Trojaner-Board - Avira - Minecraft.exe enthält TR/agent?

VirusTotal-Link: https://www.virustotal.com/de/file/688b5b5478ed0b53ff9ca7a7ce9290a865294b9476b68401f104a974cd14b742/analysis/1442871987/

Code:

Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:15-09-2015

durchgeführt von 302- (2015-09-21 23:48:07) Run:2

Gestartet von C:\Users\302-\Desktop

Geladene Profile: 302- (Verfügbare Profile: 302-)

Start-Modus: Normal

==============================================
 

fixlist Inhalt:

*****************

start

CloseProcesses:

C:\Program Files (x86)\Startfenster

DeleteKey: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Startfenster

DeleteKey: HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF

DeleteKey: HKLM\SOFTWARE\Classes\Wow6432Node\Interface\{884189CF-7C10-41E8-A014-F7B2BE40AADB}

DeleteKey: HKLM\SOFTWARE\Classes\Wow6432Node\Interface\{BD125908-5F10-409F-9C01-F2207CA18887}

RemoveProxy:

EmptyTemp:

end

       

*****************
 

Prozess erfolgreich geschlossen.

C:\Program Files (x86)\Startfenster => erfolgreich verschoben

HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Startfenster => Schlüssel erfolgreich entfernt

HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF => Schlüssel erfolgreich entfernt

HKLM\SOFTWARE\Classes\Wow6432Node\Interface\{884189CF-7C10-41E8-A014-F7B2BE40AADB} => konnte nicht entfernt werden im ersten Versuch (ErrorCode: C0000121), siehe nächste Zeile.

HKLM\SOFTWARE\Classes\Wow6432Node\Interface\{884189CF-7C10-41E8-A014-F7B2BE40AADB} => Schlüssel erfolgreich entfernt

HKLM\SOFTWARE\Classes\Wow6432Node\Interface\{BD125908-5F10-409F-9C01-F2207CA18887} => konnte nicht entfernt werden im ersten Versuch (ErrorCode: C0000121), siehe nächste Zeile.

HKLM\SOFTWARE\Classes\Wow6432Node\Interface\{BD125908-5F10-409F-9C01-F2207CA18887} => Schlüssel erfolgreich entfernt
 

========= RemoveProxy: =========
 

HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt

HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt

HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt

HKU\S-1-5-21-570197401-3978400442-3683679341-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt

HKU\S-1-5-21-570197401-3978400442-3683679341-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt
 
 

========= Ende von RemoveProxy: =========
 

EmptyTemp: => 325.5 MB temporäre Dateien entfernt.
 
 

Das System musste neu gestartet werden.. 
 

==== Ende von Fixlog 23:48:11 ====

Code:

 Results of screen317's Security Check version 1.008  

 Windows 7 Service Pack 1 x64 (UAC is disabled!)  

 Internet Explorer 11  
 ``````````````Antivirus/Firewall Check:`````````````` 

Avira Antivirus   

 Antivirus up to date!   
 `````````Anti-malware/Other Utilities Check:````````` 

 Java 8 Update 51  

 Java version 32-bit out of Date! 

 Adobe Reader XI  

 Google Chrome (45.0.2454.85) 

 Google Chrome (45.0.2454.93) 
 ````````Process Check: objlist.exe by Laurent````````  

 Malwarebytes Anti-Malware mbamservice.exe  

 Malwarebytes Anti-Malware mbam.exe  

 Avira Antivir avgnt.exe 

 Avira Antivir avguard.exe 

 Malwarebytes Anti-Malware mbamscheduler.exe   
 `````````````````System Health check````````````````` 

