![]() |
|
Log-Analyse und Auswertung: Trojaner (keine Internetverbindung)Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
| ![]() Trojaner (keine Internetverbindung) Ich habe seit ein paar Wochen einen Trojaner, oder besser gesagt 3 so wie Microsoft Sexurity Essentials mir anzeigt. Hatte den Virus erkannt und unter Quarantäne gestellt und alle funktionierte einwandfrei, doch gestern ist mein Pc 2 mal nacheinander abgestürzt und dann konnte ich keine Internetverbindung mehr herstellen. Jetzt habe ich die 3 Trojaner per Microsoft Security Essentials entfernt, weil ich dachte das dann wieder alles funktionieren würde, aber das tut es nicht. Und Updaten ist auch nicht möglich, da kein Internet Habe jetzt einen OTL Scan durchgeführt. LG NeedHelp95OTL Logfile: Code:
ATTFilter OTL logfile created on: 02.06.2013 18:25:13 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\flo\Desktop\OTLL Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 3,25 Gb Total Physical Memory | 2,71 Gb Available Physical Memory | 83,53% Memory free 6,69 Gb Paging File | 6,34 Gb Available in Paging File | 94,84% Paging File free Paging file location(s): c:\pagefile.sys 0 0 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 931,51 Gb Total Space | 426,23 Gb Free Space | 45,76% Space Free | Partition Type: NTFS Drive E: | 124,72 Mb Total Space | 124,12 Mb Free Space | 99,52% Space Free | Partition Type: FAT Computer Name: *** | User Name: *** | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\flo\Desktop\OTLL\OTL.exe (OldTimer Tools) PRC - C:\Programme\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.) PRC - C:\Programme\LogMeIn Hamachi\hamachi-2.exe (LogMeIn Inc.) PRC - c:\Programme\Microsoft Security Client\MsMpEng.exe (Microsoft Corporation) PRC - C:\Programme\Microsoft Security Client\msseces.exe (Microsoft Corporation) PRC - C:\Windows\explorer.exe (Microsoft Corporation) ========== Modules (No Company Name) ========== MOD - C:\Programme\WinRAR\RarExt.dll () ========== Services (SafeList) ========== SRV - (NIHardwareService) -- C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe File not found SRV - (Roozz Updater) -- C:\Programme\Roozz\Updater.exe (Roozz) SRV - (Hamachi2Svc) -- C:\Programme\LogMeIn Hamachi\hamachi-2.exe (LogMeIn Inc.) SRV - (Steam Client Service) -- C:\Program Files\Common Files\Steam\SteamService.exe (Valve Corporation) SRV - (Akamai) -- c:\program files\common files\akamai/netsession_win_ca0e279.dll () SRV - (BstHdLogRotatorSvc) -- C:\Programme\BlueStacks\HD-LogRotatorService.exe (BlueStack Systems, Inc.) SRV - (BstHdAndroidSvc) -- C:\Program Files\BlueStacks\HD-Service.exe (BlueStack Systems, Inc.) SRV - (nvUpdatusService) -- C:\Programme\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation) SRV - (NisSrv) -- c:\Programme\Microsoft Security Client\NisSrv.exe (Microsoft Corporation) SRV - (MsMpSvc) -- c:\Programme\Microsoft Security Client\MsMpEng.exe (Microsoft Corporation) SRV - (Stereo Service) -- C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) SRV - (Desura Install Service) -- C:\Programme\Common Files\Desura\desura_service.exe (Desura Pty Ltd) SRV - (wlidsvc) -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) SRV - (npggsvc) -- C:\Windows\System32\GameMon.des (INCA Internet Co., Ltd.) SRV - (ACDaemon) -- C:\Programme\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.) SRV - (Fabs) -- C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe (MAGIX AG) SRV - (IAANTMON) -- C:\Programme\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation) SRV - (FirebirdServerMAGIXInstance) -- C:\Programme\Common Files\MAGIX Services\Database\bin\fbserver.exe (MAGIX®) SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation) SRV - (WMPNetworkSvc) -- C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation) SRV - (ScrambyServer) -- C:\Programme\RapidSolution\Scramby\ScrambyServer.exe (RapidSolution Software AG) SRV - (x10nets) -- C:\Programme\Common Files\X10\Common\X10nets.exe (X10) ========== Driver Services (SafeList) ========== DRV - (XDva399) -- C:\Windows\system32\XDva399.sys File not found DRV - (XDva386) -- C:\Windows\system32\XDva386.sys File not found DRV - (XDva385) -- C:\Windows\system32\XDva385.sys File not found DRV - (NwlnkFwd) -- system32\DRIVERS\nwlnkfwd.sys File not found DRV - (NwlnkFlt) -- system32\DRIVERS\nwlnkflt.sys File not found DRV - (IpInIp) -- system32\DRIVERS\ipinip.sys File not found DRV - (GGSAFERDriver) -- C:\Program Files\Garena\safedrv.sys File not found DRV - (GarenaPEngine) -- C:\Users\flo\AppData\Local\Temp\EMMF91B.tmp File not found DRV - (EagleXNt) -- C:\Windows\system32\drivers\EagleXNt.sys File not found DRV - (blbdrive) -- C:\Windows\system32\drivers\blbdrive.sys File not found DRV - (MpKslc8641f16) -- c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{82FD3CF4-9C5B-4365-A1EB-76DDF6A9D506}\MpKslc8641f16.sys () DRV - (apf003) -- C:\Windows\System32\apf003.sys () DRV - (BstHdDrv) -- C:\Programme\BlueStacks\HD-Hypervisor-x86.sys (BlueStack Systems) DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation) DRV - (NisDrv) -- C:\Windows\System32\drivers\NisDrvWFP.sys (Microsoft Corporation) DRV - (atksgt) -- C:\Windows\System32\drivers\atksgt.sys () DRV - (lirsgt) -- C:\Windows\System32\drivers\lirsgt.sys () DRV - (IntelDH) -- C:\Windows\System32\drivers\IntelDH.sys (Intel Corporation) DRV - (NxpCap) -- C:\Windows\System32\drivers\NxpCap.sys (Trident Microsystems, Inc.) DRV - (SCDEmu) -- C:\Windows\System32\drivers\scdemu.sys (PowerISO Computing, Inc.) DRV - (XUIF) -- C:\Windows\System32\drivers\x10ufx2.sys (X10 Wireless Technology, Inc.) DRV - (X10Hid) -- C:\Windows\System32\drivers\x10hid.sys (X10 Wireless Technology, Inc.) DRV - (hamachi) -- C:\Windows\System32\drivers\hamachi.sys (LogMeIn, Inc.) DRV - (e1express) -- C:\Windows\System32\drivers\e1e6032.sys (Intel Corporation) DRV - (netr28u) -- C:\Windows\System32\drivers\netr28u.sys (Ralink Technology Corp.) DRV - (ArcSoftKsUFilter) -- C:\Windows\System32\drivers\ArcSoftKsUFilter.sys (ArcSoft, Inc.) DRV - (FWLANUSB) -- C:\Windows\System32\drivers\fwlanusb.sys (AVM GmbH) DRV - (avmeject) -- C:\Windows\System32\drivers\avmeject.sys (AVM Berlin) DRV - (Afc) -- C:\Windows\System32\drivers\afc.sys (Arcsoft, Inc.) DRV - (CLEDX) -- C:\Windows\System32\drivers\cledx.sys (Team H2O) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local> IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local> IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-1260702108-229838344-945700951-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com IE - HKU\S-1-5-21-1260702108-229838344-945700951-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp IE - HKU\S-1-5-21-1260702108-229838344-945700951-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de IE - HKU\S-1-5-21-1260702108-229838344-945700951-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = FB 3D F0 7A 52 3E CB 01 [binary data] IE - HKU\S-1-5-21-1260702108-229838344-945700951-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKU\S-1-5-21-1260702108-229838344-945700951-1000\..\URLSearchHook: - No CLSID value found IE - HKU\S-1-5-21-1260702108-229838344-945700951-1000\..\URLSearchHook: {32b29df0-2237-4370-9a29-37cebb730e9b} - No CLSID value found IE - HKU\S-1-5-21-1260702108-229838344-945700951-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-1260702108-229838344-945700951-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-1260702108-229838344-945700951-1000\..\SearchScopes\{215FE445-F751-4699-90C8-1892BFE6D61E}: "URL" = hxxp://www.google.de/search?q={searchTerms} IE - HKU\S-1-5-21-1260702108-229838344-945700951-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1260702108-229838344-945700951-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = 127.0.0.1:9421;<local> ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "Google" FF - prefs.js..browser.search.defaultthis.engineName: "Search" FF - prefs.js..browser.search.order.1: "Google" FF - prefs.js..browser.search.order.2: "" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..extensions.enabledAddons: battlefieldplay4free%40ea.com:1.0.80.2 FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:17.0 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21 FF - prefs.js..extensions.enabledItems: {6E19037A-12E3-4295-8915-ED48BC341614}:1.3.329.2 FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1.6.2.99 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26 FF - prefs.js..extensions.enabledItems: gutscheinmieze@synatix-gmbh.de:1.03 FF - prefs.js..network.proxy.http: "194.154.128.65" FF - prefs.js..network.proxy.http_port: 8080 FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC) FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF - HKLM\Software\MozillaPlugins\@gamersfirst.com/LiveLauncher: File not found FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_37: C:\Windows\system32\npdeployJava1.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@ngm.nexoneu.com/NxGame: C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKLM\Software\MozillaPlugins\@Roozz.com/RoozzPlugin: C:\Program Files\Roozz\nproozz.dll (Roozz.com) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.4: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@nsroblox.roblox.com/launcher: C:\Users\flo\AppData\Local\Roblox\Versions\version-14148f7d00f24d47\\NPRobloxProxy.dll () FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\flo\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) FF - HKCU\Software\MozillaPlugins\@soe.sony.com/installer,version=1.0.3: File not found FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\flo\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\flo\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\flo\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKCU\Software\MozillaPlugins\thehappycloud.com/HappyCloudPlugin: C:\ProgramData\HappyCloud\Application\npHappyCloudPlugin.dll (The Happy Cloud) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012.02.03 22:23:03 | 000,000,000 | ---D | M] [2010.08.17 18:24:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\flo\AppData\Roaming\mozilla\Extensions [2012.11.21 16:49:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\flo\AppData\Roaming\mozilla\Firefox\Profiles\sfr93d4x.default\extensions [2011.03.06 16:10:01 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\flo\AppData\Roaming\mozilla\Firefox\Profiles\sfr93d4x.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010.12.05 18:54:11 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Users\flo\AppData\Roaming\mozilla\Firefox\Profiles\sfr93d4x.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} [2011.03.03 18:48:48 | 000,000,000 | ---D | M] (Adobe DLM (powered by getPlus(R))) -- C:\Users\flo\AppData\Roaming\mozilla\Firefox\Profiles\sfr93d4x.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7} [2012.09.25 20:04:46 | 000,000,000 | ---D | M] (Battlefield Play4Free) -- C:\Users\flo\AppData\Roaming\mozilla\Firefox\Profiles\sfr93d4x.default\extensions\battlefieldplay4free@ea.com [2012.09.25 19:42:08 | 000,000,000 | ---D | M] ("Vid-Saver") -- C:\Users\flo\AppData\Roaming\mozilla\Firefox\Profiles\sfr93d4x.default\extensions\crossriderapp3491@crossrider.com [2011.10.17 14:34:53 | 000,000,000 | ---D | M] (No name found) -- C:\Users\flo\AppData\Roaming\mozilla\Firefox\Profiles\sfr93d4x.default\extensions\nostmp [2012.09.25 19:42:08 | 000,000,000 | ---D | M] (No name found) -- C:\Users\flo\AppData\Roaming\mozilla\Firefox\Profiles\sfr93d4x.default\extensions\crossriderapp3491@crossrider.com\chrome\content\extensionCode [2012.01.05 20:38:57 | 000,010,390 | ---- | M] () (No name