Hallo. Also ich hatte vor einiger Zeit einen Trojaner auf meinem PC. Diesen habe ich dann mit Kaspersky gelöscht, die Festplatte Formatiert und Windows neu aufgespielt. Seit dem läuft der Rechner sehr langsam bis dass ich die Festplatte wieder formatieren und Windows neu aufspielen muss weil gar nichts mehr geht( gestern das letzte mal). Ich habe alle in der Anleitung beschriebenen Schritte getätigt und füge sie dem Anhang bei. Leider kann ich keinen Aktuellen Virenscan anhängen da dieser Mittlerweile 2 Tage braucht. Füge ich aber gern dem Thema hinzu sobald er durchgelaufen ist.

Mfg Ricardo

hi,

FRST Log bitte in Codetags in den Thread posten, zur Not in Stücken posten.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-09-2013
Ran by Bispinosa (administrator) on PC on 11-09-2013 11:16:46
Running from C:\Users\Bispinosa\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
(CyberLink) C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() C:\OEM\USBDECTION\USBS3S4Detection.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe
() C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apntex.exe
(ALPS) C:\Program Files\Apoint\Apvfb.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Somoto) C:\Users\Bispinosa\AppData\Local\FilesFrog Update Checker\update_checker.exe
() C:\ProgramData\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe
(Microsoft Corporation) C:\Windows\SysWOW64\schtasks.exe
() C:\ProgramData\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe
(Google Inc.) C:\Users\Bispinosa\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Bispinosa\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Bispinosa\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Bispinosa\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Bispinosa\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Bispinosa\AppData\Local\Google\Chrome\Application\chrome.exe
(Somoto) C:\Users\Bispinosa\AppData\Local\FilesFrog Update Checker\update_checker.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(Google Inc.) C:\Users\Bispinosa\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13632216 2013-07-09] (Realtek Semiconductor)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-08-27] (NVIDIA Corporation)
HKLM\...\Run: [Apoint] - C:\Program Files\Apoint\Apoint.exe [208384 2009-10-19] (Alps Electric Co., Ltd.)
HKLM\...\Policies\Explorer: [NoActiveDesktop] 1
HKLM\...\Policies\Explorer: [NoActiveDesktopChanges] 1
HKCU\...\Run: [Google Update] - C:\Users\Bispinosa\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-09-10] (Google Inc.)
HKCU\...\Run: [SDP] - C:\Users\Bispinosa\AppData\Local\FilesFrog Update Checker\update_checker.exe [201808 2013-01-31] (Somoto)
HKCU\...\Run: [AppsHat] - C:\Users\Bispinosa\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe [202752 2012-10-26] ()
HKLM-x32\...\Run: [SuiteTray] - C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [340848 2011-04-02] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisTecPMMUpdate] - C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [408432 2011-03-29] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisUpdate] - C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [202608 2011-03-29] (Egis Technology Inc.)
HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-02] (Symantec Corporation)
HKLM-x32\...\Run: [ArcadeMovieService] - C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe [177448 2011-05-13] (CyberLink Corp.)
HKLM-x32\...\Run: [Hotkey Utility] - C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe [627304 2011-08-11] ()
HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356968 2012-12-20] (Kaspersky Lab ZAO)
HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-07-29] ()
HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-07-29] ()
AppInit_DLLs-x32: c:\progra~3\browse~1\261562~1.221\{c16c1~1\browse~1.dll [2699232 2013-08-30] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer.msn.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer.msn.com
URLSearchHook: (No Name) - {539F76FD-084E-4858-86D5-62F02F54AE86} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox
SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: MinibarBHO - {AA74D58F-ACD0-450D-A85E-6C04B171C044} - C:\Program Files (x86)\Minibar\Minibar.dll (KangoExtensions)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKLM-x32 - Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Chrome:
=======
CHR HomePage: hxxp://search.babylon.com/?babsrc=HP_ss&mntrId=8CE9C89CDC2D6E60&affID=124684&tsp=5002
CHR RestoreOnStartup: "hxxp://search.babylon.com/?babsrc=HP_ss&mntrId=8CE9C89CDC2D6E60&affID=124684&tsp=5002"]},"sync_promo":{"startup_count":10},"variations_seed":"CihiMDlhMmVjOWYzNzEyMTRkM2Y3ZTJkMWQxODlhYjA5ZjcyNTAwZjAwEpoBCghBc3luY0RucxjEhoqRBTgAQgpTeXN0ZW1 EbnNBSg4KClN5c3RlbURuc0EQGUoOCgpTeXN0ZW1EbnNCEBlKGAoTQXN5bmNEbnNOb0ZhbGxiYWNrQRCQA0oYChNBc3luY0Ruc05vRmFsbGJhY2tCEJADSg0KCUFzeW5jRG5zQRBLSg0KCUFzeW5jR G5zQhBLUggSBDI2LiooAxJuCghBc3luY0RucxjEoKiSBTgAQgpTeXN0ZW1EbnNBSg4KClN5c3RlbURuc0EQGUoOCgpTeXN0ZW1EbnNCEBlKDQoJQXN5bmNEbnNBEBlKDQoJQXN5bmNEbnNCEBlSEBI EMjkuKiAAIAEoACgBKAISagoIQXN5bmNEbnMYxIzDjgU4AEIKU3lzdGVtRG5zQUoOCgpTeXN0ZW1EbnNBEDJKDgoKU3lzdGVtRG5zQhAySg0KCUFzeW5jRG5zQRAySg0KCUFzeW5jRG5zQhAyUgwSB DI4LiogAigBKAISbAoIQXN5bmNEbnMYxIaKkQU4AEIKU3lzdGVtRG5zQUoOCgpTeXN0ZW1EbnNBEBlKDgoKU3lzdGVtRG5zQhAZSg4KCUFzeW5jRG5zQRDbA0oOCglBc3luY0Ruc0IQ2wNSDBIEMjY uKiADKAEoAhKPAQoaQXV0b2NvbXBsZXRlRHluYW1pY1RyaWFsXzAYgMPQjAU4AUITTGl2ZVNwZWxsaW5nQ29udHJvbEogChZMaXZlU3BlbGxpbmdFeHBlcmltZW50ELYHGIaEygFKHAoTTGl2ZVNwZ WxsaW5nQ29udHJvbBAyGIeEygFSFBIEMjYuKiAAIAEgAiADKAAoASgCEtIBChpBdXRvY29tcGxldGVEeW5hbWljVHJpYWxfMRiAhNyPBTgBQg5EZWZhdWx0Q29udHJvbEodChREaXNhYmxlZFByb3Z pZGVyc18xNhAKGJeEygFKGwoSTmF2U3VnZ2VzdERlbW90aW9uEAoYmYTKAUoiChlOYXZTdWdnZXN0RGVtb3Rpb25Db250cm9sEAoYmoTKAUoYCg5EZWZhdWx0Q29udHJvbBDiBxibhMoBUhwSDDI2L jAuMTQxMC4xORoEMjguKiADKAAoASgCWI3Qj48CEqQBChpBdXRvY29tcGxldGVEeW5hbWljVHJpYWxfMhiAtLCQBTgBQg5EZWZhdWx0Q29udHJvbEodChRFbmFibGVDdXJzb3JQb3NpdGlvbhAKGJW EygFKJAobRW5hYmxlQ3Vyc29yUG9zaXRpb25Db250cm9sEAoYloTKAUoTCg5EZWZhdWx0Q29udHJvbBDsB1IUEgQyOC4qGgQyOC4qIAMoACgBKAISvAIKGkF1dG9jb21wbGV0ZUR5bmFtaWNUcmlhb F80GID+opIFOAFCE0RlZmF1bHRDb250cm9sX1NFUlBKLwomRW5hYmxlWmVyb1N1Z2dlc3RRdWVyaWVzQW5kVXJsc19Ob1NFUlAQDRiehMoBSjYKLUVuYWJsZVplcm9TdWdnZXN0UXVlcmllc0FuZFV ybHNDb250cm9sX05vU0VSUBANGJ+EygFKMQooRW5hYmxlWmVyb1N1Z2dlc3RRdWVyaWVzQW5kVXJsc19JbmNsU0VSUBANGKCEygFKOAovRW5hYmxlWmVyb1N1Z2dlc3RRdWVyaWVzQW5kVXJsc0Nvb nRyb2xfSW5jbFNFUlAQDRihhMoBShcKE0RlZmF1bHRDb250cm9sX1NFUlAQDFISEgQzMC4qIAAgASACKAAoASgCElQKCkNMRDFWc0NMRDIYxN6FlAU4AUIHRGVmYXVsdEoICgRDTEQxEAFKCAoEQ0x EMhABSgsKB0RlZmF1bHQQYlIUGgQzMS4qIAAgASACKAAoASgDKAISkgEKGENhY2hlU2Vuc2l0aXZpdHlBbmFseXNpcxjE9dKOBTgAQgJOb0oMCghDb250cm9sQRAFSgwKCENvbnRyb2xCEAVKCAoEM TAwQRAFSggKBDEwMEIQBUoICgQyMDBBEAVKCAoEMjAwQhAFSggKBDQwMEEQBUoICgQ0MDBCEAVKBgoCTm8QPFIKEgQyOC4qIAIoBBJ/ChhDYWNoZVNlbnNpdGl2aXR5QW5hbHlzaXMYxI63jwU4AEICTm9KDAoIQ29udHJvbEEQAUoMCghDb250cm9sQhABSggKBDEwMEEQAUoICgQxMDBCEAFKCAoEMjAwQRABSggKBDIwMEIQAUoHCgJObx DiB1IKEgQyOC4qIAMoBBKaAQoYQ2FjaGVTZW5zaXRpdml0eUFuYWx5c2lzGMTK/YoFOABCAk5vSgYKAk5vECRKDAoIQ29udHJvbEEQCEoMCghDb250cm9sQhAISggKBDEwMEEQCEoICgQxMDBCEAhKCAoEMjAwQRAISggKBDIwMEIQCEoICgQ0MDBBEAhKCAoENDAwQhAIUhISBDI1Lio gACABIAIoACgBKAISnQEKGENhY2hlU2Vuc2l0aXZpdHlBbmFseXNpcxjEstOKBTgAQgJOb0oHCgJObxDgB0oMCghDb250cm9sQRABSgwKCENvbnRyb2xCEAFKCAoEMTAwQRABSggKBDEwMEIQAUoIC gQyMDBBEAFKCAoEMjAwQhABSggKBDQwMEEQAUoICgQ0MDBCEAFSFAiAp76KBRIEMjUuKiADKAAoASgCEnQKHENvb2tpZVJldGVudGlvblByaW9yaXR5U3R1ZHkYwLnvkgU4AUINRXhwZXJpbWVudE9 mZkoWCg1FeHBlcmltZW50T2ZmEDIYlYrKAUoVCgxFeHBlcmltZW50T24QMhiWisoBUg4gACABKAAoASgCKAMoBBJICg9EM0QxMUV4cGVyaW1lbnQYgJKIlgU4AUIIRGlzYWJsZWRKDAoIRGlzYWJsZ WQQAEoLCgdFbmFibGVkEGRSCBIEMjkuKigAElQKG0RhdGFDb21wcmVzc2lvblByb3h5Um9sbG91dBjEgpe0BTgBQgdFbmFibGVkSgwKCERpc2FibGVkEABKDAoHRW5hYmxlZBDoB1IIIAAgASACKAQ SUQobRGF0YUNvbXByZXNzaW9uUHJveHlSb2xsb3V0GMSCl7QFOAFCCERpc2FibGVkSg0KCERpc2FibGVkEIQHSgsKB0VuYWJsZWQQZFIEIAMoBBJXChtEYXRhQ29tcHJlc3Npb25Qcm94eVJvbGxvd XQYxIKXtAU4AUIIRGlzYWJsZWRKDAoIRGlzYWJsZWQQAEoMCgdFbmFibGVkEOgHUgoSBDMwLiogAygFElQKG0RhdGFDb21wcmVzc2lvblByb3h5Um9sbG91dBjEgpe0BTgBQgdFbmFibGVkSgwKCER pc2FibGVkEABKDAoHRW5hYmxlZBDoB1IIIAAgASACKAUSVwobRGF0YUNvbXByZXNzaW9uUHJveHlSb2xsb3V0GMSCl7QFOAFCCERpc2FibGVkSg0KCERpc2FibGVkEN4HSgsKB0VuYWJsZWQQClIKG gQyOS4qIAMoBRJEChFEbnNQcm9iZS1BdHRlbXB0cxiAtY2WBTgBQgdkZWZhdWx0SgsKB2RlZmF1bHQQWkoFCgExEApSChIEMjUuKiAAIAESRwoPRG5zUHJvYmUtRW5hYmxlGIC1jZYFOAFCB2Rpc2F ibGVKCwoHZGlzYWJsZRAASgoKBmVuYWJsZRBkUgoSBDI1LiogACABEmMKI1VNQS1EeW5hbWljLUJpbmFyeS1Vbmlmb3JtaXR5LVRyaWFsGICckqUFOAFCB2RlZmF1bHRKEAoHZGVmYXVsdBABGKm2y QFKEQoIZ3JvdXBfMDEQARiqtskBUgYgACABIAISXwojVU1BLUR5bmFtaWMtQmluYXJ5LVVuaWZvcm1pdHktVHJpYWwYgJySpQU4AUIHZGVmYXVsdEoQCgdkZWZhdWx0EGMYqbbJAUoRCghncm91cF8 wMRABGKq2yQFSAiADElcKFEZvcmNlQ29tcG9zaXRpbmdNb2RlGICSiJYFOAFCB2Rpc2FibGVKCwoHZGlzYWJsZRBkSgsKB2VuYWJsZWQQAEoKCgZ0aHJlYWQQAFIIEgQyNC4qKAISVwoURm9yY2VDb 21wb3NpdGluZ01vZGUYgJKIlgU4AUIHZGlzYWJsZUoLCgdkaXNhYmxlEABKCwoHZW5hYmxlZBAASgoKBnRocmVhZBBkUggSBDI4LiooARJZChRGb3JjZUNvbXBvc2l0aW5nTW9kZRiAkoiWBTgBQgd kaXNhYmxlSgsKB2Rpc2FibGUQZEoLCgdlbmFibGVkEABKCgoGdGhyZWFkEABSChoEMjcuKiADKAESVwoURm9yY2VDb21wb3NpdGluZ01vZGUYgJKIlgU4AUIHZGlzYWJsZUoLCgdkaXNhYmxlEABKC woHZW5hYmxlZBAASgoKBnRocmVhZBBkUggSBDI0LiooABJZChRGb3JjZUNvbXBvc2l0aW5nTW9kZRiAkoiWBTgBQgdkaXNhYmxlSgsKB2Rpc2FibGUQAEoLCgdlbmFibGVkEDJKCgoGdGhyZWFkEDJ SChIEMjQuKiADKAAStwEKCUdvb2dsZU5vdzgBQgdEZWZhdWx0SgsKB0RlZmF1bHQQZEoKCgZFbmFibGUQAEoLCgdDb250cm9sEABKMwoPRGlzYWJsZWRWaWFGbGFnEAAqHmRpc2FibGUtZ29vZ2xlL W5vdy1pbnRlZ3JhdGlvbkoxCg5FbmFibGVkVmlhRmxhZxAAKh1lbmFibGUtZ29vZ2xlLW5vdy1pbnRlZ3JhdGlvblIRIAAgASgAKAEoAzIFZW4tVVMSiwEKDUhvc3RDYWNoZVNpemUYxM2IhwU4AEI HRGVmYXVsdEoLCgdEZWZhdWx0EABKCAoEMTAwQRAKSggKBDEwMEIQCkoICgQzMDBBEApKCAoEMzAwQhAKSgkKBTEwMDBBEApKCQoFMTAwMEIQCkoJCgUzMDAwQRAKSgkKBTMwMDBCEApSCBIEMjUuK igDEpMBCg1Ib3N0Q2FjaGVTaXplGMSs94cFOABCB0RlZmF1bHRKCwoHRGVmYXVsdBAASggKBDEwMEEQCkoICgQxMDBCEApKCAoEMzAwQRAKSggKBDMwMEIQCkoJCgUxMDAwQRAKSgkKBTEwMDBCEAp KCQoFMzAwMEEQCkoJCgUzMDAwQhAKUhASBDI1LiogACABKAAoASgCEkQKDUluZmluaXRlQ2FjaGUYxLSNlgU4AUICTm9KBwoCTm8Q1AdKBwoDWWVzEApKCwoHQ29udHJvbBAKUgggAigAKAEoAhJGC g1JbmZpbml0ZUNhY2hlGMS0jZYFOAFCAk5vSgcKAk5vEIQHSgcKA1llcxAySgsKB0NvbnRyb2wQMlIKIAAgASgAKAEoAhJECg1JbmZpbml0ZUNhY2hlGMS0jZYFOAFCAk5vSgcKAk5vEOYHSgcKA1l lcxABSgsKB0NvbnRyb2wQAVIIIAMoACgBKAIS3wQKDEluc3RhbnREdW1teRiAhNyPBTgBQgxEZWZhdWx0R3JvdXBKLwohRHVtbXlHcm91cDEgY2hhbm5lbDpzdGFibGUgbW9kczoxEAEYx4XKASDHh coBSi8KIUR1bW15R3JvdXAyIGNoYW5uZWw6c3RhYmxlIG1vZHM6MRABGMiFygEgyIXKAUovCiFEdW1teUdyb3VwMyBjaGFubmVsOnN0YWJsZSBtb2RzOjEQARjJhcoBIMmFygFKLwohRHVtbXlHcm9 1cDQgY2hhbm5lbDpzdGFibGUgbW9kczoxEAEYyoXKASDKhcoBSi8KIUR1bW15R3JvdXA1IGNoYW5uZWw6c3RhYmxlIG1vZHM6ORAJGMuFygEgy4XKAUovCiFEdW1teUdyb3VwNiBjaGFubmVsOnN0Y WJsZSBtb2RzOjkQCRjMhcoBIMyFygFKLwohRHVtbXlHcm91cDcgY2hhbm5lbDpzdGFibGUgbW9kczo5EAkYzYXKASDNhcoBSi8KIUR1bW15R3JvdXA4IGNoYW5uZWw6c3RhYmxlIG1vZHM6ORAJGM6 FygEgzoXKAUoxCiNEdW1teUdyb3VwOSBjaGFubmVsOnN0YWJsZSBtb2RzOjEwMBBkGM+FygEgz4XKAUoyCiREdW1teUdyb3VwMTAgY2hhbm5lbDpzdGFibGUgbW9kczoxMDAQZBjQhcoBINCFygFKK gobRHVtbXlQYWRkaW5nIGNoYW5uZWw6c3RhYmxlEPgFGNGFygEg0YXKAUoQCgxEZWZhdWx0R3JvdXAQAFIMEgQyNy4qIAMoACgBEqoCCg9JbnN0YW50RXh0ZW5kZWQYgNSHjwU4AUIMRGVmYXVsdEd