02:08 - 2015-09-06 02:09 - 83956748 _____ C:\Users\302-\Downloads\blender-2.75a-windows64.msi 2015-09-06 01:28 - 2015-09-06 01:28 - 04382072 _____ C:\Users\302-\Downloads\Blender_Minecraft_Rig.rar 2015-09-06 00:18 - 2015-09-06 00:31 - 00000000 ____D C:\Users\302-\AppData\Roaming\Minecraft Skin Viewer 2015-09-06 00:18 - 2015-09-06 00:18 - 00155858 _____ C:\Users\302-\Downloads\Minecraft Skin Viewer.zip 2015-09-06 00:17 - 2015-09-06 00:17 - 00889416 _____ (Microsoft Corporation) C:\Users\302-\Downloads\dotNetFx40_Full_setup.exe 2015-09-05 23:10 - 2015-09-05 23:10 - 06103007 _____ C:\Users\302-\Downloads\SETN.xcf 2015-09-05 23:08 - 2015-09-05 23:08 - 00120462 _____ C:\Users\302-\Downloads\war_is_over.zip 2015-09-05 23:08 - 2015-09-05 23:08 - 00000000 ____D C:\Users\302-\Downloads\war_is_over 2015-09-05 21:59 - 2015-09-05 22:00 - 00308800 _____ C:\Users\302-\Downloads\Pride_Before_the_Fall.mp3.sfk 2015-09-05 18:32 - 2015-09-05 18:32 - 00431408 _____ C:\Users\302-\Downloads\FACEPALM [HD] (1).mp4 2015-09-05 18:32 - 2015-09-05 18:32 - 00002880 _____ C:\Users\302-\Downloads\FACEPALM [HD].mp4.sfk 2015-09-05 18:26 - 2015-09-05 18:29 - 00388904 _____ C:\Users\302-\Downloads\Ahrix - Nova [NCS Release].mp3.sfk 2015-09-05 17:11 - 2015-09-05 17:12 - 00001116 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk 2015-09-05 17:11 - 2015-09-05 17:11 - 00000000 ____D C:\Program Files\GIMP 2 2015-09-05 17:09 - 2015-09-05 17:10 - 91931728 _____ (The GIMP Team ) C:\Users\302-\Downloads\gimp-2.8.14-setup-1.exe 2015-09-05 17:03 - 2015-09-05 17:03 - 00254887 _____ C:\Users\302-\Downloads\teb.xcf 2015-09-05 16:34 - 2015-09-05 16:34 - 00782840 _____ C:\Windows\Minidump\090515-17284-01.dmp 2015-09-04 19:48 - 2015-09-04 19:52 - 00368200 _____ C:\Users\302-\Downloads\Different Heaven & EH!DE - My Heart [NCS Release].mp3.sfk 2015-09-04 18:50 - 2015-09-04 19:01 - 00004744 _____ C:\Users\302-\Downloads\Ba Dum Tss!.mp3.sfk 2015-09-04 18:39 - 2015-09-04 18:41 - 00095248 _____ C:\Users\302-\Downloads\Ditch_Diggin.mp3.sfk 2015-09-04 18:13 - 2015-09-04 18:13 - 32596498 _____ C:\Users\302-\Downloads\Österreichische Begriffe.rar 2015-09-04 15:06 - 2015-03-27 18:50 - 04938520 _____ (Piriform Ltd) C:\Users\302-\Desktop\recuva64.exe 2015-09-04 15:05 - 2015-09-04 15:05 - 04000946 _____ C:\Users\302-\Downloads\rcsetup1.5.2_slim.zip 2015-09-03 22:09 - 2015-09-03 22:21 - 00006472 _____ C:\Users\302-\Downloads\Sad Trombone Wah Wah Wah Fail Sound Effect.mp3.sfk 2015-09-03 22:01 - 2015-09-03 22:01 - 108800816 _____ (Apple Inc.) C:\Users\302-\Downloads\iTunesSetup.exe 2015-09-03 20:42 - 2015-09-03 21:21 - 00181720 _____ C:\Users\302-\Downloads\Drop_and_Roll.mp3.sfk 2015-09-03 15:45 - 2015-09-03 15:45 - 00918336 _____ C:\Windows\Minidump\090315-18564-01.dmp 2015-09-03 01:56 - 2015-09-03 01:57 - 00013864 _____ C:\Users\302-\Downloads\Guerilla-Krieg #1 [Rückrunde] -- Black Ops 1 -- Admiral E -- gegen fifasuchtla [German - HD].mp4.sfk 2015-09-03 01:56 - 2015-09-03 01:56 - 03551842 _____ C:\Users\302-\Downloads\Guerilla-Krieg #1 [Rückrunde] -- Black Ops 1 -- Admiral E -- gegen fifasuchtla [German - HD].mp4 2015-09-02 17:44 - 2015-09-02 17:44 - 00001201 _____ C:\Users\302-\Desktop\Uplay.lnk 2015-09-02 17:44 - 2015-09-02 17:44 - 00000000 ____D C:\Users\302-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft 2015-09-02 17:44 - 2015-09-02 17:44 - 00000000 ____D C:\Users\302-\AppData\Local\Ubisoft Game Launcher 2015-09-02 17:44 - 2015-09-02 17:44 - 00000000 ____D C:\Program Files (x86)\Ubisoft 2015-09-01 22:15 - 2015-09-01 22:15 - 00276728 _____ C:\Windows\Minidump\090115-23150-01.dmp 2015-08-31 22:18 - 2015-08-31 22:18 - 00000000 ____D C:\Users\302-\AppData\Roaming\MPEG Streamclip 2015-08-31 22:12 - 2015-08-31 22:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime 2015-08-31 22:12 - 2015-08-31 22:12 - 00000000 ____D C:\Program Files (x86)\QuickTime 2015-08-31 21:37 - 2015-08-31 21:46 - 03223256 _____ C:\Users\Public\Viele Hacker, gutes Gameplay am Ende 36 Kills - Kopie.mp3.sfk 2015-08-31 20:50 - 2015-08-31 20:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free MP4 MP3 Converter 2015-08-31 20:50 - 2015-08-31 20:50 - 00000000 ____D C:\Program Files (x86)\free-mp4-mp3-converter 2015-08-29 14:18 - 2015-08-29 14:18 - 00001216 _____ C:\Users\302-\Desktop\Movie Studio Platinum 12.0 (64-bit).lnk 2015-08-29 14:11 - 2015-08-29 14:11 - 00715038 _____ C:\Windows\unins000.exe 2015-08-29 14:10 - 2015-08-29 14:11 - 00003448 _____ C:\Windows\unins000.dat 2015-08-29 14:10 - 2011-12-07 19:37 - 00148992 _____ ( ) C:\Windows\system32\lagarith.dll 2015-08-29 14:10 - 2011-12-07 19:32 - 00216064 _____ ( ) C:\Windows\SysWOW64\lagarith.dll 2015-08-27 15:30 - 2015-08-27 15:30 - 00782872 _____ C:\Windows\Minidump\082715-18002-01.dmp 2015-08-26 03:00 - 2015-08-26 03:00 - 00000222 _____ C:\Users\302-\Desktop\Call of Duty Black Ops III Beta.url 2015-08-26 01:51 - 2015-08-26 01:51 - 00781856 _____ C:\Windows\Minidump\082615-33774-01.dmp 2015-08-25 13:19 - 2015-08-25 13:19 - 00000000 ____D C:\Users\302-\AppData\Local\Dxtory Software 2015-08-25 13:19 - 2015-08-25 13:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dxtory2.0 2015-08-25 13:19 - 2015-08-25 13:19 - 00000000 ____D C:\Program Files (x86)\ExKode 2015-08-25 13:19 - 2014-06-08 22:14 - 02610736 _____ (ExKode Co. Ltd.) C:\Windows\system32\DxtoryCodec.dll 2015-08-25 13:19 - 2014-06-08 22:14 - 02508336 _____ (ExKode Co. Ltd.) C:\Windows\SysWOW64\DxtoryCodec.dll 2015-08-24 22:46 - 2015-09-21 20:24 - 00000000 ____D C:\Users\302-\Documents\Movie Studio Platinum 12.0 Projekte 2015-08-24 22:46 - 2015-08-24 22:46 - 00000000 ____D C:\Users\302-\AppData\Roaming\Publish Providers 2015-08-24 22:43 - 2015-08-24 22:46 - 00000000 ____D C:\Users\302-\AppData\Local\Sony 2015-08-24 22:43 - 2015-08-24 22:44 - 00000000 ____D C:\ProgramData\Sony 2015-08-24 22:43 - 2015-08-24 22:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony 2015-08-24 