found) -- C:\Users\flo\AppData\Roaming\mozilla\firefox\profiles\sfr93d4x.default\extensions\{6e764c17-863a-450f-bdd0-6772bd5aaa18}.xpi [2010.11.13 20:32:41 | 000,000,950 | ---- | M] () -- C:\Users\flo\AppData\Roaming\mozilla\firefox\profiles\sfr93d4x.default\searchplugins\icqplugin-4.xml [2011.05.04 04:52:23 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2010.07.27 17:13:46 | 000,027,136 | ---- | M] (NHN USA Inc.) -- C:\Program Files\mozilla firefox\plugins\npijjiautoinstallpluginff.dll [2010.07.28 19:14:08 | 000,022,016 | ---- | M] (NHN USA Inc.) -- C:\Program Files\mozilla firefox\plugins\npijjiFFPlugin1.dll [2011.01.25 11:55:14 | 000,644,096 | ---- | M] (Synatix GmbH) -- C:\Program Files\mozilla firefox\plugins\npmieze.dll ========== Chrome ========== CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter} CHR - plugin: Shockwave Flash (Enabled) = C:\Users\flo\AppData\Local\Google\Chrome\Application\21.0.1180.75\PepperFlash\pepflashplayer.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Users\flo\AppData\Local\Google\Chrome\Application\27.0.1453.94\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\flo\AppData\Local\Google\Chrome\Application\27.0.1453.94\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\flo\AppData\Local\Google\Chrome\Application\27.0.1453.94\pdf.dll CHR - plugin: Bandoo (Enabled) = C:\Users\flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\dloejdefkancmfajekobpfoacecnhpgp\1.0.0.0_0\ChromePlugin.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll CHR - plugin: Java Deployment Toolkit 6.0.260.3 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U26 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll CHR - plugin: ijji Auto Install Plugin for Mozilla (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npijjiautoinstallpluginff.dll CHR - plugin: ijji Web Launching Plugin for FF (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npijjiFFPlugin1.dll CHR - plugin: Gutscheinmieze-Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npmieze.dll CHR - plugin: DivX VOD Helper Plug-in (Enabled) = C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll CHR - plugin: DivX Plus Web Player (Enabled) = C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll CHR - plugin: Roozz plugin (Enabled) = C:\Program Files\Roozz\nproozz.dll CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll CHR - plugin: Unity Player (Enabled) = C:\Users\flo\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll CHR - plugin: Windows Presentation Foundation (Enabled) = C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll CHR - Extension: YouTube = C:\Users\flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\ CHR - Extension: Webmail Ad Blocker = C:\Users\flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\cbhfdchmklhpcngcgjmpdbjakdggkkjp\3.2.1_0\ CHR - Extension: Adblock Plus = C:\Users\flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.4.1_0\ CHR - Extension: Google-Suche = C:\Users\flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\ CHR - Extension: AdBlock = C:\Users\flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.5.63_0\ CHR - Extension: AirMech = C:\Users\flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdahlabpinmfcemhcbcfoijcpoalfgdn\17455_0\ CHR - Extension: DVDVideoSoft Browser Extension = C:\Users\flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_0\ CHR - Extension: Battlefield Play4Free = C:\Users\flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiokahphinmbmakkehgelkmpolmnbkdh\1.0.96.0_0\ CHR - Extension: Mahjong T\u00E4glich = C:\Users\flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pemeklgblkcideppcaccohkijfkejgpm\2.2.0_0\ CHR - Extension: Facebook AdBlock = C:\Users\flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkoaaaiiaalegemhdeadohejihbdfbho\3.6_0\ O1 HOSTS File: ([2006.09.18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Programme\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) O3 - HKLM\..\Toolbar: (no name) - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} - No CLSID value found. O3 - HKU\S-1-5-21-1260702108-229838344-945700951-1000\..\Toolbar\WebBrowser: (no name) - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} - No CLSID value found. O4 - HKLM..\Run: [Aeria Ignite] C:\Program Files\Aeria Games\Ignite\aeriaignite.exe (Aeria Games & Entertainment) O4 - HKLM..\Run: [ArcSoft Connection Service] C:\Programme\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft Inc.) O4 - HKLM..\Run: [BlueStacks Agent] C:\Programme\BlueStacks\HD-Agent.exe (BlueStack Systems, Inc.) O4 - HKLM..\Run: [IAAnotif] C:\Programme\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation) O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.) O4 - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation) O4 - HKLM..\Run: [Skytel] C:\Programme\Realtek\Audio\HDA\SkyTel.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation) O4 - HKU\S-1-5-21-1260702108-229838344-945700951-1000..\Run: [Akamai NetSession Interface] C:\Users\flo\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.) O4 - HKU\S-1-5-21-1260702108-229838344-945700951-1000..\Run: [Facebook Update] C:\Users\flo\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.) O4 - HKU\S-1-5-21-1260702108-229838344-945700951-1000..