yb3VwSj4KL0dyb3VwMSB1c2VfcmVtb3RlX250cF9vbl9zdGFydHVwOjEgY2hhbm5lbDpiZXRhEPoBGL2FygEgvYXKAUpHCjhHcm91cDIgZXNwdjoyMDUgdXNlX3JlbW90ZV9udHBfb25fc3RhcnR1c DoxIGNoYW5uZWw6YmV0YRD6ARi+hcoBIL6FygFKJAoVQ29udHJvbDEgY2hhbm5lbDpiZXRhEPoBGL+FygEgv4XKAUokChVDb250cm9sMiBjaGFubmVsOmJldGEQ+gEYwIXKASDAhcoBShAKDERlZmF 1bHRHcm91cBAAUhQSBDI4LioaBDI4LiogAigAKAEoA1jaj6KHCRKmAgoPSW5zdGFudEV4dGVuZGVkGIDqvY4FOAFCDERlZmF1bHRHcm91cEpACjFHcm91cDEgdXNlX3JlbW90ZV9udHBfb25fc3Rhc nR1cDoxIGNoYW5uZWw6Y2FuYXJ5EPoBGOeDygEg54PKAUpJCjpHcm91cDIgZXNwdjoyMDUgdXNlX3JlbW90ZV9udHBfb25fc3RhcnR1cDoxIGNoYW5uZWw6Y2FuYXJ5EPoBGISEygEghITKAUomChd Db250cm9sMSBjaGFubmVsOmNhbmFyeRD6ARjog8oBIOiDygFKJgoXQ29udHJvbDIgY2hhbm5lbDpjYW5hcnkQ+gEYgoTKASCChMoBShAKDERlZmF1bHRHcm91cBAAUg4SBDI4LiogACgAKAEoAxKxA goPSW5zdGFudEV4dGVuZGVkGICE3I8FOAFCDERlZmF1bHRHcm91cEolChdDb250cm9sMSBtMjlkZXYyOm5hdGl2ZRABGNaFygEg1oXKAUolChdDb250cm9sMiBtMjlkZXYyOm5hdGl2ZRABGNeFygE g14XKAUo/CjFHcm91cDEgbTI5ZGV2MjpuYXRpdmUgdXNlX3JlbW90ZV9udHBfb25fc3RhcnR1cDoxEAEY2IXKASDYhcoBSkgKOkdyb3VwMiBtMjlkZXYyOm5hdGl2ZSB1c2VfcmVtb3RlX250cF9vbl9zdGFydH VwOjEgZXNwdjoyMDUQARjZhcoBINmFygFKEAoMRGVmYXVsdEdyb3VwEABSFxIJMjkuMC4xNTM1GgQyOS4qIAEoACgDWOmJv8cKEpAJCg9JbnN0YW50RXh0ZW5kZWQYgP6ikgU4AUIMRGVmYXVsdEdy b3VwSiUKF0NvbnRyb2wxIHY6YSBtMjliZXRhOnIxEAEYjobKASCOhsoBSiUKF0NvbnRyb2wxIHY6YiBtMjliZXRhOnIxEAEYj4bKASCPhsoBSiUKF0NvbnRyb2wxIHY6YyBtMjliZXRhOnIxEAEYkI bKASCQhsoBSiUKF0NvbnRyb2wxIHY6ZCBtMjliZXRhOnIxEAEYkYbKASCRhsoBSiUKF0NvbnRyb2wxIHY6ZSBtMjliZXRhOnIxEAEYkobKASCShsoBSiUKF0NvbnRyb2wyIHY6YSBtMjliZXRhOnIx EAEYk4bKASCThsoBSiUKF0NvbnRyb2wyIHY6YiBtMjliZXRhOnIxEAEYlIbKASCUhsoBSiUKF0NvbnRyb2wyIHY6YyBtMjliZXRhOnIxEAEYlYbKASCVhsoBSiUKF0NvbnRyb2wyIHY6ZCBtMjliZX RhOnIxEAEYlobKASCWhsoBSiUKF0NvbnRyb2wyIHY6ZSBtMjliZXRhOnIxEAEYl4bKASCXhsoBSj8KMUdyb3VwMSB2OmEgbTI5YmV0YTpyMSB1c2VfcmVtb3RlX250cF9vbl9zdGFydHVwOjEQARii hsoBIKKGygFKPwoxR3JvdXAxIHY6YiBtMjliZXRhOnIxIHVzZV9yZW1vdGVfbnRwX29uX3N0YXJ0dXA6MRABGKOGygEgo4bKAUo/CjFHcm91cDEgdjpjIG0yOWJldGE6cjEgdXNlX3JlbW90ZV9udHBfb25fc3RhcnR1cDoxEAEYpIbKASCkhsoBSj8KMUdyb3VwMSB2OmQgbTI5YmV0YTpyMSB1c2VfcmVtb3RlX250cF9vbl9zdGFydH VwOjEQARilhsoBIKWGygFKPwoxR3JvdXAxIHY6ZSBtMjliZXRhOnIxIHVzZV9yZW1vdGVfbnRwX29uX3N0YXJ0dXA6MRABGKaGygEgpobKAUpICjpHcm91cDIgdjphIG0yOWJldGE6cjEgdXNlX3Jl bW90ZV9udHBfb25fc3RhcnR1cDoxIGVzcHY6MjA4EAEYp4bKASCnhsoBSkgKOkdyb3VwMiB2OmIgbTI5YmV0YTpyMSB1c2VfcmVtb3RlX250cF9vbl9zdGFydHVwOjEgZXNwdjoyMDgQARiohsoBIK iGygFKSAo6R3JvdXAyIHY6YyBtMjliZXRhOnIxIHVzZV9yZW1vdGVfbnRwX29uX3N0YXJ0dXA6MSBlc3B2OjIwOBABGKmGygEgqYbKAUpICjpHcm91cDIgdjpkIG0yOWJldGE6cjEgdXNlX3JlbW90 ZV9udHBfb25fc3RhcnR1cDoxIGVzcHY6MjA4EAEYqobKASCqhsoBSkgKOkdyb3VwMiB2OmUgbTI5YmV0YTpyMSB1c2VfcmVtb3RlX250cF9vbl9zdGFydHVwOjEgZXNwdjoyMDgQARirhsoBIKuGyg FKEAoMRGVmYXVsdEdyb3VwEABSEhIEMjkuKhoEMjkuKiACKAAoA1jkr7jAARLKCQoPSW5zdGFudEV4dGVuZGVkGID+opIFOAFCDERlZmF1bHRHcm91cEooChpDb250cm9sMSB2OmEgbTI5YmV0YW1h YzpyMRABGKyGygEgrIbKAUooChpDb250cm9sMSB2OmIgbTI5YmV0YW1hYzpyMRABGK2GygEgrYbKAUooChpDb250cm9sMSB2OmMgbTI5YmV0YW1hYzpyMRABGK6GygEgrobKAUooChpDb250cm9sMS B2OmQgbTI5YmV0YW1hYzpyMRABGK+GygEgr4bKAUooChpDb250cm9sMSB2OmUgbTI5YmV0YW1hYzpyMRABGLCGygEgsIbKAUooChpDb250cm9sMiB2OmEgbTI5YmV0YW1hYzpyMRABGLGGygEgsYbK AUooChpDb250cm9sMiB2OmIgbTI5YmV0YW1hYzpyMRABGLKGygEgsobKAUooChpDb250cm9sMiB2OmMgbTI5YmV0YW1hYzpyMRABGLOGygEgs4bKAUooChpDb250cm9sMiB2OmQgbTI5YmV0YW1hYz pyMRABGLSGygEgtIbKAUooChpDb250cm9sMiB2OmUgbTI5YmV0YW1hYzpyMRABGLWGygEgtYbKAUpCCjRHcm91cDEgdjphIG0yOWJldGFtYWM6cjEgdXNlX3JlbW90ZV9udHBfb25fc3RhcnR1cDox EAEYtobKASC2hsoBSkIKNEdyb3VwMSB2OmIgbTI5YmV0YW1hYzpyMSB1c2VfcmVtb3RlX250cF9vbl9zdGFydHVwOjEQARi3hsoBILeGygFKQgo0R3JvdXAxIHY6YyBtMjliZXRhbWFjOnIxIHVzZV 9yZW1vdGVfbnRwX29uX3N0YXJ0dXA6MRABGLiGygEguIbKAUpCCjRHcm91cDEgdjpkIG0yOWJldGFtYWM6cjEgdXNlX3JlbW90ZV9udHBfb25fc3RhcnR1cDoxEAEYuYbKASC5hsoBSkIKNEdyb3Vw MSB2OmUgbTI5YmV0YW1hYzpyMSB1c2VfcmVtb3RlX250cF9vbl9zdGFydHVwOjEQARi6hsoBILqGygFKSwo9R3JvdXAyIHY6YSBtMjliZXRhbWFjOnIxIHVzZV9yZW1vdGVfbnRwX29uX3N0YXJ0dX A6MSBlc3B2OjIwOBABGLuGygEgu4bKAUpLCj1Hcm91cDIgdjpiIG0yOWJldGFtYWM6cjEgdXNlX3JlbW90ZV9udHBfb25fc3RhcnR1cDoxIGVzcHY6MjA4EAEYvIbKASC8hsoBSksKPUdyb3VwMiB2 OmMgbTI5YmV0YW1hYzpyMSB1c2VfcmVtb3RlX250cF9vbl9zdGFydHVwOjEgZXNwdjoyMDgQARi9hsoBIL2GygFKSwo9R3JvdXAyIHY6ZCBtMjliZXRhbWFjOnIxIHVzZV9yZW1vdGVfbnRwX29uX3 N0YXJ0dXA6MSBlc3B2OjIwOBABGL6GygEgvobKAUpLCj1Hcm91cDIgdjplIG0yOWJldGFtYWM6cjEgdXNlX3JlbW90ZV9udHBfb25fc3RhcnR1cDoxIGVzcHY6MjA4EAEYv4bKASC/hsoBShAKDERlZmF1bHRHcm91cBAAUhASBDI5LioaBDI5LiogAigBWOSvuMABEtkGCg9JbnN0YW50RXh0ZW5kZWQYgO+ClgU4AUIMRGVmYXVsdEdyb3VwSisKHUNvbnRyb2wwIHBjdDo1MGEgbTI5c3 RhYmxlOnIxEDIY8YbKASDxhsoBSk0KP0dyb3VwMSBwY3Q6MWEgbTI5c3RhYmxlOnIyIHVzZV9yZW1vdGVfbnRwX29uX3N0YXJ0dXA6MSBlc3B2OjIwOBABGJWHygEglYfKAUpNCj9Hcm91cDIgcGN0 OjFiIG0yOXN0YWJsZTpyMyB1c2VfcmVtb3RlX250cF9vbl9zdGFydHVwOjEgZXNwdjoyMTAQARilh8oBIKWHygFKKgocQ29udHJvbDMgcGN0OjFjIG0yOXN0YWJsZTpyMxABGKiHygEgqIfKAUpECj ZHcm91cDQgcGN0OjFkIG0yOXN0YWJsZTpyMSB1c2VfcmVtb3RlX250cF9vbl9zdGFydHVwOjEQARj1hsoBIPWGygFKKwodQ29udHJvbDUgcGN0OjFlIG0yOXN0YWJsZTpwcDIQARj2hsoBIPaGygFK KwodQ29udHJvbDYgcGN0OjFmIG0yOXN0YWJsZTpwcDIQARj3hsoBIPeGygFKKwodQ29udHJvbDcgcGN0OjFnIG0yOXN0YWJsZTpwcDIQARj4hsoBIPiGygFKKwodQ29udHJvbDggcGN0OjFoIG0yOX N0YWJsZTpwcDIQARj5hsoBIPmGygFKKwodQ29udHJvbDkgcGN0OjFpIG0yOXN0YWJsZTpwcDIQARj6hsoBIPqGygFKLAoeQ29udHJvbDEwIHBjdDoxaiBtMjlzdGFibGU6cHAyEAEY+4bKASD7hsoB SiwKHkNvbnRyb2wxMSBwY3Q6MTBhIG0yOXN0YWJsZTpyMhAKGJSHygEglIfKAUotCh9Db250cm9sMTIgcGN0OjEwYiBtMjlzdGFibGU6cHAyEAoY/YbKASD9hsoBSi0KH0NvbnRyb2wxMyBwY3Q6MTBjIG0yOXN0YWJsZTpwcDIQChj+hsoBIP6GygFKLAoeQ29udHJvbDE0IHBjdDoxMGQgbTI5c3RhYmxlOnIzEAoYpIfKASCkh8oBShAKDERlZmF1bHR Hcm91cBAAUhISBDI5LioaBDI5LiogAygAKANYvt/3rAUShAcKD0luc3RhbnRFeHRlbmRlZBiA74KWBTgBQgxEZWZhdWx0R3JvdXBKLgogQ29udHJvbDAgcGN0OjUwYSBtMjlzdGFibGVtYWM6cjEQMhiFh8oBIIWHygFKUApCR3JvdXAxIHBjdDoxYSBtM jlzdGFibGVtYWM6cjIgdXNlX3JlbW90ZV9udHBfb25fc3RhcnR1cDoxIGVzcHY6MjA4EAEYl4fKASCXh8oBSlAKQkdyb3VwMiBwY3Q6MWIgbTI5c3RhYmxlbWFjOnIzIHVzZV9yZW1vdGVfbnRwX29 uX3N0YXJ0dXA6MSBlc3B2OjIxMBABGKeHygEgp4fKAUotCh9Db250cm9sMyBwY3Q6MWMgbTI5c3RhYmxlbWFjOnIzEAEYqYfKASCph8oBSkcKOUdyb3VwNCBwY3Q6MWQgbTI5c3RhYmxlbWFjOnIxI HVzZV9yZW1vdGVfbnRwX29uX3N0YXJ0dXA6MRABGImHygEgiYfKAUouCiBDb250cm9sNSBwY3Q6MWUgbTI5c3RhYmxlbWFjOnBwMhABGIqHygEgiofKAUouCiBDb250cm9sNiBwY3Q6MWYgbTI5c3R hYmxlbWFjOnBwMhABGIuHygEgi4fKAUouCiBDb250cm9sNyBwY3Q6MWcgbTI5c3RhYmxlbWFjOnBwMhABGIyHygEgjIfKAUouCiBDb250cm9sOCBwY3Q6MWggbTI5c3RhYmxlbWFjOnBwMhABGI2Hy gEgjYfKAUouCiBDb250cm9sOSBwY3Q6MWkgbTI5c3RhYmxlbWFjOnBwMhABGI6HygEgjofKAUovCiFDb250cm9sMTAgcGN0OjFqIG0yOXN0YWJsZW1hYzpwcDIQARiPh8oBII+HygFKLwohQ29udHJ vbDExIHBjdDoxMGEgbTI5c3RhYmxlbWFjOnIyEAoYlofKASCWh8oBSjAKIkNvbnRyb2wxMiBwY3Q6MTBiIG0yOXN0YWJsZW1hYzpwcDIQChiRh8oBIJGHygFKMAoiQ29udHJvbDEzIHBjdDoxMGMgb TI5c3RhYmxlbWFjOnBwMhAKGJKHygEgkofKAUovCiFDb250cm9sMTQgcGN0OjEwZCBtMjlzdGFibGVtYWM6cjMQChimh8oBIKaHygFKEAoMRGVmYXVsdEdyb3VwEABSEBIEMjkuKhoEMzkuKiADKAF Yvt/3rAUSrgIKD0luc3RhbnRFeHRlbmRlZBiAyJWUBTgBQgxEZWZhdWx0R3JvdXBKIQoTQ29udHJvbDEgbTMwYmV0YTpwcBABGJyHygEgnIfKAUohChNDb250cm9sMiBtMzBiZXRhOnBwEAEYnYfKASCdh 8oBSkQKNkdyb3VwMSBtMzBiZXRhOnBwIHVzZV9yZW1vdGVfbnRwX29uX3N0YXJ0dXA6MSBESVNBQkxFRBABGJ6HygEgnofKAUpNCj9Hcm91cDIgbTMwYmV0YTpwcCB1c2VfcmVtb3RlX250cF9vbl9 zdGFydHVwOjEgZXNwdjoyMDggRElTQUJMRUQQARifh8oBIJ+HygFKEAoMRGVmYXVsdEdyb3VwEABSEhIEMzAuKhoEMzAuKiACKAAoA1jpib/HChKsAgoPSW5zdGFudEV4dGVuZGVkGIClkJQFOAFCDERlZmF1bHRHcm91cEohChNDb250cm9sMSBtMzBiZXRhOnBwEAEYoIfKASCgh8oBSiEKE0NvbnRyb2wyIG0zMGJldGE6cHAQARihh8oBIKGHy gFKRAo2R3JvdXAxIG0zMGJldGE6cHAgdXNlX3JlbW90ZV9udHBfb25fc3RhcnR1cDoxIERJU0FCTEVEEAEYoofKASCih8oBSk0KP0dyb3VwMiBtMzBiZXRhOnBwIHVzZV9yZW1vdGVfbnRwX29uX3N 0YXJ0dXA6MSBlc3B2OjIwOCBESVNBQkxFRBABGKOHygEgo4fKAUoQCgxEZWZhdWx0R3JvdXAQAFIQEgQzMC4qGgQzMC4qIAIoAVjpib/HChKYAgoPSW5zdGFudEV4dGVuZGVkGICL8pIFOAFCDERlZmF1bHRHcm91cEogChJDb250cm9sMSBtMzBkZXY6cjEQARjAhsoBIMCGygFKIAoSQ29udHJvbDIgbTMwZGV2OnIxEAEY7YbKASDthsoBS joKLEdyb3VwMSBtMzBkZXY6cjEgdXNlX3JlbW90ZV9udHBfb25fc3RhcnR1cDoxEAEYwobKASDChsoBSkMKNUdyb3VwMiBtMzBkZXY6cjEgdXNlX3JlbW90ZV9udHBfb25fc3RhcnR1cDoxIGVzcHY 6MjA4EAEYw4bKASDDhsoBShAKDERlZmF1bHRHcm91cBAAUhISBDMwLioaBDMwLiogASgAKANYu8vFsA4SlgIKD0luc3RhbnRFeHRlbmRlZBiAi/KSBTgBQgxEZWZhdWx0R3JvdXBKIAoSQ29udHJvbDEgbTMwZGV2OnIxEAEYxIbKASDEhsoBSiAKEkNvbnRyb2wyIG0zMGRldjpyMRABGOyGygEg7IbKAUo6CixHcm91cDEgbTMwZGV2OnIxIHVzZV9y ZW1vdGVfbnRwX29uX3N0YXJ0dXA6MRABGMaGygEgxobKAUpDCjVHcm91cDIgbTMwZGV2OnIxIHVzZV9yZW1vdGVfbnRwX29uX3N0YXJ0dXA6MSBlc3B2OjIwOBABGMeGygEgx4bKAUoQCgxEZWZhdW x0R3JvdXAQAFIQEgQzMC4qGgQzMC4qIAEoAVi7y8WwDhKDAwoPSW5zdGFudEV4dGVuZGVkOAFCDERlZmF1bHRHcm91cEomChhDb250cm9sR3JvdXAxIG0zMWRldjpwcDEQARiYh8oBIJiHygFKdApm R3JvdXAxIG0zMWRldjpwcDEgdXNlX3JlbW90ZV9udHBfb25fc3RhcnR1cDoxIGVzcHY6MjA5IGhpZGVfdmVyYmF0aW06MSBwcmVmZXRjaF9yZXN1bHRzX3NycDoxIERJU0FCTEVEEAEYmYfKASCZh8 oBSlQKRkdyb3VwMiBtMzFkZXY6cHAxIHVzZV9yZW1vdGVfbnRwX29uX3N0YXJ0dXA6MSBoaWRlX3ZlcmJhdGltOjEgRElTQUJMRUQQARiah8oBIJqHygFKRAo2R3JvdXAzIG0zMWRldjpwcDEgdXNl X3JlbW90ZV9udHBfb25fc3RhcnR1cDoxIERJU0FCTEVEEAEYm4fKASCbh8oBShAKDERlZmF1bHRHcm91cBAAUhQSBDMxLioaBDMxLiogASgAKAEoAxKRAwoPSW5zdGFudEV4dGVuZGVkGICE3I8FOA FCDERlZmF1bHRHcm91cEpRCkNHcm91cDEgZXNwdjoyMDUgdXNlX3JlbW90ZV9udHBfb25fc3RhcnR1cDoxIGNoYW5uZWw6c3RhYmxlIERJU0FCTEVEEAEYwYXKASDBhcoBSlEKQ0dyb3VwMiBlc3B2 OjIwNSB1c2VfcmVtb3RlX250cF9vbl9zdGFydHVwOjEgY2hhbm5lbDpzdGFibGUgRElTQUJMRUQQCRjFhcoBIMWFygFKJgoXUGFkZGluZzEgY2hhbm5lbDpzdGFibGUQ6gMYwoXKASDChcoBSiUKF0 NvbnRyb2wxIGNoYW5uZWw6c3RhYmxlEAEYw4XKASDDhcoBSiUKF0NvbnRyb2wyIGNoYW5uZWw6c3RhYmxlEAkYxoXKASDGhcoBSiYKF1BhZGRpbmcyIGNoYW5uZWw6c3RhYmxlEOoDGMSFygEgxIXK AUoQCgxEZWZhdWx0R3JvdXAQAFISEgQyNy4qGgQyOC4qIAMoACgBEo4CChZJbnRlcnN0aXRpYWxNYWx3YXJlMzEwGMDpw5MFOAFCB0RlZmF1bHRKFwoTY29uZDFNYWx3YXJlQ29udHJvbBADShcKE2 NvbmQyTWFsd2FyZU5vQnJhbmQQA0oXChNjb25kNU1hbHdhcmVPbmVTdGVwEANKFwoTY29uZDdNYWx3YXJlRmVhck1zZxADShkKFWNvbmQ5TWFsd2FyZUNvbGxhYk1zZxADShkKFWNvbmQxMU1hbHdh cmVRdWVzdGlvbhADShcKE2NvbmQxM01hbHdhcmVHb0JhY2sQA0oMCgdEZWZhdWx0ELMBUiIIwNmjjAUSBDI5LiooACgBKAIoAzIFZW4tVVMyBWVuLUdCEpcCChdJbnRlcnN0aXRpYWxQaGlzaGluZz U2NBjA6cOTBTgBQgdEZWZhdWx0ShgKFGNvbmQzUGhpc2hpbmdDb250cm9sEANKGAoUY29uZDRQaGlzaGluZ05vQnJhbmQQA0oYChRjb25kNlBoaXNoaW5nT25lU3RlcBADShgKFGNvbmQ4UGhpc2hp bmdGZWFyTXNnEANKGwoXY29uZDEwUGhpc2hpbmdDb2xsYWJNc2cQA0oaChZjb25kMTJQaGlzaGluZ1F1ZXN0aW9uEANKGAoUY29uZDE0UGhpc2hpbmdHb0JhY2sQA0oMCgdEZWZhdWx0ELMBUiIIwN mjjAUSBDI5LiooACgBKAIoAzIFZW4tVVMyBWVuLUdCEqoCChJJbnRlcnN0aXRpYWxTU0w1MTcYwJ6XkQU4AUIHRGVmYXVsdEoZChVDb25kaXRpb24xNVNTTENvbnRyb2wQA0oZChVDb25kaXRpb24x NlNTTEZpcmVmb3gQA0oeChpDb25kaXRpb24xN1NTTEZhbmN5RmlyZWZveBADShoKFkNvbmRpdGlvbjE4U1NMTm9JbWFnZXMQA0obChdDb25kaXRpb24xOVNTTFBvbGljZW1hbhADShsKF0NvbmRpdG lvbjIwU1NMU3RvcGxpZ2h0EANKGAoUQ29uZGl0aW9uMjFTU0xCYWRndXkQA0oMCgdEZWZhdWx0ELMBUi8IwNmjjAUSCzI5LjAuMTU0My4qGgQzMC4qKAAoASgCKAMyBWVuLVVTMgVlbi1HQhJZChlM YXVuY2hlclVzZVdlYnN0b3JlU2VhcmNoGMSbkqUFOAFCB0Rpc2FibGVKCgoGRW5hYmxlEApKCwoHRGlzYWJsZRBaUhISDDI5LjAuMTU0Ny4zMigAKAMSzgIKFk1hbHdhcmVEb3dubG9hZFdhcm5pbm cYxIDRkwU4AUIHRGVmYXVsdEoVChFDb25kaXRpb24xQ29udHJvbBABShUKEUNvbmRpdGlvbjJDb250cm9sEAFKFwoTQ29uZGl0aW9uM01hbGljaW91cxABShQKEENvbmRpdGlvbjRVbnNhZmUQAUoX ChNDb25kaXRpb241RGFuZ2Vyb3VzEAFKFQoRQ29uZGl0aW9uNkhhcm1mdWwQAUobChdDb25kaXRpb243RGlzY2FyZFNlY29uZBABShoKFkNvbmRpdGlvbjhEaXNjYXJkRmlyc3QQAUoZChVDb25kaX