22:43 - 2015-08-24 22:44 - 00000000 ____D C:\Program Files (x86)\Sony 2015-08-24 22:43 - 2015-08-24 22:43 - 00000000 ____D C:\Program Files\Sony 2015-08-24 22:41 - 2015-08-24 23:50 - 00000000 ____D C:\Users\302-\AppData\Roaming\Sony 2015-08-22 00:14 - 2009-05-04 14:55 - 00040208 _____ (CACE Technologies) C:\Windows\SysWOW64\Drivers\aztech_npf64.sys 2015-08-22 00:13 - 2015-08-22 00:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HomePlugAV Utility ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-09-21 23:54 - 2014-08-25 22:40 - 00000000 ____D C:\Users\302-\AppData\Roaming\Spotify 2015-09-21 23:54 - 2010-11-21 08:50 - 00700130 _____ C:\Windows\system32\perfh007.dat 2015-09-21 23:54 - 2010-11-21 08:50 - 00149768 _____ C:\Windows\system32\perfc007.dat 2015-09-21 23:54 - 2009-07-14 07:13 - 01622706 _____ C:\Windows\system32\PerfStringBackup.INI 2015-09-21 23:52 - 2014-08-22 18:30 - 01117429 _____ C:\Windows\WindowsUpdate.log 2015-09-21 23:49 - 2015-02-16 22:07 - 00000000 ____D C:\ProgramData\Origin 2015-09-21 23:49 - 2015-01-04 17:57 - 00000000 ____D C:\Users\302-\AppData\Roaming\Raptr 2015-09-21 23:49 - 2014-12-24 23:57 - 00000000 ____D C:\Users\302-\AppData\Local\CrashDumps 2015-09-21 23:49 - 2014-08-31 16:05 - 00000000 ____D C:\Users\302-\AppData\Roaming\TS3Client 2015-09-21 23:49 - 2014-08-25 22:42 - 00000000 ____D C:\Users\302-\AppData\Roaming\Skype 2015-09-21 23:49 - 2014-08-25 22:41 - 00000000 ____D C:\Users\302-\AppData\Local\Spotify 2015-09-21 23:49 - 2014-08-25 16:31 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-09-21 23:48 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-09-21 23:48 - 2009-07-14 06:51 - 00087077 _____ C:\Windows\setupact.log 2015-09-21 23:44 - 2014-11-15 22:29 - 00000000 ____D C:\Fraps 2015-09-21 23:38 - 2015-08-04 20:16 - 00000000 ____D C:\Users\302-\AppData\Roaming\Audacity 2015-09-21 23:21 - 2014-08-25 16:31 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-09-21 18:53 - 2015-05-12 16:23 - 00000000 ____D C:\Users\302-\AppData\Local\gtk-2.0 2015-09-21 18:53 - 2015-05-12 16:20 - 00000000 ____D C:\Users\302-\.gimp-2.8 2015-09-21 18:08 - 2014-08-26 17:12 - 00000000 ____D C:\Program Files (x86)\Steam 2015-09-21 14:01 - 2009-07-14 06:45 - 00028704 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-09-21 14:01 - 2009-07-14 06:45 - 00028704 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-09-21 13:52 - 2010-11-21 05:47 - 00596136 _____ C:\Windows\PFRO.log 2015-09-19 19:34 - 2010-11-21 09:00 - 00000000 ____D C:\Windows\ShellNew 2015-09-19 17:16 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini 2015-09-19 17:15 - 2014-12-31 17:53 - 00000000 ____D C:\Program Files (x86)\Fitbit Connect 2015-09-19 14:57 - 2014-08-26 23:59 - 00000000 ____D C:\Users\302-\Desktop\Shepherd of Fire 2015-09-19 13:17 - 2009-07-14 06:45 - 00309464 _____ C:\Windows\system32\FNTCACHE.DAT 2015-09-18 17:26 - 2014-08-25 16:20 - 00070064 _____ C:\Users\302-\AppData\Local\GDIPFONTCACHEV1.DAT 2015-09-18 03:02 - 2014-11-15 23:11 - 00000000 ____D C:\Users\302-\AppData\Roaming\vlc 2015-09-16 22:00 - 2014-08-27 00:21 - 00000000 ____D C:\Windows\Minidump 2015-09-16 00:41 - 2014-08-25 16:20 - 00000000 ____D C:\Users\302- 2015-09-14 20:16 - 2014-08-25 16:31 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2015-09-14 20:16 - 2014-08-25 16:31 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2015-09-13 01:17 - 2015-05-12 16:20 - 00000000 ____D C:\Users\302-\.thumbnails 2015-09-10 13:53 - 2014-08-25 16:31 - 00000000 ____D C:\Users\302-\AppData\Local\Google 2015-09-09 23:07 - 2010-11-21 09:00 - 00000000 ____D C:\Program Files\Windows Journal 2015-09-09 23:07 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2015-09-09 23:05 - 2015-04-14 22:31 - 00000000 ____D C:\Windows\system32\MRT 2015-09-02 14:00 - 2015-02-16 22:07 - 00000000 ____D C:\Program Files (x86)\Origin 2015-09-01 11:46 - 2014-08-22 18:36 - 00000000 ____D C:\ProgramData\Package Cache 2015-08-31 22:14 - 2014-10-06 19:52 - 00000000 ____D C:\Users\302-\AppData\Local\Apple Computer 2015-08-31 00:38 - 2015-04-25 21:41 - 00000080 _____ C:\Users\302-\AppData\Local剜捯獫慴慇敭屳呇⁁屖湥楴汴浥湥湩潦 2015-08-31 00:31 - 2015-04-25 19:43 - 00000000 ____D C:\Program Files (x86)\Rockstar Games 2015-08-31 00:31 - 2015-04-25 19:42 - 00000000 ____D C:\Program Files\Rockstar Games 2015-08-30 23:09 - 2015-02-16 22:08 - 00000000 ____D C:\Users\302-\AppData\Roaming\Origin 2015-08-29 16:52 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default 2015-08-26 18:37 - 2015-04-14 22:31 - 134753440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-08-26 17:13 - 2015-08-08 00:01 - 00001134 _____ C:\Users\Public\Desktop\Game Capture HD.lnk 2015-08-26 14:20 - 2014-08-26 23:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2015-08-26 03:00 - 2014-08-26 17:19 - 00000000 ____D C:\Users\302-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2015-08-25 12:26 - 2014-08-31 16:05 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client 2015-08-24 18:46 - 2015-08-06 01:58 - 00000000 ____D C:\Users\302-\AppData\Local\Windows Live 2015-08-22 02:14 - 2015-08-19 21:33 - 00000000 ____D C:\Users\302-\AppData\Local\FluxSoftware 2015-08-22 00:13 - 2014-08-22 18:37 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2015-08-20 14:49 - 2015-08-19 02:49 - 0000040 ____H () C:\Program Files (x86)\2fe72cf2.tmp 2015-09-21 18:53 - 2015-09-21 18:53 - 0076652 _____ () C:\Users\302-\AppData\Local\recently-used.xbel 2014-08-22 18:39 - 2014-08-22 18:39 - 0000000 ____H () C:\ProgramData\DP45977C.lfl Dateien, die verschoben oder gelöscht werden sollten: ==================== C:\Users\302-\worldpainter_64_1.11.1.exe Einige Dateien in TEMP: ==================== C:\Users\302-\AppData\Local\Temp\avgnt.exe ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2015-09-11 00:53 ==================== Ende von FRST.txt ============================ |
|
21.09.2015, 22:58
| #17 |