\Run: [KPeerNexonEU] C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe (NEXON Inc.) O7 - HKU\S-1-5-21-1260702108-229838344-945700951-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 221 O7 - HKU\S-1-5-21-1260702108-229838344-945700951-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O8 - Extra context menu item: Download with Xilisoft YouTube Video Converter - C:\Programme\Xilisoft\YouTube Video Converter\upod_link.HTM () O8 - Extra context menu item: Free YouTube Download - C:\Users\flo\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm () O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\flo\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm () O9 - Extra 'Tools' menuitem : Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O9 - Extra Button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation) O9 - Extra Button: ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Programme\ICQ7.6\ICQ.exe (ICQ, LLC.) O9 - Extra 'Tools' menuitem : ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Programme\ICQ7.6\ICQ.exe (ICQ, LLC.) O13 - gopher Prefix: missing O15 - HKU\S-1-5-21-1260702108-229838344-945700951-1000\..Trusted Domains: aeriagames.com ([]http in Trusted sites) O15 - HKU\S-1-5-21-1260702108-229838344-945700951-1000\..Trusted Domains: aeriagames.com ([]https in Trusted sites) O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{252C8312-BDB4-4E90-9A7A-8281CECA38C8}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B0416E53-50F7-4FFB-90B9-51A89B74DACD}: DhcpNameServer = 192.168.2.1 O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation) O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation) O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Programme\Windows Live\Mail\mailcomm.dll (Microsoft Corporation) O18 - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Programme\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll (Microsoft Corporation) O20 - AppInit_DLLs: (c:\progra~1\bandoo\bndhook.dll) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Users\flo\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg O24 - Desktop BackupWallPaper: C:\Users\flo\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{6f8affe9-9eac-11e2-b60d-002185c639fa}\Shell - "" = AutoRun O33 - MountPoints2\{6f8affe9-9eac-11e2-b60d-002185c639fa}\Shell\AutoRun\command - "" = E:\Startme.exe O33 - MountPoints2\{ed305719-aaa8-11df-ab22-00224311ad62}\Shell - "" = AutoRun O33 - MountPoints2\{ed305719-aaa8-11df-ab22-00224311ad62}\Shell\AutoRun\command - "" = I:\pushinst.exe O33 - MountPoints2\E\Shell - "" = AutoRun O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\setup.exe O33 - MountPoints2\H\Shell - "" = AutoRun O33 - MountPoints2\H\Shell\AutoRun\command - "" = H:\AutoRunCD.exe O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) ========== Files/Folders - Created Within 30 Days ========== [2013.06.02 18:22:27 | 000,000,000 | ---D | C] -- C:\Users\flo\Desktop\OTLL [2013.05.30 19:42:55 | 000,000,000 | ---D | C] -- C:\Users\flo\AppData\Roaming\TERA [2013.05.30 19:42:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TERA [2013.05.30 19:42:34 | 000,000,000 | ---D | C] -- C:\Program Files\TERA [2013.05.24 21:32:32 | 000,000,000 | ---D | C] -- C:\Users\flo\Desktop\block bladi gentlemen [2013.05.22 13:44:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi [2013.05.22 13:44:43 | 000,000,000 | ---D | C] -- C:\Program Files\LogMeIn Hamachi [2013.05.16 13:47:44 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2013.05.16 13:38:36 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2013.05.16 13:38:35 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2013.05.16 13:38:35 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2013.05.16 13:38:34 | 000,607,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2013.05.16 13:38:32 | 001,800,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll [2013.05.16 13:38:31 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll [2013.05.16 13:38:30 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2013.05.15 12:15:32 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdd.dll [2013.05.15 12:15:27 | 002,049,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys [2013.05.13 11:47:33 | 000,000,000 | ---D | C] -- C:\Users\flo\Desktop\Orbisan Ltd. ®_files [2013.05.12 12:00:42 | 000,000,000 | ---D | C] -- C:\Users\flo\Desktop\skyrim sound repair [2013.05.10 13:11:34 | 000,000,000 | ---D | C] -- C:\Users\flo\Desktop\skyrim deutschsounddateien [2013.05.09 19:50:49 | 000,000,000 | ---D | C] -- C:\Users\flo\AppData\Local\Skyrim [2013.05.09 19:49:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Elder Scrolls V - Skyrim [2013.05.09 17:09:09 | 000,000,000 | ---D | C] -- C:\Users\flo\Desktop\Skyrim [2013.05.04 13:04:00 | 000,000,000 | ---D | C] -- C:\Program Files\Dead Island Riptide [2013.05.03 22:01:58 | 000,000,000 | ---D | C] -- C:\Users\flo\AppData\Roaming\IDoser [2013.05.03 22:01:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I-Doser Free [2013.05.03 22:01:49 | 000,000,000 | ---D | C] -- C:\Users\flo\Documents\Dose Files [2013.05.03 22:01:48 | 000,000,000 | ---D | C] -- C:\Program Files\I-Doser Free [2012.11.30 21:58:34 | 002,869,264 | ---- | C] (Microsoft Corporation) -- C:\Users\flo\AppData\Roaming\dotNetFx35setup.exe [3 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2013.06.02 18:20:45 | 000,696,300 | ---- | M] () -- C:\Windows\System32\perfh007.dat [2013.06.02 18:20:45 | 000,645,006 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2013.06.02 18:20:45 | 000,153,512 | ---- | M] () -- C:\Windows\System32\perfc007.dat [2013.06.02 18:20:45 | 000,126,698 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2013.06.02 18:02:46 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2013.06.02 18:00:56 | 000,003,664 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2013.06.02 18:00:56 | 000,003,664 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2013.06.02 17:42:22 | 000,001,112 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1260702108-229838344-945700951-1000UA.job [2013.06.02 17:12:23 | 000,001,092 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2013.06.02 16:29:44 | 000,000,920 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1260702108-229838344-945700951-1000UA.job [2013.06.02 16:27:03 | 000,000,898 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1260702108-229838344-945700951-1000Core.job [2013.06.02 14:56:38 | 000,001,088 