 Total Fragmentation on Drive C:  
 ````````````````````End of Log``````````````````````

Code:

Connection Status:

==============

Localhost is accessible.

LAN connected.

Google IP is accessible.

Google.com is accessible.

Yahoo.com is accessible.
 
 

Windows Firewall:

=============
 

Firewall Disabled Policy: 

==================
 
 

System Restore:

============
 

System Restore Policy: 

========================
 
 

Action Center:

============
 
 

Windows Update:

============
 

Windows Autoupdate Disabled Policy: 

============================
 
 

Windows Defender:

==============

WinDefend Service is not running. Checking service configuration:

The start type of WinDefend service is set to Demand. The default start type is Auto.

The ImagePath of WinDefend service is OK.

The ServiceDll of WinDefend service is OK.
 
 

Windows Defender Disabled Policy: 

==========================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]

"DisableAntiSpyware"=DWORD:1
 
 

Other Services:

==============
 
 

File Check:

========

C:\Windows\System32\nsisvc.dll => File is digitally signed

C:\Windows\System32\drivers\nsiproxy.sys => File is digitally signed

C:\Windows\System32\dhcpcore.dll => File is digitally signed

C:\Windows\System32\drivers\afd.sys => File is digitally signed

C:\Windows\System32\drivers\tdx.sys => File is digitally signed

C:\Windows\System32\Drivers\tcpip.sys => File is digitally signed

C:\Windows\System32\dnsrslvr.dll => File is digitally signed

C:\Windows\System32\mpssvc.dll => File is digitally signed

C:\Windows\System32\bfe.dll => File is digitally signed

C:\Windows\System32\drivers\mpsdrv.sys => File is digitally signed

C:\Windows\System32\SDRSVC.dll => File is digitally signed

C:\Windows\System32\vssvc.exe => File is digitally signed

C:\Windows\System32\wscsvc.dll => File is digitally signed

C:\Windows\System32\wbem\WMIsvc.dll => File is digitally signed

C:\Windows\System32\wuaueng.dll => File is digitally signed

C:\Windows\System32\qmgr.dll => File is digitally signed

C:\Windows\System32\es.dll => File is digitally signed

C:\Windows\System32\cryptsvc.dll => File is digitally signed

C:\Program Files\Windows Defender\MpSvc.dll => File is digitally signed

C:\Windows\System32\ipnathlp.dll => File is digitally signed

C:\Windows\System32\iphlpsvc.dll => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed
 
 

**** End of log ****

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:15-09-2015

durchgeführt von 302- (Administrator) auf KUNDEN-6P3VFCVU (21-09-2015 23:56:45)

Gestartet von C:\Users\302-\Desktop

Geladene Profile: 302- (Verfügbare Profile: 302-)

Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: Chrome)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(AMD) C:\Windows\System32\atiesrxx.exe

(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe

(Creative Technology Ltd) C:\Windows\SysWOW64\CtHdaSvc.exe

(Fitbit, Inc.) C:\Program Files (x86)\Fitbit Connect\FitbitConnectService.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

() C:\Windows\System32\PnkBstrA.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe

(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe

() C:\Program Files (x86)\puush\puush.exe

(Spotify Ltd) C:\Users\302-\AppData\Roaming\Spotify\SpotifyWebHelper.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Z-Series\Sound Blaster Z-Series Control Panel\SBZ.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe

(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe

(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe

(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler64.exe

(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Spotify Ltd) C:\Users\302-\AppData\Roaming\Spotify\Spotify.exe

(Spotify Ltd) C:\Users\302-\AppData\Roaming\Spotify\SpotifyCrashService.exe

(Spotify Ltd) C:\Users\302-\AppData\Roaming\Spotify\Spotify.exe

(Spotify Ltd) C:\Users\302-\AppData\Roaming\Spotify\Spotify.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13671792 2014-03-14] (Realtek Semiconductor)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-04-11] (Intel Corporation)

HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)

HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2014-02-21] (Intel Corporation)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [782008 2015-08-26] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [164656 2014-08-27] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)

HKLM-x32\...\Run: [Sound Blaster Z-Series Control Panel] => C:\Program Files (x86)\Creative\Sound Blaster Z-Series\Sound Blaster Z-Series Control Panel\SBZ.exe [735744 2013-02-27] (Creative Technology Ltd)

HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [56080 2015-07-27] (Raptr, Inc)

HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)

HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-04] (Advanced Micro Devices, Inc.)

HKU\S-1-5-21-570197401-3978400442-3683679341-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3638256 2015-09-02] (Electronic Arts)

HKU\S-1-5-21-570197401-3978400442-3683679341-1000\...\Run: [puush] => C:\Program Files (x86)\puush\puush.exe [568904 2015-08-05] ()

HKU\S-1-5-21-570197401-3978400442-3683679341-1000\...\Run: [Spotify Web Helper] => C:\Users\302-\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2025016 2015-09-18] (Spotify Ltd)

HKU\S-1-5-21-570197401-3978400442-3683679341-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53737488 2015-08-07] (Skype Technologies S.A.)

HKU\S-1-5-21-570197401-3978400442-3683679341-1000\...\Run: [Dxtory Update Checker 2.0] => C:\Program Files (x86)\ExKode\Dxtory2.0\UpdateChecker.exe [93696 2010-10-17] (Dxtory Software)
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{1D4920EC-6CB7-4635-8A61-89687EE6ACAE}: [DhcpNameServer] 172.20.10.1

Tcpip\..\Interfaces\{44F3AFEE-D438-4A5F-A52D-A77C72C530FF}: [DhcpNameServer] 192.168.178.1
 

Internet Explorer:

==================

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome

HKU\S-1-5-21-570197401-3978400442-3683679341-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\S-1-5-21-570197401-3978400442-3683679341-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://syb.msn.com

hxxp://www.tecstore.net

SearchScopes: HKLM -> DefaultScope {34967B44-CCED-4AF4-863B-BE4A81A9732D} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox

SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM -> {34967B44-CCED-4AF4-863B-BE4A81A9732D} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox

SearchScopes: HKLM-x32 -> DefaultScope {571503CC-1BD6-463E-9EE0-2C1F4E8E8399} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox

SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM-x32 -> {571503CC-1BD6-463E-9EE0-2C1F4E8E8399} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox

SearchScopes: HKU\S-1-5-21-570197401-3978400442-3683679341-1000 -> DefaultScope {34967B44-CCED-4AF4-863B-BE4A81A9732D} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox

SearchScopes: HKU\S-1-5-21-570197401-3978400442-3683679341-1000 -> {34967B44-CCED-4AF4-863B-BE4A81A9732D} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox

SearchScopes: HKU\S-1-5-21-570197401-3978400442-3683679341-1000 -> {571503CC-1BD6-463E-9EE0-2C1F4E8E8399} URL = 

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll [2015-07-23] (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)

BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-23] (Oracle Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-07-23] (Oracle Corporation)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)

BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-23] (Oracle Corporation)

Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)

Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
 

FireFox:

========

FF ProfilePath: C:\Users\302-\AppData\Roaming\Mozilla\Firefox\Profiles\qsNAI5es.default

FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [Keine Datei]

FF Plugin: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-23] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-23] (Oracle Corporation)

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-18] ()

FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [Keine Datei]

FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)

FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-23] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-23] (Oracle Corporation)

FF Plugin-x32: @live.heroesandgenerals.com/npretox -> C:\Program Files (x86)\Heroes & Generals\live\npretox-1.0.6.1\npretoxlive-1.0.6.1.dll [Keine Datei]

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-14] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-14] (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)

FF Extension: Avira Browser Safety - C:\Users\302-\AppData\Roaming\Mozilla\Firefox\Profiles\qsNAI5es.default\Extensions\abs@avira.com [2014-08-26]
 

Chrome: 

=======

CHR Profile: C:\Users\302-\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Chrome Hotword Shared Module) - C:\Users\302-\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-13]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\302-\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-25]

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]
 

==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [887128 2015-07-23] (Avira Operations GmbH & Co. KG)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [461672 2015-08-26] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [461672 2015-08-26] (Avira Operations GmbH & Co. KG)

S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1213072 2015-08-26] (Avira Operations GmbH & Co. KG)

S2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [160048 2014-08-27] (Avira Operations GmbH & Co. KG)

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)

R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)

S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2014-10-02] (Creative Labs) [Datei ist nicht signiert]

S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2014-10-02] (Creative Labs) [Datei ist nicht signiert]

R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [423424 2012-10-08] (Creative Technology Ltd) [Datei ist nicht signiert]

R2 CtHdaSvc; C:\Windows\sysWow64\CtHdaSvc.exe [112640 2013-05-22] (Creative Technology Ltd)

R2 Fitbit Connect; C:\Program Files (x86)\Fitbit Connect\FitbitConnectService.exe [5738528 2014-12-12] (Fitbit, Inc.) [Datei ist nicht signiert]

R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-04-11] (Intel Corporation)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)

S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2057736 2015-09-02] (Electronic Arts)

S3 PAExec; C:\Windows\PAExec.exe [207872 2015-09-09] (Power Admin LLC) [Datei ist nicht signiert]

R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2015-02-17] ()

R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2015-02-16] ()

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [162528 2015-07-23] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [141416 2015-07-23] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-08-15] (Avira Operations GmbH & Co. KG)

R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [44088 2015-03-10] (Avira Operations GmbH & Co. KG)

R3 cthda; C:\Windows\System32\drivers\cthda.sys [1060632 2013-05-22] (Creative Technology Ltd)

R3 cthdb; C:\Windows\System32\DRIVERS\cthdb.sys [33560 2013-05-22] (Creative Technology Ltd)

S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)

R3 ElgatoGC656Y; C:\Windows\System32\Drivers\ElgatoGC656.sys [94440 2014-07-07] (UB658)

R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2014-04-11] (Intel Corporation)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-09-21] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)

R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [118272 2014-03-20] (Intel Corporation)

R3 ScpVBus; C:\Windows\System32\DRIVERS\ScpVBus.sys [39168 2013-05-05] (Scarlet.Crush Productions)

S3 catchme; \??\C:\ComboFix\catchme.sys [X]

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

S3 gdrv; \??\C:\Windows\gdrv.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-09-21 23:54 - 2015-09-21 23:54 - 00002746 _____ C:\Users\302-\Desktop\FSS.txt

2015-09-21 23:53 - 2015-09-21 23:53 - 00899072 _____ (Farbar) C:\Users\302-\Desktop\FSS.exe

2015-09-21 23:51 - 2015-09-21 23:51 - 00852704 _____ C:\Users\302-\Desktop\SecurityCheck.exe

2015-09-21 23:49 - 2015-09-21 23:50 - 108359463 _____ C:\Users\302-\Desktop\Random.rar

2015-09-21 23:45 - 2015-09-21 23:45 - 02314240 _____ C:\Users\302-\Desktop\MinecraftInstaller (1).msi

2015-09-21 23:38 - 2015-09-21 23:38 - 00126666 _____ C:\Users\302-\Desktop\mb und sb.aup

2015-09-21 23:38 - 2015-09-21 23:38 - 00000000 ____D C:\Users\302-\Desktop\mb und sb_data

2015-09-21 18:53 - 2015-09-21 18:53 - 03364667 _____ C:\Users\302-\Desktop\bfhdelay.xcf

2015-09-21 18:53 - 2015-09-21 18:53 - 00076652 _____ C:\Users\302-\AppData\Local\recently-used.xbel

2015-09-21 18:44 - 2015-09-21 18:44 - 00308078 _____ C:\Users\302-\Desktop\bfh.jpeg

2015-09-21 18:39 - 2015-09-21 18:40 - 00222160 _____ C:\Users\302-\Downloads\Heavyweight.mp3.sfk

2015-09-21 18:33 - 2015-09-21 18:33 - 01020176 _____ C:\Users\302-\Desktop\delay.ogg.sfk

2015-09-21 18:33 - 2015-09-21 18:33 - 00039998 _____ C:\Users\302-\Desktop\delay.aup

2015-09-21 18:33 - 2015-09-21 18:33 - 00000000 ____D C:\Users\302-\Desktop\delay_data

2015-09-21 18:32 - 2015-09-21 18:33 - 12716859 _____ C:\Users\302-\Desktop\delay.ogg

2015-09-21 14:23 - 2015-09-21 14:28 - 00368200 _____ C:\Users\302-\Desktop\Different Heaven & EH!DE - My Heart [NCS Release].mp3.sfk

2015-09-21 13:59 - 2015-09-21 14:12 - 01378328 _____ C:\Users\302-\Desktop\c5.ogg.sfk

2015-09-21 13:59 - 2015-09-21 14:12 - 01375344 _____ C:\Users\302-\Desktop\Captive 5.ogg.sfk

2015-09-21 13:59 - 2015-09-21 13:59 - 14995717 _____ C:\Users\302-\Desktop\Captive 5.ogg

2015-09-21 13:56 - 2015-09-21 13:56 - 16121517 _____ C:\Users\302-\Desktop\c5.ogg

2015-09-21 02:10 - 2015-09-21 02:04 - 00000000 ____D C:\Users\302-\Desktop\Captive 5_data

2015-09-21 02:09 - 2015-09-21 02:09 - 44341641 _____ C:\Users\302-\Desktop\Captive 5.rar

2015-09-21 02:06 - 2015-09-21 14:32 - 00053385 _____ C:\Users\302-\Desktop\Captive 5.aup

2015-09-21 00:35 - 2015-09-21 13:56 - 00053700 _____ C:\Users\302-\Desktop\c5.aup

2015-09-21 00:35 - 2015-09-21 00:35 - 00000000 ____D C:\Users\302-\Desktop\c5_data

2015-09-20 22:14 - 2015-09-20 22:14 - 01138202 _____ C:\Users\302-\Desktop\OptiFine_1.8.8_HD_U_F3.jar