| | Avira - Minecraft.exe enthält TR/agent?Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:15-09-2015
durchgeführt von 302- (2015-09-21 23:57:00)
Gestartet von C:\Users\302-\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2014-08-25 14:20:23)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
302- (S-1-5-21-570197401-3978400442-3683679341-1000 - Administrator - Enabled) => C:\Users\302-
Administrator (S-1-5-21-570197401-3978400442-3683679341-500 - Administrator - Disabled)
Gast (S-1-5-21-570197401-3978400442-3683679341-501 - Limited - Disabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Adobe Reader XI (11.0.12) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.12 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (HKLM\...\{7E5DC2C5-115A-322B-976C-219237FAED66}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version: - Bohemia Interactive)
Audacity 2.1.1 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.1 - Audacity Team)
Avira (HKLM-x32\...\{70e83cd8-4bd5-4039-ab5a-6b94a8abb641}) (Version: 1.1.21.25162 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.21.25162 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.12.420 - Avira Operations GmbH & Co. KG)
Battlefield 4™ CTE (HKLM-x32\...\{551A08D1-B60E-4DED-9B67-C3B38258CCA3}) (Version: 1.0.2.33598 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.6.2 - EA Digital Illusions CE AB)
Besiege (HKLM-x32\...\Steam App 346010) (Version: - Spiderling Studios)
Bing Bar (HKLM-x32\...\{08234a0d-cf39-4dca-99f0-0c5cb496da81}) (Version: 6.0.2282.0 - Microsoft Corporation)
Blender (HKLM\...\{EA3C8A99-1565-44FF-89FC-926CEEB623B5}) (Version: 2.75.1 - Blender Foundation)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Call of Duty: Black Ops II - Multiplayer (HKLM-x32\...\Steam App 202990) (Version: - Treyarch)
Call of Duty: Black Ops II - Zombies (HKLM-x32\...\Steam App 212910) (Version: - )
Call of Duty: Black Ops II (HKLM-x32\...\Steam App 202970) (Version: - Treyarch)
Call of Duty: Black Ops III Beta (HKLM-x32\...\Steam App 388520) (Version: - Treyarch)
Call of Duty: Modern Warfare 2 - Multiplayer (HKLM-x32\...\Steam App 10190) (Version: - Infinity Ward)
Call of Duty: Modern Warfare 2 (HKLM-x32\...\Steam App 10180) (Version: - Infinity Ward)
Call of Duty: Modern Warfare 3 - Multiplayer (HKLM-x32\...\Steam App 42690) (Version: - Infinity Ward)
Call of Duty: Modern Warfare 3 (HKLM-x32\...\Steam App 42680) (Version: - Infinity Ward)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DayZ (HKLM-x32\...\Steam App 221100) (Version: - Bohemia Interactive)
Dolby Digital Live Pack (HKLM-x32\...\Dolby Digital Live Pack) (Version: 3.03 - Creative Technology Limited)
Dota 2 (HKLM-x32\...\Steam App 570) (Version: - Valve)
DTS Connect Pack (HKLM-x32\...\DTS Connect Pack) (Version: 1.00 - Creative Technology Limited)
DVD Architect Studio 5.0 (HKLM-x32\...\{E42939AE-9660-11E2-9A0D-F04DA23A5C58}) (Version: 5.0.178 - Sony)
Dxtory version 2.0.128 (HKLM-x32\...\Dxtory2.0_is1) (Version: 2.0.128 - ExKode Co. Ltd.)
Elgato Game Capture HD (HKLM-x32\...\{BB567603-AAA6-4AAA-BFC7-5C8EC0971650}) (Version: 2.11.43.962 - Elgato Systems GmbH)
Fitbit Connect (HKLM-x32\...\{08002BE6-6476-4012-8D4B-CF0AE7C71F29}) (Version: 2.0.0.6518 - Fitbit Inc.)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - )
Free MP4 MP3 Converter 3.0.1 (HKLM-x32\...\Free MP4 MP3 Converter) (Version: 3.0.1 - ZISUN Freeware)
Game Capture HD v2.3.3.38 (HKLM-x32\...\Software_Elgato_Game Capture HD) (Version: 2.3.3.38 - Elgato Systems)
Gameforge Live 2.0.7 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.7 - Gameforge)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 45.0.2454.93 - Google Inc.)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
Grand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version: - Rockstar North)
Heroes & Generals (HKLM-x32\...\Heroes & Generals) (Version: 1.0.6.1 - Reto-Moto)
HomePlug AV Ethernet Adapter (HKLM-x32\...\{2DFC446B-8A6E-4EF3-99DF-C89E37DB156D}) (Version: - )
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.0.1204 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.0.3.1001 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.0.16 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.13 - Intel(R) Corporation) Hidden
iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
Java 8 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418051F0}) (Version: 8.0.510 - Oracle Corporation)
Java 8 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)
Lagarith Lossless Codec (1.3.27) (HKLM-x32\...\{F59AC46C-10C3-4023-882C-4212A92283B3}_is1) (Version: - )
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Metin2 (HKLM-x32\...\Metin2_is1) (Version: - Gameforge 4D GmbH)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Studio Platinum 12.0 (64-bit) (HKLM\...\{6C3C3A70-958D-11E2-B0E5-F04DA23A5C58}) (Version: 12.0.896 - Sony)
MSI Afterburner 4.1.0 (HKLM-x32\...\Afterburner) (Version: 4.1.0 - MSI Co., LTD)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.3 - Notepad++ Team)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.5.5.2850 - Electronic Arts, Inc.)
paint.net (HKLM\...\{F509C1F4-0029-49F9-B145-A4C4E8DF481A}) (Version: 4.0.3 - dotPDN LLC)
PingPlotter 4.01.2 (HKLM-x32\...\{7C20D443-1352-49AB-90D8-71CC34C50917}) (Version: 4.1.2.14 - Pingman Tools, LLC)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
puush (HKLM-x32\...\{C3592426-531E-4110-911D-BFECE2CE284B}) (Version: 1.0.0.0 - Dean Herbert)
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Raptr (HKLM-x32\...\Raptr) (Version: - )
Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 7.78.1218.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7200 - Realtek Semiconductor Corp.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.6.5 - Rockstar Games)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)
Skype™ 7.8 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.8.102 - Skype Technologies S.A.)