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2013.06.02 02:25:00 | 296,737,554 | ---- | M] () -- C:\Windows\MEMORY.DMP [2013.05.30 19:42:35 | 000,001,635 | ---- | M] () -- C:\Users\flo\Desktop\TERA.lnk [2013.05.24 00:41:18 | 000,002,032 | ---- | M] () -- C:\Users\flo\Desktop\Google Chrome.lnk [2013.05.22 00:15:55 | 000,001,847 | ---- | M] () -- C:\Users\flo\Desktop\Entfernen des Avira DE-Cleaners.lnk [2013.05.22 00:15:55 | 000,001,776 | ---- | M] () -- C:\Users\flo\Desktop\Avira DE-Cleaner.lnk [2013.05.20 20:44:41 | 000,012,297 | ---- | M] () -- C:\Users\flo\Desktop\Stromvertrag kündigung.odt [2013.05.17 13:49:34 | 000,334,608 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2013.05.14 11:40:00 | 000,001,060 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1260702108-229838344-945700951-1000Core.job [2013.05.13 11:47:33 | 000,004,350 | ---- | M] () -- C:\Users\flo\Desktop\Orbisan Ltd. ®.htm [2013.05.09 19:49:54 | 000,001,108 | ---- | M] () -- C:\Users\Public\Desktop\The Elder Scrolls V - Skyrim.lnk [2013.05.05 21:12:55 | 002,382,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [3 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files Created - No Company Name ========== [2013.05.30 19:42:46 | 000,001,635 | ---- | C] () -- C:\Users\flo\Desktop\TERA.lnk [2013.05.22 00:15:55 | 000,001,847 | ---- | C] () -- C:\Users\flo\Desktop\Entfernen des Avira DE-Cleaners.lnk [2013.05.22 00:15:55 | 000,001,776 | ---- | C] () -- C:\Users\flo\Desktop\Avira DE-Cleaner.lnk [2013.05.20 20:44:39 | 000,012,297 | ---- | C] () -- C:\Users\flo\Desktop\Stromvertrag kündigung.odt [2013.05.13 11:47:32 | 000,004,350 | ---- | C] () -- C:\Users\flo\Desktop\Orbisan Ltd. ®.htm [2013.05.09 19:49:54 | 000,001,108 | ---- | C] () -- C:\Users\Public\Desktop\The Elder Scrolls V - Skyrim.lnk [2013.05.07 21:09:30 | 296,737,554 | ---- | C] () -- C:\Windows\MEMORY.DMP [2013.05.01 13:47:32 | 000,016,304 | ---- | C] () -- C:\Windows\System32\apl003.sys [2013.05.01 13:47:32 | 000,013,232 | ---- | C] () -- C:\Windows\System32\apf003.sys [2013.01.13 16:52:53 | 000,000,847 | ---- | C] () -- C:\Users\flo\.recently-used.xbel [2012.12.28 17:01:03 | 000,271,360 | ---- | C] () -- C:\Windows\System32\drivers\atksgt.sys [2012.12.28 17:00:28 | 000,018,048 | ---- | C] () -- C:\Windows\System32\drivers\lirsgt.sys [2012.11.26 04:13:04 | 000,534,531 | ---- | C] () -- C:\Users\flo\AppData\Local\census.cache [2012.11.26 04:12:10 | 000,218,978 | ---- | C] () -- C:\Users\flo\AppData\Local\ars.cache [2012.11.13 16:41:45 | 003,130,440 | ---- | C] () -- C:\Windows\System32\pbsvc_blr.exe [2012.03.08 16:13:54 | 000,053,248 | ---- | C] () -- C:\Windows\System32\mgxasio2.dll [2012.03.08 16:12:08 | 000,007,119 | ---- | C] () -- C:\Windows\mgxoschk.ini [2011.12.26 15:16:51 | 000,140,480 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys [2011.12.26 15:16:33 | 000,298,016 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe [2011.12.26 15:16:32 | 000,076,888 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe [2011.09.28 17:44:14 | 000,179,271 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat [2011.07.30 11:04:35 | 000,000,306 | RHS- | C] () -- C:\ProgramData\ntuser.pol [2011.07.03 15:16:57 | 000,175,616 | ---- | C] () -- C:\Windows\System32\unrar.dll [2011.06.30 21:03:00 | 000,000,416 | ---- | C] () -- C:\Windows\BRWMARK.INI [2011.06.30 21:03:00 | 000,000,034 | ---- | C] () -- C:\Windows\System32\BD7030.DAT [2011.05.14 21:09:46 | 000,000,091 | ---- | C] () -- C:\Users\flo\AppData\Local\fusioncache.dat [2011.03.26 18:12:16 | 000,138,056 | ---- | C] () -- C:\Users\flo\AppData\Roaming\PnkBstrK.sys [2010.08.24 15:34:51 | 000,026,624 | ---- | C] () -- C:\Users\flo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010.08.18 01:24:21 | 000,000,036 | ---- | C] () -- C:\Users\flo\AppData\Local\housecall.guid.cache [2010.08.17 15:24:01 | 000,001,356 | ---- | C] () -- C:\Users\flo\AppData\Local\d3d9caps.dat ========== ZeroAccess Check ========== [2013.05.10 13:22:57 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\ambr\birds\forestfall\2day\l [2013.05.10 13:22:58 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\ambr\birds\forestfall\2day\u [2013.05.10 13:23:04 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\ambr\birds\forestpine\1morning\n [2013.05.10 13:23:04 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\ambr\birds\forestpine\1morning\u [2013.05.10 13:23:08 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\ambr\birds\forestpine\2day\l [2013.05.10 13:24:29 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\dirt\run\l [2013.05.10 13:24:27 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\dirt\run\armorheavy\l [2013.05.10 13:24:28 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\dirt\run\armorlight\l [2013.05.10 13:24:32 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\dirt\walk\l [2013.05.10 13:24:30 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\dirt\walk\armorheavy\l [2013.05.10 13:24:31 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\dirt\walk\armorlight\l [2013.05.10 13:24:34 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\grass\run\l [2013.05.10 13:24:33 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\grass\run\armorheavy\l [2013.05.10 13:24:33 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\grass\run\armorlight\l [2013.05.10 13:24:34 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\grass\scuff\l [2013.05.10 13:24:35 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\grass\sneak\l [2013.05.10 13:24:37 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\grass\walk\l [2013.05.10 13:24:36 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\grass\walk\armorheavy\l [2013.05.10 13:24:37 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\grass\walk\armorlight\l [2013.05.10 13:24:40 