2015-09-20 22:08 - 2015-09-21 23:44 - 00000000 ____D C:\Users\302-\Desktop\.minecraft

2015-09-20 22:07 - 2015-09-20 22:08 - 02314240 _____ C:\Users\302-\Desktop\MinecraftInstaller.msi

2015-09-20 17:26 - 2015-09-20 17:26 - 02870984 _____ (ESET) C:\Users\302-\Desktop\esetsmartinstaller_deu.exe

2015-09-20 17:24 - 2015-09-20 17:24 - 00039640 _____ C:\Users\302-\Desktop\HitmanPro_20150920_1724.log

2015-09-20 17:22 - 2015-09-20 17:24 - 00000000 ____D C:\ProgramData\HitmanPro

2015-09-20 17:22 - 2015-09-20 17:22 - 11352032 _____ (SurfRight B.V.) C:\Users\302-\Desktop\HitmanPro_x64.exe

2015-09-20 17:18 - 2015-09-20 17:18 - 00000743 _____ C:\Users\302-\Desktop\Start Emsisoft Emergency Kit.lnk

2015-09-20 17:17 - 2015-09-20 17:18 - 00000000 ____D C:\EEK

2015-09-20 17:17 - 2015-09-20 17:17 - 166992304 _____ C:\Users\302-\Desktop\EmsisoftEmergencyKit.exe

2015-09-20 14:32 - 2015-09-20 14:32 - 00018057 _____ C:\Users\302-\Desktop\Search.txt

2015-09-19 19:39 - 2015-09-19 19:39 - 00001389 _____ C:\Users\302-\Desktop\JRT.txt

2015-09-19 19:37 - 2015-09-19 19:37 - 01798976 _____ (Malwarebytes) C:\Users\302-\Desktop\JRT.exe

2015-09-19 19:35 - 2015-09-19 19:35 - 00001769 _____ C:\Users\302-\Desktop\mbam.txt

2015-09-19 19:28 - 2015-09-21 23:49 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-09-19 19:28 - 2015-09-19 19:28 - 00001102 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2015-09-19 19:28 - 2015-09-19 19:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-09-19 19:28 - 2015-09-19 19:28 - 00000000 ____D C:\ProgramData\Malwarebytes

2015-09-19 19:28 - 2015-09-19 19:28 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware

2015-09-19 19:28 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2015-09-19 19:28 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2015-09-19 19:28 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2015-09-19 19:26 - 2015-09-19 19:27 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\302-\Desktop\mbam-setup-2.1.8.1057 (1).exe

2015-09-19 19:22 - 2015-09-19 19:23 - 00000000 ____D C:\AdwCleaner

2015-09-19 19:21 - 2015-09-19 19:22 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\302-\Desktop\mbam-setup-2.1.8.1057.exe

2015-09-19 19:21 - 2015-09-19 19:21 - 01662976 _____ C:\Users\302-\Desktop\AdwCleaner_5.008.exe

2015-09-19 18:05 - 2015-09-19 18:05 - 04006981 _____ C:\Users\302-\Desktop\Mw1.xcf

2015-09-19 17:26 - 2015-09-19 17:26 - 02083157 _____ C:\Users\302-\Desktop\Masterbuilders.xcf

2015-09-19 17:17 - 2015-09-19 17:17 - 00026677 _____ C:\ComboFix.txt

2015-09-19 17:12 - 2015-09-19 17:17 - 00000000 ____D C:\Qoobox

2015-09-19 17:12 - 2015-09-19 17:16 - 00000000 ____D C:\Windows\erdnt

2015-09-19 17:12 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe

2015-09-19 17:12 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe

2015-09-19 17:12 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2015-09-19 17:12 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2015-09-19 17:12 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2015-09-19 17:12 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe

2015-09-19 17:12 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe

2015-09-19 17:12 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe

2015-09-19 17:10 - 2015-09-19 17:10 - 05635119 ____R (Swearware) C:\Users\302-\Desktop\ComboFix.exe

2015-09-19 16:24 - 2015-09-19 17:08 - 02261752 _____ C:\Users\302-\Desktop\mw1.ogg.sfk

2015-09-19 16:24 - 2015-09-19 16:24 - 25655906 _____ C:\Users\302-\Desktop\mw1.ogg

2015-09-19 16:21 - 2015-09-19 16:24 - 00087295 _____ C:\Users\302-\Desktop\mw1.aup

2015-09-19 16:21 - 2015-09-19 16:21 - 00000000 ____D C:\Users\302-\Desktop\mw1_data

2015-09-19 15:09 - 2015-09-19 15:09 - 04404952 _____ (Kaspersky Lab ZAO) C:\Users\302-\Desktop\tdsskiller.exe

2015-09-19 15:04 - 2015-09-21 23:56 - 00019718 _____ C:\Users\302-\Desktop\FRST.txt

2015-09-19 15:04 - 2015-09-21 23:56 - 00000000 ____D C:\FRST

2015-09-19 15:04 - 2015-09-19 19:40 - 00047873 _____ C:\Users\302-\Desktop\Addition.txt

2015-09-19 15:03 - 2015-09-19 15:03 - 02191360 _____ (Farbar) C:\Users\302-\Desktop\FRST64.exe

2015-09-19 15:02 - 2015-09-19 15:02 - 02191360 _____ (Farbar) C:\Users\302-\Downloads\FRST64.exe

2015-09-19 14:45 - 2015-09-21 15:43 - 00979455 _____ C:\Users\302-\Documents\Captive4.xcf

2015-09-19 14:37 - 2015-09-19 14:37 - 00000772 _____ C:\Users\302-\Documents\Ereignisse.txt

2015-09-19 14:20 - 2015-09-19 14:20 - 02314240 _____ C:\Users\302-\Downloads\MinecraftInstaller (1).msi

2015-09-19 14:16 - 2015-09-19 14:16 - 02314240 _____ C:\Users\302-\Downloads\MinecraftInstaller.msi

2015-09-19 00:41 - 2015-09-19 00:42 - 00002880 _____ C:\Users\302-\Downloads\FACEPALM [HD] (1).mp4.sfk

2015-09-18 21:37 - 2015-09-18 21:37 - 07076424 _____ C:\Users\302-\Downloads\Smaug.rar

2015-09-18 17:32 - 2015-09-18 17:32 - 00105362 _____ C:\Users\302-\Documents\JWSchrift2.xcf

2015-09-18 17:24 - 2015-09-18 17:24 - 00023870 _____ C:\Users\302-\Downloads\ventilla_script.zip

2015-09-18 17:24 - 2015-09-18 17:24 - 00000000 ____D C:\Users\302-\Downloads\JW_files

2015-09-18 15:42 - 2015-09-18 15:42 - 13668628 _____ C:\Users\302-\Downloads\sbs.xcf

2015-09-18 14:24 - 2015-09-18 14:24 - 10973286 _____ C:\Users\302-\Downloads\tntop10.xcf

2015-09-18 03:11 - 2015-09-18 03:11 - 00100458 _____ C:\Users\302-\Downloads\the_minion.zip

2015-09-18 02:08 - 2015-09-18 02:08 - 00000000 ____D C:\Users\302-\Documents\OFX Presets

2015-09-18 02:01 - 2015-09-18 02:01 - 00109651 _____ C:\Users\302-\Downloads\old_london.zip

2015-09-18 00:24 - 2015-09-18 00:24 - 101167727 _____ C:\Users\302-\Downloads\DuKannstVerkaufenGehn.rar

2015-09-17 14:59 - 2015-09-17 15:01 - 00038368 _____ C:\Users\302-\Downloads\Allahu Akbar Sound Effect.mp3.sfk

2015-09-16 22:00 - 2015-09-16 22:00 - 00918328 _____ C:\Windows\Minidump\091615-6786-01.dmp

2015-09-16 03:23 - 2015-09-16 03:23 - 00007016 _____ C:\Users\302-\Downloads\Diamanten!!! - Captive Minecraft 2 #6 - DieBuddiesZocken.mp3.sfk

2015-09-16 01:53 - 2015-09-16 01:53 - 15488826 _____ C:\Users\302-\Downloads\Killduell324141.rar

2015-09-16 01:24 - 2015-09-16 01:24 - 04235110 _____ C:\Users\302-\Downloads\TNSchaf.xcf

2015-09-16 01:15 - 2015-09-16 01:15 - 00108443 _____ C:\Users\302-\Downloads\Fertig ohne Hintergrundk.xcf

2015-09-16 01:06 - 2015-09-16 01:06 - 00518160 _____ C:\Users\302-\Downloads\Fertig ohne Hintergrund.xcf

2015-09-16 00:14 - 2015-09-16 00:16 - 157760736 _____ C:\Users\302-\Downloads\AufdieNahme.rar

2015-09-15 22:00 - 2015-09-15 22:01 - 02853166 _____ C:\Users\302-\Downloads\Tourismusterroristen.xcf

2015-09-15 21:47 - 2015-09-15 21:49 - 02445994 _____ C:\Users\302-\Downloads\mw3.xcf

2015-09-15 21:15 - 2015-09-15 21:29 - 02178366 _____ C:\Users\302-\Downloads\sir.xcf

2015-09-15 21:14 - 2015-09-15 21:14 - 00029442 _____ C:\Users\302-\Downloads\cartoon.zip

2015-09-15 20:59 - 2015-09-15 21:00 - 02343327 _____ C:\Users\302-\Downloads\GK2F.xcf

2015-09-15 20:57 - 2015-09-15 20:57 - 06360873 _____ C:\Users\302-\Downloads\GK2R.xcf

2015-09-15 20:53 - 2015-09-15 20:53 - 06368456 _____ C:\Users\302-\Downloads\GK2H.xcf

2015-09-15 20:37 - 2015-09-15 20:37 - 05428462 _____ C:\Users\302-\Downloads\GK2.xcf

2015-09-15 20:36 - 2015-09-15 20:36 - 00176676 _____ C:\Users\302-\Downloads\plane_crash.zip

2015-09-15 20:31 - 2015-09-15 20:31 - 00815586 _____ C:\Users\302-\Downloads\Me262.jpeg

2015-09-15 20:23 - 2015-09-15 20:23 - 02812464 _____ C:\Users\302-\Downloads\GK1H.xcf

2015-09-15 20:17 - 2015-09-15 20:18 - 02774868 _____ C:\Users\302-\Downloads\GK1R.xcf

2015-09-15 20:12 - 2015-09-15 20:21 - 02793449 _____ C:\Users\302-\Downloads\GK1.xcf

2015-09-15 20:03 - 2015-09-15 20:03 - 00487638 _____ C:\Users\302-\Downloads\cf_nuclear_war.zip

2015-09-15 19:58 - 2015-09-15 20:03 - 07830183 _____ C:\Users\302-\Downloads\tiger.xcf

2015-09-15 19:58 - 2015-09-15 19:58 - 00399765 _____ C:\Users\302-\Downloads\defused.zip

2015-09-15 01:16 - 2015-09-15 01:16 - 00009112 _____ C:\Users\302-\Downloads\badaboom_bb.zip

2015-09-15 01:07 - 2015-09-15 01:07 - 00327869 _____ C:\Users\302-\Documents\DÖ2.xcf

2015-09-15 01:01 - 2015-09-15 01:01 - 00136904 _____ C:\Users\302-\Downloads\DÖ.pdn

2015-09-15 00:51 - 2015-09-15 00:51 - 00194676 _____ C:\Users\302-\Downloads\Flagge Ö.pdn

2015-09-14 23:32 - 2015-09-14 23:37 - 00012504 _____ C:\Users\302-\Downloads\Spongebob Time Cards.mp4.sfk

2015-09-14 23:32 - 2015-09-14 23:32 - 00655235 _____ C:\Users\302-\Downloads\Spongebob Time Cards.mp4

2015-09-14 23:31 - 2015-09-14 23:31 - 00012520 _____ C:\Users\302-\Downloads\Spongebob Time Cards.mp3.sfk

2015-09-14 20:10 - 2015-09-14 20:10 - 00064857 _____ C:\Users\302-\Downloads\bad_grunge.zip

2015-09-14 20:01 - 2015-09-14 20:01 - 00000000 ____D C:\Users\302-\AppData\Local\webkit

2015-09-14 19:56 - 2015-09-14 20:23 - 00959668 _____ C:\Users\302-\Downloads\Bands.xcf

2015-09-14 19:56 - 2015-09-14 19:56 - 00132321 _____ C:\Users\302-\Downloads\germanica_family.zip

2015-09-14 18:04 - 2015-09-14 18:04 - 00176072 _____ C:\Users\302-\Downloads\Pomade.mp3.sfk

2015-09-14 18:04 - 2015-09-14 18:04 - 00161632 _____ C:\Users\302-\Downloads\Dude_Bro.mp3.sfk

2015-09-14 18:04 - 2015-09-14 18:04 - 00161600 _____ C:\Users\302-\Downloads\Fire_Breather.mp3.sfk

2015-09-14 17:51 - 2015-09-14 17:51 - 21414792 _____ C:\Users\302-\Downloads\Aufnahme.rar

2015-09-13 21:25 - 2015-09-13 21:42 - 74100176 _____ C:\Users\302-\Downloads\§4Mercury§c Pack §4Animated.zip

2015-09-13 20:32 - 2015-09-21 14:29 - 00617269 _____ C:\Users\302-\Documents\Captive.xcf

2015-09-13 18:02 - 2015-09-13 18:02 - 101426665 _____ C:\Users\302-\Downloads\Captive.rar

2015-09-13 17:05 - 2015-09-13 17:05 - 09605800 _____ C:\Users\302-\Downloads\Captive-Minecraft-Beta1_6.zip

2015-09-13 16:22 - 2015-09-13 16:22 - 09706665 _____ C:\Users\302-\Downloads\Captive-Minecraft-III-Beta1_3_1.zip

2015-09-13 00:50 - 2015-09-17 21:01 - 00529671 _____ C:\Users\302-\Downloads\DdnTN.xcf

2015-09-13 00:49 - 2015-09-13 00:49 - 00198034 _____ C:\Users\302-\Downloads\28_days_later.zip

2015-09-12 17:18 - 2015-09-12 17:21 - 00358552 _____ C:\Users\302-\Downloads\Alan Walker - Fade [NCS Release].mp3.sfk

2015-09-12 17:17 - 2015-09-12 17:17 - 00353048 _____ C:\Users\302-\Downloads\Tobu - Infectious [NCS Release].mp3.sfk

2015-09-12 17:17 - 2015-09-12 17:17 - 00252392 _____ C:\Users\302-\Downloads\Tobu - Life [NCS Release].mp3.sfk

2015-09-12 16:04 - 2015-09-12 16:04 - 66872007 _____ C:\Users\302-\Downloads\MC Killduell.rar

2015-09-10 19:21 - 2015-09-10 19:21 - 00000000 ____D C:\Windows\rescache

2015-09-10 17:47 - 2015-09-10 17:50 - 00288248 _____ C:\Users\302-\Downloads\Krys Talk - Fly Away (JPB Remix) [NCS Release].mp3.sfk

2015-09-10 17:47 - 2015-09-10 17:50 - 00228920 _____ C:\Users\302-\Downloads\Different Heaven - Nekozilla [NCS Release] (1).mp3.sfk

2015-09-10 17:47 - 2015-09-10 17:47 - 00263408 _____ C:\Users\302-\Downloads\William Ekh - Adventures (feat. Alexa Lusader) [NCS Release] (1).mp3.sfk

2015-09-10 17:30 - 2015-09-10 17:30 - 30264527 _____ C:\Users\302-\Downloads\CalleFicktGerneTiere.rar

2015-09-09 23:34 - 2015-09-09 23:34 - 00000000 ____D C:\Users\302-\AppData\Roaming\ATI

2015-09-09 23:34 - 2015-09-09 23:34 - 00000000 ____D C:\Users\302-\AppData\Local\ATI

2015-09-09 23:34 - 2015-09-09 23:34 - 00000000 ____D C:\ProgramData\ATI

2015-09-09 23:33 - 2015-09-09 23:33 - 00053615 _____ C:\Windows\SysWOW64\CCCInstall_201509092333135219.log

2015-09-09 23:33 - 2015-09-09 23:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center

2015-09-09 23:33 - 2015-09-09 23:33 - 00000000 _____ C:\Windows\ativpsrm.bin

2015-09-09 23:32 - 2015-09-09 23:32 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies

2015-09-09 23:32 - 2015-09-09 23:32 - 00000000 ____D C:\Program Files\AMD

2015-09-09 23:32 - 2015-09-09 23:32 - 00000000 ____D C:\Program Files (x86)\AMD

2015-09-09 23:31 - 2015-09-09 23:31 - 04944608 _____ (Advanced Micro Devices, Inc.) C:\Users\302-\Downloads\autodetectutility (1).exe

2015-09-09 23:29 - 2015-09-09 23:30 - 00207872 _____ (Power Admin LLC) C:\Windows\PAExec.exe

2015-09-09 23:29 - 2015-09-09 23:29 - 01427043 _____ C:\Users\302-\Downloads\DDU v15.4.1.1 (1).zip

2015-09-09 23:28 - 2015-09-09 23:28 - 01427043 _____ C:\Users\302-\Downloads\DDU v15.4.1.1.zip

2015-09-09 23:10 - 2015-09-09 23:10 - 00782824 _____ C:\Windows\Minidump\090915-8642-01.dmp

2015-09-09 23:01 - 2015-09-09 23:01 - 04944608 _____ (Advanced Micro Devices, Inc.) C:\Users\302-\Downloads\autodetectutility.exe

2015-09-09 22:51 - 2015-09-09 22:51 - 01046528 _____ C:\Users\302-\Downloads\MicrosoftFixit50848.msi

2015-09-09 22:49 - 2015-09-09 22:49 - 00918352 _____ C:\Windows\Minidump\090915-8876-01.dmp

2015-09-09 22:21 - 2015-09-09 22:21 - 00782856 _____ C:\Windows\Minidump\090915-16239-01.dmp

2015-09-09 19:19 - 2015-09-09 19:19 - 00782968 _____ C:\Windows\Minidump\090915-21574-01.dmp

2015-09-09 18:57 - 2015-09-09 18:57 - 00271864 _____ C:\Users\302-\Downloads\e-dubble - Let Me Oh (Freestyle Friday #9).mp3.sfk

2015-09-09 18:55 - 2015-09-09 18:55 - 00416480 _____ C:\Users\302-\Downloads\e-dubble - Be A King.mp3.sfk

2015-09-09 18:55 - 2015-09-09 18:55 - 00220672 _____ C:\Users\302-\Downloads\Otis McMusic - Otis McDonald.mp3.sfk

2015-09-09 17:45 - 2015-09-09 17:46 - 25470651 _____ C:\Users\302-\Downloads\SchwarzeSchwänze.rar

2015-09-09 16:32 - 2015-09-09 16:33 - 03595280 _____ C:\Users\302-\Downloads\Top 10 NoCopyRightSounds [NCS].mp3.sfk