Sound Blaster Z-Series (HKLM-x32\...\{E48EE8B8-1CD6-4F60-AB93-7C398DAAE08E}) (Version: 1.00.21 - Creative Technology Limited)
Sound Blaster Z-Series Extras (HKLM-x32\...\{9D9DB4BA-E352-4AC8-AD2B-B10104F5AB80}) (Version: 1.0 - Creative Technology Limited)
Sound Forge Audio Studio 10.0 (HKLM-x32\...\{75B7DF80-925B-11E2-94F5-F04DA23A5C58}) (Version: 10.0.245 - Sony)
Spotify (HKU\S-1-5-21-570197401-3978400442-3683679341-1000\...\Spotify) (Version: 1.0.14.124.g4dfabc51 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TeamViewer 8 (HKLM-x32\...\TeamViewer 8) (Version: 8.0.16642 - TeamViewer)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios)
The Evil Within (HKLM-x32\...\Steam App 268050) (Version: - Tango Gameworks)
The Witcher 3: Wild Hunt (HKLM-x32\...\Steam App 292030) (Version: - CD PROJEKT RED)
Titanfall™ (HKLM-x32\...\{347EE0C3-0690-48F6-A231-53853C2A80D6}) (Version: 1.0.9.6 - Electronic Arts)
Uplay (HKLM-x32\...\Uplay) (Version: 7.4 - Ubisoft)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
War Thunder Launcher 1.0.1.397 (HKLM-x32\...\{ed8deea4-29fa-3932-9612-e2122d8a62d9}}_is1) (Version: - Gaijin Entertainment)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)
World of Warships (HKU\S-1-5-21-570197401-3978400442-3683679341-1000\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C814eu}_is1) (Version: - Wargaming.net)
WorldPainter 1.11.1 (HKLM\...\4144-4862-0472-7103) (Version: 1.11.1 - pepsoft.org)
Worms Ultimate Mayhem (HKLM-x32\...\Steam App 70600) (Version: - Team17 Software Ltd.)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Wiederherstellungspunkte =========================
20-09-2015 22:08:20 Installed Minecraft
21-09-2015 23:45:09 Removed Minecraft
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 04:34 - 2015-09-19 17:16 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {1B4C5D0A-96AC-4DC6-8FCE-70B47C7D3C0D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {2A7C7229-544E-4E0D-A68E-81A6F296FE6C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {44D533B7-9979-4838-91D5-B9948CEDB889} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)
Task: {504D497B-CDB8-4686-ABBD-EE02DDEB12F3} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {71596BB6-953D-4B48-845A-BC95605F571C} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser
Task: {778A3B73-50D3-4D60-872B-5A2F7239F585} - System32\Tasks\{05266ED9-F493-426B-9A0D-787DD87292F2} => pcalua.exe -a C:\Users\302-\Desktop\forge-1.7.2-10.12.2.1121-installer-win.exe -d C:\Users\302-\Desktop
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-02-17 00:44 - 2015-02-17 00:44 - 00076152 _____ () C:\Windows\system32\PnkBstrA.exe
2014-05-12 11:49 - 2014-05-12 11:49 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2012-01-10 14:41 - 2015-08-05 01:19 - 00568904 _____ () C:\Program Files (x86)\puush\puush.exe
2014-02-28 11:14 - 2015-08-25 12:26 - 00179176 _____ () C:\Program Files\TeamSpeak 3 Client\quazip.dll
2014-08-04 15:43 - 2015-08-25 12:26 - 00103400 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\directsound_win64.dll
2014-08-04 15:43 - 2015-08-25 12:26 - 00108008 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win64.dll
2014-08-04 15:46 - 2015-08-25 12:26 - 00312296 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\clientquery_plugin.dll
2014-08-04 15:46 - 2015-08-25 12:26 - 00483816 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll
2014-06-05 15:48 - 2015-08-25 12:26 - 00318976 _____ () C:\Program Files\TeamSpeak 3 Client\ssleay32.dll
2014-06-05 15:48 - 2015-08-25 12:26 - 01718784 _____ () C:\Program Files\TeamSpeak 3 Client\LIBEAY32.dll
2014-07-31 12:16 - 2014-07-31 12:16 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 14:05 - 2014-10-11 14:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2015-02-16 22:08 - 2015-09-02 14:00 - 01016832 _____ () C:\Program Files (x86)\Origin\platforms\qwindows.dll
2015-02-16 22:08 - 2015-09-02 14:00 - 00028160 _____ () C:\Program Files (x86)\Origin\imageformats\qgif.dll
2015-02-16 22:08 - 2015-09-02 14:00 - 00029696 _____ () C:\Program Files (x86)\Origin\imageformats\qico.dll
2015-02-16 22:08 - 2015-09-02 14:00 - 00256000 _____ () C:\Program Files (x86)\Origin\imageformats\qjpeg.dll
2015-02-16 22:08 - 2015-09-02 14:00 - 00266240 _____ () C:\Program Files (x86)\Origin\imageformats\qmng.dll
2015-02-16 22:08 - 2015-09-02 14:00 - 00023552 _____ () C:\Program Files (x86)\Origin\imageformats\qtga.dll
2015-02-16 22:08 - 2015-09-02 14:00 - 00346112 _____ () C:\Program Files (x86)\Origin\imageformats\qtiff.dll
2015-02-16 22:08 - 2015-09-02 14:00 - 00023552 _____ () C:\Program Files (x86)\Origin\imageformats\qwbmp.dll
2015-09-21 23:48 - 2014-08-27 15:00 - 00052472 _____ () C:\Users\302-\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
2012-11-23 09:04 - 2012-11-23 09:04 - 00741376 _____ () C:\Program Files (x86)\Creative\Sound Blaster Z-Series\Sound Blaster Z-Series Control Panel\de-DE\SBZ.resources.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00087040 _____ () C:\Program Files (x86)\Raptr\_ctypes.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00043008 _____ () C:\Program Files (x86)\Raptr\_socket.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00805376 _____ () C:\Program Files (x86)\Raptr\_ssl.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 05812736 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtGui.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00067584 _____ () C:\Program Files (x86)\Raptr\sip.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 01662464 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtCore.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00494592 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtNetwork.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00096256 _____ () C:\Program Files (x86)\Raptr\win32api.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00110592 _____ () C:\Program Files (x86)\Raptr\pywintypes26.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00010240 _____ () C:\Program Files (x86)\Raptr\select.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00356864 _____ () C:\Program Files (x86)\Raptr\_hashlib.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00036352 _____ () C:\Program Files (x86)\Raptr\win32process.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00111104 _____ () C:\Program Files (x86)\Raptr\win32file.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00044544 _____ () C:\Program Files (x86)\Raptr\_sqlite3.pyd
2011-02-15 20:17 - 2011-02-15 20:17 - 00417501 _____ () C:\Program Files (x86)\Raptr\sqlite3.dll
2010-11-23 00:57 - 2010-11-23 00:57 - 00167936 _____ () C:\Program Files (x86)\Raptr\win32gui.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00313856 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtWebKit.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00127488 _____ () C:\Program Files (x86)\Raptr\pyexpat.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00009216 _____ () C:\Program Files (x86)\Raptr\winsound.pyd