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\gravel\run\l [2013.05.10 13:24:39 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\gravel\run\armorheavy\l [2013.05.10 13:24:39 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\gravel\run\armorlight\l [2013.05.10 13:24:41 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\gravel\sneak\l [2013.05.10 13:24:43 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\gravel\walk\l [2013.05.10 13:24:41 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\gravel\walk\armorheavy\l [2013.05.10 13:24:42 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\gravel\walk\armorlight\l [2013.05.10 13:24:48 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\npc\dirt\run\l [2013.05.10 13:24:48 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\npc\dirt\walk\l [2013.05.10 13:24:54 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\npc\stonesolid\run\l [2013.05.10 13:24:55 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\npc\stonesolid\walk\l [2013.05.10 13:24:57 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\npc\wood\run\l [2013.05.10 13:24:57 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\npc\wood\walk\l [2013.05.10 13:25:02 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\dirt\run\l [2013.05.10 13:25:00 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\dirt\run\armorheavy\l [2013.05.10 13:25:01 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\dirt\run\armorlight\l [2013.05.10 13:25:05 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\dirt\sprint\l [2013.05.10 13:25:03 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\dirt\sprint\armorheavy\l [2013.05.10 13:25:04 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\dirt\sprint\armorlight\l [2013.05.10 13:25:06 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\dirt\walk\l [2013.05.10 13:25:08 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\grass\run\l [2013.05.10 13:25:06 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\grass\run\armorheavy\l [2013.05.10 13:25:07 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\grass\run\armorlight\l [2013.05.10 13:25:10 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\grass\sprint\l [2013.05.10 13:25:09 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\grass\sprint\armorheavy\l [2013.05.10 13:25:09 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\grass\sprint\armorlight\l [2013.05.10 13:25:11 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\grass\walk\l [2013.05.10 13:25:12 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\gravel\run\l [2013.05.10 13:25:11 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\gravel\run\armorheavy\l [2013.05.10 13:25:12 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\gravel\run\armorlight\l [2013.05.10 13:25:14 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\gravel\sprint\l [2013.05.10 13:25:13 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\gravel\sprint\armorheavy\l [2013.05.10 13:25:14 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\gravel\sprint\armorlight\l [2013.05.10 13:25:15 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\gravel\walk\l [2013.05.10 13:25:22 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\snow\run\l [2013.05.10 13:25:21 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\snow\run\armorheavy\l [2013.05.10 13:25:21 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\snow\run\armorlight\l [2013.05.10 13:25:24 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\snow\sprint\l [2013.05.10 13:25:23 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\snow\sprint\armorheavy\l [2013.05.10 13:25:24 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\snow\sprint\armorlight\l [2013.05.10 13:25:25 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\snow\walk\l [2013.05.10 13:25:27 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\stonesolid\run\l [2013.05.10 13:25:26 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\stonesolid\run\armorheavy\l [2013.05.10 13:25:26 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\stonesolid\run\armorlight\l [2013.05.10 13:25:27 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\stonesolid\run\barefoot\l [2013.05.10 13:25:30 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\stonesolid\sprint\l [2013.05.10 13:25:29 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\stonesolid\sprint\armorheavy\l [2013.05.10 13:25:29 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\stonesolid\sprint\armorlight\l [2013.05.10 13:25:30 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\stonesolid\sprint\barefoot\l [2013.05.10 13:25:31 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\stonesolid\stairs\l [2013.05.10 13:25:32 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\stonesolid\walk\l [2013.05.10 13:25:38 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\wood\run\l [2013.05.10 13:25:36 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\wood\run\armorheavy\l [2013.05.10 13:25:37 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\wood\run\armorlight\l [2013.05.10 13:25:41 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\wood\sprint\l [2013.05.10 13:25:39 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\wood\sprint\armorheavy\l [2013.05.10 13:25:40 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\wood\sprint\armorlight\l [2013.05.10 13:25:41 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\wood\stairs\l [2013.05.10 13:25:42 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\player\wood\walk\l [2013.05.10 13:25:46 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\snow\run\l [2013.05.10 13:25:44 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\snow\run\armorheavy\l [2013.05.10 13:25:45 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\snow\run\armorlight\l [2013.05.10 