2015-09-09 12:26 - 2015-08-18 03:42 - 00393304 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-09-09 12:26 - 2015-08-18 03:14 - 00344168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2015-09-09 12:26 - 2015-08-15 08:48 - 25190400 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-09-09 12:26 - 2015-08-15 08:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-09-09 12:26 - 2015-08-15 08:33 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-09-09 12:26 - 2015-08-15 08:18 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-09-09 12:26 - 2015-08-15 08:18 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-09-09 12:26 - 2015-08-15 08:17 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-09-09 12:26 - 2015-08-15 08:17 - 00585216 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-09-09 12:26 - 2015-08-15 08:17 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2015-09-09 12:26 - 2015-08-15 08:17 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-09-09 12:26 - 2015-08-15 08:10 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-09-09 12:26 - 2015-08-15 08:09 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-09-09 12:26 - 2015-08-15 08:06 - 19856896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-09-09 12:26 - 2015-08-15 08:06 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-09-09 12:26 - 2015-08-15 08:04 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2015-09-09 12:26 - 2015-08-15 08:04 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-09-09 12:26 - 2015-08-15 08:04 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-09-09 12:26 - 2015-08-15 08:04 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-09-09 12:26 - 2015-08-15 08:00 - 05923328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-09-09 12:26 - 2015-08-15 07:57 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-09-09 12:26 - 2015-08-15 07:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2015-09-09 12:26 - 2015-08-15 07:53 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-09-09 12:26 - 2015-08-15 07:46 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-09-09 12:26 - 2015-08-15 07:42 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-09-09 12:26 - 2015-08-15 07:41 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-09-09 12:26 - 2015-08-15 07:40 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-09-09 12:26 - 2015-08-15 07:40 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2015-09-09 12:26 - 2015-08-15 07:39 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2015-09-09 12:26 - 2015-08-15 07:39 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-09-09 12:26 - 2015-08-15 07:39 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2015-09-09 12:26 - 2015-08-15 07:38 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2015-09-09 12:26 - 2015-08-15 07:35 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-09-09 12:26 - 2015-08-15 07:33 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2015-09-09 12:26 - 2015-08-15 07:32 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2015-09-09 12:26 - 2015-08-15 07:30 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2015-09-09 12:26 - 2015-08-15 07:29 - 00665600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2015-09-09 12:26 - 2015-08-15 07:29 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2015-09-09 12:26 - 2015-08-15 07:29 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2015-09-09 12:26 - 2015-08-15 07:24 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-09-09 12:26 - 2015-08-15 07:23 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-09-09 12:26 - 2015-08-15 07:22 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-09-09 12:26 - 2015-08-15 07:22 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-09-09 12:26 - 2015-08-15 07:21 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2015-09-09 12:26 - 2015-08-15 07:16 - 14451712 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-09-09 12:26 - 2015-08-15 07:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2015-09-09 12:26 - 2015-08-15 07:14 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2015-09-09 12:26 - 2015-08-15 07:12 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-09-09 12:26 - 2015-08-15 07:11 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-09-09 12:26 - 2015-08-15 07:10 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-09-09 12:26 - 2015-08-15 07:07 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-09-09 12:26 - 2015-08-15 07:04 - 12857344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-09-09 12:26 - 2015-08-15 07:02 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-09-09 12:26 - 2015-08-15 07:01 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-09-09 12:26 - 2015-08-15 07:01 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2015-09-09 12:26 - 2015-08-15 06:55 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-09-09 12:26 - 2015-08-15 06:43 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-09-09 12:26 - 2015-08-15 06:43 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-09-09 12:26 - 2015-08-15 06:39 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-09-09 12:26 - 2015-08-15 06:37 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2015-09-09 12:26 - 2015-08-05 19:56 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll

2015-09-09 12:26 - 2015-08-05 19:56 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll

2015-09-09 12:26 - 2015-08-05 19:56 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll

2015-09-09 12:26 - 2015-08-05 19:40 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll

2015-09-09 12:26 - 2015-07-15 05:17 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2015-09-09 12:26 - 2015-07-15 04:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2015-09-09 12:26 - 2015-07-09 19:58 - 01632256 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll

2015-09-09 12:26 - 2015-07-09 19:58 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll

2015-09-09 12:26 - 2015-07-09 19:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll

2015-09-09 12:26 - 2015-07-09 19:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll

2015-09-09 12:24 - 2015-08-27 20:18 - 02004480 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll

2015-09-09 12:24 - 2015-07-23 02:06 - 05568960 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-09-09 12:24 - 2015-07-23 02:06 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-09-09 12:24 - 2015-07-23 02:06 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-09-09 12:24 - 2015-07-23 02:03 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2015-09-09 12:24 - 2015-07-23 02:03 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2015-09-09 12:24 - 2015-07-23 02:03 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2015-09-09 12:24 - 2015-07-23 02:03 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2015-09-09 12:24 - 2015-07-23 02:03 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2015-09-09 12:24 - 2015-07-23 02:02 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-09-09 12:24 - 2015-07-23 02:02 - 01390592 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll

2015-09-09 12:24 - 2015-07-23 02:02 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2015-09-09 12:24 - 2015-07-23 02:02 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2015-09-09 12:24 - 2015-07-23 02:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll

2015-09-09 12:24 - 2015-07-23 02:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll

2015-09-09 12:24 - 2015-07-23 02:02 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-09-09 12:24 - 2015-07-23 02:02 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-09-09 12:24 - 2015-07-23 02:02 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2015-09-09 12:24 - 2015-07-23 02:02 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-09-09 12:24 - 2015-07-23 02:02 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-09-09 12:24 - 2015-07-23 02:02 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-09-09 12:24 - 2015-07-23 02:02 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-09-09 12:24 - 2015-07-23 02:02 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-09-09 12:24 - 2015-07-23 02:02 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-09-09 12:24 - 2015-07-23 02:02 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2015-09-09 12:24 - 2015-07-23 02:02 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-09-09 12:24 - 2015-07-23 02:02 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-09-09 12:24 - 2015-07-23 02:02 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll

2015-09-09 12:24 - 2015-07-23 02:02 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2015-09-09 12:24 - 2015-07-23 02:02 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-09-09 12:24 - 2015-07-23 02:02 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-09-09 12:24 - 2015-07-23 02:02 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-09-09 12:24 - 2015-07-23 02:02 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2015-09-09 12:24 - 2015-07-23 02:01 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2015-09-09 12:24 - 2015-07-23 02:01 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-09-09 12:24 - 2015-07-23 02:01 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-09-09 12:24 - 2015-07-23 01:58 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-09-09 12:24 - 2015-07-23 01:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-09-09 12:24 - 2015-07-23 01:52 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2015-09-09 12:24 - 2015-07-23 01:52 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2015-09-09 12:24 - 2015-07-23 01:52 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2015-09-09 12:24 - 2015-07-23 01:52 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2015-09-09 12:24 - 2015-07-23 01:52 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2015-09-09 12:24 - 2015-07-23 01:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2015-09-09 12:24 - 2015-07-23 01:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2015-09-09 12:24 - 2015-07-23 01:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2015-09-09 12:24 - 2015-07-23 01:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2015-09-09 12:24 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-09-09 12:24 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2015-09-09 12:24 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2015-09-09 12:24 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2015-09-09 12:24 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2015-09-09 12:24 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2015-09-09 12:24 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2015-09-09 12:24 - 2015-07-23 01:51 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-09-09 12:24 - 2015-07-22 19:57 - 03989952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2015-09-09 12:24 - 2015-07-22 19:57 - 03934656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2015-09-09 12:24 - 2015-07-22 19:54 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2015-09-09 12:24 - 2015-07-22 19:53 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll

2015-09-09 12:24 - 2015-07-22 19:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll

2015-09-09 12:24 - 2015-07-22 19:53 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-09-09 12:24 - 2015-07-22 19:53 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2015-09-09 12:24 - 2015-07-22 19:53 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2015-09-09 12:24 - 2015-07-22 19:53 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2015-09-09 12:24 - 2015-07-22 19:53 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2015-09-09 12:24 - 2015-07-22 19:53 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2015-09-09 12:24 - 2015-07-22 19:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2015-09-09 12:24 - 2015-07-22 19:53 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll

2015-09-09 12:24 - 2015-07-22 19:53 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2015-09-09 12:24 - 2015-07-22 19:53 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2015-09-09 12:24 - 2015-07-22 19:53 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2015-09-09 12:24 - 2015-07-22 19:52 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2015-09-09 12:24 - 2015-07-22 19:52 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2015-09-09 12:24 - 2015-07-22 19:52 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2015-09-09 12:24 - 2015-07-22 19:52 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2015-09-09 12:24 - 2015-07-22 19:52 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe

2015-09-09 12:24 - 2015-07-22 19:52 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2015-09-09 12:24 - 2015-07-22 19:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2015-09-09 12:24 - 2015-07-22 19:47 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll

2015-09-09 12:24 - 2015-07-22 19:46 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2015-09-09 12:24 - 2015-07-22 19:42 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2015-09-09 12:24 - 2015-07-22 19:42 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2015-09-09 12:24 - 2015-07-22 19:42 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2015-09-09 12:24 - 2015-07-22 19:42 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2015-09-09 12:24 - 2015-07-22 19:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2015-09-09 12:24 - 2015-07-22 19:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2015-09-09 12:24 - 2015-07-22 19:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2015-09-09 12:24 - 2015-07-22 19:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2015-09-09 12:24 - 2015-07-22 19:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2015-09-09 12:24 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2015-09-09 12:24 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2015-09-09 12:24 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2015-09-09 12:24 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2015-09-09 12:24 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2015-09-09 12:24 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2015-09-09 12:24 - 2015-07-22 18:48 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll

2015-09-09 12:24 - 2015-07-22 18:45 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2015-09-09 12:24 - 2015-07-22 18:44 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2015-09-09 12:24 - 2015-07-22 18:44 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2015-09-09 12:24 - 2015-07-22 18:34 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2015-09-09 12:24 - 2015-07-22 18:34 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2015-09-09 12:24 - 2015-07-22 18:31 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2015-09-09 12:24 - 2015-07-22 18:31 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2015-09-09 12:24 - 2015-07-22 18:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2015-09-09 12:24 - 2015-07-22 18:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2015-09-09 12:24 - 2015-06-25 12:06 - 00115136 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe

2015-09-09 12:24 - 2015-06-25 12:01 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2015-09-09 12:24 - 2015-06-25 12:01 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll

2015-09-09 12:24 - 2015-06-25 11:44 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2015-09-09 12:23 - 2015-09-02 05:04 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2015-09-09 12:23 - 2015-09-02 05:04 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2015-09-09 12:23 - 2015-09-02 05:04 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll

2015-09-09 12:23 - 2015-09-02 05:04 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll

2015-09-09 12:23 - 2015-09-02 04:48 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll

2015-09-09 12:23 - 2015-09-02 04:48 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2015-09-09 12:23 - 2015-09-02 04:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll

2015-09-09 12:23 - 2015-09-02 04:47 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll

2015-09-09 12:23 - 2015-09-02 03:51 - 03209216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-09-09 12:23 - 2015-09-02 03:47 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2015-09-09 12:23 - 2015-09-02 03:33 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

2015-09-09 12:23 - 2015-08-27 20:18 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2015-09-09 12:23 - 2015-08-27 20:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll

2015-09-09 12:23 - 2015-08-27 20:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2015-09-09 12:23 - 2015-08-27 19:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll

2015-09-09 12:23 - 2015-08-27 19:58 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2015-09-09 12:23 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll

2015-09-09 12:23 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2015-09-09 12:23 - 2015-08-26 20:07 - 03165696 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2015-09-09 12:23 - 2015-08-26 20:07 - 02606080 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-09-09 12:23 - 2015-08-26 20:07 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2015-09-09 12:23 - 2015-08-26 20:07 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2015-09-09 12:23 - 2015-08-26 20:07 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2015-09-09 12:23 - 2015-08-26 20:07 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2015-09-09 12:23 - 2015-08-26 20:07 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2015-09-09 12:23 - 2015-08-26 20:06 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2015-09-09 12:23 - 2015-08-26 20:06 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll

2015-09-09 12:23 - 2015-08-26 20:06 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2015-09-09 12:23 - 2015-08-26 20:06 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll

2015-09-09 12:23 - 2015-08-26 19:56 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2015-09-09 12:23 - 2015-08-26 19:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2015-09-09 12:23 - 2015-08-26 19:56 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2015-09-09 12:23 - 2015-08-26 19:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2015-09-09 12:23 - 2015-08-26 19:55 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2015-09-09 12:23 - 2015-08-04 20:03 - 00692672 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi

2015-09-09 12:23 - 2015-08-04 20:00 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi

2015-09-09 12:23 - 2015-08-04 19:56 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll

2015-09-09 12:23 - 2015-08-04 19:56 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll

2015-09-09 12:23 - 2015-08-04 19:56 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll

2015-09-09 12:23 - 2015-08-04 19:55 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe

2015-09-09 12:23 - 2015-08-04 19:55 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe

2015-09-09 12:23 - 2015-08-04 19:47 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll

2015-09-09 12:23 - 2015-08-04 18:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys

2015-09-08 23:26 - 2015-09-08 23:26 - 00266216 _____ C:\Users\302-\Downloads\K-391 - Everybody [NCS Release].mp3.sfk

2015-09-08 23:24 - 2015-09-08 23:24 - 00353080 _____ C:\Users\302-\Downloads\Jim Yosef - Firefly [NCS Release].mp3.sfk

2015-09-08 23:24 - 2015-09-08 23:24 - 00263408 _____ C:\Users\302-\Downloads\William Ekh - Adventures (feat. Alexa Lusader) [NCS Release].mp3.sfk

2015-09-08 22:17 - 2015-09-08 22:20 - 00219664 _____ C:\Users\302-\Downloads\Your_Voice_Is_American.mp3.sfk

2015-09-08 22:17 - 2015-09-08 22:20 - 00115304 _____ C:\Users\302-\Downloads\Burnt.mp3.sfk

2015-09-07 22:28 - 2015-09-07 22:38 - 02073750 _____ C:\Users\302-\Downloads\SETN2.xcf

2015-09-07 22:04 - 2015-09-07 22:10 - 00228920 _____ C:\Users\302-\Downloads\Different Heaven - Nekozilla [NCS Release].mp3.sfk

2015-09-07 19:31 - 2015-09-07 19:31 - 90479094 _____ C:\Users\302-\Downloads\Revo Aufnahme.rar

2015-09-07 17:52 - 2015-09-07 17:52 - 27599935 _____ C:\Users\302-\Downloads\Sphax Max Edit.zip

2015-09-06 23:02 - 2015-09-06 23:06 - 00002408 _____ C:\Users\302-\Downloads\Censor Beep Sound Effect.mp3.sfk

2015-09-06 22:57 - 2015-09-06 23:01 - 03080840 _____ C:\Users\302-\Downloads\Best of No Copyright Sounds - February 2015 - Gaming Mix - NCS PixelMusic.mp3.sfk

2015-09-06 22:36 - 2015-09-06 22:36 - 00001904 _____ C:\Users\302-\Downloads\WINDOWS XP ERROR SOUND.wmv.mp3.sfk

2015-09-06 22:30 - 2015-09-06 22:33 - 00020800 _____ C:\Users\302-\Downloads\Whoosh Hits Sound Effect In High Quality.mp3.sfk

2015-09-06 02:09 - 2015-09-06 02:09 - 00000000 ____D C:\Users\302-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Blender

2015-09-06 02:09 - 2015-09-06 02:09 - 00000000 ____D C:\Program Files\Blender Foundation

2015-09-06 02:08 - 2015-09-06 02:09 - 83956748 _____ C:\Users\302-\Downloads\blender-2.75a-windows64.msi

2015-09-06 01:28 - 2015-09-06 01:28 - 04382072 _____ C:\Users\302-\Downloads\Blender_Minecraft_Rig.rar

2015-09-06 00:18 - 2015-09-06 00:31 - 00000000 ____D C:\Users\302-\AppData\Roaming\Minecraft Skin Viewer

2015-09-06 00:18 - 2015-09-06 00:18 - 00155858 _____ C:\Users\302-\Downloads\Minecraft Skin Viewer.zip

2015-09-06 00:17 - 2015-09-06 00:17 - 00889416 _____ (Microsoft Corporation) C:\Users\302-\Downloads\dotNetFx40_Full_setup.exe

2015-09-05 23:10 - 2015-09-05 23:10 - 06103007 _____ C:\Users\302-\Downloads\SETN.xcf

2015-09-05 23:08 - 2015-09-05 23:08 - 00120462 _____ C:\Users\302-\Downloads\war_is_over.zip

2015-09-05 23:08 - 2015-09-05 23:08 - 00000000 ____D C:\Users\302-\Downloads\war_is_over

2015-09-05 21:59 - 2015-09-05 22:00 - 00308800 _____ C:\Users\302-\Downloads\Pride_Before_the_Fall.mp3.sfk

2015-09-05 18:32 - 2015-09-05 18:32 - 00431408 _____ C:\Users\302-\Downloads\FACEPALM [HD] (1).mp4

2015-09-05 18:32 - 2015-09-05 18:32 - 00002880 _____ C:\Users\302-\Downloads\FACEPALM [HD].mp4.sfk

2015-09-05 18:26 - 2015-09-05 18:29 - 00388904 _____ C:\Users\302-\Downloads\Ahrix - Nova [NCS Release].mp3.sfk

2015-09-05 17:11 - 2015-09-05 17:12 - 00001116 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk

2015-09-05 17:11 - 2015-09-05 17:11 - 00000000 ____D C:\Program Files\GIMP 2

2015-09-05 17:09 - 2015-09-05 17:10 - 91931728 _____ (The GIMP Team ) C:\Users\302-\Downloads\gimp-2.8.14-setup-1.exe

2015-09-05 17:03 - 2015-09-05 17:03 - 00254887 _____ C:\Users\302-\Downloads\teb.xcf

2015-09-05 16:34 - 2015-09-05 16:34 - 00782840 _____ C:\Windows\Minidump\090515-17284-01.dmp

2015-09-04 19:48 - 2015-09-04 19:52 - 00368200 _____ C:\Users\302-\Downloads\Different Heaven & EH!DE - My Heart [NCS Release].mp3.sfk

2015-09-04 18:50 - 2015-09-04 19:01 - 00004744 _____ C:\Users\302-\Downloads\Ba Dum Tss!.mp3.sfk

2015-09-04 18:39 - 2015-09-04 18:41 - 00095248 _____ C:\Users\302-\Downloads\Ditch_Diggin.mp3.sfk

2015-09-04 18:13 - 2015-09-04 18:13 - 32596498 _____ C:\Users\302-\Downloads\Österreichische Begriffe.rar

2015-09-04 15:06 - 2015-03-27 18:50 - 04938520 _____ (Piriform Ltd) C:\Users\302-\Desktop\recuva64.exe

2015-09-04 15:05 - 2015-09-04 15:05 - 04000946 _____ C:\Users\302-\Downloads\rcsetup1.5.2_slim.zip

2015-09-03 22:09 - 2015-09-03 22:21 - 00006472 _____ C:\Users\302-\Downloads\Sad Trombone Wah Wah Wah Fail Sound Effect.mp3.sfk

2015-09-03 22:01 - 2015-09-03 22:01 - 108800816 _____ (Apple Inc.) C:\Users\302-\Downloads\iTunesSetup.exe

2015-09-03 20:42 - 2015-09-03 21:21 - 00181720 _____ C:\Users\302-\Downloads\Drop_and_Roll.mp3.sfk

2015-09-03 15:45 - 2015-09-03 15:45 - 00918336 _____ C:\Windows\Minidump\090315-18564-01.dmp

2015-09-03 01:56 - 2015-09-03 01:57 - 00013864 _____ C:\Users\302-\Downloads\Guerilla-Krieg #1 [Rückrunde] -- Black Ops 1 -- Admiral E -- gegen fifasuchtla [German - HD].mp4.sfk

2015-09-03 01:56 - 2015-09-03 01:56 - 03551842 _____ C:\Users\302-\Downloads\Guerilla-Krieg #1 [Rückrunde] -- Black Ops 1 -- Admiral E -- gegen fifasuchtla [German - HD].mp4

2015-09-02 17:44 - 2015-09-02 17:44 - 00001201 _____ C:\Users\302-\Desktop\Uplay.lnk

2015-09-02 17:44 - 2015-09-02 17:44 - 00000000 ____D C:\Users\302-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft

2015-09-02 17:44 - 2015-09-02 17:44 - 00000000 ____D C:\Users\302-\AppData\Local\Ubisoft Game Launcher

2015-09-02 17:44 - 2015-09-02 17:44 - 00000000 ____D C:\Program Files (x86)\Ubisoft

2015-09-01 22:15 - 2015-09-01 22:15 - 00276728 _____ C:\Windows\Minidump\090115-23150-01.dmp

2015-08-31 22:18 - 2015-08-31 22:18 - 00000000 ____D C:\Users\302-\AppData\Roaming\MPEG Streamclip

2015-08-31 22:12 - 2015-08-31 22:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime

2015-08-31 22:12 - 2015-08-31 22:12 - 00000000 ____D C:\Program Files (x86)\QuickTime

2015-08-31 21:37 - 2015-08-31 21:46 - 03223256 _____ C:\Users\Public\Viele Hacker, gutes Gameplay am Ende 36 Kills - Kopie.mp3.sfk

2015-08-31 20:50 - 2015-08-31 20:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free MP4 MP3 Converter

2015-08-31 20:50 - 2015-08-31 20:50 - 00000000 ____D C:\Program Files (x86)\free-mp4-mp3-converter

2015-08-29 14:18 - 2015-08-29 14:18 - 00001216 _____ C:\Users\302-\Desktop\Movie Studio Platinum 12.0 (64-bit).lnk

2015-08-29 14:11 - 2015-08-29 14:11 - 00715038 _____ C:\Windows\unins000.exe

2015-08-29 14:10 - 2015-08-29 14:11 - 00003448 _____ C:\Windows\unins000.dat

2015-08-29 14:10 - 2011-12-07 19:37 - 00148992 _____ ( ) C:\Windows\system32\lagarith.dll

2015-08-29 14:10 - 2011-12-07 19:32 - 00216064 _____ ( ) C:\Windows\SysWOW64\lagarith.dll

2015-08-27 15:30 - 2015-08-27 15:30 - 00782872 _____ C:\Windows\Minidump\082715-18002-01.dmp

2015-08-26 03:00 - 2015-08-26 03:00 - 00000222 _____ C:\Users\302-\Desktop\Call of Duty Black Ops III Beta.url

2015-08-26 01:51 - 2015-08-26 01:51 - 00781856 _____ C:\Windows\Minidump\082615-33774-01.dmp

2015-08-25 13:19 - 2015-08-25 13:19 - 00000000 ____D C:\Users\302-\AppData\Local\Dxtory Software

2015-08-25 13:19 - 2015-08-25 13:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dxtory2.0

2015-08-25 13:19 - 2015-08-25 13:19 - 00000000 ____D C:\Program Files (x86)\ExKode

2015-08-25 13:19 - 2014-06-08 22:14 - 02610736 _____ (ExKode Co. Ltd.) C:\Windows\system32\DxtoryCodec.dll

2015-08-25 13:19 - 2014-06-08 22:14 - 02508336 _____ (ExKode Co. Ltd.) C:\Windows\SysWOW64\DxtoryCodec.dll

2015-08-24 22:46 - 2015-09-21 20:24 - 00000000 ____D C:\Users\302-\Documents\Movie Studio Platinum 12.0 Projekte

2015-08-24 22:46 - 2015-08-24 22:46 - 00000000 ____D C:\Users\302-\AppData\Roaming\Publish Providers

2015-08-24 22:43 - 2015-08-24 22:46 - 00000000 ____D C:\Users\302-\AppData\Local\Sony

2015-08-24 22:43 - 2015-08-24 22:44 - 00000000 ____D C:\ProgramData\Sony

2015-08-24 22:43 - 2015-08-24 22:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony

2015-08-24 22:43 - 2015-08-24 22:44 - 00000000 ____D C:\Program Files (x86)\Sony

2015-08-24 22:43 - 2015-08-24 22:43 - 00000000 ____D C:\Program Files\Sony

2015-08-24 22:41 - 2015-08-24 23:50 - 00000000 ____D C:\Users\302-\AppData\Roaming\Sony

2015-08-22 00:14 - 2009-05-04 14:55 - 00040208 _____ (CACE Technologies) C:\Windows\SysWOW64\Drivers\aztech_npf64.sys

2015-08-22 00:13 - 2015-08-22 00:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HomePlugAV Utility
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-09-21 23:54 - 2014-08-25 22:40 - 00000000 ____D C:\Users\302-\AppData\Roaming\Spotify

2015-09-21 23:54 - 2010-11-21 08:50 - 00700130 _____ C:\Windows\system32\perfh007.dat

2015-09-21 23:54 - 2010-11-21 08:50 - 00149768 _____ C:\Windows\system32\perfc007.dat

2015-09-21 23:54 - 2009-07-14 07:13 - 01622706 _____ C:\Windows\system32\PerfStringBackup.INI

2015-09-21 23:52 - 2014-08-22 18:30 - 01117429 _____ C:\Windows\WindowsUpdate.log

2015-09-21 23:49 - 2015-02-16 22:07 - 00000000 ____D C:\ProgramData\Origin

2015-09-21 23:49 - 2015-01-04 17:57 - 00000000 ____D C:\Users\302-\AppData\Roaming\Raptr

2015-09-21 23:49 - 2014-12-24 23:57 - 00000000 ____D C:\Users\302-\AppData\Local\CrashDumps

2015-09-21 23:49 - 2014-08-31 16:05 - 00000000 ____D C:\Users\302-\AppData\Roaming\TS3Client

2015-09-21 23:49 - 2014-08-25 22:42 - 00000000 ____D C:\Users\302-\AppData\Roaming\Skype

2015-09-21 23:49 - 2014-08-25 22:41 - 00000000 ____D C:\Users\302-\AppData\Local\Spotify

2015-09-21 23:49 - 2014-08-25 16:31 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-09-21 23:48 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2015-09-21 23:48 - 2009-07-14 06:51 - 00087077 _____ C:\Windows\setupact.log

2015-09-21 23:44 - 2014-11-15 22:29 - 00000000 ____D C:\Fraps

2015-09-21 23:38 - 2015-08-04 20:16 - 00000000 ____D C:\Users\302-\AppData\Roaming\Audacity

2015-09-21 23:21 - 2014-08-25 16:31 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-09-21 18:53 - 2015-05-12 16:23 - 00000000 ____D C:\Users\302-\AppData\Local\gtk-2.0

2015-09-21 18:53 - 2015-05-12 16:20 - 00000000 ____D C:\Users\302-\.gimp-2.8

2015-09-21 18:08 - 2014-08-26 17:12 - 00000000 ____D C:\Program Files (x86)\Steam

2015-09-21 14:01 - 2009-07-14 06:45 - 00028704 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-09-21 14:01 - 2009-07-14 06:45 - 00028704 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-09-21 13:52 - 2010-11-21 05:47 - 00596136 _____ C:\Windows\PFRO.log

2015-09-19 19:34 - 2010-11-21 09:00 - 00000000 ____D C:\Windows\ShellNew

2015-09-19 17:16 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini

2015-09-19 17:15 - 2014-12-31 17:53 - 00000000 ____D C:\Program Files (x86)\Fitbit Connect

2015-09-19 14:57 - 2014-08-26 23:59 - 00000000 ____D C:\Users\302-\Desktop\Shepherd of Fire

2015-09-19 13:17 - 2009-07-14 06:45 - 00309464 _____ C:\Windows\system32\FNTCACHE.DAT

2015-09-18 17:26 - 2014-08-25 16:20 - 00070064 _____ C:\Users\302-\AppData\Local\GDIPFONTCACHEV1.DAT

2015-09-18 03:02 - 2014-11-15 23:11 - 00000000 ____D C:\Users\302-\AppData\Roaming\vlc

2015-09-16 22:00 - 2014-08-27 00:21 - 00000000 ____D C:\Windows\Minidump