2014-08-14 02:37 - 2014-08-14 02:37 - 00113171 _____ () C:\Program Files (x86)\Raptr\libvlc.dll
2014-08-14 02:37 - 2014-08-14 02:37 - 02396691 _____ () C:\Program Files (x86)\Raptr\libvlccore.dll
2013-11-21 02:05 - 2013-11-21 02:05 - 00256000 _____ () C:\Program Files (x86)\Raptr\amd_ags.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00583680 _____ () C:\Program Files (x86)\Raptr\unicodedata.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00354304 _____ () C:\Program Files (x86)\Raptr\pythoncom26.dll
2010-11-23 00:57 - 2010-11-23 00:57 - 00263168 _____ () C:\Program Files (x86)\Raptr\win32com.shell.shell.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00324608 _____ () C:\Program Files (x86)\Raptr\PIL._imaging.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00141312 _____ () C:\Program Files (x86)\Raptr\gobject._gobject.pyd
2014-06-18 02:56 - 2014-06-18 02:56 - 02717595 _____ () C:\Program Files (x86)\Raptr\heliotrope._purple.pyd
2011-02-15 20:17 - 2011-02-15 20:17 - 01213633 _____ () C:\Program Files (x86)\Raptr\libxml2-2.dll
2010-11-23 01:06 - 2010-11-23 01:06 - 00055808 _____ () C:\Program Files (x86)\Raptr\zlib1.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 00495680 _____ () C:\Program Files (x86)\Raptr\plugins\libaim.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 01183699 _____ () C:\Program Files (x86)\Raptr\liboscar.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 00483306 _____ () C:\Program Files (x86)\Raptr\plugins\libicq.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00655356 _____ () C:\Program Files (x86)\Raptr\plugins\libirc.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 01306387 _____ () C:\Program Files (x86)\Raptr\plugins\libmsn.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 00565461 _____ () C:\Program Files (x86)\Raptr\plugins\libxmpp.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 01640221 _____ () C:\Program Files (x86)\Raptr\libjabber.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 00506276 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoo.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 01053730 _____ () C:\Program Files (x86)\Raptr\libymsg.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00497782 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoojp.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00603326 _____ () C:\Program Files (x86)\Raptr\plugins\ssl-nss.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00474199 _____ () C:\Program Files (x86)\Raptr\plugins\ssl.dll
2015-09-16 03:22 - 2015-09-12 02:22 - 01501512 _____ () C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.93\libglesv2.dll
2015-09-16 03:22 - 2015-09-12 02:22 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.93\libegl.dll
2015-03-15 18:25 - 2015-09-18 00:36 - 45067320 _____ () C:\Users\302-\AppData\Roaming\Spotify\libcef.dll
2015-03-15 18:25 - 2015-09-18 00:36 - 01649208 _____ () C:\Users\302-\AppData\Roaming\Spotify\libglesv2.dll
2015-03-15 18:25 - 2015-09-18 00:36 - 00080952 _____ () C:\Users\302-\AppData\Roaming\Spotify\libegl.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\Windows\Temp:$DATA
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-570197401-3978400442-3683679341-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\302-\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{A21238D4-6021-4579-9743-65D460373C02}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
FirewallRules: [{B86369D1-7369-43F7-8FB8-9DC16EF5136F}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
FirewallRules: [{13EAD04A-BF46-4FAB-922E-BDA20453D36D}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
FirewallRules: [{307A1DD2-E22F-4C72-B4EE-03A5C1937828}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
FirewallRules: [{41561678-51CD-4CCF-AB49-1562FB9B997C}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{AE499744-5198-4AB8-BB00-C38151141BCA}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{F2767255-905A-418B-850E-9C52D994230E}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{60D25865-1D5E-49A0-8D2C-73E550BCF002}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{DAB37258-4657-4F53-B6C4-E3639E692683}C:\users\302-\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\302-\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{5AE2ECF8-941E-49A7-9CA0-8D15C3C17D60}C:\users\302-\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\302-\appdata\roaming\spotify\spotify.exe
FirewallRules: [{0D49A9F8-89B1-4B94-96C0-E6BF08C2ED57}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4mp.exe
FirewallRules: [{F65B0709-096C-4A94-A461-A27192A87ED4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4mp.exe
FirewallRules: [{15A6CF55-7638-46BB-B54F-450A4AFDFD7B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe
FirewallRules: [{1D48A4DB-E10D-4645-872C-2CE3BCDF0CB2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe
FirewallRules: [TCP Query User{9D600FEE-CAFD-4754-AAD6-6B3AB085B767}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{43EDB761-C6B5-4748-9980-A446F92B2068}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [{45119345-79B6-498A-90A7-344CAF6A20FB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5sp.exe
FirewallRules: [{5C006A65-1280-4025-93EB-B2A2C042BC65}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5sp.exe
FirewallRules: [{76842799-2953-4434-A3D3-D017F0719E4A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{0175E2FD-788F-4E30-AA80-A4E1F809868C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [TCP Query User{C0DDBE2B-617A-4B19-8BD7-FF5209D29F79}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{F93EDCC5-E716-44A6-A8EF-4DEE31FC1EB0}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [{CEA18D57-EF55-4981-9BAE-8707A793DF02}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe
FirewallRules: [{2782807F-CC9A-4CFE-B1C2-59B020EA75BC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe
FirewallRules: [{E255702F-89DE-4911-ADC4-58A78FB9423A}] => (Allow) C:\Program Files (x86)\WarThunder\launcher.exe
FirewallRules: [{9167B2A4-11E3-4DE3-A0DE-FC77A71D54C8}] => (Allow) C:\Program Files (x86)\WarThunder\launcher.exe
FirewallRules: [TCP Query User{6C274B12-97C1-4099-AFE2-01895FF260C3}C:\program files (x86)\warthunder\aces.exe] => (Allow) C:\program files (x86)\warthunder\aces.exe
FirewallRules: [UDP Query User{0D2A8895-8B18-454C-B943-CA8B22578C77}C:\program files (x86)\warthunder\aces.exe] => (Allow) C:\program files (x86)\warthunder\aces.exe