Rpb245U2FmZURpc2NhcmQQAUoaChZDb25kaXRpb24xMFNhZmVEb250UnVuEAFKCwoHRGVmYXVsdBBaUhkIxJKfkQUSBDMwLiogACABKAAyBWVuLVVTElEKEU1hbmFnZWRNb2RlTGF1bmNoGID46ZQF OAFCCEluYWN0aXZlSgoKBkFjdGl2ZRBkSgwKCEluYWN0aXZlEABSEBIEMzAuKiAAIAEoACgBKAISTQoRTWFuYWdlZE1vZGVMYXVuY2gYgPjplAU4AUIISW5hY3RpdmVKCgoGQWN0aXZlEGRKDAoISW 5hY3RpdmUQAFIMEgQzMC4qIAAgASgDEpICChhNb3N0VmlzaXRlZFRpbGVQbGFjZW1lbnQYgP6ikgU4AUIHRGVmYXVsdEoWChJPbmVFaWdodF9BX0ZsaXBwZWQQA0oOCgpPbmVFaWdodF9CEANKFgoS T25lRWlnaHRfQ19GbGlwcGVkEANKDgoKT25lRWlnaHRfRBADShUKEU9uZUZvdXJfQV9GbGlwcGVkEANKDQoJT25lRm91cl9CEANKFQoRT25lRm91cl9DX0ZsaXBwZWQQA0oNCglPbmVGb3VyX0QQA0 oLCgdDb250cm9sEANKFAoQRG9udFNob3dPcGVuVGFicxADSgsKB0RlZmF1bHQQRlIZEgsyOC4wLjE0OTYuMCABIAAoACgBKAIoAxKSAQoUTW91c2VFdmVudFByZWNvbm5lY3QYxLSNlgU4AEIIRGlz YWJsZWRKDQoJTW91c2VEb3duEApKDQoJTW91c2VPdmVyEABKEgoOVGFwVW5jb25maXJtZWQQAEoLCgdUYXBEb3duEABKCwoHQ29udHJvbBAKSgwKCERpc2FibGVkEFBSDhIEMjkuKiACKAAoASgCEp gBChRNb3VzZUV2ZW50UHJlY29ubmVjdBjEtI2WBTgAQghEaXNhYmxlZEoNCglNb3VzZURvd24QCkoNCglNb3VzZU92ZXIQAEoSCg5UYXBVbmNvbmZpcm1lZBAASgsKB1RhcERvd24QAEoLCgdDb250 cm9sEApKDAoIRGlzYWJsZWQQUFIUEgQyOS4qIAAgASgAKAEoAigDKAQSXQoMTmV3TWVudVN0eWxlGIDQn40FOAFCB0RlZmF1bHRKCwoHRGVmYXVsdBAASg0KCE5ld1N0eWxlEOYHSgwKCE9sZFN0eW xlEAJSEhIEMjYuKhoEMjcuKiADKAAoAxJ+CgxOZXdNZW51U3R5bGUYgP6ikgU4AUIHRGVmYXVsdEoLCgdEZWZhdWx0EABKDAoIQ29tcGFjdDEQAEoMCghDb21wYWN0MhBkShIKDkhpZ2hlckNvbnRy YXN0EABKEAoMQ29udHJvbEdyb3VwEABSDhIEMjguKiABIAAoACgDEn4KDE5ld01lbnVTdHlsZRiA/qKSBTgBQgdEZWZhdWx0SgsKB0RlZmF1bHQQAEoMCghDb21wYWN0MRAASgwKCENvbXBhY3QyEGRKEgoOSGlnaGVyQ29udHJhc3QQAEoQCgxDb250cm9sR3JvdXAQAFIOEgQyOC4qIAMgAigAKAMSVwo MTmV3VGFiQnV0dG9uGIC1jZYFOAFCB2RlZmF1bHRKCwoHZGVmYXVsdBBiSgsKB0NvbnRyb2wQAUoICgRQbHVzEAFSEhIMMjEuMC4xMTgwLjE1IAMoABLcAQoaT21uaWJveEJ1bmRsZWRFeHBlcmltZ W50VjEYxM6rlwU4AUIIU3RhbmRhcmRKSwoHUmVvcmRlchAAMj4KH1Jlb3JkZXJGb3JMZWdhbERlZmF1bHRNYXRjaDoqOioSG1Jlb3JkZXJGb3JMZWdhbERlZmF1bHRNYXRjaEo2ChRTZWFyY2hIaXN 0b3J5RGlzYWJsZRAAMhwKEVNlYXJjaEhpc3Rvcnk6KjoqEgdEaXNhYmxlSgwKCFN0YW5kYXJkEGRSGQjEgK6OBRILMzAuMC4xNTk5LjAgACABIAISzQEKHk9tbmlib3hSZXBsYWNlSFVQQW5kTmV3U 2NvcmluZxjAhbOQBTgBQghTdGFuZGFyZEoMCghTdGFuZGFyZBA8Sg0KCVN0YW5kYXJkMhAKSh0KGUhRUC1wb3N0cGVyaW9kLVJlcGxhY2VIVVAQCkoOCgpOZXdTY29yaW5nEApKNAowSFFQLXBvc3R wZXJpb2QtUmVwbGFjZUhVUF9OZXctcG9zdHBlcmlvZC1TY29yaW5nEApSFwjAn4uHBRILMjguMC4xNDk5LiogASACEmQKFE9tbmlib3hTZWFyY2hIaXN0b3J5GMSQq5AFOAFCCFN0YW5kYXJkShMKD 1ByZXZlbnRJbmxpbmluZxAKSgsKB0Rpc2FibGUQCkoMCghTdGFuZGFyZBBQUgoSBDMwLiogACABEm8KF09tbmlib3hTaG9ydGN1dHNTY29yaW5nGMTKiaAFOAFCCFN0YW5kYXJkSgwKCFN0YW5kYXJ kEFpKFQoRTWF4UmVsZXZhbmNlXzEzOTkQClIdCMSAro4FEgsyOS4wLjE1NDcuMBoEMjkuKiABIAISZQoQT21uaWJveFN0b3BUaW1lchjA0ZmTBTgBQghTdGFuZGFyZEoSCghTdGFuZGFyZBD0Axi3h coBShYKDFVzZVN0b3BUaW1lchD0Axi4hcoBUhMIwMzUiwUSCzI4LjAuMTQ4OC4wEmcKFE91dGRhdGVkSW5zdGFsbENoZWNrGMS0jZYFOAFCB0RlZmF1bHRKGgoWMTJXZWVrc091dGRhdGVkSW5zdGF sbBABSgsKB0RlZmF1bHQQAFIVEgsyNy4wLjE0NDcuMBoEMzAuKigAElYKF1ByZXJlbmRlckxvY2FsUHJlZGljdG9yGMS0jZYFOABCCERpc2FibGVkSgsKB0VuYWJsZWQQZEoMCghEaXNhYmxlZBAAU g4SBDI5LiogAigAKAEoAhJsChdQcmVyZW5kZXJMb2NhbFByZWRpY3RvchjEh6GMBTgAQghEaXNhYmxlZEoNCghEaXNhYmxlZBDUB0oLCgdFbmFibGVkEApKCwoHQ29udHJvbBAKUhYSBDI1LioaBDI 4LiogAyACKAAoASgCEmYKF1ByZXJlbmRlckxvY2FsUHJlZGljdG9yGMS0jZYFOABCCERpc2FibGVkSgwKCERpc2FibGVkEGRKDAoHRW5hYmxlZBCgBkoLCgdDb250cm9sEGRSEBIEMjUuKiAAIAEoA CgBKAISWQouUHJlcmVuZGVyTG9jYWxQcmVkaWN0b3JNYXhDb25jdXJyZW50UHJlcmVuZGVycxjEtI2WBTgAQgExSgUKATMQZEoFCgExEABSDhIEMjkuKiACKAAoASgCEnAKLlByZXJlbmRlckxvY2F sUHJlZGljdG9yTWF4Q29uY3VycmVudFByZXJlbmRlcnMYxLSNlgU4AUIBMUoFCgExEBRKBQoBMhAUSgUKATMQFEoFCgE0EBRKBQoBNRAUUhASBDI5LiogACABKAAoASgCEmMKJVByZXJlbmRlckxvY 2FsUHJlZGljdG9yUHJlcmVuZGVyTGFuY2gYxLSNlgU4AEIHRW5hYmxlZEoMCghEaXNhYmxlZBAASgsKB0VuYWJsZWQQZFIOEgQyOS4qIAIoACgBKAISYwolUHJlcmVuZGVyTG9jYWxQcmVkaWN0b3J QcmVyZW5kZXJMYW5jaBjEtI2WBTgBQgdFbmFibGVkSgwKCERpc2FibGVkEGRKCwoHRW5hYmxlZBAAUg4SBDI5LiogAygAKAEoAhJnCjtQcmVyZW5kZXJMb2NhbFByZWRpY3RvclByZXJlbmRlclBya W9yaXR5SGFsZkxpZmVUaW1lU2Vjb25kcxjEtI2WBTgAQgEwSgYKAjMwEGRKBQoBMBAAUg4SBDI5LiogAigAKAEoAhJxCjtQcmVyZW5kZXJMb2NhbFByZWRpY3RvclByZXJlbmRlclByaW9yaXR5SGF sZkxpZmVUaW1lU2Vjb25kcxjEtI2WBTgBQgEwSgUKATAQMkoGCgIzMBAZSgYKAjYwEBlSEBIEMjkuKiAAIAEoACgBKAISbgoqUHJlcmVuZGVyTG9jYWxQcmVkaWN0b3JQcmVyZW5kZXJUVExTZWNvb mRzGMS0jZYFOAFCAzE4MEoHCgMxODAQNEoHCgMxMjAQEEoHCgMyNDAQEEoGCgI2MBAQUhASBDI5LiogACABKAAoASgCEtEKChtQcmVyZW5kZXJMb2NhbFByZWRpY3RvclNwZWMYxLSNlgU4AUIXTG9 jYWxQcmVkaWN0b3I9RGlzYWJsZWRKggEKfWlkPTE6TG9jYWxQcmVkaWN0b3I9RW5hYmxlZDpTaWRlRWZmZWN0RnJlZVdoaXRlbGlzdD1FbmFibGVkOk1heENvbmN1cnJlbnRQcmVyZW5kZXJzPTM6U HJlcmVuZGVyUHJpb3JpdHlIYWxmTGlmZVRpbWVTZWNvbmRzPTMwEMUCSoEBCn1pZD0yOkxvY2FsUHJlZGljdG9yPUVuYWJsZWQ6U2lkZUVmZmVjdEZyZWVXaGl0ZWxpc3Q9RW5hYmxlZDpNYXhDb25 jdXJyZW50UHJlcmVuZGVycz0zOlByZXJlbmRlclByaW9yaXR5SGFsZkxpZmVUaW1lU2Vjb25kcz0zMBBLSnwKeExvY2FsUHJlZGljdG9yPUVuYWJsZWQ6U2lkZUVmZmVjdEZyZWVXaGl0ZWxpc3Q9R W5hYmxlZDpNYXhDb25jdXJyZW50UHJlcmVuZGVycz0yOlByZXJlbmRlclByaW9yaXR5SGFsZkxpZmVUaW1lU2Vjb25kcz0zMBBLSnwKeExvY2FsUHJlZGljdG9yPUVuYWJsZWQ6U2lkZUVmZmVjdEZ yZWVXaGl0ZWxpc3Q9RW5hYmxlZDpNYXhDb25jdXJyZW50UHJlcmVuZGVycz0xOlByZXJlbmRlclByaW9yaXR5SGFsZkxpZmVUaW1lU2Vjb25kcz0zMBBLSnsKd0xvY2FsUHJlZGljdG9yPUVuYWJsZ WQ6U2lkZUVmZmVjdEZyZWVXaGl0ZWxpc3Q9RW5hYmxlZDpNYXhDb25jdXJyZW50UHJlcmVuZGVycz0zOlByZXJlbmRlclByaW9yaXR5SGFsZkxpZmVUaW1lU2Vjb25kcz0wEEtKfAp4TG9jYWxQcmV kaWN0b3I9RW5hYmxlZDpTaWRlRWZmZWN0RnJlZVdoaXRlbGlzdD1FbmFibGVkOk1heENvbmN1cnJlbnRQcmVyZW5kZXJzPTM6UHJlcmVuZGVyUHJpb3JpdHlIYWxmTGlmZVRpbWVTZWNvbmRzPTYwE EtKlgEKkQFMb2NhbFByZWRpY3Rvcj1FbmFibGVkOlNpZGVFZmZlY3RGcmVlV2hpdGVsaXN0PUVuYWJsZWQ6TWF4Q29uY3VycmVudFByZXJlbmRlcnM9MzpQcmVyZW5kZXJQcmlvcml0eUhhbGZMaWZ lVGltZVNlY29uZHM9MzA6UHJlcmVuZGVyTGF1bmNoPURpc2FibGVkEEtKnAEKlwFMb2NhbFByZWRpY3Rvcj1FbmFibGVkOlNpZGVFZmZlY3RGcmVlV2hpdGVsaXN0PUVuYWJsZWQ6TWF4Q29uY3Vyc mVudFByZXJlbmRlcnM9MzpQcmVyZW5kZXJQcmlvcml0eUhhbGZMaWZlVGltZVNlY29uZHM9MzA6UHJlcmVuZGVyQWx3YXlzQ29udHJvbD1FbmFibGVkEEtKqwEKpgFMb2NhbFByZWRpY3Rvcj1FbmF ibGVkOlNpZGVFZmZlY3RGcmVlV2hpdGVsaXN0PUVuYWJsZWQ6TWF4Q29uY3VycmVudFByZXJlbmRlcnM9MzpQcmVyZW5kZXJQcmlvcml0eUhhbGZMaWZlVGltZVNlY29uZHM9MzA6UHJlcmVuZGVyT GF1bmNoPURpc2FibGVkOlNraXBMb2dnZWRJbj1FbmFibGVkEEtKGwoXTG9jYWxQcmVkaWN0b3I9RGlzYWJsZWQQS1IOEgQzMC4qIAIoACgBKAIS0woKG1ByZXJlbmRlckxvY2FsUHJlZGljdG9yU3B lYxjEtI2WBTgBQhdMb2NhbFByZWRpY3Rvcj1EaXNhYmxlZEqCAQp9aWQ9MTpMb2NhbFByZWRpY3Rvcj1FbmFibGVkOlNpZGVFZmZlY3RGcmVlV2hpdGVsaXN0PUVuYWJsZWQ6TWF4Q29uY3VycmVud FByZXJlbmRlcnM9MzpQcmVyZW5kZXJQcmlvcml0eUhhbGZMaWZlVGltZVNlY29uZHM9MzAQxQJKgQEKfWlkPTI6TG9jYWxQcmVkaWN0b3I9RW5hYmxlZDpTaWRlRWZmZWN0RnJlZVdoaXRlbGlzdD1 FbmFibGVkOk1heENvbmN1cnJlbnRQcmVyZW5kZXJzPTM6UHJlcmVuZGVyUHJpb3JpdHlIYWxmTGlmZVRpbWVTZWNvbmRzPTMwEEtKfAp4TG9jYWxQcmVkaWN0b3I9RW5hYmxlZDpTaWRlRWZmZWN0R nJlZVdoaXRlbGlzdD1FbmFibGVkOk1heENvbmN1cnJlbnRQcmVyZW5kZXJzPTI6UHJlcmVuZGVyUHJpb3JpdHlIYWxmTGlmZVRpbWVTZWNvbmRzPTMwEEtKfAp4TG9jYWxQcmVkaWN0b3I9RW5hYmx lZDpTaWRlRWZmZWN0RnJlZVdoaXRlbGlzdD1FbmFibGVkOk1heENvbmN1cnJlbnRQcmVyZW5kZXJzPTE6UHJlcmVuZGVyUHJpb3JpdHlIYWxmTGlmZVRpbWVTZWNvbmRzPTMwEEtKewp3TG9jYWxQc mVkaWN0b3I9RW5hYmxlZDpTaWRlRWZmZWN0RnJlZVdoaXRlbGlzdD1FbmFibGVkOk1heENvbmN1cnJlbnRQcmVyZW5kZXJzPTM6UHJlcmVuZGVyUHJpb3JpdHlIYWxmTGlmZVRpbWVTZWNvbmRzPTA QS0p8CnhMb2NhbFByZWRpY3Rvcj1FbmFibGVkOlNpZGVFZmZlY3RGcmVlV2hpdGVsaXN0PUVuYWJsZWQ6TWF4Q29uY3VycmVudFByZXJlbmRlcnM9MzpQcmVyZW5kZXJQcmlvcml0eUhhbGZMaWZlV GltZVNlY29uZHM9NjAQS0qWAQqRAUxvY2FsUHJlZGljdG9yPUVuYWJsZWQ6U2lkZUVmZmVjdEZyZWVXaGl0ZWxpc3Q9RW5hYmxlZDpNYXhDb25jdXJyZW50UHJlcmVuZGVycz0zOlByZXJlbmRlclB yaW9yaXR5SGFsZkxpZmVUaW1lU2Vjb25kcz0zMDpQcmVyZW5kZXJMYXVuY2g9RGlzYWJsZWQQS0qcAQqXAUxvY2FsUHJlZGljdG9yPUVuYWJsZWQ6U2lkZUVmZmVjdEZyZWVXaGl0ZWxpc3Q9RW5hY mxlZDpNYXhDb25jdXJyZW50UHJlcmVuZGVycz0zOlByZXJlbmRlclByaW9yaXR5SGFsZkxpZmVUaW1lU2Vjb25kcz0zMDpQcmVyZW5kZXJBbHdheXNDb250cm9sPUVuYWJsZWQQS0qrAQqmAUxvY2F sUHJlZGljdG9yPUVuYWJsZWQ6U2lkZUVmZmVjdEZyZWVXaGl0ZWxpc3Q9RW5hYmxlZDpNYXhDb25jdXJyZW50UHJlcmVuZGVycz0zOlByZXJlbmRlclByaW9yaXR5SGFsZkxpZmVUaW1lU2Vjb25kc z0zMDpQcmVyZW5kZXJMYXVuY2g9RGlzYWJsZWQ6U2tpcExvZ2dlZEluPUVuYWJsZWQQS0obChdMb2NhbFByZWRpY3Rvcj1EaXNhYmxlZBBLUhASBDMwLiogACABKAAoASgCElYKF1ByZXJlbmRlckx vY2FsUHJlZGljdG9yGMS0jZYFOAFCCERpc2FibGVkSgsKB0VuYWJsZWQQAUoMCghEaXNhYmxlZBBjUg4SBDI5LiogAygAKAEoAhJWChJNYW51YWxSZXNldFByb2ZpbGUYxLPTlQU4AUIHRGlzYWJsZ UoKCgZFbmFibGUQZEoLCgdEaXNhYmxlEABSFhIEMjkuKiAAIAEgAiADKAAoASgDKAISqQEKD1Byb2dyZXNzaXZlU2NhbhjEtI2WBTgBQgdEZWZhdWx0ShUKETMzUGVyY2VudF80TWluTWF4EB5KFQo RNTBQZXJjZW50XzRNaW5NYXgQHkoVChE1MFBlcmNlbnRfOE1pbk1heBAeShYKEjEwMFBlcmNlbnRfOE1pbk1heBAeSgwKCEZ1bGxTY2FuEB5KDAoHRGVmYXVsdBDSBlIMEgQyOS4qIAAgASgDEpgCC gRRVUlDGMSRiJYFOABCCERpc2FibGVkShAKB0VuYWJsZWQQBRj/kcoBShUKDEh0dHBzRW5hYmxlZBAAGP+RygFKEAoHQ29udHJvbBAFGICSygFKEQoIRGlzYWJsZWQQWhiAksoBSiAKDkRpc2FibGVkQnlGbGFnEAAqDGRpc2FibGUtcXVpY0oqChNIdHRwc0VuYWJsZW RzQnlGbGFnEAAqEWVuYWJsZS1xdWljLWh0dHBzSisKE0h0dHBzRGlzYWJsZWRCeUZsYWcQACoSZGlzYWJsZS1xdWljLWh0dHBzSh4KDUVuYWJsZWRCeUZsYWcQACoLZW5hYmxlLXF1aWNSFRILMjku MC4xNTQ2LjAgACgAKAEoAhI2Cg5TQkludGVyc3RpdGlhbBjA0o2JBTgBQgJWMUoGCgJWMRABSgYKAlYyEGNSCCgAKAEoAigDErABChhTZW5kRmVlZGJhY2tMaW5rTG9jYXRpb24YwJKCkQU4AUIHZG VmYXVsdEoQCgdkZWZhdWx0ECgYqYXKAUoQCgdjb250cm9sEA8Y+ITKAUoRCghhbHQtdGV4dBAPGPyEygFKFQoMYWx0LWxvY2F0aW9uEA8YgoXKAUoeChVhbHQtdGV4dC1hbmQtbG9jYXRpb24QDxiI hcoBUhUSCzI3LjAuMTQ1My4qIAIoACgCKAESrAEKGFNlbmRGZWVkYmFja0xpbmtMb2NhdGlvbhjAkoKRBTgBQgdkZWZhdWx0ShAKB2RlZmF1bHQQKBiphcoBShAKB2NvbnRyb2wQDxj5hMoBShEKCG FsdC10ZXh0EA8Y/4TKAUoVCgxhbHQtbG9jYXRpb24QDxiFhcoBSh4KFWFsdC10ZXh0LWFuZC1sb2NhdGlvbhAPGIuFygFSERILMjcuMC4xNDUzLiogAigDErIBChhTZW5kRmVlZGJhY2tMaW5rTG9jYXRpb24YwJKCkQU 4AUIHZGVmYXVsdEoQCgdkZWZhdWx0ECgYqYXKAUoQCgdjb250cm9sEA8Y+ITKAUoRCghhbHQtdGV4dBAPGPqEygFKFQoMYWx0LWxvY2F0aW9uEA8YgIXKAUoeChVhbHQtdGV4dC1hbmQtbG9jYXRpb 24QDxiGhcoBUhcSCzI3LjAuMTQ1My4qIAEgACgAKAIoARKuAQoYU2VuZEZlZWRiYWNrTGlua0xvY2F0aW9uGMCSgpEFOAFCB2RlZmF1bHRKEAoHZGVmYXVsdBAoGKmFygFKEAoHY29udHJvbBAPGPm EygFKEQoIYWx0LXRleHQQDxj9hMoBShUKDGFsdC1sb2NhdGlvbhAPGIOFygFKHgoVYWx0LXRleHQtYW5kLWxvY2F0aW9uEA8YiYXKAVITEgsyNy4wLjE0NTMuKiABIAAoAxKwAQoYU2VuZEZlZWRiY WNrTGlua0xvY2F0aW9uGMCSgpEFOAFCB2RlZmF1bHRKEAoHZGVmYXVsdBA8GKmFygFKEAoHY29udHJvbBAKGPiEygFKEQoIYWx0LXRleHQQChj7hMoBShUKDGFsdC1sb2NhdGlvbhAKGIGFygFKHgo VYWx0LXRleHQtYW5kLWxvY2F0aW9uEAoYh4XKAVIVEgsyNy4wLjE0NTMuKiADKAAoAigBEqwBChhTZW5kRmVlZGJhY2tMaW5rTG9jYXRpb24YwJKCkQU4AUIHZGVmYXVsdEoQCgdkZWZhdWx0EDwYq YXKAUoQCgdjb250cm9sEAoY+YTKAUoRCghhbHQtdGV4dBAKGP6EygFKFQoMYWx0LWxvY2F0aW9uEAoYhIXKAUoeChVhbHQtdGV4dC1hbmQtbG9jYXRpb24QChiKhcoBUhESCzI3LjAuMTQ1My4qIAM oAxJ1ChRTaG93QXBwTGF1bmNoZXJQcm9tbzgBQgdEZWZhdWx0SiAKF1Nob3dQcm9tb1VudGlsRGlzbWlzc2VkEDIYnobKAUobChJSZXNldFNob3dQcm9tb1ByZWYQMhifhsoBSgsKB0RlZmF1bHQQA FIGIAAgASgAEmIKE1Nob3dQcm9maWxlU3dpdGNoZXIYwMrgigU4AUIHZGVmYXVsdEoLCgdkZWZhdWx0EFBKCwoHY29udHJvbBAKSg4KCkFsd2F5c1Nob3cQClIQEgQyNi4qIAAgASgAKAEoAhJXCg9 TaWRlbG9hZFdpcGVvdXQYxJydiwU4AUIIRGlzYWJsZWRKDAoIRGlzYWJsZWQQAEoLCgdFbmFibGVkEGRSFxILMjUuMC4xMzYwLiogACABIAIgAygAEncKGlNpZ25JblRvQ2hyb21lQ29uZmlybWF0a W9uGMDK4IoFOAFCB2RlZmF1bHRKCwoHZGVmYXVsdBBQShQKEGNvbnRyb2xfRElTQUJMRUQQCkoTCg9CdWJibGVfRElTQUJMRUQQClIQEgQyNi4qIAAgASgAKAEoAhKEAQoQU2ltcGxlQ2FjaGVUcml hbBjEtI2WBTgBQgxFeHBlcmltZW50Tm9KEQoNRXhwZXJpbWVudFllcxAtShIKDkV4cGVyaW1lbnRZZXMyEAVKFQoRRXhwZXJpbWVudENvbnRyb2wQLUoQCgxFeHBlcmltZW50Tm8QBVIKEgQyOS4qI AIoBBKGAQoQU2ltcGxlQ2FjaGVUcmlhbBjEtI2WBTgBQgxFeHBlcmltZW50Tm9KEAoMRXhwZXJpbWVudE5vEABKEQoNRXhwZXJpbWVudFllcxBQShIKDkV4cGVyaW1lbnRZZXMyEApKFQoRRXhwZXJ pbWVudENvbnRyb2wQClIMEgQyOC4qIAAgASgEEosBCjBTaW1wbGVDYWNoZUluZGV4Rmx1c2hEZWxheV9Gb3JlZ3JvdW5kX0JhY2tncm91bmQYxLSNlgU4AUIJMjAwMDBfMTAwSgwKCDUwMDBfMTAwE BlKDAoIMTAwMF8xMDAQGUoLCgcxMDAwXzIwEBlKDQoJMjAwMDBfMTAwEBlSDBIEMjkuKiAAIAEoBBJhChVTaW1wbGVDYWNoZU1heFRocmVhZHMYxLSNlgU4AEICNTBKBQoBMRAKSgUKATUQEkoGCgI xMBASSgYKAjIwEBJKBgoCMzAQEkoGCgI1MBASUg4SBDI5LiogACABIAIoBBKVAwoeU3BlY3VsYXRpdmVSZXNvdXJjZVByZWZldGNoaW5nGICc44oFOAFCCERpc2FibGVkSgwKCERpc2FibGVkEChKE AoMTGVhcm5pbmdIb3N0EApKDwoLTGVhcm5pbmdVUkwQCkoMCghMZWFybmluZxAKShMKD1ByZWZldGNoaW5nSG9zdBAKShIKDlByZWZldGNoaW5nVVJMEApKDwoLUHJlZmV0Y2hpbmcQCkocChhQcmV mZXRjaGluZ0xvd0NvbmZpZGVuY2UQAEodChlQcmVmZXRjaGluZ0hpZ2hDb25maWRlbmNlEABKHAoYUHJlZmV0Y2hpbmdNb3JlUmVzb3VyY2VzEABKEwoPTGVhcm5pbmdTbWFsbERCEABKFgoSUHJlZ mV0Y2hpbmdTbWFsbERCEABKIwofUHJlZmV0Y2hpbmdTbWFsbERCTG93Q29uZmlkZW5jZRAASiQKIFByZWZldGNoaW5nU21hbGxEQkhpZ2hDb25maWRlbmNlEABSFRILMjUuMC4xMzY0LiogAigAKAE oAhKXAwoeU3BlY3VsYXRpdmVSZXNvdXJjZVByZWZldGNoaW5nGICc44oFOAFCCERpc2FibGVkSgwKCERpc2FibGVkEChKEAoMTGVhcm5pbmdIb3N0EApKDwoLTGVhcm5pbmdVUkwQCkoMCghMZWFyb mluZxAKShMKD1ByZWZldGNoaW5nSG9zdBAKShIKDlByZWZldGNoaW5nVVJMEApKDwoLUHJlZmV0Y2hpbmcQCkocChhQcmVmZXRjaGluZ0xvd0NvbmZpZGVuY2UQAEodChlQcmVmZXRjaGluZ0hpZ2h Db25maWRlbmNlEABKHAoYUHJlZmV0Y2hpbmdNb3JlUmVzb3VyY2VzEABKEwoPTGVhcm5pbmdTbWFsbERCEABKFgoSUHJlZmV0Y2hpbmdTbWFsbERCEABKIwofUHJlZmV0Y2hpbmdTbWFsbERCTG93Q 29uZmlkZW5jZRAASiQKIFByZWZldGNoaW5nU21hbGxEQkhpZ2hDb25maWRlbmNlEABSFxILMjUuMC4xMzY0LiogACABKAAoASgCElIKClNwZWxsY2hlY2sYxNu0jQU4AUIHRGVmYXVsdEoLCgdEZWZ hdWx0EGRKDwoLU3VnZ2VzdGlvbnMQAFIVEgsyNi4wLjE0MDMuMCACIAEgACgAElQKClNwZWxsY2hlY2sYxNu0jQU4AUIHRGVmYXVsdEoLCgdEZWZhdWx0EGRKDwoLU3VnZ2VzdGlvbnMQAFIXEgsyN i4wLjE0MDMuMCADIAIgASgCKAMSTgoKU3BlbGxjaGVjaxjE27SNBTgBQgdEZWZhdWx0SgsKB0RlZmF1bHQQZEoPCgtTdWdnZXN0aW9ucxAAUhESCzI2LjAuMTQwMy4wIAMoABJPCg1FbmFibGVTdGF nZTNEGICI/oYFOAFCB2VuYWJsZWRKDAoHZW5hYmxlZBC2B0oPCgtibGFja2xpc3RlZBAyUg4SBDIyLiogACABIAIoABJRCg1FbmFibGVTdGFnZTNEGICI/oYFOAFCB2VuYWJsZWRKDAoHZW5hYmxlZBDoB0oPCgtibGFja2xpc3RlZBAAUhASBDIyLioaBDIyLiogAygAEmgKDUVuYWJsZVN0YWdlM0QYgN+/iQU4AUIPZW5hYmxlZF9kZWZhdWx0ShMKD2VuYWJsZWRfZGVmYXVsdBAASgwKB2VuYWJsZWQQ6AdKDwoLYmxhY2tsaXN0ZWQQAFIKEgQyMy4qIAMoABKrAgoLVGFiRXZpY3Rpb24YgP6ikgU4AUIHRG VmYXVsdEoLCgdEZWZhdWx0EABKCwoHQ29udHJvbBAKShEKDU1lbW9yeUtlZXBBbGwQAUoTCg9NZW1vcnlFdmljdEhhbGYQCkoTCg9NZW1vcnlLZWVwVGhyZWUQCkoUChBNZW1vcnlFdmljdFRocmVl EApKGAoUQmFja2dyb3VuZGluZ0tlZXBBbGwQCkoaChZCYWNrZ3JvdW5kaW5nRXZpY3RIYWxmEApKGAoUQmFja2dyb3VuZGluZ0tlZXBPbmUQCkobChdCYWNrZ3JvdW5kaW5nRXZpY3RUaHJlZRAKSh IKDk5vUHJlcmVuZGVyaW5nEApKDwoLTm9RdWlja2JhY2sQClIMEgQyOS4qIAAgAigFEqoCCgtUYWJFdmljdGlvbhiAjM+YBTgBQgdEZWZhdWx0SgwKB0RlZmF1bHQQ3gdKCwoHQ29udHJvbBABShEK DU1lbW9yeUtlZXBBbGwQAEoTCg9NZW1vcnlFdmljdEhhbGYQAUoTCg9NZW1vcnlLZWVwVGhyZWUQAUoUChBNZW1vcnlFdmljdFRocmVlEAFKGAoUQmFja2dyb3VuZGluZ0tlZXBBbGwQAUoaChZCYW NrZ3JvdW5kaW5nRXZpY3RIYWxmEAFKGAoUQmFja2dyb3VuZGluZ0tlZXBPbmUQAUobChdCYWNrZ3JvdW5kaW5nRXZpY3RUaHJlZRABShIKDk5vUHJlcmVuZGVyaW5nEAFKDwoLTm9RdWlja2JhY2sQ AVIKEgQyOS4qIAMoBRJOChNUZXN0MFBlcmNlbnREZWZhdWx0GICckqUFOAFCB2RlZmF1bHRKCwoHZGVmYXVsdBAASgwKCGdyb3VwXzAxEGRKCwoHZG9nZm9vZBAAEtoBChxVTUEtRHluYW1pYy1Vbm lmb3JtaXR5LVRyaWFsGICckqUFOAFCB0RlZmF1bHRKFAoGR3JvdXAxEAEYv7bJASC/tskBShQKBkdyb3VwMhAJGMC2yQEgwLbJAUoVCgZHcm91cDMQ6gMYwbbJASDBtskBShQKBkdyb3VwNBABGMK2yQEgwrbJAUoUCgZHcm91cDUQCRjDtskBIMO2yQFKFQoGR3JvdXA2EOoDGMS2yQEgxL bJAUoVCgdEZWZhdWx0EAAYxbbJASDFtskBUgwSBDI3LiogAygAKAESvQEKH1VNQS1Vbmlmb3JtaXR5LVRyaWFsLTEwLVBlcmNlbnQYgJySpQU4AUIHZGVmYXVsdEoLCgdkZWZhdWx0EAFKDAoIZ3Jv dXBfMDEQAUoMCghncm91cF8wMhABSgwKCGdyb3VwXzAzEAFKDAoIZ3JvdXBfMDQQAUoMCghncm91cF8wNRABSgwKCGdyb3VwXzA2EAFKDAoIZ3JvdXBfMDcQAUoMCghncm91cF8wOBABSgwKCGdyb3 VwXzA5EAESpg8KHlVNQS1Vbmlmb3JtaXR5LVRyaWFsLTEtUGVyY2VudBiAnJKlBTgBQgdkZWZhdWx0ShAKB2RlZmF1bHQQARigtckBShEKCGdyb3VwXzAxEAEYobXJAUoRCghncm91cF8wMhABGKK1 yQFKEQoIZ3JvdXBfMDMQARijtckBShEKCGdyb3VwXzA0EAEYpLXJAUoRCghncm91cF8wNRABGKW1yQFKEQoIZ3JvdXBfMDYQARimtckBShEKCGdyb3VwXzA3EAEYp7XJAUoRCghncm91cF8wOBABGK i1yQFKEQoIZ3JvdXBfMDkQARiptckBShEKCGdyb3VwXzEwEAEYqrXJAUoRCghncm91cF8xMRABGKu1yQFKEQoIZ3JvdXBfMTIQARistckBShEKCGdyb3VwXzEzEAEYrbXJAUoRCghncm91cF8xNBAB GK61yQFKEQoIZ3JvdXBfMTUQARivtckBShEKCGdyb3VwXzE2EAEYsLXJAUoRCghncm91cF8xNxABGLG1yQFKEQoIZ3JvdXBfMTgQARiytckBShEKCGdyb3VwXzE5EAEYs7XJAUoRCghncm91cF8yMB ABGLS1yQFKEQoIZ3JvdXBfMjEQARi1tckBShEKCGdyb3VwXzIyEAEYtrXJAUoRCghncm91cF8yMxABGLe1yQFKEQoIZ3JvdXBfMjQQARi4tckBShEKCGdyb3VwXzI1EAEYubXJAUoRCghncm91cF8y NhABGLq1yQFKEQoIZ3JvdXBfMjcQARi7tckBShEKCGdyb3VwXzI4EAEYvLXJAUoRCghncm91cF8yORABGL21yQFKEQoIZ3JvdXBfMzAQARi+tckBShEKCGdyb3VwXzMxEAEYv7XJAUoRCghncm91cF 8zMhABGMC1yQFKEQoIZ3JvdXBfMzMQARjBtckBShEKCGdyb3VwXzM0EAEYwrXJAUoRCghncm91cF8zNRABGMO1yQFKEQoIZ3JvdXBfMzYQARjEtckBShEKCGdyb3VwXzM3EAEYxbXJAUoRCghncm91 cF8zOBABGMa1yQFKEQoIZ3JvdXBfMzkQARjHtckBShEKCGdyb3VwXzQwEAEYyLXJAUoRCghncm91cF80MRABGMm1yQFKEQoIZ3JvdXBfNDIQARjKtckBShEKCGdyb3VwXzQzEAEYy7XJAUoRCghncm 91cF80NBABGMy1yQFKEQoIZ3JvdXBfNDUQARjNtckBShEKCGdyb3VwXzQ2EAEYzrXJAUoRCghncm91cF80NxABGM+1yQFKEQoIZ3JvdXBfNDgQARjQtckBShEKCGdyb3VwXzQ5EAEY0bXJAUoRCghn cm91cF81MBABGNK1yQFKEQoIZ3JvdXBfNTEQARjTtckBShEKCGdyb3VwXzUyEAEY1LXJAUoRCghncm91cF81MxABGNW1yQFKEQoIZ3JvdXBfNTQQARjWtckBShEKCGdyb3VwXzU1EAEY17XJAUoRCg hncm91cF81NhABGNi1yQFKEQoIZ3JvdXBfNTcQARjZtckBShEKCGdyb3VwXzU4EAEY2rXJAUoRCghncm91cF81ORABGNu1yQFKEQoIZ3JvdXBfNjAQARjctckBShEKCGdyb3VwXzYxEAEY3bXJAUoR Cghncm91cF82MhABGN61yQFKEQoIZ3JvdXBfNjMQARjftckBShEKCGdyb3VwXzY0EAEY4LXJAUoRCghncm91cF82NRABGOG1yQFKEQoIZ3JvdXBfNjYQARjitckBShEKCGdyb3VwXzY3EAEY47XJAU oRCghncm91cF82OBABGOS1yQFKEQoIZ3JvdXBfNjkQARjltckBShEKCGdyb3VwXzcwEAEY5rXJAUoRCghncm91cF83MRABGOe1yQFKEQoIZ3JvdXBfNzIQARjotckBShEKCGdyb3VwXzczEAEY6bXJ AUoRCghncm91cF83NBABGOq1yQFKEQoIZ3JvdXBfNzUQARjrtckBShEKCGdyb3VwXzc2EAEY7LXJAUoRCghncm91cF83NxABGO21yQFKEQoIZ3JvdXBfNzgQARjutckBShEKCGdyb3VwXzc5EAEY77 XJAUoRCghncm91cF84MBABGPC1yQFKEQoIZ3JvdXBfODEQARjxtckBShEKCGdyb3VwXzgyEAEY8rXJAUoRCghncm91cF84MxABGPO1yQFKEQoIZ3JvdXBfODQQARj0tckBShEKCGdyb3VwXzg1EAEY 9bXJAUoRCghncm91cF84NhABGPa1yQFKEQoIZ3JvdXBfODcQARj3tckBShEKCGdyb3VwXzg4EAEY+LXJAUoRCghncm91cF84ORABGPm1yQFKEQoIZ3JvdXBfOTAQARj6tckBShEKCGdyb3VwXzkxEA EY+7XJAUoRCghncm91cF85MhABGPy1yQFKEQoIZ3JvdXBfOTMQARj9tckBShEKCGdyb3VwXzk0EAEY/rXJAUoRCghncm91cF85NRABGP+1yQFKEQoIZ3JvdXBfOTYQARiAtskBShEKCGdyb3VwXzk3EAEYgbbJAUoRCghncm91cF85OBABGIK2yQFKEQoIZ3JvdXBfOTkQARiDtskBUggoACgBKAIoAxKuCwo eVU1BLVVuaWZvcm1pdHktVHJpYWwtMS1QZXJjZW50GICckqUFOAFCB2RlZmF1bHRKCwoHZGVmYXVsdBABSgwKCGdyb3VwXzAxEAFKDAoIZ3JvdXBfMDIQAUoMCghncm91cF8wMxABSgwKCGdyb3VwX zA0EAFKDAoIZ3JvdXBfMDUQAUoMCghncm91cF8wNhABSgwKCGdyb3VwXzA3EAFKDAoIZ3JvdXBfMDgQAUoMCghncm91cF8wORABSgwKCGdyb3VwXzEwEAFKDAoIZ3JvdXBfMTEQAUoMCghncm91cF8 xMhABSgwKCGdyb3VwXzEzEAFKDAoIZ3JvdXBfMTQQAUoMCghncm91cF8xNRABSgwKCGdyb3VwXzE2EAFKDAoIZ3JvdXBfMTcQAUoMCghncm91cF8xOBABSgwKCGdyb3VwXzE5EAFKDAoIZ3JvdXBfM jAQAUoMCghncm91cF8yMRABSgwKCGdyb3VwXzIyEAFKDAoIZ3JvdXBfMjMQAUoMCghncm91cF8yNBABSgwKCGdyb3VwXzI1EAFKDAoIZ3JvdXBfMjYQAUoMCghncm91cF8yNxABSgwKCGdyb3VwXzI 4EAFKDAoIZ3JvdXBfMjkQAUoMCghncm91cF8zMBABSgwKCGdyb3VwXzMxEAFKDAoIZ3JvdXBfMzIQAUoMCghncm91cF8zMxABSgwKCGdyb3VwXzM0EAFKDAoIZ3JvdXBfMzUQAUoMCghncm91cF8zN hABSgwKCGdyb3VwXzM3EAFKDAoIZ3JvdXBfMzgQAUoMCghncm91cF8zORABSgwKCGdyb3VwXzQwEAFKDAoIZ3JvdXBfNDEQAUoMCghncm91cF80MhABSgwKCGdyb3VwXzQzEAFKDAoIZ3JvdXBfNDQ QAUoMCghncm91cF80NRABSgwKCGdyb3VwXzQ2EAFKDAoIZ3JvdXBfNDcQAUoMCghncm91cF80OBABSgwKCGdyb3VwXzQ5EAFKDAoIZ3JvdXBfNTAQAUoMCghncm91cF81MRABSgwKCGdyb3VwXzUyE AFKDAoIZ3JvdXBfNTMQAUoMCghncm91cF81NBABSgwKCGdyb3VwXzU1EAFKDAoIZ3JvdXBfNTYQAUoMCghncm91cF81NxABSgwKCGdyb3VwXzU4EAFKDAoIZ3JvdXBfNTkQAUoMCghncm91cF82MBA BSgwKCGdyb3VwXzYxEAFKDAoIZ3JvdXBfNjIQAUoMCghncm91cF82MxABSgwKCGdyb3VwXzY0EAFKDAoIZ3JvdXBfNjUQAUoMCghncm91cF82NhABSgwKCGdyb3VwXzY3EAFKDAoIZ3JvdXBfNjgQA UoMCghncm91cF82ORABSgwKCGdyb3VwXzcwEAFKDAoIZ3JvdXBfNzEQAUoMCghncm91cF83MhABSgwKCGdyb3VwXzczEAFKDAoIZ3JvdXBfNzQQAUoMCghncm91cF83NRABSgwKCGdyb3VwXzc2EAF KDAoIZ3JvdXBfNzcQAUoMCghncm91cF83OBABSgwKCGdyb3VwXzc5EAFKDAoIZ3JvdXBfODAQAUoMCghncm91cF84MRABSgwKCGdyb3VwXzgyEAFKDAoIZ3JvdXBfODMQAUoMCghncm91cF84NBABS gwKCGdyb3VwXzg1EAFKDAoIZ3JvdXBfODYQAUoMCghncm91cF84NxABSgwKCGdyb3VwXzg4EAFKDAoIZ3JvdXBfODkQAUoMCghncm91cF85MBABSgwKCGdyb3VwXzkxEAFKDAoIZ3JvdXBfOTIQAUo MCghncm91cF85MxABSgwKCGdyb3VwXzk0EAFKDAoIZ3JvdXBfOTUQAUoMCghncm91cF85NhABSgwKCGdyb3VwXzk3EAFKDAoIZ3JvdXBfOTgQAUoMCghncm91cF85ORABUgQoBCgFEncKH1VNQS1Vb mlmb3JtaXR5LVRyaWFsLTIwLVBlcmNlbnQYgJySpQU4AUIHZGVmYXVsdEoLCgdkZWZhdWx0EAFKDAoIZ3JvdXBfMDEQAUoMCghncm91cF8wMhABSgwKCGdyb3VwXzAzEAFKDAoIZ3JvdXBfMDQQARJ NCh9VTUEtVW5pZm9ybWl0eS1UcmlhbC01MC1QZXJjZW50GICckqUFOAFCB2RlZmF1bHRKCwoHZGVmYXVsdBABSgwKCGdyb3VwXzAxEAEStgMKHlVNQS1Vbmlmb3JtaXR5LVRyaWFsLTUtUGVyY2Vud BiAnJKlBTgBQgdkZWZhdWx0ShAKB2RlZmF1bHQQARiEtskBShEKCGdyb3VwXzAxEAEYhbbJAUoRCghncm91cF8wMhABGIa2yQFKEQoIZ3JvdXBfMDMQARiHtskBShEKCGdyb3VwXzA0EAEYiLbJAUo RCghncm91cF8wNRABGIm2yQFKEQoIZ3JvdXBfMDYQARiKtskBShEKCGdyb3VwXzA3EAEYi7bJAUoRCghncm91cF8wOBABGIy2yQFKEQoIZ3JvdXBfMDkQARiNtskBShEKCGdyb3VwXzEwEAEYjrbJA UoRCghncm91cF8xMRABGI+2yQFKEQoIZ3JvdXBfMTIQARiQtskBShEKCGdyb3VwXzEzEAEYkbbJAUoRCghncm91cF8xNBABGJK2yQFKEQoIZ3JvdXBfMTUQARiTtskBShEKCGdyb3VwXzE2EAEYlLb JAUoRCghncm91cF8xNxABGJW2yQFKEQoIZ3JvdXBfMTgQARiWtskBShEKCGdyb3VwXzE5EAEYl7bJAVIIKAAoASgCKAMSzgIKHlVNQS1Vbmlmb3JtaXR5LVRyaWFsLTUtUGVyY2VudBiAnJKlBTgBQ gdkZWZhdWx0SgsKB2RlZmF1bHQQAUoMCghncm91cF8wMRABSgwKCGdyb3VwXzAyEAFKDAoIZ3JvdXBfMDMQAUoMCghncm91cF8wNBABSgwKCGdyb3VwXzA1EAFKDAoIZ3JvdXBfMDYQAUoMCghncm9 1cF8wNxABSgwKCGdyb3VwXzA4EAFKDAoIZ3JvdXBfMDkQAUoMCghncm91cF8xMBABSgwKCGdyb3VwXzExEAFKDAoIZ3JvdXBfMTIQAUoMCghncm91cF8xMxABSgwKCGdyb3VwXzE0EAFKDAoIZ3Jvd XBfMTUQAUoMCghncm91cF8xNhABSgwKCGdyb3VwXzE3EAFKDAoIZ3JvdXBfMTgQAUoMCghncm91cF8xORABUgQoBCgF"
CHR Extension: (Google Docs) - C:\Users\BISPIN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\BISPIN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\BISPIN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\BISPIN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Kaspersky URL Advisor) - C:\Users\BISPIN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\13.0.2.558_0
CHR Extension: (Babylon Toolbar) - C:\Users\BISPIN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.14_0
CHR Extension: (Safe Money) - C:\Users\BISPIN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh\13.0.2.558_0
CHR Extension: (Virtual Keyboard) - C:\Users\BISPIN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\13.0.2.558_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\BISPIN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: (Gmail) - C:\Users\BISPIN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR Extension: (Anti-Banner) - C:\Users\BISPIN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\13.0.2.558_0
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\urladvisor.crx
CHR HKLM-x32\...\Chrome\Extension: [dhkplhfnhceodhffomolpfigojocbpcb] - C:\Users\Bispinosa\AppData\Roaming\BabSolution\CR\BabylonChrome1.crx
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\online_banking_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\content_blocker_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\virtkbd.crx
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\ab.crx