2015-09-16 00:41 - 2014-08-25 16:20 - 00000000 ____D C:\Users\302-

2015-09-14 20:16 - 2014-08-25 16:31 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2015-09-14 20:16 - 2014-08-25 16:31 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2015-09-13 01:17 - 2015-05-12 16:20 - 00000000 ____D C:\Users\302-\.thumbnails

2015-09-10 13:53 - 2014-08-25 16:31 - 00000000 ____D C:\Users\302-\AppData\Local\Google

2015-09-09 23:07 - 2010-11-21 09:00 - 00000000 ____D C:\Program Files\Windows Journal

2015-09-09 23:07 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions

2015-09-09 23:05 - 2015-04-14 22:31 - 00000000 ____D C:\Windows\system32\MRT

2015-09-02 14:00 - 2015-02-16 22:07 - 00000000 ____D C:\Program Files (x86)\Origin

2015-09-01 11:46 - 2014-08-22 18:36 - 00000000 ____D C:\ProgramData\Package Cache

2015-08-31 22:14 - 2014-10-06 19:52 - 00000000 ____D C:\Users\302-\AppData\Local\Apple Computer

2015-08-31 00:38 - 2015-04-25 21:41 - 00000080 _____ C:\Users\302-\AppData\Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦

2015-08-31 00:31 - 2015-04-25 19:43 - 00000000 ____D C:\Program Files (x86)\Rockstar Games

2015-08-31 00:31 - 2015-04-25 19:42 - 00000000 ____D C:\Program Files\Rockstar Games

2015-08-30 23:09 - 2015-02-16 22:08 - 00000000 ____D C:\Users\302-\AppData\Roaming\Origin

2015-08-29 16:52 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default

2015-08-26 18:37 - 2015-04-14 22:31 - 134753440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-08-26 17:13 - 2015-08-08 00:01 - 00001134 _____ C:\Users\Public\Desktop\Game Capture HD.lnk

2015-08-26 14:20 - 2014-08-26 23:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2015-08-26 03:00 - 2014-08-26 17:19 - 00000000 ____D C:\Users\302-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2015-08-25 12:26 - 2014-08-31 16:05 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client

2015-08-24 18:46 - 2015-08-06 01:58 - 00000000 ____D C:\Users\302-\AppData\Local\Windows Live

2015-08-22 02:14 - 2015-08-19 21:33 - 00000000 ____D C:\Users\302-\AppData\Local\FluxSoftware

2015-08-22 00:13 - 2014-08-22 18:37 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2015-08-20 14:49 - 2015-08-19 02:49 - 0000040 ____H () C:\Program Files (x86)\2fe72cf2.tmp

2015-09-21 18:53 - 2015-09-21 18:53 - 0076652 _____ () C:\Users\302-\AppData\Local\recently-used.xbel

2014-08-22 18:39 - 2014-08-22 18:39 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
 

Dateien, die verschoben oder gelöscht werden sollten:

====================

C:\Users\302-\worldpainter_64_1.11.1.exe
 
 

Einige Dateien in TEMP:

====================

C:\Users\302-\AppData\Local\Temp\avgnt.exe
 
 

==================== Bamital & volsnap =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\Windows\system32\winlogon.exe => Datei ist digital signiert

C:\Windows\system32\wininit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert

C:\Windows\explorer.exe => Datei ist digital signiert

C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert

C:\Windows\system32\svchost.exe => Datei ist digital signiert

C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert

C:\Windows\system32\services.exe => Datei ist digital signiert

C:\Windows\system32\User32.dll => Datei ist digital signiert

C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert

C:\Windows\system32\userinit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert

C:\Windows\system32\rpcss.dll => Datei ist digital signiert

C:\Windows\system32\dnsapi.dll => Datei ist digital signiert

C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2015-09-11 00:53
 

==================== Ende von FRST.txt ============================

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:15-09-2015

durchgeführt von 302- (2015-09-21 23:57:00)

Gestartet von C:\Users\302-\Desktop

Windows 7 Home Premium Service Pack 1 (X64) (2014-08-25 14:20:23)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

302- (S-1-5-21-570197401-3978400442-3683679341-1000 - Administrator - Enabled) => C:\Users\302-

Administrator (S-1-5-21-570197401-3978400442-3683679341-500 - Administrator - Disabled)

Gast (S-1-5-21-570197401-3978400442-3683679341-501 - Limited - Disabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

Adobe Reader XI (11.0.12) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.12 - Adobe Systems Incorporated)

AMD Catalyst Install Manager (HKLM\...\{7E5DC2C5-115A-322B-976C-219237FAED66}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)

Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version:  - Bohemia Interactive)

Audacity 2.1.1 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.1 - Audacity Team)

Avira (HKLM-x32\...\{70e83cd8-4bd5-4039-ab5a-6b94a8abb641}) (Version: 1.1.21.25162 - Avira Operations GmbH & Co. KG)

Avira (x32 Version: 1.1.21.25162 - Avira Operations GmbH & Co. KG) Hidden

Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.12.420 - Avira Operations GmbH & Co. KG)

Battlefield 4™ CTE (HKLM-x32\...\{551A08D1-B60E-4DED-9B67-C3B38258CCA3}) (Version: 1.0.2.33598 - Electronic Arts)

Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.6.2 - EA Digital Illusions CE AB)

Besiege (HKLM-x32\...\Steam App 346010) (Version:  - Spiderling Studios)

Bing Bar (HKLM-x32\...\{08234a0d-cf39-4dca-99f0-0c5cb496da81}) (Version: 6.0.2282.0 - Microsoft Corporation)

Blender (HKLM\...\{EA3C8A99-1565-44FF-89FC-926CEEB623B5}) (Version: 2.75.1 - Blender Foundation)

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

Call of Duty: Black Ops II - Multiplayer (HKLM-x32\...\Steam App 202990) (Version:  - Treyarch)

Call of Duty: Black Ops II - Zombies (HKLM-x32\...\Steam App 212910) (Version:  - )

Call of Duty: Black Ops II (HKLM-x32\...\Steam App 202970) (Version:  - Treyarch)

Call of Duty: Black Ops III Beta (HKLM-x32\...\Steam App 388520) (Version:  - Treyarch)

Call of Duty: Modern Warfare 2 - Multiplayer (HKLM-x32\...\Steam App 10190) (Version:  - Infinity Ward)

Call of Duty: Modern Warfare 2 (HKLM-x32\...\Steam App 10180) (Version:  - Infinity Ward)

Call of Duty: Modern Warfare 3 - Multiplayer (HKLM-x32\...\Steam App 42690) (Version:  - Infinity Ward)

Call of Duty: Modern Warfare 3 (HKLM-x32\...\Steam App 42680) (Version:  - Infinity Ward)

Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)

Dolby Digital Live Pack (HKLM-x32\...\Dolby Digital Live Pack) (Version: 3.03 - Creative Technology Limited)

Dota 2 (HKLM-x32\...\Steam App 570) (Version:  - Valve)

DTS Connect Pack (HKLM-x32\...\DTS Connect Pack) (Version: 1.00 - Creative Technology Limited)

DVD Architect Studio 5.0 (HKLM-x32\...\{E42939AE-9660-11E2-9A0D-F04DA23A5C58}) (Version: 5.0.178 - Sony)

Dxtory version 2.0.128 (HKLM-x32\...\Dxtory2.0_is1) (Version: 2.0.128 - ExKode Co. Ltd.)

Elgato Game Capture HD (HKLM-x32\...\{BB567603-AAA6-4AAA-BFC7-5C8EC0971650}) (Version: 2.11.43.962 - Elgato Systems GmbH)

Fitbit Connect (HKLM-x32\...\{08002BE6-6476-4012-8D4B-CF0AE7C71F29}) (Version: 2.0.0.6518 - Fitbit Inc.)

Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )

Free MP4 MP3 Converter 3.0.1 (HKLM-x32\...\Free MP4 MP3 Converter) (Version: 3.0.1 - ZISUN Freeware)

Game Capture HD v2.3.3.38 (HKLM-x32\...\Software_Elgato_Game Capture HD) (Version: 2.3.3.38 - Elgato Systems)

Gameforge Live 2.0.7 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.7 - Gameforge)

GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 45.0.2454.93 - Google Inc.)

Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden

Grand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version:  - Rockstar North)

Heroes & Generals (HKLM-x32\...\Heroes & Generals) (Version: 1.0.6.1 - Reto-Moto)

HomePlug AV Ethernet Adapter (HKLM-x32\...\{2DFC446B-8A6E-4EF3-99DF-C89E37DB156D}) (Version:  - )

Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.0.1204 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.0.3.1001 - Intel Corporation)

Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.0.16 - Intel Corporation)

Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.13 - Intel(R) Corporation) Hidden

iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)

Java 8 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418051F0}) (Version: 8.0.510 - Oracle Corporation)

Java 8 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)

Lagarith Lossless Codec (1.3.27) (HKLM-x32\...\{F59AC46C-10C3-4023-882C-4212A92283B3}_is1) (Version:  - )

League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )

League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden

Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)

Metin2 (HKLM-x32\...\Metin2_is1) (Version:  - Gameforge 4D GmbH)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)

Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Movie Studio Platinum 12.0 (64-bit) (HKLM\...\{6C3C3A70-958D-11E2-B0E5-F04DA23A5C58}) (Version: 12.0.896 - Sony)

MSI Afterburner 4.1.0 (HKLM-x32\...\Afterburner) (Version: 4.1.0 - MSI Co., LTD)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.3 - Notepad++ Team)

OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)

Origin (HKLM-x32\...\Origin) (Version: 9.5.5.2850 - Electronic Arts, Inc.)

paint.net (HKLM\...\{F509C1F4-0029-49F9-B145-A4C4E8DF481A}) (Version: 4.0.3 - dotPDN LLC)

PingPlotter 4.01.2 (HKLM-x32\...\{7C20D443-1352-49AB-90D8-71CC34C50917}) (Version: 4.1.2.14 - Pingman Tools, LLC)

PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)

puush (HKLM-x32\...\{C3592426-531E-4110-911D-BFECE2CE284B}) (Version: 1.0.0.0 - Dean Herbert)

QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)

Raptr (HKLM-x32\...\Raptr) (Version:  - )

Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 7.78.1218.2013 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7200 - Realtek Semiconductor Corp.)

Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.6.5 - Rockstar Games)

Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)

Skype™ 7.8 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.8.102 - Skype Technologies S.A.)

Sound Blaster Z-Series (HKLM-x32\...\{E48EE8B8-1CD6-4F60-AB93-7C398DAAE08E}) (Version: 1.00.21 - Creative Technology Limited)

Sound Blaster Z-Series Extras (HKLM-x32\...\{9D9DB4BA-E352-4AC8-AD2B-B10104F5AB80}) (Version: 1.0 - Creative Technology Limited)

Sound Forge Audio Studio 10.0 (HKLM-x32\...\{75B7DF80-925B-11E2-94F5-F04DA23A5C58}) (Version: 10.0.245 - Sony)

Spotify (HKU\S-1-5-21-570197401-3978400442-3683679341-1000\...\Spotify) (Version: 1.0.14.124.g4dfabc51 - Spotify AB)

Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)

TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)

TeamViewer 8 (HKLM-x32\...\TeamViewer 8) (Version: 8.0.16642 - TeamViewer)

The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)

The Evil Within (HKLM-x32\...\Steam App 268050) (Version:  - Tango Gameworks)

The Witcher 3: Wild Hunt (HKLM-x32\...\Steam App 292030) (Version:  - CD PROJEKT RED)

Titanfall™ (HKLM-x32\...\{347EE0C3-0690-48F6-A231-53853C2A80D6}) (Version: 1.0.9.6 - Electronic Arts)

Uplay (HKLM-x32\...\Uplay) (Version: 7.4 - Ubisoft)

VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)

War Thunder Launcher 1.0.1.397 (HKLM-x32\...\{ed8deea4-29fa-3932-9612-e2122d8a62d9}}_is1) (Version:  - Gaijin Entertainment)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)

WinRAR 5.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)

World of Warships (HKU\S-1-5-21-570197401-3978400442-3683679341-1000\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C814eu}_is1) (Version:  - Wargaming.net)

WorldPainter 1.11.1 (HKLM\...\4144-4862-0472-7103) (Version: 1.11.1 - pepsoft.org)

Worms Ultimate Mayhem (HKLM-x32\...\Steam App 70600) (Version:  - Team17 Software Ltd.)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Wiederherstellungspunkte =========================
 

20-09-2015 22:08:20 Installed Minecraft

21-09-2015 23:45:09 Removed Minecraft
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2009-07-14 04:34 - 2015-09-19 17:16 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {1B4C5D0A-96AC-4DC6-8FCE-70B47C7D3C0D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {2A7C7229-544E-4E0D-A68E-81A6F296FE6C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)

Task: {44D533B7-9979-4838-91D5-B9948CEDB889} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)

Task: {504D497B-CDB8-4686-ABBD-EE02DDEB12F3} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)

Task: {71596BB6-953D-4B48-845A-BC95605F571C} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser

Task: {778A3B73-50D3-4D60-872B-5A2F7239F585} - System32\Tasks\{05266ED9-F493-426B-9A0D-787DD87292F2} => pcalua.exe -a C:\Users\302-\Desktop\forge-1.7.2-10.12.2.1121-installer-win.exe -d C:\Users\302-\Desktop
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2015-02-17 00:44 - 2015-02-17 00:44 - 00076152 _____ () C:\Windows\system32\PnkBstrA.exe

2014-05-12 11:49 - 2014-05-12 11:49 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll

2012-01-10 14:41 - 2015-08-05 01:19 - 00568904 _____ () C:\Program Files (x86)\puush\puush.exe

2014-02-28 11:14 - 2015-08-25 12:26 - 00179176 _____ () C:\Program Files\TeamSpeak 3 Client\quazip.dll

2014-08-04 15:43 - 2015-08-25 12:26 - 00103400 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\directsound_win64.dll

2014-08-04 15:43 - 2015-08-25 12:26 - 00108008 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win64.dll

2014-08-04 15:46 - 2015-08-25 12:26 - 00312296 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\clientquery_plugin.dll

2014-08-04 15:46 - 2015-08-25 12:26 - 00483816 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll

2014-06-05 15:48 - 2015-08-25 12:26 - 00318976 _____ () C:\Program Files\TeamSpeak 3 Client\ssleay32.dll

2014-06-05 15:48 - 2015-08-25 12:26 - 01718784 _____ () C:\Program Files\TeamSpeak 3 Client\LIBEAY32.dll

2014-07-31 12:16 - 2014-07-31 12:16 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

2014-10-11 14:05 - 2014-10-11 14:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

2015-02-16 22:08 - 2015-09-02 14:00 - 01016832 _____ () C:\Program Files (x86)\Origin\platforms\qwindows.dll

2015-02-16 22:08 - 2015-09-02 14:00 - 00028160 _____ () C:\Program Files (x86)\Origin\imageformats\qgif.dll

2015-02-16 22:08 - 2015-09-02 14:00 - 00029696 _____ () C:\Program Files (x86)\Origin\imageformats\qico.dll

2015-02-16 22:08 - 2015-09-02 14:00 - 00256000 _____ () C:\Program Files (x86)\Origin\imageformats\qjpeg.dll

2015-02-16 22:08 - 2015-09-02 14:00 - 00266240 _____ () C:\Program Files (x86)\Origin\imageformats\qmng.dll

2015-02-16 22:08 - 2015-09-02 14:00 - 00023552 _____ () C:\Program Files (x86)\Origin\imageformats\qtga.dll