FirewallRules: [{79DAC04E-562A-464E-A824-2E7E82B7A41B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{9415316C-69B8-462E-8595-770E6C74A357}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [TCP Query User{61116760-18BD-4EE7-9E44-10961F78C21C}C:\users\302-\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\302-\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{D08BCAAA-BAFA-4DD8-BF3E-BC9190825F05}C:\users\302-\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\302-\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{17ADCC1C-7487-4E69-A446-FFE9BD9962BF}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{2FA126F1-D8B5-4F01-8E44-0B231934133C}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [{016D8929-7329-47B7-BA08-40DC0B6A82E4}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{15183706-446C-44F8-8CCC-ED3448622337}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{6032C9D7-502D-4525-8C1C-457DBE8475F9}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{72214781-06BE-42B5-8E66-A7AEA3237EF6}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{8501085A-5C8F-4024-B2EF-ABF10A3B9C1E}] => (Allow) E:\SteamLibrary\SteamApps\common\Call of Duty Black Ops II\t6zm.exe
FirewallRules: [{C7E75C1E-0E6A-4943-8E41-F309FF3C8B32}] => (Allow) E:\SteamLibrary\SteamApps\common\Call of Duty Black Ops II\t6zm.exe
FirewallRules: [{5DB5A6FB-5A93-4C1D-B745-DAABE9210D6D}] => (Allow) E:\SteamLibrary\SteamApps\common\Call of Duty Black Ops II\t6sp.exe
FirewallRules: [{8A3975EF-F4A5-4AEC-9BDB-8718E5C9E853}] => (Allow) E:\SteamLibrary\SteamApps\common\Call of Duty Black Ops II\t6sp.exe
FirewallRules: [{66ED9E23-85C9-4E48-95BF-60119ACF20BB}] => (Allow) E:\SteamLibrary\SteamApps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{54E08AA1-59BD-41EB-A6DB-20DC8CD49255}] => (Allow) E:\SteamLibrary\SteamApps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{A4F286DC-D5AE-444B-9FB4-63B3C0B6AD6A}] => (Allow) E:\SteamLibrary\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{25B7039E-DA45-45C9-8282-F5F244C0CE0D}] => (Allow) E:\SteamLibrary\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{DCB93497-B86A-42B9-BDBB-17D363C84229}] => (Allow) E:\SteamLibrary\SteamApps\common\TheEvilWithin\EvilWithin.exe
FirewallRules: [{A76A7F8E-F6CC-4134-813C-04E23C6406F1}] => (Allow) E:\SteamLibrary\SteamApps\common\TheEvilWithin\EvilWithin.exe
FirewallRules: [{243D456B-E571-453A-92AF-E6A96D7A824B}] => (Allow) E:\SteamLibrary\SteamApps\common\WormsXHD\Launcher.exe
FirewallRules: [{6094A5AA-8170-486B-B97B-80C3507CE55D}] => (Allow) E:\SteamLibrary\SteamApps\common\WormsXHD\Launcher.exe
FirewallRules: [{5E344668-DBA8-4C92-9C2E-8B7D0FD20797}] => (Allow) E:\SteamLibrary\SteamApps\common\DayZ\DayZ_BE.exe
FirewallRules: [{21442C22-988F-4C99-ACD4-6C9376033077}] => (Allow) E:\SteamLibrary\SteamApps\common\DayZ\DayZ_BE.exe
FirewallRules: [{EECDBAF8-19F8-4E95-9311-9EBE04A12827}] => (Allow) E:\SteamLibrary\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA_BE.exe
FirewallRules: [{A65C09E5-ECAB-47CA-9FF0-F3073C98DC9C}] => (Allow) E:\SteamLibrary\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA_BE.exe
FirewallRules: [{4CA6BA93-539A-475B-957F-C2F999D80C34}] => (Allow) E:\SteamLibrary\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe
FirewallRules: [{5A3DF4B6-D156-4FC3-AD9B-738907A205B9}] => (Allow) E:\SteamLibrary\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe
FirewallRules: [{34383B4E-A683-4140-9426-CEF18C00D2CD}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe
FirewallRules: [TCP Query User{06BAFC08-2A00-47EA-8177-8D7B1BDE20C4}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{D1F6DD60-EB3D-4BE9-B175-AD10D27BC3A1}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{2489C84C-FA21-49C1-AF37-7E4EB8F7C8B1}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{428FCB94-A049-4F25-B1F1-F18F4CB41BF9}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{B6507A59-9E5D-407C-A71C-1903E250D391}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{D0C168F1-460D-45A8-B5AE-39D037371059}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{015D2BDE-64B1-4564-A82A-1F6D941DF2C7}] => (Allow) E:\Origin\Titanfall\Titanfall.exe
FirewallRules: [{F5A492B6-57E0-4AA9-8CF2-AF3FDBDAAA13}] => (Allow) E:\Origin\Titanfall\Titanfall.exe
FirewallRules: [{875CCF35-EEEF-46D4-8E95-B3D6A3317E47}] => (Allow) E:\SteamLibrary\SteamApps\common\Besiege\Besiege.exe
FirewallRules: [{480840CB-70A7-42E8-BE64-414F132E161A}] => (Allow) E:\SteamLibrary\SteamApps\common\Besiege\Besiege.exe
FirewallRules: [TCP Query User{5BB423DA-3B7F-4F80-BFF0-0FC05C4A8160}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [UDP Query User{0F40E0F6-D55A-4558-B10F-ADAD53FE4C50}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [{65A64F62-4486-4E17-9AA7-660C4772DE79}] => (Allow) E:\SteamLibrary\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{DD2A2D18-917D-4314-B600-7F9F461D03F2}] => (Allow) E:\SteamLibrary\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{26ECAD15-EDB3-4FB0-8377-69C1608957C4}] => (Allow) E:\SteamLibrary\SteamApps\common\The Witcher 3\bin\x64\witcher3.exe
FirewallRules: [{DE7E784A-07C1-4173-AB7D-ED5031F26EC2}] => (Allow) E:\SteamLibrary\SteamApps\common\The Witcher 3\bin\x64\witcher3.exe
FirewallRules: [{68CDA800-ACA5-4CC0-862F-3845B267907A}] => (Allow) C:\Program Files (x86)\GameforgeLive\gfl_client.exe
FirewallRules: [{9B239324-9FC5-46A8-82BD-3AB8302FF638}] => (Allow) E:\Origin\Battlefield 4 CTE\bf4cte_x86.exe
FirewallRules: [{BA216860-CE6A-41E6-9CCE-DA6759D1AA1A}] => (Allow) E:\Origin\Battlefield 4 CTE\bf4cte_x86.exe
FirewallRules: [{DCC78CCB-6E90-4EDA-A798-BCDE507287BD}] => (Allow) E:\Origin\Battlefield 4 CTE\bf4cte.exe
FirewallRules: [{AE067506-477C-4C87-85D9-BF2ECFE0C20C}] => (Allow) E:\Origin\Battlefield 4 CTE\bf4cte.exe
FirewallRules: [TCP Query User{827E3664-75CA-4867-9595-52E7C12FF220}C:\games\world_of_warships\wowslauncher.exe] => (Allow) C:\games\world_of_warships\wowslauncher.exe
FirewallRules: [UDP Query User{F6F402DB-0380-47E5-A950-44A98123AB2E}C:\games\world_of_warships\wowslauncher.exe] => (Allow) C:\games\world_of_warships\wowslauncher.exe
FirewallRules: [TCP Query User{DF295CD8-9679-4EF2-9B51-8DEE969B5FCC}E:\wows\wowslauncher.exe] => (Allow) E:\wows\wowslauncher.exe
FirewallRules: [UDP Query User{190C28F9-A638-4F9B-A9FF-0339EF9E04D3}E:\wows\wowslauncher.exe] => (Allow) E:\wows\wowslauncher.exe
FirewallRules: [{279F74AD-E7DA-4E3D-B2AE-47AD3AC4E7DE}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{032FEBD4-5B37-4C6D-964B-166CD1782410}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{56EE51A9-7D98-4690-9375-FD0EF2802358}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{3D661413-EEC8-4372-B531-42FB21C4983B}] => (Allow) C:\Program Files (x86)\Heroes & Generals\live\hng.exe
FirewallRules: [{1368E948-28E1-40D2-809A-889138CE8C27}] => (Allow) C:\Program Files (x86)\Heroes & Generals\live\hng.exe