==================== Services (Whitelisted) =================

S2 0053221378793026mcinstcleanup; C:\Windows\TEMP\005322~1.EXE [828032 2012-06-14] (McAfee, Inc.)
R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356968 2012-12-20] (Kaspersky Lab ZAO)
R2 BrowserDefendert; C:\ProgramData\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe [2838496 2013-08-30] ()
R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [819040 2012-12-21] (Infowatch)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14997280 2013-08-27] (NVIDIA Corporation)
R2 USBS3S4Detection; C:\OEM\USBDECTION\USBS3S4Detection.exe [76320 2009-12-09] ()

==================== Drivers (Whitelisted) ====================

R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [84536 2011-06-02] (Infowatch)
R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66616 2011-06-02] (Infowatch)
R2 DRHARD64; C:\Windows\system32\drivers\DRHARD64.sys [21984 2011-11-03] (Licensed for Gebhard Software)
R2 DRHMSR64; C:\Windows\system32\drivers\DRHMSR64.sys [13760 2013-07-21] ()
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-06-19] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [620128 2013-09-10] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29016 2012-09-03] (Kaspersky Lab)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29528 2012-09-03] (Kaspersky Lab)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-09-10] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-09-10] (Kaspersky Lab ZAO)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [100312 2013-07-02] (Intel Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-08-20] (NVIDIA Corporation)
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [90208 2013-09-10] (Kaspersky Lab ZAO)
U3 ugldapow; \??\C:\Users\BISPIN~1\AppData\Local\Temp\ugldapow.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-11 11:15 - 2013-09-11 11:16 - 01949408 _____ (Farbar) C:\Users\Bispinosa\Downloads\FRST64.exe
2013-09-11 11:15 - 2013-09-11 11:15 - 00000480 _____ C:\Users\Bispinosa\Desktop\defogger_disable.log
2013-09-11 11:14 - 2013-09-11 11:14 - 00050477 _____ C:\Users\Bispinosa\Downloads\Defogger.exe
2013-09-11 10:52 - 2013-09-11 10:52 - 00010201 _____ C:\Users\Bispinosa\Desktop\Gmer.Txt.log
2013-09-11 10:30 - 2013-09-11 10:30 - 00000000 ____D C:\FRST
2013-09-11 10:26 - 2013-09-11 10:26 - 00000000 _____ C:\Users\Bispinosa\defogger_reenable
2013-09-11 10:20 - 2013-09-11 10:20 - 00002128 _____ C:\Users\Bispinosa\Desktop\AppsHat.lnk
2013-09-11 10:20 - 2013-09-11 10:20 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat
2013-09-11 10:20 - 2013-09-11 10:20 - 00000000 ____D C:\Users\BISPIN~1\AppData\Local\WebPlayer
2013-09-11 10:20 - 2013-09-11 10:20 - 00000000 ____D C:\Users\BISPIN~1\AppData\Local\Minibar
2013-09-11 10:20 - 2013-09-11 10:20 - 00000000 ____D C:\Program Files (x86)\Minibar
2013-09-11 10:19 - 2013-09-11 10:19 - 00003390 _____ C:\Windows\System32\Tasks\EPUpdater
2013-09-11 10:19 - 2013-09-11 10:19 - 00000000 ____D C:\Windows\SysWOW64\searchplugins
2013-09-11 10:19 - 2013-09-11 10:19 - 00000000 ____D C:\Windows\SysWOW64\Extensions
2013-09-11 10:19 - 2013-09-11 10:19 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender
2013-09-11 10:19 - 2013-09-11 10:19 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\BabSolution
2013-09-11 10:19 - 2013-09-11 10:19 - 00000000 ____D C:\Users\BISPIN~1\AppData\Local\avgchrome
2013-09-11 10:19 - 2013-09-11 10:19 - 00000000 ____D C:\ProgramData\BrowserDefender
2013-09-11 10:18 - 2013-09-11 10:18 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker
2013-09-11 10:18 - 2013-09-11 10:18 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\Babylon
2013-09-11 10:18 - 2013-09-11 10:18 - 00000000 ____D C:\Users\BISPIN~1\AppData\Local\FilesFrog Update Checker
2013-09-11 10:18 - 2013-09-11 10:18 - 00000000 ____D C:\ProgramData\Babylon
2013-09-10 11:42 - 2013-09-10 11:42 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_point64_01011.Wdf
2013-09-10 11:36 - 2013-09-10 11:36 - 00003062 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe
2013-09-10 11:36 - 2013-09-10 11:36 - 00003060 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe
2013-09-10 11:35 - 2013-09-10 11:35 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf
2013-09-10 11:35 - 2013-09-10 11:35 - 00000000 ____D C:\Program Files\Microsoft Mouse and Keyboard Center
2013-09-10 11:31 - 2013-09-10 11:31 - 00000000 ____H C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Coinstaller_Critical.Wdf
2013-09-10 11:31 - 2013-09-10 11:31 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2013-09-10 11:30 - 2012-07-26 06:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-09-10 11:30 - 2012-07-26 06:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2013-09-10 11:30 - 2012-07-26 04:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2013-09-10 11:30 - 2012-06-02 16:35 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2013-09-10 11:25 - 2013-09-10 11:25 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_Apfiltr_01007.Wdf
2013-09-10 11:25 - 2013-09-10 11:25 - 00000000 ____D C:\Program Files\Apoint
2013-09-10 11:24 - 2013-09-10 11:24 - 00000000 ____D C:\Program Files\DIFX
2013-09-10 11:15 - 2013-09-10 11:36 - 00284868 _____ C:\Windows\DPINST.LOG
2013-09-10 11:05 - 2013-09-10 11:05 - 00000000 ____D C:\Users\BISPIN~1\AppData\Local\NVIDIA
2013-09-10 11:05 - 2013-08-20 15:33 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-09-10 11:05 - 2013-08-20 15:32 - 00029984 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2013-09-10 11:05 - 2013-08-20 15:32 - 00028448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-09-10 11:03 - 2013-09-10 11:03 - 00001355 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2013-09-10 11:02 - 2013-09-10 11:02 - 00000000 ____D C:\Users\BISPIN~1\AppData\Local\DriverTuner
2013-09-10 11:01 - 2013-09-10 11:15 - 00000000 ____D C:\Program Files (x86)\DriverTuner
2013-09-10 11:01 - 2013-09-10 11:01 - 00001051 _____ C:\Users\Public\Desktop\DriverTuner.lnk
2013-09-10 11:01 - 2013-09-10 11:01 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-09-10 11:00 - 2013-09-10 11:00 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-09-10 10:59 - 2013-06-20 06:17 - 03253909 _____ C:\Windows\system32\nvcoproc.bin
2013-09-10 10:54 - 2013-09-10 10:56 - 01588294 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-09-10 10:46 - 2013-06-21 14:06 - 27781920 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 21102368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 15144928 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 13411896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 11235104 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-09-10 10:46 - 2013-06-21 14:06 - 09239344 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 07687592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 07641832 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 06324360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 02953504 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 02777888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 02597856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 02363680 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 02002720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 01832224 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432049.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432049.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 01059560 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 00925648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 00572704 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 00570656 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 00467232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 00465184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 00266448 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 00218592 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 00214448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 00181488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-09-10 10:46 - 2013-02-25 07:27 - 00194848 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2013-09-10 10:46 - 2013-02-25 07:27 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2013-09-10 10:46 - 2013-01-29 10:35 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2013-09-10 10:44 - 2013-09-10 10:44 - 00000000 ____D C:\NVIDIA
2013-09-10 10:18 - 2013-09-10 10:18 - 00000000 ____D C:\Program Files (x86)\Dr. Hardware 2013
2013-09-10 10:18 - 2013-07-21 18:41 - 00013760 _____ C:\Windows\SysWOW64\Drivers\DRHMSR64.sys
2013-09-10 10:18 - 2013-07-21 18:41 - 00013760 _____ C:\Windows\system32\Drivers\DRHMSR64.sys
2013-09-10 10:18 - 2011-11-03 19:05 - 00021984 _____ (Licensed for Gebhard Software) C:\Windows\SysWOW64\Drivers\DRHARD64.sys
2013-09-10 10:18 - 2011-11-03 19:05 - 00021984 _____ (Licensed for Gebhard Software) C:\Windows\system32\Drivers\DRHARD64.sys
2013-09-10 10:07 - 2013-09-10 10:07 - 00000000 ____D C:\Users\Bispinosa\Documents\CyberLink
2013-09-10 10:06 - 2013-09-10 10:07 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\PowerCinema
2013-09-10 10:06 - 2013-09-10 10:06 - 00000000 ____D C:\Users\BISPIN~1\AppData\Local\Cyberlink
2013-09-10 09:16 - 2013-09-10 09:16 - 00002224 _____ C:\Users\Bispinosa\Desktop\Sicherer Zahlungsverkehr.lnk
2013-09-10 09:11 - 2013-09-11 10:10 - 00000000 ____D C:\ProgramData\clear.fi
2013-09-10 09:11 - 2013-09-10 09:10 - 00001082 _____ C:\Users\Public\Desktop\Kaspersky PURE 3.0.lnk
2013-09-10 09:10 - 2012-07-11 17:09 - 00064856 _____ (Kaspersky Lab) C:\Windows\system32\klfphc.dll
2013-09-10 09:09 - 2011-06-02 14:39 - 00084536 _____ (Infowatch) C:\Windows\system32\Drivers\CSCrySec.sys
2013-09-10 09:09 - 2011-06-02 14:39 - 00066616 _____ (Infowatch) C:\Windows\system32\Drivers\CSVirtualDiskDrv.sys
2013-09-10 09:08 - 2013-09-11 10:53 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-09-10 09:08 - 2013-09-10 09:08 - 00000000 ____D C:\Windows\ELAMBKUP
2013-09-10 09:08 - 2013-09-10 09:08 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-09-10 09:07 - 2013-09-10 09:30 - 00620128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2013-09-10 09:07 - 2013-09-10 09:30 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2013-09-10 08:51 - 2013-09-10 10:56 - 00696132 _____ C:\Windows\system32\perfh007.dat
2013-09-10 08:51 - 2013-09-10 10:56 - 00147428 _____ C:\Windows\system32\perfc007.dat
2013-09-10 08:51 - 2013-09-10 08:51 - 00295922 _____ C:\Windows\system32\perfi007.dat
2013-09-10 08:51 - 2013-09-10 08:51 - 00038104 _____ C:\Windows\system32\perfd007.dat
2013-09-10 08:51 - 2013-09-10 08:51 - 00002386 _____ C:\Users\Bispinosa\Desktop\Google Chrome.lnk
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Windows\SysWOW64\de
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Windows\SysWOW64\0407
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Windows\system32\de
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Windows\system32\0407
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2013-09-10 08:50 - 2013-09-11 11:01 - 00001136 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2651500920-1956776048-2349371349-1001UA.job
2013-09-10 08:50 - 2013-09-10 09:01 - 00001084 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2651500920-1956776048-2349371349-1001Core.job
2013-09-10 08:50 - 2013-09-10 08:56 - 00004114 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2651500920-1956776048-2349371349-1001UA
2013-09-10 08:50 - 2013-09-10 08:56 - 00003718 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2651500920-1956776048-2349371349-1001Core
2013-09-10 08:50 - 2013-09-10 08:51 - 00000000 ____D C:\Users\BISPIN~1\AppData\Local\Google
2013-09-10 08:37 - 2013-09-10 08:37 - 00000000 ____D C:\Windows\NAPP_Dism_Log
2013-09-10 08:28 - 2013-09-10 08:28 - 00000000 ___HD C:\kleaner.tmp
2013-09-10 08:18 - 2013-09-10 08:18 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\Adobe
2013-09-10 08:13 - 2013-09-10 08:13 - 00001447 _____ C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-09-10 08:13 - 2013-09-10 08:13 - 00001413 _____ C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2013-09-10 08:13 - 2013-09-10 08:13 - 00000000 ___RD C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-10 08:13 - 2013-09-10 08:13 - 00000000 ___RD C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-10 08:13 - 2013-09-10 08:13 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\OEM
2013-09-10 08:13 - 2013-09-10 08:13 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\Macromedia
2013-09-10 08:13 - 2013-09-10 08:13 - 00000000 ____D C:\Users\BISPIN~1\AppData\Local\EgisTec IPS
2013-09-10 08:06 - 2013-09-10 11:46 - 00057952 _____ C:\Users\BISPIN~1\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-10 08:06 - 2013-09-10 08:06 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\CyberLink
2013-09-10 08:06 - 2013-09-10 08:06 - 00000000 ____D C:\Users\BISPIN~1\AppData\Local\Acer
2013-09-10 08:06 - 2013-09-10 08:06 - 00000000 ____D C:\Program Files\Accessory Store
2013-09-10 08:06 - 2013-09-10 08:06 - 00000000 ____D C:\Program Files (x86)\OEM
2013-09-10 08:06 - 2012-06-03 00:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2013-09-10 08:06 - 2012-06-03 00:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2013-09-10 08:06 - 2012-06-03 00:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2013-09-10 08:06 - 2012-06-03 00:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2013-09-10 08:06 - 2012-06-03 00:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2013-09-10 08:06 - 2012-06-03 00:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2013-09-10 08:06 - 2012-06-03 00:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2013-09-10 08:05 - 2013-09-10 10:06 - 00000000 ____D C:\Users\BISPIN~1\AppData\Local\PowerCinema
2013-09-10 08:04 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2013-09-10 08:04 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2013-09-10 08:03 - 2013-09-10 08:03 - 00000000 ____D C:\Users\BISPIN~1\AppData\Local\VirtualStore
2013-09-10 08:02 - 2013-09-11 10:26 - 00000000 ____D C:\Users\Bispinosa
2013-09-10 08:02 - 2013-09-10 08:02 - 00000020 ___SH C:\Users\Bispinosa\ntuser.ini
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Vorlagen
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Startmenü
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Netzwerkumgebung
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Lokale Einstellungen
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Eigene Dateien
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Druckumgebung
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Documents\Eigene Musik
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Documents\Eigene Bilder
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Anwendungsdaten
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\BISPIN~1\AppData\Local\Verlauf
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\BISPIN~1\AppData\Local\Anwendungsdaten
2013-09-10 08:02 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-09-10 08:02 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Programme
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\ProgramData\Favoriten
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Dokumente und Einstellungen
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 __SHD C:\Recovery
2013-09-09 23:47 - 2013-09-09 23:47 - 17773056 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 12268544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 10884096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 09702400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 03695416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-09-09 23:47 - 2013-09-09 23:47 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-09-09 23:47 - 2013-09-09 23:47 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-09 23:47 - 2013-09-09 23:47 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-09 23:47 - 2013-09-09 23:47 - 02303488 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 02136064 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 01797632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 01785344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 01492992 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-09-09 23:47 - 2013-09-09 23:47 - 01427456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-09-09 23:47 - 2013-09-09 23:47 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 01344000 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 01126912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 01102336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00818176 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00716800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00697344 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00603648 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00580608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-09-09 23:47 - 2013-09-09 23:47 - 00434176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00403248 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-09-09 23:47 - 2013-09-09 23:47 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00353584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00227840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieaksie.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakui.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakeng.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00123392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\admparse.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-09-09 23:47 - 2013-09-09 23:47 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ie4uinit.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00072704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-09-09 23:47 - 2013-09-09 23:47 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-09-09 23:46 - 2013-09-09 23:48 - 00003758 _____ C:\Windows\IE9_main.log
2013-09-09 23:41 - 2013-09-09 23:41 - 00003418 _____ C:\Windows\System32\Tasks\clear.fi
2013-09-09 23:41 - 2013-09-09 23:41 - 00003366 _____ C:\Windows\System32\Tasks\DMREngine
2013-09-09 23:41 - 2013-09-09 23:41 - 00003348 _____ C:\Windows\System32\Tasks\clear.fiAgent
2013-09-09 23:40 - 2013-09-09 23:40 - 00000000 ____D C:\Program Files (x86)\Cyberlink
2013-09-09 23:38 - 2013-09-10 10:06 - 00000000 ____D C:\ProgramData\CyberLink
2013-09-09 23:38 - 2013-09-09 23:42 - 00014802 _____ C:\ProgramData\ArcadeDeluxe5.log
2013-09-09 23:37 - 2013-09-09 23:37 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-09-09 23:24 - 2010-12-20 12:08 - 00008192 _____ C:\Windows\system32\Drivers\IntelMEFWVer.dll
2013-09-09 23:22 - 2013-09-09 23:22 - 00000000 ____D C:\Program Files (x86)\Etron Technology
2013-09-09 23:19 - 2010-11-05 23:45 - 00438808 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStor.sys
2013-09-09 23:18 - 2013-09-09 23:18 - 00000000 ____D C:\ProgramData\EgisTec
2013-09-09 23:17 - 2013-09-09 23:17 - 00000000 ____D C:\book
2013-09-09 23:15 - 2013-09-11 09:59 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-09 23:15 - 2011-06-30 08:03 - 00054784 _____ (Etron Technology Inc) C:\Windows\system32\Drivers\EtronHub3.sys
2013-09-09 23:10 - 2013-09-10 11:23 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2013-09-09 23:10 - 2013-09-09 23:10 - 00000000 ____D C:\Program Files\Realtek
2013-09-09 23:10 - 2010-11-04 21:38 - 02580824 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2013-09-09 23:10 - 2010-11-04 04:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2013-09-09 23:10 - 2010-07-23 02:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2013-09-09 23:10 - 2009-11-24 19:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2013-09-09 23:10 - 2009-11-24 19:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2013-09-09 23:10 - 2009-11-24 19:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2013-09-09 23:10 - 2009-11-24 19:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2013-09-09 23:09 - 2013-09-09 23:09 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-09-09 23:09 - 2010-11-08 17:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2013-09-09 23:09 - 2010-11-08 17:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2013-09-09 23:09 - 2010-11-08 17:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2013-09-09 23:09 - 2010-11-08 17:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2013-09-09 23:09 - 2010-11-08 17:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2013-09-09 23:09 - 2010-11-08 17:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2013-09-09 23:09 - 2010-11-04 21:37 - 01870168 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll
2013-09-09 23:09 - 2010-11-04 04:30 - 00082024 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInst64.dll
2013-09-09 23:09 - 2010-10-28 20:46 - 01251944 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2013-09-09 23:09 - 2010-09-27 19:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2013-09-09 23:09 - 2009-11-19 04:42 - 02197264 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2013-09-09 23:08 - 2013-09-10 11:06 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-09-09 23:08 - 2013-09-10 11:03 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-09-09 23:07 - 2013-09-10 11:05 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-09-09 23:07 - 2013-06-21 14:06 - 15920536 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-09-09 23:07 - 2013-06-21 14:06 - 12427240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-09-09 23:07 - 2013-06-21 14:06 - 02936208 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-09-09 23:07 - 2013-06-21 14:06 - 00021578 _____ C:\Windows\system32\nvinfo.pb
2013-09-09 23:07 - 2011-03-24 08:48 - 01614440 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco642090.dll
2013-09-09 23:07 - 2011-03-24 08:48 - 01359976 _____ (NVIDIA Corporation) C:\Windows\system32\nvgenco642040.dll
2013-09-09 23:07 - 2011-03-24 08:48 - 00067176 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2013-09-09 23:07 - 2011-03-24 08:48 - 00057960 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2013-09-09 23:07 - 2011-03-24 08:48 - 00011240 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvBridge.kmd
2013-09-09 23:07 - 2011-03-03 17:59 - 01359976 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco642040.dll
2013-09-09 23:06 - 2013-09-09 23:06 - 00035497 _____ C:\Windows\ATIDetect.txt
2013-09-09 23:03 - 2013-09-11 10:55 - 01094818 _____ C:\Windows\WindowsUpdate.log

==================== One Month Modified Files and Folders =======

2013-09-11 11:16 - 2013-09-11 11:15 - 01949408 _____ (Farbar) C:\Users\Bispinosa\Downloads\FRST64.exe
2013-09-11 11:15 - 2013-09-11 11:15 - 00000480 _____ C:\Users\Bispinosa\Desktop\defogger_disable.log
2013-09-11 11:14 - 2013-09-11 11:14 - 00050477 _____ C:\Users\Bispinosa\Downloads\Defogger.exe
2013-09-11 11:01 - 2013-09-10 08:50 - 00001136 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2651500920-1956776048-2349371349-1001UA.job