2015-02-16 22:08 - 2015-09-02 14:00 - 00346112 _____ () C:\Program Files (x86)\Origin\imageformats\qtiff.dll

2015-02-16 22:08 - 2015-09-02 14:00 - 00023552 _____ () C:\Program Files (x86)\Origin\imageformats\qwbmp.dll

2015-09-21 23:48 - 2014-08-27 15:00 - 00052472 _____ () C:\Users\302-\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll

2012-11-23 09:04 - 2012-11-23 09:04 - 00741376 _____ () C:\Program Files (x86)\Creative\Sound Blaster Z-Series\Sound Blaster Z-Series Control Panel\de-DE\SBZ.resources.dll

2010-11-23 00:56 - 2010-11-23 00:56 - 00087040 _____ () C:\Program Files (x86)\Raptr\_ctypes.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00043008 _____ () C:\Program Files (x86)\Raptr\_socket.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00805376 _____ () C:\Program Files (x86)\Raptr\_ssl.pyd

2014-05-14 01:26 - 2014-05-14 01:26 - 05812736 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtGui.pyd

2014-05-14 01:26 - 2014-05-14 01:26 - 00067584 _____ () C:\Program Files (x86)\Raptr\sip.pyd

2014-05-14 01:26 - 2014-05-14 01:26 - 01662464 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtCore.pyd

2014-05-14 01:26 - 2014-05-14 01:26 - 00494592 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtNetwork.pyd

2010-11-23 00:57 - 2010-11-23 00:57 - 00096256 _____ () C:\Program Files (x86)\Raptr\win32api.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00110592 _____ () C:\Program Files (x86)\Raptr\pywintypes26.dll

2010-11-23 00:56 - 2010-11-23 00:56 - 00010240 _____ () C:\Program Files (x86)\Raptr\select.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00356864 _____ () C:\Program Files (x86)\Raptr\_hashlib.pyd

2010-11-23 00:57 - 2010-11-23 00:57 - 00036352 _____ () C:\Program Files (x86)\Raptr\win32process.pyd

2010-11-23 00:57 - 2010-11-23 00:57 - 00111104 _____ () C:\Program Files (x86)\Raptr\win32file.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00044544 _____ () C:\Program Files (x86)\Raptr\_sqlite3.pyd

2011-02-15 20:17 - 2011-02-15 20:17 - 00417501 _____ () C:\Program Files (x86)\Raptr\sqlite3.dll

2010-11-23 00:57 - 2010-11-23 00:57 - 00167936 _____ () C:\Program Files (x86)\Raptr\win32gui.pyd

2014-05-14 01:26 - 2014-05-14 01:26 - 00313856 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtWebKit.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00127488 _____ () C:\Program Files (x86)\Raptr\pyexpat.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00009216 _____ () C:\Program Files (x86)\Raptr\winsound.pyd

2014-08-14 02:37 - 2014-08-14 02:37 - 00113171 _____ () C:\Program Files (x86)\Raptr\libvlc.dll

2014-08-14 02:37 - 2014-08-14 02:37 - 02396691 _____ () C:\Program Files (x86)\Raptr\libvlccore.dll

2013-11-21 02:05 - 2013-11-21 02:05 - 00256000 _____ () C:\Program Files (x86)\Raptr\amd_ags.dll

2010-11-23 00:56 - 2010-11-23 00:56 - 00583680 _____ () C:\Program Files (x86)\Raptr\unicodedata.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00354304 _____ () C:\Program Files (x86)\Raptr\pythoncom26.dll

2010-11-23 00:57 - 2010-11-23 00:57 - 00263168 _____ () C:\Program Files (x86)\Raptr\win32com.shell.shell.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00324608 _____ () C:\Program Files (x86)\Raptr\PIL._imaging.pyd

2010-11-23 00:57 - 2010-11-23 00:57 - 00141312 _____ () C:\Program Files (x86)\Raptr\gobject._gobject.pyd

2014-06-18 02:56 - 2014-06-18 02:56 - 02717595 _____ () C:\Program Files (x86)\Raptr\heliotrope._purple.pyd

2011-02-15 20:17 - 2011-02-15 20:17 - 01213633 _____ () C:\Program Files (x86)\Raptr\libxml2-2.dll

2010-11-23 01:06 - 2010-11-23 01:06 - 00055808 _____ () C:\Program Files (x86)\Raptr\zlib1.dll

2013-05-10 01:52 - 2013-05-10 01:52 - 00495680 _____ () C:\Program Files (x86)\Raptr\plugins\libaim.dll

2013-05-10 01:52 - 2013-05-10 01:52 - 01183699 _____ () C:\Program Files (x86)\Raptr\liboscar.dll

2013-05-10 01:52 - 2013-05-10 01:52 - 00483306 _____ () C:\Program Files (x86)\Raptr\plugins\libicq.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 00655356 _____ () C:\Program Files (x86)\Raptr\plugins\libirc.dll

2013-05-03 20:56 - 2013-05-03 20:56 - 01306387 _____ () C:\Program Files (x86)\Raptr\plugins\libmsn.dll

2013-05-03 20:56 - 2013-05-03 20:56 - 00565461 _____ () C:\Program Files (x86)\Raptr\plugins\libxmpp.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 01640221 _____ () C:\Program Files (x86)\Raptr\libjabber.dll

2013-05-03 20:56 - 2013-05-03 20:56 - 00506276 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoo.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 01053730 _____ () C:\Program Files (x86)\Raptr\libymsg.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 00497782 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoojp.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 00603326 _____ () C:\Program Files (x86)\Raptr\plugins\ssl-nss.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 00474199 _____ () C:\Program Files (x86)\Raptr\plugins\ssl.dll

2015-09-16 03:22 - 2015-09-12 02:22 - 01501512 _____ () C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.93\libglesv2.dll

2015-09-16 03:22 - 2015-09-12 02:22 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.93\libegl.dll

2015-03-15 18:25 - 2015-09-18 00:36 - 45067320 _____ () C:\Users\302-\AppData\Roaming\Spotify\libcef.dll

2015-03-15 18:25 - 2015-09-18 00:36 - 01649208 _____ () C:\Users\302-\AppData\Roaming\Spotify\libglesv2.dll

2015-03-15 18:25 - 2015-09-18 00:36 - 00080952 _____ () C:\Users\302-\AppData\Roaming\Spotify\libegl.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\Windows\Temp:$DATA
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-570197401-3978400442-3683679341-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\302-\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.178.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [{A21238D4-6021-4579-9743-65D460373C02}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe

FirewallRules: [{B86369D1-7369-43F7-8FB8-9DC16EF5136F}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe

FirewallRules: [{13EAD04A-BF46-4FAB-922E-BDA20453D36D}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe

FirewallRules: [{307A1DD2-E22F-4C72-B4EE-03A5C1937828}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe

FirewallRules: [{41561678-51CD-4CCF-AB49-1562FB9B997C}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{AE499744-5198-4AB8-BB00-C38151141BCA}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{F2767255-905A-418B-850E-9C52D994230E}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{60D25865-1D5E-49A0-8D2C-73E550BCF002}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [TCP Query User{DAB37258-4657-4F53-B6C4-E3639E692683}C:\users\302-\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\302-\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{5AE2ECF8-941E-49A7-9CA0-8D15C3C17D60}C:\users\302-\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\302-\appdata\roaming\spotify\spotify.exe

FirewallRules: [{0D49A9F8-89B1-4B94-96C0-E6BF08C2ED57}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4mp.exe

FirewallRules: [{F65B0709-096C-4A94-A461-A27192A87ED4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4mp.exe

FirewallRules: [{15A6CF55-7638-46BB-B54F-450A4AFDFD7B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe

FirewallRules: [{1D48A4DB-E10D-4645-872C-2CE3BCDF0CB2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe

FirewallRules: [TCP Query User{9D600FEE-CAFD-4754-AAD6-6B3AB085B767}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe

FirewallRules: [UDP Query User{43EDB761-C6B5-4748-9980-A446F92B2068}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe

FirewallRules: [{45119345-79B6-498A-90A7-344CAF6A20FB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5sp.exe

FirewallRules: [{5C006A65-1280-4025-93EB-B2A2C042BC65}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5sp.exe

FirewallRules: [{76842799-2953-4434-A3D3-D017F0719E4A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe

FirewallRules: [{0175E2FD-788F-4E30-AA80-A4E1F809868C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe

FirewallRules: [TCP Query User{C0DDBE2B-617A-4B19-8BD7-FF5209D29F79}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [UDP Query User{F93EDCC5-E716-44A6-A8EF-4DEE31FC1EB0}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [{CEA18D57-EF55-4981-9BAE-8707A793DF02}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe

FirewallRules: [{2782807F-CC9A-4CFE-B1C2-59B020EA75BC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe

FirewallRules: [{E255702F-89DE-4911-ADC4-58A78FB9423A}] => (Allow) C:\Program Files (x86)\WarThunder\launcher.exe

FirewallRules: [{9167B2A4-11E3-4DE3-A0DE-FC77A71D54C8}] => (Allow) C:\Program Files (x86)\WarThunder\launcher.exe

FirewallRules: [TCP Query User{6C274B12-97C1-4099-AFE2-01895FF260C3}C:\program files (x86)\warthunder\aces.exe] => (Allow) C:\program files (x86)\warthunder\aces.exe

FirewallRules: [UDP Query User{0D2A8895-8B18-454C-B943-CA8B22578C77}C:\program files (x86)\warthunder\aces.exe] => (Allow) C:\program files (x86)\warthunder\aces.exe

FirewallRules: [{79DAC04E-562A-464E-A824-2E7E82B7A41B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [{9415316C-69B8-462E-8595-770E6C74A357}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [TCP Query User{61116760-18BD-4EE7-9E44-10961F78C21C}C:\users\302-\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\302-\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{D08BCAAA-BAFA-4DD8-BF3E-BC9190825F05}C:\users\302-\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\302-\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{17ADCC1C-7487-4E69-A446-FFE9BD9962BF}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [UDP Query User{2FA126F1-D8B5-4F01-8E44-0B231934133C}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [{016D8929-7329-47B7-BA08-40DC0B6A82E4}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{15183706-446C-44F8-8CCC-ED3448622337}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{6032C9D7-502D-4525-8C1C-457DBE8475F9}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{72214781-06BE-42B5-8E66-A7AEA3237EF6}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{8501085A-5C8F-4024-B2EF-ABF10A3B9C1E}] => (Allow) E:\SteamLibrary\SteamApps\common\Call of Duty Black Ops II\t6zm.exe

FirewallRules: [{C7E75C1E-0E6A-4943-8E41-F309FF3C8B32}] => (Allow) E:\SteamLibrary\SteamApps\common\Call of Duty Black Ops II\t6zm.exe

FirewallRules: [{5DB5A6FB-5A93-4C1D-B745-DAABE9210D6D}] => (Allow) E:\SteamLibrary\SteamApps\common\Call of Duty Black Ops II\t6sp.exe

FirewallRules: [{8A3975EF-F4A5-4AEC-9BDB-8718E5C9E853}] => (Allow) E:\SteamLibrary\SteamApps\common\Call of Duty Black Ops II\t6sp.exe

FirewallRules: [{66ED9E23-85C9-4E48-95BF-60119ACF20BB}] => (Allow) E:\SteamLibrary\SteamApps\common\Call of Duty Black Ops II\t6mp.exe

FirewallRules: [{54E08AA1-59BD-41EB-A6DB-20DC8CD49255}] => (Allow) E:\SteamLibrary\SteamApps\common\Call of Duty Black Ops II\t6mp.exe

FirewallRules: [{A4F286DC-D5AE-444B-9FB4-63B3C0B6AD6A}] => (Allow) E:\SteamLibrary\SteamApps\common\DayZ\DayZ.exe

FirewallRules: [{25B7039E-DA45-45C9-8282-F5F244C0CE0D}] => (Allow) E:\SteamLibrary\SteamApps\common\DayZ\DayZ.exe

FirewallRules: [{DCB93497-B86A-42B9-BDBB-17D363C84229}] => (Allow) E:\SteamLibrary\SteamApps\common\TheEvilWithin\EvilWithin.exe

FirewallRules: [{A76A7F8E-F6CC-4134-813C-04E23C6406F1}] => (Allow) E:\SteamLibrary\SteamApps\common\TheEvilWithin\EvilWithin.exe

FirewallRules: [{243D456B-E571-453A-92AF-E6A96D7A824B}] => (Allow) E:\SteamLibrary\SteamApps\common\WormsXHD\Launcher.exe

FirewallRules: [{6094A5AA-8170-486B-B97B-80C3507CE55D}] => (Allow) E:\SteamLibrary\SteamApps\common\WormsXHD\Launcher.exe

FirewallRules: [{5E344668-DBA8-4C92-9C2E-8B7D0FD20797}] => (Allow) E:\SteamLibrary\SteamApps\common\DayZ\DayZ_BE.exe

FirewallRules: [{21442C22-988F-4C99-ACD4-6C9376033077}] => (Allow) E:\SteamLibrary\SteamApps\common\DayZ\DayZ_BE.exe

FirewallRules: [{EECDBAF8-19F8-4E95-9311-9EBE04A12827}] => (Allow) E:\SteamLibrary\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA_BE.exe

FirewallRules: [{A65C09E5-ECAB-47CA-9FF0-F3073C98DC9C}] => (Allow) E:\SteamLibrary\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA_BE.exe

FirewallRules: [{4CA6BA93-539A-475B-957F-C2F999D80C34}] => (Allow) E:\SteamLibrary\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe

FirewallRules: [{5A3DF4B6-D156-4FC3-AD9B-738907A205B9}] => (Allow) E:\SteamLibrary\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe

FirewallRules: [{34383B4E-A683-4140-9426-CEF18C00D2CD}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe

FirewallRules: [TCP Query User{06BAFC08-2A00-47EA-8177-8D7B1BDE20C4}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [UDP Query User{D1F6DD60-EB3D-4BE9-B175-AD10D27BC3A1}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [{2489C84C-FA21-49C1-AF37-7E4EB8F7C8B1}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{428FCB94-A049-4F25-B1F1-F18F4CB41BF9}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{B6507A59-9E5D-407C-A71C-1903E250D391}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{D0C168F1-460D-45A8-B5AE-39D037371059}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{015D2BDE-64B1-4564-A82A-1F6D941DF2C7}] => (Allow) E:\Origin\Titanfall\Titanfall.exe

FirewallRules: [{F5A492B6-57E0-4AA9-8CF2-AF3FDBDAAA13}] => (Allow) E:\Origin\Titanfall\Titanfall.exe

FirewallRules: [{875CCF35-EEEF-46D4-8E95-B3D6A3317E47}] => (Allow) E:\SteamLibrary\SteamApps\common\Besiege\Besiege.exe

FirewallRules: [{480840CB-70A7-42E8-BE64-414F132E161A}] => (Allow) E:\SteamLibrary\SteamApps\common\Besiege\Besiege.exe

FirewallRules: [TCP Query User{5BB423DA-3B7F-4F80-BFF0-0FC05C4A8160}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe

FirewallRules: [UDP Query User{0F40E0F6-D55A-4558-B10F-ADAD53FE4C50}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe

FirewallRules: [{65A64F62-4486-4E17-9AA7-660C4772DE79}] => (Allow) E:\SteamLibrary\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe

FirewallRules: [{DD2A2D18-917D-4314-B600-7F9F461D03F2}] => (Allow) E:\SteamLibrary\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe

FirewallRules: [{26ECAD15-EDB3-4FB0-8377-69C1608957C4}] => (Allow) E:\SteamLibrary\SteamApps\common\The Witcher 3\bin\x64\witcher3.exe

FirewallRules: [{DE7E784A-07C1-4173-AB7D-ED5031F26EC2}] => (Allow) E:\SteamLibrary\SteamApps\common\The Witcher 3\bin\x64\witcher3.exe

FirewallRules: [{68CDA800-ACA5-4CC0-862F-3845B267907A}] => (Allow) C:\Program Files (x86)\GameforgeLive\gfl_client.exe