FirewallRules: [{386B31F2-6240-4E82-A4A0-3718CC79177C}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{127DCA54-266E-4C8F-97F5-640A8A86AD5C}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{F71DA277-258C-4E02-8FB9-4CA70DF4C42B}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{6C0C0A8B-D3FF-462E-B931-EE196C3E3C3E}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{34215F91-2C28-4732-8855-200DDA463699}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{8418F0EF-339C-4BC5-B4E1-AAA18825A1CC}] => (Allow) LPort=2869
FirewallRules: [{2AC34B33-1E7E-4E78-86BB-0C2D05335003}] => (Allow) LPort=1900
FirewallRules: [{23E683D5-512D-4597-B316-D15F22128713}] => (Allow) E:\Origin\Battlefield 4 CTE\BF4CTEX86WebHelper.exe
FirewallRules: [{FE4F5940-082F-4004-83D8-D7F9431B1B83}] => (Allow) E:\Origin\Battlefield 4 CTE\BF4CTEX86WebHelper.exe
FirewallRules: [{6CE4C917-117B-4B1D-BF6A-8D46B0B892A1}] => (Allow) E:\Origin\Battlefield 4 CTE\BF4CTEWebHelper.exe
FirewallRules: [{38FFD8AA-165E-43EB-BEC6-201A4D177243}] => (Allow) E:\Origin\Battlefield 4 CTE\BF4CTEWebHelper.exe
FirewallRules: [{845269B4-F0BF-4418-877D-E5E1D125F304}] => (Allow) E:\SteamLibrary\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{60B8867F-8714-4DA9-B3C1-2FD73EC2F264}] => (Allow) E:\SteamLibrary\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{DE4D4459-6701-4D89-864F-B02EBD793A23}] => (Allow) E:\SteamLibrary\SteamApps\common\Call of Duty Black Ops III Beta\BlackOps3.exe
FirewallRules: [{16001459-A2B5-48B2-876C-AF6FD5F61A72}] => (Allow) E:\SteamLibrary\SteamApps\common\Call of Duty Black Ops III Beta\BlackOps3.exe
FirewallRules: [{A79A0BA9-4198-480F-839F-1E2C58FE52CF}] => (Allow) E:\SteamLibrary\SteamApps\common\Grand Theft Auto V\GTA5.exe
FirewallRules: [{20581424-7ACC-49FA-9607-0073E2049728}] => (Allow) E:\SteamLibrary\SteamApps\common\Grand Theft Auto V\GTA5.exe
FirewallRules: [{D514A8B0-EF32-49FF-8CFF-10336D781803}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (09/21/2015 11:49:33 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: Avira.OE.ServiceHost.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.TypeInitializationException
Stack:
at NLog.Common.InternalLogger.Debug(System.String, System.Object[])
at NLog.LogFactory.get_Configuration()
at NLog.LogFactory.GetLogger(LoggerCacheKey)
at NLog.LogFactory.GetLogger(System.String)
at NLog.LogManager.GetLogger(System.String)
at Avira.OE.WinCore.Utility.LoggerFacade.GetLogger(System.String)
at Avira.OE.WinCore.Utility.LoggerFacade.GetCurrentClassLogger()
at Avira.OE.WinCore.Lazy`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].get_Value()
at Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
at Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
at System.Threading.ThreadPoolWorkQueue.Dispatch()
at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()
Error: (09/21/2015 11:49:22 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: Avira.OE.ServiceHost.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.TypeInitializationException
Stack:
at NLog.Common.InternalLogger.Debug(System.String, System.Object[])
at NLog.LogFactory.get_Configuration()
at NLog.LogFactory.GetLogger(LoggerCacheKey)
at NLog.LogFactory.GetLogger(System.String)
at NLog.LogManager.GetLogger(System.String)
at Avira.OE.WinCore.Utility.LoggerFacade.GetLogger(System.String)
at Avira.OE.WinCore.Utility.LoggerFacade.GetCurrentClassLogger()
at Avira.OE.WinCore.Lazy`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].get_Value()
at Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
at Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
at System.Threading.ThreadPoolWorkQueue.Dispatch()
at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()
Error: (09/21/2015 11:49:13 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/21/2015 11:49:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Avira.OE.Systray.exe, Version: 1.1.21.25189, Zeitstempel: 0x53fdd63b
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18939, Zeitstempel: 0x55afd8e7
Ausnahmecode: 0xe0434352
Fehleroffset: 0x0000c42d
ID des fehlerhaften Prozesses: 0xe60
Startzeit der fehlerhaften Anwendung: 0xAvira.OE.Systray.exe0
Pfad der fehlerhaften Anwendung: Avira.OE.Systray.exe1
Pfad des fehlerhaften Moduls: Avira.OE.Systray.exe2
Berichtskennung: Avira.OE.Systray.exe3
Error: (09/21/2015 11:48:52 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: Avira.OE.Systray.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.Configuration.ConfigurationErrorsException
Stack:
at System.Configuration.BaseConfigurationRecord.GetSectionRecursive(System.String, Boolean, Boolean, Boolean, Boolean, System.Object ByRef, System.Object ByRef)
at System.Configuration.BaseConfigurationRecord.GetSection(System.String)
at System.Configuration.ClientConfigurationSystem.System.Configuration.Internal.IInternalConfigSystem.GetSection(System.String)
at System.Configuration.ConfigurationManager.GetSection(System.String)
at System.Configuration.ConfigurationManager.get_AppSettings()
at Avira.OE.WinCore.OeProductInfo.get_Culture()
at Avira.OE.WinCore.Utility.CultureSetter.SetDefaultCultureDefinedInAppsettings()
at Avira.OE.Systray.Program.Main(System.String[])
Error: (09/21/2015 11:48:48 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: Avira.OE.ServiceHost.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.TypeInitializationException
Stack:
at NLog.Common.InternalLogger.Debug(System.String, System.Object[])
at NLog.LogFactory.get_Configuration()
at NLog.LogFactory.GetLogger(LoggerCacheKey)
at NLog.LogFactory.GetLogger(System.String)
at NLog.LogManager.GetLogger(System.String)
at Avira.OE.WinCore.Utility.LoggerFacade.GetLogger(System.String)
at Avira.OE.WinCore.Utility.LoggerFacade.GetCurrentClassLogger()
at Avira.OE.WinCore.Lazy`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].get_Value()
at Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
at Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
at System.Threading.ThreadPoolWorkQueue.Dispatch()
at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()
Error: (09/21/2015 11:44:39 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: java.exe, Version: 8.0.25.18, Zeitstempel: 0x54345ca0
Name des fehlerhaften Moduls: glass.dll, Version: 8.0.25.18, Zeitstempel: 0x543462c4
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000001d45a
ID des fehlerhaften Prozesses: 0x1c4c
Startzeit der fehlerhaften Anwendung: 0xjava.exe0
Pfad der fehlerhaften Anwendung: java.exe1
Pfad des fehlerhaften Moduls: java.exe2
Berichtskennung: java.exe3
Error: (09/21/2015 01:53:19 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: Avira.OE.ServiceHost.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.TypeInitializationException
Stack:
at NLog.Common.InternalLogger.Debug(System.String, System.Object[])
at NLog.LogFactory.get_Configuration()
at NLog.LogFactory.GetLogger(LoggerCacheKey)
at NLog.LogFactory.GetLogger(System.String)
at NLog.LogManager.GetLogger(System.String)
at Avira.OE.WinCore.Utility.LoggerFacade.GetLogger(System.String)
at Avira.OE.WinCore.Utility.LoggerFacade.GetCurrentClassLogger()