2013-09-11 10:55 - 2013-09-09 23:03 - 01094818 _____ C:\Windows\WindowsUpdate.log
2013-09-11 10:53 - 2013-09-10 09:08 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-09-11 10:52 - 2013-09-11 10:52 - 00010201 _____ C:\Users\Bispinosa\Desktop\Gmer.Txt.log
2013-09-11 10:30 - 2013-09-11 10:30 - 00000000 ____D C:\FRST
2013-09-11 10:26 - 2013-09-11 10:26 - 00000000 _____ C:\Users\Bispinosa\defogger_reenable
2013-09-11 10:26 - 2013-09-10 08:02 - 00000000 ____D C:\Users\Bispinosa
2013-09-11 10:20 - 2013-09-11 10:20 - 00002128 _____ C:\Users\Bispinosa\Desktop\AppsHat.lnk
2013-09-11 10:20 - 2013-09-11 10:20 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat
2013-09-11 10:20 - 2013-09-11 10:20 - 00000000 ____D C:\Users\BISPIN~1\AppData\Local\WebPlayer
2013-09-11 10:20 - 2013-09-11 10:20 - 00000000 ____D C:\Users\BISPIN~1\AppData\Local\Minibar
2013-09-11 10:20 - 2013-09-11 10:20 - 00000000 ____D C:\Program Files (x86)\Minibar
2013-09-11 10:19 - 2013-09-11 10:19 - 00003390 _____ C:\Windows\System32\Tasks\EPUpdater
2013-09-11 10:19 - 2013-09-11 10:19 - 00000000 ____D C:\Windows\SysWOW64\searchplugins
2013-09-11 10:19 - 2013-09-11 10:19 - 00000000 ____D C:\Windows\SysWOW64\Extensions
2013-09-11 10:19 - 2013-09-11 10:19 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender
2013-09-11 10:19 - 2013-09-11 10:19 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\BabSolution
2013-09-11 10:19 - 2013-09-11 10:19 - 00000000 ____D C:\Users\BISPIN~1\AppData\Local\avgchrome
2013-09-11 10:19 - 2013-09-11 10:19 - 00000000 ____D C:\ProgramData\BrowserDefender
2013-09-11 10:18 - 2013-09-11 10:18 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker
2013-09-11 10:18 - 2013-09-11 10:18 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\Babylon
2013-09-11 10:18 - 2013-09-11 10:18 - 00000000 ____D C:\Users\BISPIN~1\AppData\Local\FilesFrog Update Checker
2013-09-11 10:18 - 2013-09-11 10:18 - 00000000 ____D C:\ProgramData\Babylon
2013-09-11 10:15 - 2009-07-14 06:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-11 10:14 - 2009-07-14 06:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-11 10:10 - 2013-09-10 09:11 - 00000000 ____D C:\ProgramData\clear.fi
2013-09-11 10:00 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-11 09:59 - 2013-09-09 23:15 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-11 09:59 - 2009-07-14 06:51 - 00047949 _____ C:\Windows\setupact.log
2013-09-10 11:46 - 2013-09-10 08:06 - 00057952 _____ C:\Users\BISPIN~1\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-10 11:42 - 2013-09-10 11:42 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_point64_01011.Wdf
2013-09-10 11:40 - 2009-07-14 06:45 - 00275192 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-10 11:36 - 2013-09-10 11:36 - 00003062 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe
2013-09-10 11:36 - 2013-09-10 11:36 - 00003060 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe
2013-09-10 11:36 - 2013-09-10 11:15 - 00284868 _____ C:\Windows\DPINST.LOG
2013-09-10 11:35 - 2013-09-10 11:35 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf
2013-09-10 11:35 - 2013-09-10 11:35 - 00000000 ____D C:\Program Files\Microsoft Mouse and Keyboard Center
2013-09-10 11:31 - 2013-09-10 11:31 - 00000000 ____H C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Coinstaller_Critical.Wdf
2013-09-10 11:31 - 2013-09-10 11:31 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2013-09-10 11:25 - 2013-09-10 11:25 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_Apfiltr_01007.Wdf
2013-09-10 11:25 - 2013-09-10 11:25 - 00000000 ____D C:\Program Files\Apoint
2013-09-10 11:24 - 2013-09-10 11:24 - 00000000 ____D C:\Program Files\DIFX
2013-09-10 11:23 - 2013-09-09 23:10 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2013-09-10 11:15 - 2013-09-10 11:01 - 00000000 ____D C:\Program Files (x86)\DriverTuner
2013-09-10 11:06 - 2013-09-09 23:08 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-09-10 11:05 - 2013-09-10 11:05 - 00000000 ____D C:\Users\BISPIN~1\AppData\Local\NVIDIA
2013-09-10 11:05 - 2013-09-09 23:07 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-09-10 11:03 - 2013-09-10 11:03 - 00001355 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2013-09-10 11:03 - 2013-09-09 23:08 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-09-10 11:02 - 2013-09-10 11:02 - 00000000 ____D C:\Users\BISPIN~1\AppData\Local\DriverTuner
2013-09-10 11:01 - 2013-09-10 11:01 - 00001051 _____ C:\Users\Public\Desktop\DriverTuner.lnk
2013-09-10 11:01 - 2013-09-10 11:01 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-09-10 11:00 - 2013-09-10 11:00 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-09-10 10:56 - 2013-09-10 10:54 - 01588294 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-09-10 10:56 - 2013-09-10 08:51 - 00696132 _____ C:\Windows\system32\perfh007.dat
2013-09-10 10:56 - 2013-09-10 08:51 - 00147428 _____ C:\Windows\system32\perfc007.dat
2013-09-10 10:55 - 2009-07-14 07:13 - 01588294 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-10 10:44 - 2013-09-10 10:44 - 00000000 ____D C:\NVIDIA
2013-09-10 10:18 - 2013-09-10 10:18 - 00000000 ____D C:\Program Files (x86)\Dr. Hardware 2013
2013-09-10 10:07 - 2013-09-10 10:07 - 00000000 ____D C:\Users\Bispinosa\Documents\CyberLink
2013-09-10 10:07 - 2013-09-10 10:06 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\PowerCinema
2013-09-10 10:06 - 2013-09-10 10:06 - 00000000 ____D C:\Users\BISPIN~1\AppData\Local\Cyberlink
2013-09-10 10:06 - 2013-09-10 08:05 - 00000000 ____D C:\Users\BISPIN~1\AppData\Local\PowerCinema
2013-09-10 10:06 - 2013-09-09 23:38 - 00000000 ____D C:\ProgramData\CyberLink
2013-09-10 09:30 - 2013-09-10 09:07 - 00620128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2013-09-10 09:30 - 2013-09-10 09:07 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2013-09-10 09:30 - 2012-10-18 14:50 - 00054368 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kltdi.sys
2013-09-10 09:30 - 2012-08-13 16:49 - 00178448 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kneps.sys
2013-09-10 09:16 - 2013-09-10 09:16 - 00002224 _____ C:\Users\Bispinosa\Desktop\Sicherer Zahlungsverkehr.lnk
2013-09-10 09:10 - 2013-09-10 09:11 - 00001082 _____ C:\Users\Public\Desktop\Kaspersky PURE 3.0.lnk
2013-09-10 09:08 - 2013-09-10 09:08 - 00000000 ____D C:\Windows\ELAMBKUP
2013-09-10 09:08 - 2013-09-10 09:08 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-09-10 09:01 - 2013-09-10 08:50 - 00001084 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2651500920-1956776048-2349371349-1001Core.job
2013-09-10 09:00 - 2011-07-11 11:55 - 00000000 ____D C:\Program Files\Common Files\mcafee
2013-09-10 09:00 - 2010-11-21 05:47 - 00097112 _____ C:\Windows\PFRO.log
2013-09-10 08:56 - 2013-09-10 08:50 - 00004114 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2651500920-1956776048-2349371349-1001UA
2013-09-10 08:56 - 2013-09-10 08:50 - 00003718 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2651500920-1956776048-2349371349-1001Core
2013-09-10 08:54 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\winrm
2013-09-10 08:54 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\WCN
2013-09-10 08:54 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\sysprep
2013-09-10 08:54 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\slmgr
2013-09-10 08:54 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\system32\winrm
2013-09-10 08:54 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\system32\WCN
2013-09-10 08:54 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\system32\slmgr
2013-09-10 08:54 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\oobe
2013-09-10 08:54 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\MUI
2013-09-10 08:54 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\MUI
2013-09-10 08:54 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Dism
2013-09-10 08:54 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\servicing
2013-09-10 08:51 - 2013-09-10 08:51 - 00295922 _____ C:\Windows\system32\perfi007.dat
2013-09-10 08:51 - 2013-09-10 08:51 - 00038104 _____ C:\Windows\system32\perfd007.dat
2013-09-10 08:51 - 2013-09-10 08:51 - 00002386 _____ C:\Users\Bispinosa\Desktop\Google Chrome.lnk
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Windows\SysWOW64\de
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Windows\SysWOW64\0407
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Windows\system32\de
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Windows\system32\0407
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2013-09-10 08:51 - 2013-09-10 08:50 - 00000000 ____D C:\Users\BISPIN~1\AppData\Local\Google
2013-09-10 08:51 - 2010-11-21 09:17 - 00000000 ____D C:\Program Files\Windows Journal
2013-09-10 08:51 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts
2013-09-10 08:51 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts
2013-09-10 08:51 - 2009-07-14 07:37 - 00000000 ____D C:\Windows\DigitalLocker
2013-09-10 08:51 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2013-09-10 08:51 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Sidebar
2013-09-10 08:51 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2013-09-10 08:51 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-09-10 08:51 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\DVD Maker
2013-09-10 08:51 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar
2013-09-10 08:51 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2013-09-10 08:51 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-09-10 08:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Setup
2013-09-10 08:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\migwiz
2013-09-10 08:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2013-09-10 08:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\com
2013-09-10 08:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Setup
2013-09-10 08:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\oobe
2013-09-10 08:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\migwiz
2013-09-10 08:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\com
2013-09-10 08:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\IME
2013-09-10 08:51 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System
2013-09-10 08:37 - 2013-09-10 08:37 - 00000000 ____D C:\Windows\NAPP_Dism_Log
2013-09-10 08:28 - 2013-09-10 08:28 - 00000000 ___HD C:\kleaner.tmp
2013-09-10 08:20 - 2009-07-14 07:38 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG
2013-09-10 08:20 - 2009-07-14 07:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2013-09-10 08:18 - 2013-09-10 08:18 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\Adobe
2013-09-10 08:13 - 2013-09-10 08:13 - 00001447 _____ C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-09-10 08:13 - 2013-09-10 08:13 - 00001413 _____ C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2013-09-10 08:13 - 2013-09-10 08:13 - 00000000 ___RD C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-10 08:13 - 2013-09-10 08:13 - 00000000 ___RD C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-10 08:13 - 2013-09-10 08:13 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\OEM
2013-09-10 08:13 - 2013-09-10 08:13 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\Macromedia
2013-09-10 08:13 - 2013-09-10 08:13 - 00000000 ____D C:\Users\BISPIN~1\AppData\Local\EgisTec IPS
2013-09-10 08:13 - 2011-07-11 12:27 - 00018168 _____ C:\Windows\patch.log
2013-09-10 08:13 - 2011-07-11 12:26 - 00000000 ____D C:\ProgramData\oem
2013-09-10 08:13 - 2011-07-11 11:55 - 00000000 ____D C:\ProgramData\McAfee
2013-09-10 08:10 - 2011-07-11 11:58 - 00000000 ___HD C:\OEM
2013-09-10 08:06 - 2013-09-10 08:06 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\CyberLink
2013-09-10 08:06 - 2013-09-10 08:06 - 00000000 ____D C:\Users\BISPIN~1\AppData\Local\Acer
2013-09-10 08:06 - 2013-09-10 08:06 - 00000000 ____D C:\Program Files\Accessory Store
2013-09-10 08:06 - 2013-09-10 08:06 - 00000000 ____D C:\Program Files (x86)\OEM
2013-09-10 08:03 - 2013-09-10 08:03 - 00000000 ____D C:\Users\BISPIN~1\AppData\Local\VirtualStore
2013-09-10 08:02 - 2013-09-10 08:02 - 00000020 ___SH C:\Users\Bispinosa\ntuser.ini
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Vorlagen
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Startmenü
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Netzwerkumgebung
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Lokale Einstellungen
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Eigene Dateien
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Druckumgebung
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Documents\Eigene Musik
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Documents\Eigene Bilder
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Anwendungsdaten
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\BISPIN~1\AppData\Local\Verlauf
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\BISPIN~1\AppData\Local\Anwendungsdaten
2013-09-10 08:02 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\restore
2013-09-10 08:02 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Programme
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\ProgramData\Favoriten
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Dokumente und Einstellungen
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 __SHD C:\Recovery
2013-09-10 08:01 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-09-10 08:01 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2013-09-10 08:01 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Windows NT
2013-09-10 00:22 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sysprep
2013-09-10 00:22 - 2007-07-12 03:49 - 00000000 ____D C:\Windows\Panther
2013-09-10 00:21 - 2009-07-14 06:46 - 00004059 _____ C:\Windows\DtcInstall.log
2013-09-10 00:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help
2013-09-09 23:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-09-09 23:57 - 2011-07-11 11:57 - 00000000 ____D C:\Program Files (x86)\Acer
2013-09-09 23:51 - 2011-07-11 12:04 - 00000000 ____D C:\Program Files (x86)\Windows Live
2013-09-09 23:51 - 2011-07-11 12:00 - 00000582 _____ C:\Windows\DirectX.log
2013-09-09 23:48 - 2013-09-09 23:46 - 00003758 _____ C:\Windows\IE9_main.log
2013-09-09 23:47 - 2013-09-09 23:47 - 17773056 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 12268544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 10884096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 09702400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 03695416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-09-09 23:47 - 2013-09-09 23:47 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-09-09 23:47 - 2013-09-09 23:47 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-09 23:47 - 2013-09-09 23:47 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-09 23:47 - 2013-09-09 23:47 - 02303488 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 02136064 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 01797632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 01785344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 01492992 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-09-09 23:47 - 2013-09-09 23:47 - 01427456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-09-09 23:47 - 2013-09-09 23:47 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 01344000 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 01126912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 01102336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00818176 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00716800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00697344 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00603648 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00580608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-09-09 23:47 - 2013-09-09 23:47 - 00434176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00403248 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-09-09 23:47 - 2013-09-09 23:47 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00353584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00227840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieaksie.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakui.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakeng.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00123392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\admparse.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-09-09 23:47 - 2013-09-09 23:47 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ie4uinit.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00072704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-09-09 23:47 - 2013-09-09 23:47 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-09-09 23:42 - 2013-09-09 23:38 - 00014802 _____ C:\ProgramData\ArcadeDeluxe5.log
2013-09-09 23:42 - 2011-07-11 11:58 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-09-09 23:41 - 2013-09-09 23:41 - 00003418 _____ C:\Windows\System32\Tasks\clear.fi
2013-09-09 23:41 - 2013-09-09 23:41 - 00003366 _____ C:\Windows\System32\Tasks\DMREngine
2013-09-09 23:41 - 2013-09-09 23:41 - 00003348 _____ C:\Windows\System32\Tasks\clear.fiAgent
2013-09-09 23:40 - 2013-09-09 23:40 - 00000000 ____D C:\Program Files (x86)\Cyberlink
2013-09-09 23:38 - 2011-07-11 11:27 - 00000000 ____D C:\Program Files (x86)\Acer Games
2013-09-09 23:37 - 2013-09-09 23:37 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-09-09 23:23 - 2011-07-11 11:24 - 00000000 ____D C:\Program Files (x86)\Intel
2013-09-09 23:22 - 2013-09-09 23:22 - 00000000 ____D C:\Program Files (x86)\Etron Technology
2013-09-09 23:18 - 2013-09-09 23:18 - 00000000 ____D C:\ProgramData\EgisTec
2013-09-09 23:18 - 2011-02-12 05:43 - 00000000 ____D C:\Windows\DeployWinRE2
2013-09-09 23:17 - 2013-09-09 23:17 - 00000000 ____D C:\book
2013-09-09 23:17 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Recovery
2013-09-09 23:16 - 2011-07-11 12:20 - 00000000 ____D C:\ProgramData\EgisTec IPS
2013-09-09 23:11 - 2009-07-14 06:51 - 00000268 _____ C:\Windows\setuperr.log
2013-09-09 23:10 - 2013-09-09 23:10 - 00000000 ____D C:\Program Files\Realtek
2013-09-09 23:09 - 2013-09-09 23:09 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-09-09 23:06 - 2013-09-09 23:06 - 00035497 _____ C:\Windows\ATIDetect.txt
2013-09-09 23:04 - 2011-07-11 11:07 - 00003652 _____ C:\Windows\TSSysprep.log
2013-08-20 15:33 - 2013-09-10 11:05 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-08-20 15:32 - 2013-09-10 11:05 - 00029984 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2013-08-20 15:32 - 2013-09-10 11:05 - 00028448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll

Files to move or delete:
====================
C:\Users\BISPIN~1\AppData\Local\Temp\7z920.exe
C:\Users\BISPIN~1\AppData\Local\Temp\a2zLyrics_1060-8102_v122.exe
C:\Users\BISPIN~1\AppData\Local\Temp\appshat-distribution.exe
C:\Users\BISPIN~1\AppData\Local\Temp\BabylonTB.exe
C:\Users\BISPIN~1\AppData\Local\Temp\biclient.exe
C:\Users\BISPIN~1\AppData\Local\Temp\nvStInst.exe
C:\Users\BISPIN~1\AppData\Local\Temp\UpdateCheckerSetup.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-10 00:20

==================== End Of Log ============================

Das Virenprogramm ist doch noch schneller durchgelaufen wie angegeben. Hier die Funde des Programms:

BrowserDefender.dll	c:\ProgramData\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\‎ 	11.09.2013 11:24:42	HEUR:Trojan.Win32.Generic	
delta.dll	C:\Program Files (x86)\Delta\delta\1.8.24.6\bh\‎ 	11.09.2013 19:14:25	not-a-virus:AdWare.Win32.DelBar.a	
deltasrv.exe	C:\Program Files (x86)\Delta\delta\1.8.24.6\‎ 	11.09.2013 19:13:36	not-a-virus:AdWare.Win32.DelBar.a	
deltaApp.dll	C:\Program Files (x86)\Delta\delta\1.8.24.6\‎ 	11.09.2013 19:14:29	not-a-virus:AdWare.Win32.DelBar.a	
deltaEng.dll	C:\Program Files (x86)\Delta\delta\1.8.24.6\‎ 	11.09.2013 19:14:46	not-a-virus:AdWare.Win32.DelBar.a
         

Beim ersten kam löschen unmöglich

Das mit den Codetags haste gesehen?

Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1


WICHTIG - Speichere Combofix auf deinem Desktop

• Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

ComboFix 13-09-10.03 - Bispinosa 12.09.2013  12:50:04.1.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.6126.4821 [GMT 2:00]
ausgeführt von:: c:\users\Bispinosa\Downloads\ComboFix.exe
AV: Kaspersky PURE 3.0 *Disabled/Updated* {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5}
FW: Kaspersky PURE 3.0 *Disabled* {FB2ABE9A-01A4-4539-FCD2-C7EA1246D49E}
SP: Kaspersky PURE 3.0 *Disabled/Updated* {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Delta\delta\1.8.24.6\deltaTlbr.dll
c:\programdata\BrowserDefender
c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\bl
c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe
c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.settings
c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\dm
c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\00
c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\01
c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\02
c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\03
c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\10
c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\11
c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\12
c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\13
c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\20
c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\21
c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\22
c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\23
c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\uninstall.exe
c:\programdata\DSearchLink
c:\programdata\DSearchLink\DSearchLink.exe
c:\users\Bispinosa\AppData\Local\Minibar
c:\users\Bispinosa\AppData\Local\Minibar\chrome.crx
c:\users\Bispinosa\AppData\Local\Minibar\chrome.pem
c:\users\Bispinosa\AppData\Local\Minibar\chrome\background.html
c:\users\Bispinosa\AppData\Local\Minibar\chrome\cached_http_request.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\extension_info.json
c:\users\Bispinosa\AppData\Local\Minibar\chrome\icons\icon128.png
c:\users\Bispinosa\AppData\Local\Minibar\chrome\icons\icon19.png
c:\users\Bispinosa\AppData\Local\Minibar\chrome\icons\icon32.png
c:\users\Bispinosa\AppData\Local\Minibar\chrome\icons\icon48.png
c:\users\Bispinosa\AppData\Local\Minibar\chrome\includes\content.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\includes\content_kango.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\includes\content_menu.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\includes\content_messaging.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\includes\content_pageutils.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\includes\content_popup.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\includes\content_toolbar.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\includes\content_toolbar_customfixes.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\includes\content_userscript.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\initial_config.json
c:\users\Bispinosa\AppData\Local\Minibar\chrome\kango-ui\button.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\kango-ui\toolbar.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\kango-ui\ui.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\kango\browser.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\kango\console.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\kango\event_listener.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\kango\initialize.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\kango\io.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\kango\jsonstorage.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\kango\kango.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\kango\lang.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\kango\messaging.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\kango\userscript_engine.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\kango\xhr.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\main.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\manifest.json
c:\users\Bispinosa\AppData\Local\Minibar\chrome\minibar\actions.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\minibar\cachedxhr.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\minibar\config.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\minibar\macros.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\minibar\minibar.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\MinibarPlugin.dll
c:\users\Bispinosa\AppData\Local\Minibar\chrome\popup.html
c:\users\Bispinosa\AppData\Local\Minibar\chrome\popup.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\tab.html
c:\users\Bispinosa\AppData\Local\Minibar\chrome\tab.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome_installer.js
c:\users\Bispinosa\AppData\Local\Minibar\common.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome.manifest
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\content.xul
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\extension_info.json
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\icons\icon128.png
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\icons\icon19.png
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\icons\icon32.png
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\icons\icon48.png
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\button.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\popup.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\popup_window.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\popup_window.xul
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\bottom-left.png
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\bottom-middle.png
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\bottom-right.png
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\middle-left.png
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\middle-right.png
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\style.css
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\tail-bottom.png
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\tail-left.png
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\tail-right.png
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\tail-top.png
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\top-left.png
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\top-middle.png
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\top-right.png
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\toolbar.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\toolbar_stub.html
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\ui.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango\browser.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango\console.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango\event_listener.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango\initialize.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango\io.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango\jsonstorage.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango\kango.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango\lang.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango\messaging.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango\storage.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango\uninstall_observer.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango\userscript_engine.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango\xhr.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\main.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\minibar\actions.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\minibar\cachedxhr.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\minibar\config.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\minibar\homepage_helper.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\minibar\macros.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\minibar\minibar.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\minibar\search_helper.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\minibar\search_hook.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\minibar\tabpage_helper.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\install.rdf
c:\users\Bispinosa\AppData\Local\Minibar\firefox\plugins\npMinibarPlugin.dll
c:\users\Bispinosa\AppData\Local\Minibar\firefox_installer.js
c:\users\Bispinosa\AppData\Local\Minibar\ie_installer.js
c:\users\Bispinosa\AppData\Local\Minibar\minibar.crx
c:\users\Bispinosa\AppData\Local\Minibar\minibar.xpi
c:\users\Bispinosa\AppData\Local\Minibar\SettingsHelper.exe
c:\users\Bispinosa\AppData\Local\Minibar\Uninstall.exe
c:\users\Bispinosa\AppData\Local\Minibar\update_chrome.xml
.
.
(((((((((((((((((((((((((((((((((((((((   Treiber/Dienste   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_BrowserDefendert
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-08-12 bis 2013-09-12  ))))))))))))))))))))))))))))))
.
.
2013-09-12 10:56 . 2013-09-12 10:56	--------	d-----w-	c:\users\Default\AppData\Local\temp
2013-09-11 20:40 . 2013-09-12 06:06	692616	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2013-09-11 20:40 . 2013-09-11 20:40	--------	d-----w-	c:\windows\system32\Macromed
2013-09-11 17:19 . 2013-09-11 17:19	--------	d-----w-	c:\program files (x86)\7-Zip
2013-09-11 17:13 . 2013-09-11 17:13	--------	d-----w-	c:\program files (x86)\Delta
2013-09-11 17:12 . 2013-09-11 17:13	--------	d-----w-	c:\program files (x86)\WebConnect
2013-09-11 17:12 . 2013-09-11 17:12	--------	d-----w-	c:\program files (x86)\OpenIt
2013-09-11 08:30 . 2013-09-11 08:30	--------	d-----w-	C:\FRST
2013-09-11 08:24 . 2012-02-17 06:38	1031680	----a-w-	c:\windows\system32\rdpcore.dll
2013-09-11 08:24 . 2012-02-17 05:34	826880	----a-w-	c:\windows\SysWow64\rdpcore.dll
2013-09-11 08:24 . 2012-02-17 04:58	210944	----a-w-	c:\windows\system32\drivers\rdpwd.sys
2013-09-11 08:24 . 2012-02-17 04:57	23552	----a-w-	c:\windows\system32\drivers\tdtcp.sys
2013-09-11 08:20 . 2013-09-11 08:20	--------	d-----w-	c:\program files (x86)\Minibar
2013-09-11 08:19 . 2013-09-11 08:19	--------	d-----w-	c:\windows\SysWow64\searchplugins
2013-09-11 08:19 . 2013-09-11 08:19	--------	d-----w-	c:\windows\SysWow64\Extensions
2013-09-11 08:18 . 2013-09-11 08:18	--------	d-----w-	c:\programdata\Babylon
2013-09-10 09:35 . 2013-09-10 09:35	--------	d-----w-	c:\program files\Microsoft Mouse and Keyboard Center
2013-09-10 09:30 . 2012-07-26 04:55	785512	----a-w-	c:\windows\system32\drivers\Wdf01000.sys
2013-09-10 09:30 . 2012-07-26 04:55	54376	----a-w-	c:\windows\system32\drivers\WdfLdr.sys
2013-09-10 09:30 . 2012-07-26 02:36	9728	----a-w-	c:\windows\system32\Wdfres.dll
2013-09-10 09:25 . 2013-09-10 09:25	--------	d-----w-	c:\program files\Apoint
2013-09-10 09:24 . 2013-09-10 09:24	--------	d-----w-	c:\program files\DIFX
2013-09-10 09:05 . 2013-08-20 13:33	39200	----a-w-	c:\windows\system32\drivers\nvvad64v.sys
2013-09-10 09:05 . 2013-08-20 13:32	29984	----a-w-	c:\windows\system32\nvaudcap64v.dll
2013-09-10 09:05 . 2013-08-20 13:32	28448	----a-w-	c:\windows\SysWow64\nvaudcap32v.dll
2013-09-10 09:01 . 2013-09-10 09:01	--------	d-----w-	c:\users\UpdatusUser
2013-09-10 09:01 . 2013-09-10 09:15	--------	d-----w-	c:\program files (x86)\DriverTuner
2013-09-10 09:00 . 2013-09-10 09:00	--------	d-----w-	c:\program files (x86)\AGEIA Technologies
2013-09-10 08:59 . 2013-06-20 04:17	3253909	----a-w-	c:\windows\system32\nvcoproc.bin
2013-09-10 08:44 . 2013-09-10 08:44	--------	d-----w-	C:\NVIDIA
2013-09-10 08:18 . 2013-07-21 16:41	13760	----a-w-	c:\windows\system32\drivers\DRHMSR64.sys
2013-09-10 08:18 . 2011-11-03 17:05	21984	----a-w-	c:\windows\system32\drivers\DRHARD64.sys
2013-09-10 08:18 . 2013-07-21 16:41	13760	----a-w-	c:\windows\SysWow64\drivers\DRHMSR64.sys
2013-09-10 08:18 . 2011-11-03 17:05	21984	----a-w-	c:\windows\SysWow64\drivers\DRHARD64.sys
2013-09-10 08:18 . 2013-09-10 08:18	--------	d-----w-	c:\program files (x86)\Dr. Hardware 2013
2013-09-10 07:11 . 2013-09-12 05:58	--------	d-----w-	c:\programdata\clear.fi
2013-09-10 07:10 . 2012-07-11 15:09	64856	----a-w-	c:\windows\system32\klfphc.dll
2013-09-10 07:09 . 2011-06-02 12:39	66616	----a-w-	c:\windows\system32\drivers\CSVirtualDiskDrv.sys
2013-09-10 07:09 . 2013-09-10 07:09	--------	dc----w-	c:\windows\system32\DRVSTORE
2013-09-10 07:09 . 2011-06-02 12:39	84536	----a-w-	c:\windows\system32\drivers\CSCrySec.sys
2013-09-10 07:08 . 2013-09-10 07:08	--------	d-----w-	c:\windows\ELAMBKUP
2013-09-10 07:08 . 2013-09-10 07:08	--------	d-----w-	c:\program files (x86)\Common Files\InfoWatch
2013-09-10 07:08 . 2013-09-12 11:00	--------	d-----w-	c:\programdata\Kaspersky Lab
2013-09-10 07:08 . 2013-09-10 07:08	--------	d-----w-	c:\program files (x86)\Kaspersky Lab
2013-09-10 07:07 . 2013-09-10 07:30	90208	----a-w-	c:\windows\system32\drivers\klflt.sys
2013-09-10 07:07 . 2013-09-10 07:30	620128	----a-w-	c:\windows\system32\drivers\klif.sys
2013-09-10 06:51 . 2013-09-10 06:51	--------	d-----w-	c:\windows\SysWow64\XPSViewer
2013-09-10 06:51 . 2013-09-10 06:51	--------	d-----w-	c:\windows\SysWow64\drivers\UMDF\de-DE
2013-09-10 06:51 . 2013-09-10 06:51	--------	d-----w-	c:\windows\SysWow64\drivers\de-DE
2013-09-10 06:51 . 2013-09-10 06:51	--------	d-----w-	c:\windows\SysWow64\de
2013-09-10 06:51 . 2013-09-10 06:51	--------	d-----w-	c:\windows\SysWow64\0407
2013-09-10 06:51 . 2013-09-10 06:51	--------	d-----w-	c:\windows\de-DE
2013-09-10 06:51 . 2013-09-09 21:58	--------	d-----w-	c:\windows\SysWow64\wbem\de-DE
2013-09-10 06:51 . 2013-09-10 09:38	--------	d-----w-	c:\windows\system32\drivers\de-DE
2013-09-10 06:51 . 2013-09-10 06:51	--------	d-----w-	c:\windows\system32\drivers\UMDF\de-DE
2013-09-10 06:51 . 2013-09-10 06:51	--------	d-----w-	c:\windows\system32\0407
2013-09-10 06:51 . 2013-09-10 06:51	--------	d-----w-	c:\windows\system32\de
2013-09-10 06:51 . 2013-09-09 21:58	--------	d-----w-	c:\windows\system32\wbem\de-DE
2013-09-10 06:49 . 2013-09-10 06:49	3584	----a-w-	c:\windows\system32\Spool\prtprocs\x64\de-DE\LXKPTPRC.DLL.mui
2013-09-10 06:37 . 2013-09-10 06:37	--------	d-----w-	c:\windows\NAPP_Dism_Log
2013-09-10 06:28 . 2013-09-10 06:28	--------	d-----w-	C:\kleaner.tmp
2013-09-10 06:06 . 2012-06-02 22:19	2428952	----a-w-	c:\windows\system32\wuaueng.dll
2013-09-10 06:06 . 2012-06-02 22:19	57880	----a-w-	c:\windows\system32\wuauclt.exe
2013-09-10 06:06 . 2012-06-02 22:19	44056	----a-w-	c:\windows\system32\wups2.dll
2013-09-10 06:06 . 2012-06-02 22:15	2622464	----a-w-	c:\windows\system32\wucltux.dll
2013-09-10 06:06 . 2013-09-10 06:06	--------	d-----w-	c:\program files (x86)\OEM
2013-09-10 06:06 . 2012-06-02 22:19	38424	----a-w-	c:\windows\system32\wups.dll
2013-09-10 06:06 . 2012-06-02 22:19	701976	----a-w-	c:\windows\system32\wuapi.dll
2013-09-10 06:06 . 2012-06-02 22:15	99840	----a-w-	c:\windows\system32\wudriver.dll
2013-09-10 06:06 . 2013-09-10 06:06	--------	d-----w-	c:\program files\Accessory Store
2013-09-10 06:04 . 2012-06-02 13:19	186752	----a-w-	c:\windows\system32\wuwebv.dll
2013-09-10 06:04 . 2012-06-02 13:15	36864	----a-w-	c:\windows\system32\wuapp.exe
2013-09-10 06:02 . 2013-09-11 08:26	--------	d-----w-	c:\users\Bispinosa
2013-09-09 21:58 . 2013-09-09 21:58	--------	d-----w-	c:\windows\SysWow64\wbem\en-US
2013-09-09 21:58 . 2013-09-09 21:58	--------	d-----w-	c:\windows\system32\wbem\en-US
2013-09-09 21:40 . 2013-09-09 21:40	--------	d-----w-	c:\program files (x86)\Cyberlink
2013-09-09 21:38 . 2013-09-10 08:06	--------	d-----w-	c:\programdata\CyberLink
2013-09-09 21:36 . 2010-12-05 02:31	9177600	----a-w-	c:\programdata\Microsoft\OEMOffice14\Office14\Updates\mso.msp
2013-09-09 21:35 . 2010-11-03 03:45	1632144	----a-w-	c:\programdata\Microsoft\OEMOffice14\OStarter\de-de\SetupConsumerC2ROLW.exe
2013-09-09 21:35 . 2010-11-03 03:45	1632144	----a-w-	c:\programdata\Microsoft\OEMOffice14\OStarter\de-de\SetupConsumerC2R.exe
2013-09-09 21:35 . 2010-03-21 00:49	21952	----a-w-	c:\programdata\Microsoft\OEMOffice14\OStarter\de-de\launchofficeintl.dll
2013-09-09 21:35 . 2010-02-28 09:33	5336456	----a-w-	c:\programdata\Microsoft\OEMOffice14\OStarter\de-de\Office.exe
2013-09-09 21:35 . 2010-03-30 21:24	32998400	----a-w-	c:\programdata\Microsoft\OEMOffice14\OStarter\de-de\click2run64.msi
2013-09-09 21:35 . 2010-10-09 06:31	101888	----a-w-	c:\programdata\Microsoft\OEMOffice14\OOBE\oobe-x-none.msp
2013-09-09 21:35 . 2010-06-25 16:24	2376704	----a-w-	c:\programdata\Microsoft\OEMOffice14\OOBE\oobe.msi
2013-09-09 21:35 . 2010-03-30 21:20	26053120	----a-w-	c:\programdata\Microsoft\OEMOffice14\OStarter\de-de\click2run.msi
2013-09-09 21:33 . 2013-09-10 06:57	--------	d-----w-	c:\program files (x86)\Microsoft
2013-09-09 21:24 . 2010-12-20 10:08	8192	----a-w-	c:\windows\system32\drivers\IntelMEFWVer.dll
2013-09-09 21:23 . 2013-09-09 21:23	--------	d-----w-	c:\program files (x86)\Common Files\postureAgent
2013-09-09 21:22 . 2013-09-09 21:22	--------	d-----w-	c:\program files (x86)\Etron Technology
2013-09-09 21:19 . 2010-11-05 21:45	438808	----a-w-	c:\windows\system32\drivers\iaStor.sys
2013-09-09 21:18 . 2013-09-09 21:18	--------	d-----w-	c:\programdata\EgisTec
2013-09-09 21:17 . 2013-09-09 21:17	--------	d---a-w-	C:\book
2013-09-09 21:15 . 2011-06-30 06:03	54784	----a-w-	c:\windows\system32\drivers\EtronHub3.sys
2013-09-09 21:15 . 2013-09-12 10:59	--------	d-----w-	c:\programdata\NVIDIA
2013-09-09 21:10 . 2013-09-10 09:23	--------	d-----w-	c:\windows\SysWow64\RTCOM
2013-09-09 21:10 . 2013-09-09 21:10	--------	d-----w-	c:\program files\Realtek
2013-09-09 21:10 . 2010-11-04 19:38	2580824	----a-w-	c:\windows\system32\WavesGUILib.dll
2013-09-09 21:10 . 2010-07-23 00:48	74064	----a-w-	c:\windows\SysWow64\SFCOM.dll
2013-09-09 21:10 . 2009-11-24 17:55	518896	----a-w-	c:\windows\system32\SRSTSX64.dll
2013-09-09 21:10 . 2009-11-24 17:55	211184	----a-w-	c:\windows\system32\SRSTSH64.dll
2013-09-09 21:10 . 2009-11-24 17:55	198896	----a-w-	c:\windows\system32\SRSHP64.dll
2013-09-09 21:09 . 2013-09-09 21:09	--------	d-----w-	c:\program files (x86)\Realtek
2013-09-09 21:08 . 2013-09-10 09:06	--------	d-----w-	c:\program files (x86)\NVIDIA Corporation
2013-09-09 21:08 . 2013-09-10 09:03	--------	d-----w-	c:\programdata\NVIDIA Corporation
2013-09-09 21:07 . 2013-06-21 12:06	15920536	----a-w-	c:\windows\system32\nvwgf2umx.dll
2013-09-09 21:07 . 2011-03-03 15:59	1359976	----a-w-	c:\windows\system32\nvhdagenco642040.dll
2013-09-09 21:07 . 2013-06-21 12:06	12427240	----a-w-	c:\windows\SysWow64\nvd3dum.dll
2013-09-09 21:07 . 2011-03-24 06:48	1614440	----a-w-	c:\windows\system32\nvdispco642090.dll
2013-09-09 21:07 . 2011-03-24 06:48	1359976	----a-w-	c:\windows\system32\nvgenco642040.dll
2013-09-09 21:07 . 2013-06-21 12:06	2936208	----a-w-	c:\windows\system32\nvapi64.dll
2013-09-09 21:07 . 2011-03-24 06:48	67176	----a-w-	c:\windows\system32\OpenCL.dll
2013-09-09 21:07 . 2011-03-24 06:48	57960	----a-w-	c:\windows\SysWow64\OpenCL.dll
2013-09-09 21:07 . 2011-03-24 06:48	11240	----a-w-	c:\windows\system32\drivers\nvBridge.kmd
2013-09-09 21:07 . 2013-09-10 09:05	--------	d-----w-	c:\program files\NVIDIA Corporation
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-09-12 06:06 . 2011-07-11 10:28	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-09-10 07:30 . 2012-10-18 12:50	54368	----a-w-	c:\windows\system32\drivers\kltdi.sys
2013-09-10 07:30 . 2012-08-13 14:49	178448	----a-w-	c:\windows\system32\drivers\kneps.sys
2013-09-10 06:49 . 2013-09-10 06:49	2560	----a-w-	c:\windows\SysWow64\drivers\de-DE\qwavedrv.sys.mui
2013-09-10 06:49 . 2013-09-10 06:49	5632	----a-w-	c:\windows\SysWow64\drivers\de-DE\ndiscap.sys.mui
2013-09-10 06:49 . 2013-09-10 06:49	2560	----a-w-	c:\windows\SysWow64\drivers\de-DE\scfilter.sys.mui
2013-09-10 06:49 . 2013-09-10 06:49	51712	----a-w-	c:\windows\SysWow64\drivers\de-DE\tcpip.sys.mui
2013-09-10 06:49 . 2013-09-10 06:49	29696	----a-w-	c:\windows\SysWow64\drivers\de-DE\bfe.dll.mui
2013-09-10 06:49 . 2013-09-10 06:49	16896	----a-w-	c:\windows\SysWow64\drivers\de-DE\pacer.sys.mui
2013-09-09 21:16 . 2010-06-24 18:33	22240	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-08-05 09:50 . 2011-07-11 09:24	53248	----a-w-	c:\windows\SysWow64\CSVer.dll
2013-07-16 15:14 . 2013-07-16 15:14	3486680	----a-w-	c:\windows\system32\drivers\RTKVHD64.sys
2013-07-16 13:20 . 2013-07-16 13:20	29216256	----a-w-	c:\windows\system32\RCoRes64.dat
2013-07-16 08:52 . 2013-07-16 08:52	147160	----a-w-	c:\windows\system32\RCoInstII64.dll
2013-07-09 12:20 . 2013-07-09 12:20	3760344	----a-w-	c:\windows\system32\RtkAPO64.dll
2013-07-08 13:32 . 2013-07-08 13:32	4810008	----a-w-	c:\windows\system32\RTKSMlfx.dll
2013-07-08 13:31 . 2013-07-08 13:31	758104	----a-w-	c:\windows\system32\RTKSMSettingsIPC.dll
2013-07-01 22:27 . 2013-07-01 22:27	1795952	----a-w-	c:\windows\system32\WdfCoInstaller01011.dll
2013-07-01 22:27 . 2013-07-01 22:27	100312	----a-w-	c:\windows\system32\drivers\TeeDriverx64.sys
2013-06-27 09:12 . 2013-06-27 09:12	2795224	----a-w-	c:\windows\system32\RtPgEx64.dll
2013-06-26 13:18 . 2013-06-26 13:18	920832	----a-w-	c:\windows\system32\MaxxAudioAPOShell64.dll
2013-06-26 13:18 . 2013-06-26 13:18	14041344	----a-w-	c:\windows\system32\MaxxAudioRealtek64.dll
2013-06-26 13:17 . 2013-06-26 13:17	3603712	----a-w-	c:\windows\system32\MaxxAudioVnN64.dll
2013-06-26 13:17 . 2013-06-26 13:17	2032896	----a-w-	c:\windows\system32\MaxxAudioEQ64.dll
2013-06-26 13:17 . 2013-06-26 13:17	1904384	----a-w-	c:\windows\system32\MaxxAudioRealtek264.dll
2013-06-26 13:17 . 2013-06-26 13:17	2103040	----a-w-	c:\windows\system32\WavesGUILib64.dll
2013-06-26 13:17 . 2013-06-26 13:17	27515648	----a-w-	c:\windows\system32\MaxxAudioVnA64.dll
2013-06-21 10:23 . 2011-03-23 22:53	6496544	----a-w-	c:\windows\system32\nvcpl.dll
2013-06-21 10:23 . 2011-03-23 22:52	3514656	----a-w-	c:\windows\system32\nvsvc64.dll
2013-06-21 10:23 . 2011-03-23 22:53	884512	----a-w-	c:\windows\system32\nvvsvc.exe
2013-06-21 10:23 . 2011-03-23 22:53	63776	----a-w-	c:\windows\system32\nvshext.dll
2013-06-21 10:23 . 2011-03-23 22:53	2555680	----a-w-	c:\windows\system32\nvsvcr.dll
2013-06-21 10:23 . 2011-03-23 22:53	237856	----a-w-	c:\windows\system32\nvmctray.dll
2013-06-21 06:01 . 2013-06-21 06:01	109848	----a-w-	c:\windows\system32\AcpiServiceVnA64.dll
2013-06-21 03:16 . 2013-06-21 03:16	566048	----a-w-	c:\windows\SysWow64\nvStreaming.exe
2013-06-18 14:52 . 2013-06-18 14:52	1004248	----a-w-	c:\windows\system32\RtkApi64.dll
2013-06-18 12:44 . 2013-06-18 12:44	2736160	----a-w-	c:\windows\system32\FMAPO64.dll
2013-06-18 12:00 . 2013-06-18 12:00	947760	----a-w-	c:\windows\system32\SFSS_APO.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{2316c625-b487-4410-a1a5-ff040b65245f}]
2013-08-30 02:16	149288	----a-w-	c:\program files (x86)\WebConnect\WebConnectBHO.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{AA74D58F-ACD0-450D-A85E-6C04B171C044}]
2013-02-26 09:35	331264	----a-w-	c:\program files (x86)\Minibar\Minibar.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\KAVOverlayIcon]
@="{dd230880-495a-11d1-b064-008048ec2fc5}"
[HKEY_CLASSES_ROOT\CLSID\{dd230880-495a-11d1-b064-008048ec2fc5}]
2012-12-20 16:20	459784	----a-w-	c:\program files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\shellex.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SDP"="c:\users\Bispinosa\AppData\Local\FilesFrog Update Checker\update_checker.exe" [2013-01-31 201808]
"AppsHat"="c:\users\Bispinosa\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe" [2012-10-26 202752]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SuiteTray"="c:\program files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [2011-04-02 340848]
"EgisTecPMMUpdate"="c:\program files (x86)\EgisTec IPS\PmmUpdate.exe" [2011-03-29 408432]
"EgisUpdate"="c:\program files (x86)\EgisTec IPS\EgisUpdate.exe" [2011-03-29 202608]
"Norton Online Backup"="c:\program files (x86)\Symantec\Norton Online Backup\NOBuClient.exe" [2010-06-01 1155928]
"ArcadeMovieService"="c:\program files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe" [2011-05-13 177448]
"Hotkey Utility"="c:\program files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe" [2011-08-11 627304]
"AVP"="c:\program files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe" [2012-12-20 356968]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"IsMyWinLockerReboot"="msiexec.exe" [2010-11-21 73216]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
.
R2 0053221378793026mcinstcleanup;McAfee Application Installer Cleanup (0053221378793026);c:\windows\TEMP\005322~1.EXE;c:\windows\TEMP\005322~1.EXE [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
R2 Update WebConnect;Update WebConnect;c:\program files (x86)\WebConnect\updateWebConnect.exe;c:\program files (x86)\WebConnect\updateWebConnect.exe [x]
R3 EgisTec Ticket Service;EgisTec Ticket Service;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [x]
R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver;c:\windows\system32\Drivers\EtronHub3.sys;c:\windows\SYSNATIVE\Drivers\EtronHub3.sys [x]
R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver;c:\windows\system32\Drivers\EtronXHCI.sys;c:\windows\SYSNATIVE\Drivers\EtronXHCI.sys [x]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [x]
R3 netr28x;Ralink 802.11n Wireless Driver for Windows Vista;c:\windows\system32\DRIVERS\netr28x.sys;c:\windows\SYSNATIVE\DRIVERS\netr28x.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 CSCrySec;InfoWatch Encrypt Sector Library driver;c:\windows\system32\DRIVERS\CSCrySec.sys;c:\windows\SYSNATIVE\DRIVERS\CSCrySec.sys [x]
S1 CSVirtualDiskDrv;InfoWatch Virtual Disk driver;c:\windows\system32\DRIVERS\CSVirtualDiskDrv.sys;c:\windows\SYSNATIVE\DRIVERS\CSVirtualDiskDrv.sys [x]
S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys;c:\windows\SYSNATIVE\DRIVERS\klim6.sys [x]
S1 kltdi;kltdi;c:\windows\system32\DRIVERS\kltdi.sys;c:\windows\SYSNATIVE\DRIVERS\kltdi.sys [x]
S1 kneps;kneps;c:\windows\system32\DRIVERS\kneps.sys;c:\windows\SYSNATIVE\DRIVERS\kneps.sys [x]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDFilter.sys [x]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDNServ.sys [x]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDVDisk.sys [x]
S2 CSObjectsSrv;Verwaltungsservice vom CryproStorage-System;c:\program files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe;c:\program files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [x]
S2 DRHARD64;DRHARD64;c:\windows\system32\drivers\DRHARD64.sys;c:\windows\SYSNATIVE\drivers\DRHARD64.sys [x]
S2 DRHMSR64;DRHMSR64;c:\windows\system32\drivers\DRHMSR64.sys;c:\windows\SYSNATIVE\drivers\DRHMSR64.sys [x]
S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe;c:\program files (x86)\Acer\Registration\GREGsvc.exe [x]
S2 Live Updater Service;Live Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe;c:\program files\Acer\Acer Updater\UpdaterService.exe [x]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe;c:\program files (x86)\Nero\Update\NASvc.exe [x]
S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 USBS3S4Detection;USBS3S4Detection;c:\oem\USBDECTION\USBS3S4Detection.exe;c:\oem\USBDECTION\USBS3S4Detection.exe [x]
S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys;c:\windows\SYSNATIVE\DRIVERS\dc3d.sys [x]
S3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\DRIVERS\klkbdflt.sys;c:\windows\SYSNATIVE\DRIVERS\klkbdflt.sys [x]
S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys;c:\windows\SYSNATIVE\DRIVERS\klmouflt.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 Point64;Microsoft Mouse and Keyboard Center Filter Driver;c:\windows\system32\DRIVERS\point64.sys;c:\windows\SYSNATIVE\DRIVERS\point64.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
Inhalt des "geplante Tasks" Ordners
.
2013-09-12 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-11 06:06]
.
2013-09-12 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2651500920-1956776048-2349371349-1001Core.job
- c:\users\Bispinosa\AppData\Local\Google\Update\GoogleUpdate.exe [2013-09-10 06:50]
.
2013-09-12 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2651500920-1956776048-2349371349-1001UA.job
- c:\users\Bispinosa\AppData\Local\Google\Update\GoogleUpdate.exe [2013-09-10 06:50]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\KAVOverlayIcon]
@="{dd230880-495a-11d1-b064-008048ec2fc5}"
[HKEY_CLASSES_ROOT\CLSID\{dd230880-495a-11d1-b064-008048ec2fc5}]
2012-12-20 16:22	492040	----a-w-	c:\program files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\shellex.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2013-07-09 13632216]
"Nvtmru"="c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [2013-08-27 1028896]
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www2.delta-search.com/?babsrc=HP_ss&mntrId=8CE9C89CDC2D6E60&affID=119357&tt=110913_221&tsp=5002
uLocal Page = c:\windows\system32\blank.htm
mDefault_Page_URL = hxxp://acer.msn.com
mStart Page = hxxp://acer.msn.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: {{AAA38851-3CFF-475F-B5E0-720D3645E4A5} - {AAA38851-3CFF-475F-B5E0-720D3645E4A5} - c:\program files (x86)\Minibar\Minibar.dll
TCP: DhcpNameServer = 192.168.178.1
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
Toolbar-{82E1477C-B154-48D3-9891-33D83C26BCD3} - c:\program files (x86)\Delta\delta\1.8.24.6\deltaTlbr.dll
Toolbar-Locked - (no file)
HKLM-Run-Apoint - c:\program files (x86)\Apoint\Apoint.exe
AddRemove-{15D2D75C-9CB2-4efd-BAD7-B9B4CB4BC693} - c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\uninstall.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_168_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_168_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_168_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_168_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_168.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_168.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_168.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_168.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
c:\program files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2013-09-12  13:18:37 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2013-09-12 11:18
.
Vor Suchlauf: 9 Verzeichnis(se), 447.448.051.712 Bytes frei
Nach Suchlauf: 15 Verzeichnis(se), 448.046.292.992 Bytes frei
.
- - End Of File - - F6ECA092BEFFCFE40DF15E795F39561F
         