FirewallRules: [{9B239324-9FC5-46A8-82BD-3AB8302FF638}] => (Allow) E:\Origin\Battlefield 4 CTE\bf4cte_x86.exe

FirewallRules: [{BA216860-CE6A-41E6-9CCE-DA6759D1AA1A}] => (Allow) E:\Origin\Battlefield 4 CTE\bf4cte_x86.exe

FirewallRules: [{DCC78CCB-6E90-4EDA-A798-BCDE507287BD}] => (Allow) E:\Origin\Battlefield 4 CTE\bf4cte.exe

FirewallRules: [{AE067506-477C-4C87-85D9-BF2ECFE0C20C}] => (Allow) E:\Origin\Battlefield 4 CTE\bf4cte.exe

FirewallRules: [TCP Query User{827E3664-75CA-4867-9595-52E7C12FF220}C:\games\world_of_warships\wowslauncher.exe] => (Allow) C:\games\world_of_warships\wowslauncher.exe

FirewallRules: [UDP Query User{F6F402DB-0380-47E5-A950-44A98123AB2E}C:\games\world_of_warships\wowslauncher.exe] => (Allow) C:\games\world_of_warships\wowslauncher.exe

FirewallRules: [TCP Query User{DF295CD8-9679-4EF2-9B51-8DEE969B5FCC}E:\wows\wowslauncher.exe] => (Allow) E:\wows\wowslauncher.exe

FirewallRules: [UDP Query User{190C28F9-A638-4F9B-A9FF-0339EF9E04D3}E:\wows\wowslauncher.exe] => (Allow) E:\wows\wowslauncher.exe

FirewallRules: [{279F74AD-E7DA-4E3D-B2AE-47AD3AC4E7DE}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [TCP Query User{032FEBD4-5B37-4C6D-964B-166CD1782410}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [UDP Query User{56EE51A9-7D98-4690-9375-FD0EF2802358}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [{3D661413-EEC8-4372-B531-42FB21C4983B}] => (Allow) C:\Program Files (x86)\Heroes & Generals\live\hng.exe

FirewallRules: [{1368E948-28E1-40D2-809A-889138CE8C27}] => (Allow) C:\Program Files (x86)\Heroes & Generals\live\hng.exe

FirewallRules: [{386B31F2-6240-4E82-A4A0-3718CC79177C}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe

FirewallRules: [{127DCA54-266E-4C8F-97F5-640A8A86AD5C}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe

FirewallRules: [{F71DA277-258C-4E02-8FB9-4CA70DF4C42B}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe

FirewallRules: [{6C0C0A8B-D3FF-462E-B931-EE196C3E3C3E}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe

FirewallRules: [{34215F91-2C28-4732-8855-200DDA463699}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{8418F0EF-339C-4BC5-B4E1-AAA18825A1CC}] => (Allow) LPort=2869

FirewallRules: [{2AC34B33-1E7E-4E78-86BB-0C2D05335003}] => (Allow) LPort=1900

FirewallRules: [{23E683D5-512D-4597-B316-D15F22128713}] => (Allow) E:\Origin\Battlefield 4 CTE\BF4CTEX86WebHelper.exe

FirewallRules: [{FE4F5940-082F-4004-83D8-D7F9431B1B83}] => (Allow) E:\Origin\Battlefield 4 CTE\BF4CTEX86WebHelper.exe

FirewallRules: [{6CE4C917-117B-4B1D-BF6A-8D46B0B892A1}] => (Allow) E:\Origin\Battlefield 4 CTE\BF4CTEWebHelper.exe

FirewallRules: [{38FFD8AA-165E-43EB-BEC6-201A4D177243}] => (Allow) E:\Origin\Battlefield 4 CTE\BF4CTEWebHelper.exe

FirewallRules: [{845269B4-F0BF-4418-877D-E5E1D125F304}] => (Allow) E:\SteamLibrary\SteamApps\common\dota 2 beta\dota.exe

FirewallRules: [{60B8867F-8714-4DA9-B3C1-2FD73EC2F264}] => (Allow) E:\SteamLibrary\SteamApps\common\dota 2 beta\dota.exe

FirewallRules: [{DE4D4459-6701-4D89-864F-B02EBD793A23}] => (Allow) E:\SteamLibrary\SteamApps\common\Call of Duty Black Ops III Beta\BlackOps3.exe

FirewallRules: [{16001459-A2B5-48B2-876C-AF6FD5F61A72}] => (Allow) E:\SteamLibrary\SteamApps\common\Call of Duty Black Ops III Beta\BlackOps3.exe

FirewallRules: [{A79A0BA9-4198-480F-839F-1E2C58FE52CF}] => (Allow) E:\SteamLibrary\SteamApps\common\Grand Theft Auto V\GTA5.exe

FirewallRules: [{20581424-7ACC-49FA-9607-0073E2049728}] => (Allow) E:\SteamLibrary\SteamApps\common\Grand Theft Auto V\GTA5.exe

FirewallRules: [{D514A8B0-EF32-49FF-8CFF-10336D781803}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (09/21/2015 11:49:33 PM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Application: Avira.OE.ServiceHost.exe

Framework Version: v4.0.30319

Description: The process was terminated due to an unhandled exception.

Exception Info: System.TypeInitializationException

Stack:

   at NLog.Common.InternalLogger.Debug(System.String, System.Object[])

   at NLog.LogFactory.get_Configuration()

   at NLog.LogFactory.GetLogger(LoggerCacheKey)

   at NLog.LogFactory.GetLogger(System.String)

   at NLog.LogManager.GetLogger(System.String)

   at Avira.OE.WinCore.Utility.LoggerFacade.GetLogger(System.String)

   at Avira.OE.WinCore.Utility.LoggerFacade.GetCurrentClassLogger()

   at Avira.OE.WinCore.Lazy`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].get_Value()

   at Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()

   at Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)

   at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)

   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

   at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()

   at System.Threading.ThreadPoolWorkQueue.Dispatch()

   at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()
 

Error: (09/21/2015 11:49:22 PM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Application: Avira.OE.ServiceHost.exe

Framework Version: v4.0.30319

Description: The process was terminated due to an unhandled exception.

Exception Info: System.TypeInitializationException

Stack:

   at NLog.Common.InternalLogger.Debug(System.String, System.Object[])

   at NLog.LogFactory.get_Configuration()

   at NLog.LogFactory.GetLogger(LoggerCacheKey)

   at NLog.LogFactory.GetLogger(System.String)

   at NLog.LogManager.GetLogger(System.String)

   at Avira.OE.WinCore.Utility.LoggerFacade.GetLogger(System.String)

   at Avira.OE.WinCore.Utility.LoggerFacade.GetCurrentClassLogger()

   at Avira.OE.WinCore.Lazy`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].get_Value()

   at Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()

   at Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)

   at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)

   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

   at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()

   at System.Threading.ThreadPoolWorkQueue.Dispatch()

   at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()
 

Error: (09/21/2015 11:49:13 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/21/2015 11:49:11 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Avira.OE.Systray.exe, Version: 1.1.21.25189, Zeitstempel: 0x53fdd63b

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18939, Zeitstempel: 0x55afd8e7

Ausnahmecode: 0xe0434352

Fehleroffset: 0x0000c42d

ID des fehlerhaften Prozesses: 0xe60

Startzeit der fehlerhaften Anwendung: 0xAvira.OE.Systray.exe0

Pfad der fehlerhaften Anwendung: Avira.OE.Systray.exe1

Pfad des fehlerhaften Moduls: Avira.OE.Systray.exe2

Berichtskennung: Avira.OE.Systray.exe3
 

Error: (09/21/2015 11:48:52 PM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Application: Avira.OE.Systray.exe

Framework Version: v4.0.30319

Description: The process was terminated due to an unhandled exception.

Exception Info: System.Configuration.ConfigurationErrorsException

Stack:

   at System.Configuration.BaseConfigurationRecord.GetSectionRecursive(System.String, Boolean, Boolean, Boolean, Boolean, System.Object ByRef, System.Object ByRef)

   at System.Configuration.BaseConfigurationRecord.GetSection(System.String)

   at System.Configuration.ClientConfigurationSystem.System.Configuration.Internal.IInternalConfigSystem.GetSection(System.String)

   at System.Configuration.ConfigurationManager.GetSection(System.String)

   at System.Configuration.ConfigurationManager.get_AppSettings()

   at Avira.OE.WinCore.OeProductInfo.get_Culture()

   at Avira.OE.WinCore.Utility.CultureSetter.SetDefaultCultureDefinedInAppsettings()

   at Avira.OE.Systray.Program.Main(System.String[])
 

Error: (09/21/2015 11:48:48 PM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Application: Avira.OE.ServiceHost.exe

Framework Version: v4.0.30319

Description: The process was terminated due to an unhandled exception.

Exception Info: System.TypeInitializationException

Stack:

   at NLog.Common.InternalLogger.Debug(System.String, System.Object[])

   at NLog.LogFactory.get_Configuration()

   at NLog.LogFactory.GetLogger(LoggerCacheKey)

   at NLog.LogFactory.GetLogger(System.String)

   at NLog.LogManager.GetLogger(System.String)

   at Avira.OE.WinCore.Utility.LoggerFacade.GetLogger(System.String)

   at Avira.OE.WinCore.Utility.LoggerFacade.GetCurrentClassLogger()

   at Avira.OE.WinCore.Lazy`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].get_Value()

   at Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()

   at Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)

   at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)

   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

   at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()

   at System.Threading.ThreadPoolWorkQueue.Dispatch()

   at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()
 

Error: (09/21/2015 11:44:39 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: java.exe, Version: 8.0.25.18, Zeitstempel: 0x54345ca0

Name des fehlerhaften Moduls: glass.dll, Version: 8.0.25.18, Zeitstempel: 0x543462c4

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000000000001d45a

ID des fehlerhaften Prozesses: 0x1c4c

Startzeit der fehlerhaften Anwendung: 0xjava.exe0

Pfad der fehlerhaften Anwendung: java.exe1

Pfad des fehlerhaften Moduls: java.exe2

Berichtskennung: java.exe3
 

Error: (09/21/2015 01:53:19 PM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Application: Avira.OE.ServiceHost.exe

Framework Version: v4.0.30319

Description: The process was terminated due to an unhandled exception.

Exception Info: System.TypeInitializationException

Stack:

   at NLog.Common.InternalLogger.Debug(System.String, System.Object[])

   at NLog.LogFactory.get_Configuration()

   at NLog.LogFactory.GetLogger(LoggerCacheKey)

   at NLog.LogFactory.GetLogger(System.String)

   at NLog.LogManager.GetLogger(System.String)

   at Avira.OE.WinCore.Utility.LoggerFacade.GetLogger(System.String)

   at Avira.OE.WinCore.Utility.LoggerFacade.GetCurrentClassLogger()

   at Avira.OE.WinCore.Lazy`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].get_Value()

   at Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()

   at Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)

   at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)

   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

   at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()

   at System.Threading.ThreadPoolWorkQueue.Dispatch()

   at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()
 

Error: (09/21/2015 01:53:08 PM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Application: Avira.OE.ServiceHost.exe

Framework Version: v4.0.30319

Description: The process was terminated due to an unhandled exception.

Exception Info: System.TypeInitializationException

Stack:

   at NLog.Common.InternalLogger.Debug(System.String, System.Object[])

   at NLog.LogFactory.get_Configuration()

   at NLog.LogFactory.GetLogger(LoggerCacheKey)

   at NLog.LogFactory.GetLogger(System.String)

   at NLog.LogManager.GetLogger(System.String)

   at Avira.OE.WinCore.Utility.LoggerFacade.GetLogger(System.String)

   at Avira.OE.WinCore.Utility.LoggerFacade.GetCurrentClassLogger()

   at Avira.OE.WinCore.Lazy`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].get_Value()

   at Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()

   at Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)

   at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)

   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

   at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()

   at System.Threading.ThreadPoolWorkQueue.Dispatch()

   at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()
 

Error: (09/21/2015 01:53:08 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Avira.OE.Systray.exe, Version: 1.1.21.25189, Zeitstempel: 0x53fdd63b

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18939, Zeitstempel: 0x55afd8e7

Ausnahmecode: 0xe0434352

Fehleroffset: 0x0000c42d

ID des fehlerhaften Prozesses: 0x1274

Startzeit der fehlerhaften Anwendung: 0xAvira.OE.Systray.exe0

Pfad der fehlerhaften Anwendung: Avira.OE.Systray.exe1

Pfad des fehlerhaften Moduls: Avira.OE.Systray.exe2

Berichtskennung: Avira.OE.Systray.exe3
 
 

Systemfehler:

=============

Error: (09/21/2015 11:49:33 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert.
 

Error: (09/21/2015 11:49:22 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (09/21/2015 11:49:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (09/21/2015 11:48:24 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "TeamViewer 8" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%109
 

Error: (09/21/2015 11:48:22 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "PnkBstrA" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (09/21/2015 11:48:22 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (09/21/2015 11:48:22 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (09/21/2015 11:48:22 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Intel(R) Rapid Storage Technology" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (09/21/2015 11:48:22 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (09/21/2015 11:48:22 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
 
 

CodeIntegrity:

===================================

  Date: 2015-09-19 17:15:16.391

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-09-19 17:15:16.371

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Core(TM) i7-4790 CPU @ 3.60GHz

Prozentuale Nutzung des RAM: 23%

Installierter physikalischer RAM: 16287 MB

Verfügbarer physikalischer RAM: 12532.79 MB

Summe virtueller Speicher: 32572.2 MB

Verfügbarer virtueller Speicher: 28467.8 MB
 

==================== Laufwerke ================================
 

Drive c: () (Fixed) (Total:111.69 GB) (Free:14.13 GB) NTFS

Drive d: (MSP120Suite) (CDROM) (Total:2.94 GB) (Free:0 GB) CDFS

Drive e: (Volume) (Fixed) (Total:931.39 GB) (Free:174.23 GB) NTFS

Drive f: (INTENSO) (Removable) (Total:3.65 GB) (Free:3.61 GB) FAT32
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: E8D2D00F)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=111.7 GB) - (Type=07 NTFS)
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 00000000)
 

Partition: GPT.
 

========================================================

Disk: 2 (Size: 3.7 GB) (Disk ID: 2046B92B)

Partition 1: (Not Active) - (Size=3.7 GB) - (Type=0B)
 

==================== Ende von Addition.txt ============================