at Avira.OE.WinCore.Lazy`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].get_Value()
at Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
at Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
at System.Threading.ThreadPoolWorkQueue.Dispatch()
at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()
Error: (09/21/2015 01:53:08 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: Avira.OE.ServiceHost.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.TypeInitializationException
Stack:
at NLog.Common.InternalLogger.Debug(System.String, System.Object[])
at NLog.LogFactory.get_Configuration()
at NLog.LogFactory.GetLogger(LoggerCacheKey)
at NLog.LogFactory.GetLogger(System.String)
at NLog.LogManager.GetLogger(System.String)
at Avira.OE.WinCore.Utility.LoggerFacade.GetLogger(System.String)
at Avira.OE.WinCore.Utility.LoggerFacade.GetCurrentClassLogger()
at Avira.OE.WinCore.Lazy`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].get_Value()
at Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
at Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
at System.Threading.ThreadPoolWorkQueue.Dispatch()
at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()
Error: (09/21/2015 01:53:08 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Avira.OE.Systray.exe, Version: 1.1.21.25189, Zeitstempel: 0x53fdd63b
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18939, Zeitstempel: 0x55afd8e7
Ausnahmecode: 0xe0434352
Fehleroffset: 0x0000c42d
ID des fehlerhaften Prozesses: 0x1274
Startzeit der fehlerhaften Anwendung: 0xAvira.OE.Systray.exe0
Pfad der fehlerhaften Anwendung: Avira.OE.Systray.exe1
Pfad des fehlerhaften Moduls: Avira.OE.Systray.exe2
Berichtskennung: Avira.OE.Systray.exe3
Systemfehler:
=============
Error: (09/21/2015 11:49:33 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert.
Error: (09/21/2015 11:49:22 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (09/21/2015 11:49:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (09/21/2015 11:48:24 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "TeamViewer 8" wurde aufgrund folgenden Fehlers nicht gestartet:
%%109
Error: (09/21/2015 11:48:22 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "PnkBstrA" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (09/21/2015 11:48:22 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (09/21/2015 11:48:22 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
Error: (09/21/2015 11:48:22 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Rapid Storage Technology" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (09/21/2015 11:48:22 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (09/21/2015 11:48:22 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
CodeIntegrity:
===================================
Date: 2015-09-19 17:15:16.391
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2015-09-19 17:15:16.371
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i7-4790 CPU @ 3.60GHz
Prozentuale Nutzung des RAM: 23%
Installierter physikalischer RAM: 16287 MB
Verfügbarer physikalischer RAM: 12532.79 MB
Summe virtueller Speicher: 32572.2 MB
Verfügbarer virtueller Speicher: 28467.8 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:111.69 GB) (Free:14.13 GB) NTFS
Drive d: (MSP120Suite) (CDROM) (Total:2.94 GB) (Free:0 GB) CDFS
Drive e: (Volume) (Fixed) (Total:931.39 GB) (Free:174.23 GB) NTFS
Drive f: (INTENSO) (Removable) (Total:3.65 GB) (Free:3.61 GB) FAT32
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: E8D2D00F)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=111.7 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 00000000)
Partition: GPT.
========================================================
Disk: 2 (Size: 3.7 GB) (Disk ID: 2046B92B)
Partition 1: (Not Active) - (Size=3.7 GB) - (Type=0B)
==================== Ende von Addition.txt ============================
|
|
22.09.2015, 14:21
| #18 | ||||||||
| /// TB-Ausbilder   | Avira - Minecraft.exe enthält TR/agent? Scheint in der Tat ein Fehlalarm von Avira zu sein.
__________________ Reste entfernen Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter start
CloseProcesses:
C:\Program Files (x86)\*.tmp
EmptyTemp:
end
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Die Fixlog von FRST gleich posten, da diese sonst mit DelFix (siehe weiter unten) automatisch entfernt wird! Wenn du keine Probleme mehr mit Malware hast, dann sind wir hier fertig. Deine Logdateien sind sauber. Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.  Cleanup: (Die Reihenfolge ist hier entscheidend) Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken. Falls Combofix verwendet wurde:  Combofix deinstallieren
Alle Logs gepostet? Dann lade Dir bitte  DelFix herunter.
Starte Deinen Rechner anschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen. Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...  und/oder das Forum mit einer kleinen Spende  unterstützen.   Absicherung: Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen: Browser Java Flash-Player PDF-Reader Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren. Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen. Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig. Sofern du noch unentschieden bist, verwende ein einziges der folgenden Antivirusprogramme mit Echtzeitscanner und stets aktueller Signaturendatenbank:
Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen. Optional:  Adblock Plus Kann Banner, Pop-ups, Videowerbung, Tracking und Malware-Seiten blockieren. NoScript Verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen. Ghostery Erkennt und blockiert Tracker, Web Bugs, Pixel und Beacons und weitere Scripte, die das Surfverhalten ausspähen/beobachten. Malwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.Lade Software von einem sauberen Portal wie  .Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen. Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner . Abschließend noch ein paar grundsätzliche Bemerkungen:
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann. |
|
25.09.2015, 18:12
| #19 |
| /// TB-Ausbilder | Avira - Minecraft.exe enthält TR/agent? Ich bin froh, dass wir helfen konnten  In diesem Forum kannst du eine kurze Rückmeldung zur Bereinigung abgeben, sofern du das möchtest: Lob, Kritik und Wünsche Klicke dazu auf den Button "NEUES THEMA" und poste ein kleines Feedback. Vielen Dank!  Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke mir bitte eine PM. Jeder andere bitte hier klicken und einen eigenen Thread erstellen. |
|
| Themen zu Avira - Minecraft.exe enthält TR/agent? |
| aktion, appdata, avira, datei, erneut, files, geschlossen, gestartet, internet, komplett, log, malware, microsoft, minecraft, namen, nichts, programm, quarantäne, server, temporary, tr/agent, tragent, trojan, trojaner, unerwünschtes programm, virus, windows, zugriff |
+ R Taste und schreibe Combofix /Uninstall in das 
Linear-Darstellung