13:25:46 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\snow\sneak\l [2013.05.10 13:25:49 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\snow\walk\l [2013.05.10 13:25:47 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\snow\walk\armorheavy\l [2013.05.10 13:25:48 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\snow\walk\armorlight\l [2013.05.10 13:25:52 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\stonesolid\run\l [2013.05.10 13:25:50 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\stonesolid\run\armorheavy\l [2013.05.10 13:25:51 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\stonesolid\run\armorlight\l [2013.05.10 13:25:52 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\stonesolid\sneak\l [2013.05.10 13:25:54 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\stonesolid\stairs\l [2013.05.10 13:25:53 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\stonesolid\stairs\armorheavy\l [2013.05.10 13:25:53 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\stonesolid\stairs\armorlight\l [2013.05.10 13:25:56 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\stonesolid\walk\l [2013.05.10 13:25:55 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\stonesolid\walk\armorheavy\l [2013.05.10 13:25:55 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\stonesolid\walk\armorlight\l [2013.05.10 13:25:56 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\stonesolid\walk\barefoot\l [2013.05.10 13:25:58 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\water\run\l [2013.05.10 13:25:59 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\water\sneak\l [2013.05.10 13:25:59 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\water\walk\l [2013.05.10 13:26:01 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\wood\run\l [2013.05.10 13:26:00 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\wood\run\armorheavy\l [2013.05.10 13:26:00 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\wood\run\armorlight\l [2013.05.10 13:26:01 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\wood\sneak\l [2013.05.10 13:26:02 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\wood\stairs\l [2013.05.10 13:26:01 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\wood\stairs\armorheavy\l [2013.05.10 13:26:02 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\wood\stairs\armorlight\l [2013.05.10 13:26:05 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\wood\walk\l [2013.05.10 13:26:03 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\wood\walk\armorheavy\l [2013.05.10 13:26:04 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\wood\walk\armorlight\l [2013.05.10 13:26:05 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\fst\wood\walk\barefoot\l [2013.05.10 13:26:48 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\npc\atronachfrost\foot\walk\l [2013.05.10 13:27:07 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\npc\dragon\foot\walk\l [2013.05.10 13:27:12 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\npc\draugr\foot\walk\l [2013.05.10 13:27:14 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\npc\dwarvencenturion\walk\l [2013.05.10 13:27:23 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\npc\falmer\foot\walk\l [2013.05.10 13:27:24 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\npc\giant\foot\distant\l [2013.05.10 13:27:25 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\npc\giant\foot\walk\l [2013.05.10 13:27:47 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\npc\mudcrab\l [2013.05.10 13:27:50 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\npc\spiderfrostbite\foot\l [2013.05.10 13:27:50 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\npc\spiderfrostbite\foot\giant\l [2013.05.10 13:27:56 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\armor\heavy\l [2013.05.10 13:27:56 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\armor\light\l [2013.05.10 13:27:56 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\arrow\l [2013.05.10 13:27:57 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\basket\l [2013.05.10 13:27:57 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\blade1hand\l [2013.05.10 13:27:57 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\blade1hand\other\l [2013.05.10 13:27:57 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\body\large\l [2013.05.10 13:27:58 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\body\medium\dirt\l [2013.05.10 13:27:58 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\body\metal\large\l [2013.05.10 13:27:58 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\body\metal\small\l [2013.05.10 13:27:58 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\body\small\l [2013.05.10 13:27:59 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\bottle\l [2013.05.10 13:27:59 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\boulder\large\boulder\l [2013.05.10 13:27:59 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\boulder\large\dirt\l [2013.05.10 13:27:59 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\boulder\medium\boulder\l [2013.05.10 13:27:59 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\boulder\medium\dirt\l [2013.05.10 13:27:59 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\boulder\small\dirt\l [2013.05.10 13:27:59 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\bowsstaves\l [2013.05.10 13:28:00 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\carriage\wheel\l [2013.05.10 13:28:00 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\ceramic\medium\l [2013.05.10 13:28:00 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\coin\l [2013.05.10 13:28:00 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\dishwood\l [2013.05.10 13:28:00 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\generic\dirt\heavy\l [2013.05.10 13:28:00 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\generic\dirt\light\l [2013.05.10 13:28:00 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\generic\dirt\medium\l [2013.05.10 13:28:01 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\generic\grass\heavy\l [2013.05.10 13:28:01 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\generic\grass\light\l [2013.05.10 13:28:01 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\generic\grass\medium\l [2013.05.10 13:28:01 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\generic\metal\light\l [2013.05.10 13:28:01 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\generic\snow\heavy\l [2013.05.10 13:28:01 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\generic\snow\light\l [2013.05.10 13:28:02 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\generic\snow\medium\l [2013.05.10 13:28:02 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\generic\wood\light\l [2013.05.10 13:28:02 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\generic\wood\medium\l [2013.05.10 13:28:02 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\organic\small\l [2013.05.10 13:28:02 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\potspans\l [2013.05.10 13:28:02 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\shieldheavy\l [2013.05.10 13:28:03 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\phy\shieldlight\l [2013.05.10 13:28:16 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\wpn\bash\shield\l [2013.05.10 13:28:17 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-1260702108-229838344-945700951-1000\$RL8YC5Q\NEU - Skyrim DEUTSCH - Razor1911 - S1lverSurfer\MyMod\sound\fx\wpn\block\shield\l [2006.11.02 14:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2012.06.08 19:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2009.04.11 08:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = %systemroot%\system32\wbem\wbemess.dll -- [2009.04.11 08:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both ========== LOP Check ========== [2013.05.01 13:15:23 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\Aeria Games & Entertainment [2011.10.17 14:34:13 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\Ashampoo [2012.04.23 18:23:02 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\Audacity [2012.12.24 01:15:23 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\BitTorrent [2010.08.17 23:49:40 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\Canneverbe Limited [2010.11.13 20:52:33 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\CBL-Electronics [2010.09.26 13:21:29 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\Clonk Rage [2013.01.09 19:15:17 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\DVDVideoSoft [2012.05.02 13:33:24 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\DVDVideoSoftIEHelpers [2012.05.27 20:36:47 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\FOG Downloader [2012.02.10 14:24:12 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\Free Sound Recorder [2011.09.05 16:53:53 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\GetRightToGo [2012.09.04 16:50:52 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\gtk-2.0 [2011.10.17 14:15:18 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\Gutscheinmieze [2012.12.07 03:36:45 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\ICQ [2013.05.03 22:45:23 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\IDoser [2010.08.22 17:55:36 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\ijjigame [2012.09.03 22:14:39 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\IrfanView [2011.10.18 19:34:30 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\LibreOffice [2010.12.04 12:08:03 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\LolClient [2012.03.08 16:14:20 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\MAGIX [2010.09.27 16:48:02 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\Need for Speed World [2010.08.17 23:41:55 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\OpenOffice.org [2010.10.10 09:53:15 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\PhotoScape [2012.07.10 00:12:44 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\six-updater [2012.07.10 00:11:45 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\six-zsync [2010.11.16 19:45:42 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\Sony [2012.07.19 13:23:52 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\Splinter Cell - Conviction [2010.11.27 10:53:20 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\Steinberg [2011.02.11 19:50:09 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\Synthesia [2013.05.30 19:42:55 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\TERA [2012.11.21 15:36:25 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\TestApp [2012.02.26 00:16:11 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\TS3Client [2011.10.17 14:09:50 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\Uniblue [2012.07.16 14:48:54 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\Unity [2011.07.11 21:10:28 | 000,000,000 | ---D | M] -- C:\Users\flo\AppData\Roaming\Xilisoft ========== Purity Check ========== ========== Alternate Data Streams ========== @Alternate Data Stream - 326 bytes -> C:\Windows\System32\drivers\kmkppssq.sys:changelist < End of report > Geändert von NeedHelp95 (02.06.2013 um 18:08 Uhr) |
Themen zu Trojaner (keine Internetverbindung) |
abgestürzt, adblock, ander, bandoo, besser, bluestacks, entfernt, erkannt, essen, funktionier, funktionieren, gestern, interne, internet, internetverbindung, keine internetverbindung, konnte, microsoft, nicht möglich, plug-in, poweriso, quarantäne, recycle.bin, scan, security, troja, trojaner, update, updaten, verbindung, virus, woche, wochen, würde |