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

 Malwarebytes Anti-Malware  (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.09.12.09

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Bispinosa :: PC [Administrator]

Schutz: Aktiviert

12.09.2013 20:21:46
mbam-log-2013-09-12 (20-21-46).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 251094
Laufzeit: 19 Minute(n), 54 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 19
HKLM\SYSTEM\CurrentControlSet\Services\Update WebConnect (PUP.Optional.WebConnect.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CLSID\{2316c625-b487-4410-a1a5-ff040b65245f} (PUP.Optional.WebConnect.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2316C625-B487-4410-A1A5-FF040B65245F} (PUP.Optional.WebConnect.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} (PUP.Optional.BrowseFox.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23} (PUP.Optional.BrowseFox.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CLSID\{539F76FD-084E-4858-86D5-62F02F54AE86} (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CLSID\{60EACC1A-33FA-443D-9846-17B28E2C9BDB} (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CLSID\{AA74D58F-ACD0-450D-A85E-6C04B171C044} (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA74D58F-ACD0-450D-A85E-6C04B171C044} (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CLSID\{AAA38851-3CFF-475F-B5E0-720D3645E4A5} (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{AAA38851-3CFF-475F-B5E0-720D3645E4A5} (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\DataMngr_Toolbar (PUP.Optional.DataMngr.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings (PUP.Optional.BProtector.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\WEBCONNECT (PUP.Optional.WebConnect.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\MINIBAR (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 6
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar|{82E1477C-B154-48D3-9891-33D83C26BCD3} (PUP.Optional.Delta.A) -> Daten: Delta Toolbar -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{82E1477C-B154-48D3-9891-33D83C26BCD3} (PUP.Optional.Delta.A) -> Daten:  -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|bProtector Start Page (PUP.BProtector) -> Daten: hxxp://www2.delta-search.com/?babsrc=HP_ss&mntrId=8CE9C89CDC2D6E60&affID=119357&tt=110913_221&tsp=5002 -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Daten: 0L1N1H2O1S -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\Software\WebConnect|iid (PUP.Optional.WebConnect.A) -> Daten: def_WebConnect -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Minibar|NoDns (PUP.Optional.MiniBar.A) -> Daten: true -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateiobjekte der Registrierung: 1
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.StartPage) -> Bösartig: (hxxp://www2.delta-search.com/?babsrc=HP_ss&mntrId=8CE9C89CDC2D6E60&affID=119357&tt=110913_221&tsp=5002) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.

Infizierte Verzeichnisse: 12
C:\Users\Bispinosa\AppData\Roaming\Babylon (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\WebConnect (PUP.Optional.WebConnect.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\icons (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango-ui (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango-ui\theme (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango-ui\theme\bubble (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\minibar (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Bispinosa\AppData\Roaming\BabSolution (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Bispinosa\AppData\Roaming\BabSolution\CR (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Bispinosa\AppData\Roaming\BabSolution\Shared (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateien: 69
C:\Program Files (x86)\WebConnect\updateWebConnect.exe (PUP.Optional.WebConnect.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\WebConnect\WebConnectBHO.dll (PUP.Optional.WebConnect.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Bispinosa\AppData\Roaming\BabSolution\Shared\BabMaint.exe (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Bispinosa\Downloads\ZipOpenerSetup.exe (PUP.Optional.Installcore) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Bispinosa\AppData\Roaming\Babylon\log_file.txt (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\WebConnect\ieakfmpjhljbpbfpldjkddkjmmgjmgon.crx (PUP.Optional.WebConnect.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\WebConnect\Microsoft.Win32.TaskScheduler.dll (PUP.Optional.WebConnect.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\WebConnect\sqlite3.exe (PUP.Optional.WebConnect.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\WebConnect\updateWebConnect.InstallState (PUP.Optional.WebConnect.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\WebConnect\WebConnect.Common.dll (PUP.Optional.WebConnect.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\WebConnect\WebConnect.ico (PUP.Optional.WebConnect.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\WebConnect\WebConnectUninstall.exe (PUP.Optional.WebConnect.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Bispinosa\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data (PUP.Optional.BProtector.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Bispinosa\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences (PUP.Optional.BProtector.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Bispinosa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eooncjejnppfjjklapaamhcdmjbilmde_0.localstorage (PUP.Optional.BrowserDefender.A) -> Löschen bei Neustart.
C:\Program Files (x86)\Minibar\initial_config.json (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\config.xml (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\extension_info.json (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\main.js (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\icons\icon128.png (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\icons\icon16.ico (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\icons\icon19.ico (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\icons\icon19.png (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\icons\icon32.png (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\icons\icon48.png (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango\browser.js (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango\console.js (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango\event_listener.js (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango\initialize.js (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango\io.js (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango\json.js (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango\jsonstorage.js (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango\kango.js (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango\lang.js (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango\md5.js (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango\messaging.js (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango\storage.js (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango\userscript_engine.js (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango\utils.js (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango\xhr.js (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango-ui\commandbar_button.js (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango-ui\toolbar.js (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango-ui\toolbar_stub.html (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango-ui\ui.js (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango-ui\theme\bubble\bottom-left.png (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango-ui\theme\bubble\bottom-middle.png (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango-ui\theme\bubble\bottom-right.png (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango-ui\theme\bubble\middle-left.png (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango-ui\theme\bubble\middle-right.png (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango-ui\theme\bubble\tail-bottom.png (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango-ui\theme\bubble\tail-left.png (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango-ui\theme\bubble\tail-right.png (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango-ui\theme\bubble\tail-top.png (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango-ui\theme\bubble\top-left.png (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango-ui\theme\bubble\top-middle.png (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\kango-ui\theme\bubble\top-right.png (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\minibar\actions.js (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\minibar\cachedxhr.js (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\minibar\config.js (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\minibar\macros.js (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Minibar\minibar\minibar.js (PUP.Optional.MiniBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Bispinosa\AppData\Roaming\BabSolution\CR\BabylonChrome1.crx (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Bispinosa\AppData\Roaming\BabSolution\CR\Delta.crx (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Bispinosa\AppData\Roaming\BabSolution\Shared\BabSetup.ico (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Bispinosa\AppData\Roaming\BabSolution\Shared\BUSolution.dll (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Bispinosa\AppData\Roaming\BabSolution\Shared\Delta.ico (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Bispinosa\AppData\Roaming\BabSolution\Shared\GUninstaller.exe (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Bispinosa\AppData\Roaming\BabSolution\Shared\SetupParams.ini (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Bispinosa\AppData\Roaming\BabSolution\Shared\sqlite3.dll (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
         

# AdwCleaner v3.003 - Bericht erstellt am 12/09/2013 um 21:32:21
# Updated 07/09/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Bispinosa - PC
# Gestartet von : C:\Users\Bispinosa\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\Program Files (x86)\openit
Ordner Gelöscht : C:\Users\Bispinosa\AppData\Local\FilesFrog Update Checker
Ordner Gelöscht : C:\Users\Bispinosa\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z
Ordner Gelöscht : C:\Users\Bispinosa\AppData\Roaming\DSite
Ordner Gelöscht : C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender
Ordner Gelöscht : C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker
Datei Gelöscht : C:\Windows\System32\Tasks\BrowserDefendert
Datei Gelöscht : C:\Windows\System32\Tasks\EPUpdater

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\ieakfmpjhljbpbfpldjkddkjmmgjmgon
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [SDP]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASMANCS
Schlüssel Gelöscht : HKCU\Software\53558bd0b738ec46
Schlüssel Gelöscht : HKLM\SOFTWARE\53558bd0b738ec46
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{26E7211D-0650-43CF-8498-4C81E83AEAAA}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Schlüssel Gelöscht : HKCU\Software\BI
Schlüssel Gelöscht : HKCU\Software\Delta
Schlüssel Gelöscht : HKCU\Software\dsiteproducts
Schlüssel Gelöscht : HKCU\Software\Somoto
Schlüssel Gelöscht : HKCU\Software\Webplayer
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\Delta
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Zip Opener Packages
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FilesFrog Update Checker
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OpenIt Open It!

***** [ Browser ] *****

-\\ Internet Explorer v9.0.8112.16421


-\\ Google Chrome v

[ Datei : C:\Users\Bispinosa\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht : icon_url
Gelöscht : search_url
Gelöscht : keyword
Gelöscht : homepage

*************************

AdwCleaner[R0].txt - [3321 octets] - [12/09/2013 21:19:08]
AdwCleaner[R1].txt - [3846 octets] - [12/09/2013 21:20:44]
AdwCleaner[S0].txt - [3264 octets] - [12/09/2013 21:32:21]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3324 octets] ##########
         

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.0 (09.12.2013:1)
OS: Windows 7 Home Premium x64
Ran by Bispinosa on 12.09.2013 at 22:04:50,39
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2651500920-1956776048-2349371349-1001\Software\SweetIM



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\open it!"



~~~ Chrome

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\extensioninstallforcelist [Blacklisted Policy]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 12.09.2013 at 22:13:20,65
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-09-2013
Ran by Bispinosa (administrator) on PC on 12-09-2013 22:17:00
Running from C:\Users\Bispinosa\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
(CyberLink) C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() C:\OEM\USBDECTION\USBS3S4Detection.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
() C:\Users\Bispinosa\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe
() C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apntex.exe
(ALPS) C:\Program Files\Apoint\Apvfb.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(Google Inc.) C:\Users\Bispinosa\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Bispinosa\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Bispinosa\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) c:\program files\windows defender\MpCmdRun.exe
(Farbar) C:\Users\Bispinosa\Downloads\FRST64 (1).exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13632216 2013-07-09] (Realtek Semiconductor)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-08-27] (NVIDIA Corporation)
HKLM\...\Run: [Apoint] - C:\Program Files\Apoint\Apoint.exe [208384 2009-10-19] (Alps Electric Co., Ltd.)
HKCU\...\Run: [AppsHat] - C:\Users\Bispinosa\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe [202752 2012-10-26] ()
HKLM-x32\...\Run: [SuiteTray] - C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [340848 2011-04-02] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisTecPMMUpdate] - C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [408432 2011-03-29] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisUpdate] - C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [202608 2011-03-29] (Egis Technology Inc.)
HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-02] (Symantec Corporation)
HKLM-x32\...\Run: [ArcadeMovieService] - C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe [177448 2011-05-13] (CyberLink Corp.)
HKLM-x32\...\Run: [Hotkey Utility] - C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe [627304 2011-08-11] ()
HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356968 2012-12-20] (Kaspersky Lab ZAO)
HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-07-29] ()
HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-07-29] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer.msn.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer.msn.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKLM-x32 - Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Chrome: 
=======
CHR HomePage: hxxp://www.google.com
CHR Extension: (Kaspersky URL Advisor) - C:\Users\BISPIN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\13.0.2.558_0
CHR Extension: (Safe Money) - C:\Users\BISPIN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh\13.0.2.558_1
CHR Extension: (Chrome In-App Payments service) - C:\Users\BISPIN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Anti-Banner) - C:\Users\BISPIN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\13.0.2.558_1
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\urladvisor.crx
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\online_banking_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\content_blocker_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\virtkbd.crx
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\ab.crx
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356968 2012-12-20] (Kaspersky Lab ZAO)
R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [819040 2012-12-21] (Infowatch)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14997280 2013-08-27] (NVIDIA Corporation)
R2 USBS3S4Detection; C:\OEM\USBDECTION\USBS3S4Detection.exe [76320 2009-12-09] ()
S2 0053221378793026mcinstcleanup; C:\Windows\TEMP\005322~1.EXE C:\PROGRA~2\COMMON~1\McAfee\INSTAL~1\cleanup.ini -cleanup -nolog -service

==================== Drivers (Whitelisted) ====================

R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [84536 2011-06-02] (Infowatch)
R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66616 2011-06-02] (Infowatch)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-06-19] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [620128 2013-09-10] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29016 2012-09-03] (Kaspersky Lab)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29528 2012-09-03] (Kaspersky Lab)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-09-10] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-09-10] (Kaspersky Lab ZAO)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [100312 2013-07-02] (Intel Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-08-20] (NVIDIA Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [90208 2013-09-10] (Kaspersky Lab ZAO)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-12 22:16 - 2013-09-12 22:16 - 01949660 _____ (Farbar) C:\Users\Bispinosa\Downloads\FRST64 (1).exe
2013-09-12 22:13 - 2013-09-12 22:13 - 00001178 _____ C:\Users\Bispinosa\Desktop\JRT.txt
2013-09-12 22:04 - 2013-09-12 22:04 - 00000000 ____D C:\Windows\ERUNT
2013-09-12 22:02 - 2013-09-12 22:03 - 01029509 _____ (Thisisu) C:\Users\Bispinosa\Downloads\JRT.exe
2013-09-12 21:59 - 2013-09-12 21:59 - 00002930 _____ C:\Windows\System32\Tasks\{C4E7E569-4021-4DB5-8233-FED66CFFD288}
2013-09-12 21:41 - 2013-09-12 21:41 - 00000000 ____D C:\Windows\SysWOW64\%Report%
2013-09-12 21:41 - 2013-09-12 21:41 - 00000000 ____D C:\Windows\SysWOW64\%DataRoot%
2013-09-12 20:15 - 2013-09-12 21:32 - 00000000 ____D C:\AdwCleaner
2013-09-12 20:12 - 2013-09-12 20:15 - 01037278 _____ C:\Users\Bispinosa\Desktop\adwcleaner.exe
2013-09-12 19:31 - 2013-09-12 19:31 - 00001117 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-12 19:31 - 2013-09-12 19:31 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\Malwarebytes
2013-09-12 19:31 - 2013-09-12 19:31 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-12 19:30 - 2013-09-12 19:31 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-12 19:30 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-09-12 19:29 - 2013-09-12 19:29 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Bispinosa\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-12 15:23 - 2013-09-12 15:23 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\Adobe
2013-09-12 15:16 - 2013-09-12 15:16 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2013-09-12 14:50 - 2013-09-12 14:50 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\NVIDIA
2013-09-12 14:49 - 2013-09-12 14:55 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2013-09-12 14:49 - 2013-09-12 14:49 - 09159560 _____ (BlueStack Systems Inc.) C:\Users\Bispinosa\Downloads\BlueStacks-SplitInstaller_native.exe
2013-09-12 13:18 - 2013-09-12 13:18 - 00040930 _____ C:\ComboFix.txt
2013-09-12 12:48 - 2013-09-12 13:22 - 00000000 ____D C:\ComboFix
2013-09-12 12:48 - 2013-09-12 13:19 - 00000000 ____D C:\Qoobox
2013-09-12 12:48 - 2013-09-12 13:15 - 00000000 ____D C:\Windows\erdnt
2013-09-12 12:48 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-09-12 12:48 - 2011-06-26 08:45 - 00256000 _____ C:\Users\Bispinosa\Desktop\PEV.exe
2013-09-12 12:48 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-09-12 12:48 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-09-12 12:48 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-09-12 12:48 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-09-12 12:48 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-09-12 12:48 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-09-12 12:48 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-09-12 12:46 - 2013-09-12 12:47 - 05124599 ____R (Swearware) C:\Users\Bispinosa\Downloads\ComboFix.exe
2013-09-12 07:23 - 2013-09-12 07:23 - 00003416 ____N C:\bootsqm.dat
2013-09-11 22:40 - 2013-09-12 22:05 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-11 22:40 - 2013-09-12 08:06 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-11 22:40 - 2013-09-12 08:06 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-11 22:40 - 2013-09-11 22:40 - 00000000 ____D C:\Windows\system32\Macromed
2013-09-11 22:39 - 2013-09-11 22:39 - 00000000 _____ C:\Users\Bispinosa\Downloads\install_flash_player_ax.exe
2013-09-11 22:23 - 2013-09-11 22:23 - 00079808 _____ C:\Users\Bispinosa\Downloads\Avira_Ereignisse.txt
2013-09-11 20:21 - 2013-09-11 20:21 - 00000094 _____ C:\Users\Bispinosa\AppData\Roaming\WB.CFG
2013-09-11 20:21 - 2013-09-11 20:21 - 00000005 _____ C:\Users\Bispinosa\AppData\Roaming\WBPU-TTL.DAT
2013-09-11 19:19 - 2013-09-11 19:19 - 00000000 ____D C:\Program Files (x86)\7-Zip
2013-09-11 19:17 - 2013-09-11 19:18 - 01110476 _____ C:\Users\Bispinosa\Downloads\7z920.exe
2013-09-11 19:13 - 2013-09-11 19:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-11 11:27 - 2013-09-11 11:27 - 00262144 _____ C:\Windows\system32\config\elam
2013-09-11 11:20 - 2013-09-11 20:35 - 00122983 _____ C:\Users\Bispinosa\Desktop\FRST.Txt.txt
2013-09-11 11:18 - 2013-09-11 11:20 - 00032525 _____ C:\Users\Bispinosa\Desktop\Addition.Txt.txt
2013-09-11 11:15 - 2013-09-11 11:16 - 01949408 _____ (Farbar) C:\Users\Bispinosa\Downloads\FRST64.exe
2013-09-11 11:15 - 2013-09-11 11:15 - 00000480 _____ C:\Users\Bispinosa\Desktop\defogger_disable.log
2013-09-11 11:14 - 2013-09-11 11:14 - 00050477 _____ C:\Users\Bispinosa\Downloads\Defogger.exe
2013-09-11 10:52 - 2013-09-11 10:52 - 00010201 _____ C:\Users\Bispinosa\Desktop\Gmer.Txt.log
2013-09-11 10:30 - 2013-09-11 10:30 - 00000000 ____D C:\FRST
2013-09-11 10:26 - 2013-09-11 10:26 - 00000000 _____ C:\Users\Bispinosa\defogger_reenable
2013-09-11 10:24 - 2012-02-17 08:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2013-09-11 10:24 - 2012-02-17 07:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2013-09-11 10:24 - 2012-02-17 06:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2013-09-11 10:24 - 2012-02-17 06:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2013-09-11 10:20 - 2013-09-11 10:20 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat
2013-09-11 10:20 - 2013-09-11 10:20 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\WebPlayer
2013-09-11 10:19 - 2013-09-11 10:19 - 00000000 ____D C:\Windows\SysWOW64\searchplugins
2013-09-11 10:19 - 2013-09-11 10:19 - 00000000 ____D C:\Windows\SysWOW64\Extensions
2013-09-11 10:19 - 2013-09-11 10:19 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\avgchrome
2013-09-10 11:42 - 2013-09-10 11:42 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_point64_01011.Wdf
2013-09-10 11:36 - 2013-09-10 11:36 - 00003062 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe
2013-09-10 11:36 - 2013-09-10 11:36 - 00003060 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe
2013-09-10 11:35 - 2013-09-10 11:35 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf
2013-09-10 11:35 - 2013-09-10 11:35 - 00000000 ____D C:\Program Files\Microsoft Mouse and Keyboard Center
2013-09-10 11:31 - 2013-09-10 11:31 - 00000000 ____H C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Coinstaller_Critical.Wdf
2013-09-10 11:31 - 2013-09-10 11:31 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2013-09-10 11:30 - 2012-07-26 06:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-09-10 11:30 - 2012-07-26 06:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2013-09-10 11:30 - 2012-07-26 04:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2013-09-10 11:30 - 2012-06-02 16:35 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2013-09-10 11:25 - 2013-09-10 11:25 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_Apfiltr_01007.Wdf
2013-09-10 11:25 - 2013-09-10 11:25 - 00000000 ____D C:\Program Files\Apoint
2013-09-10 11:24 - 2013-09-10 11:24 - 00000000 ____D C:\Program Files\DIFX
2013-09-10 11:15 - 2013-09-10 11:36 - 00284868 _____ C:\Windows\DPINST.LOG
2013-09-10 11:05 - 2013-09-10 11:05 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\NVIDIA
2013-09-10 11:05 - 2013-08-20 15:33 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-09-10 11:05 - 2013-08-20 15:32 - 00029984 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2013-09-10 11:05 - 2013-08-20 15:32 - 00028448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-09-10 11:02 - 2013-09-10 11:02 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\DriverTuner
2013-09-10 11:01 - 2013-09-10 11:15 - 00000000 ____D C:\Program Files (x86)\DriverTuner
2013-09-10 11:01 - 2013-09-10 11:01 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-09-10 11:00 - 2013-09-10 11:00 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-09-10 10:59 - 2013-06-20 06:17 - 03253909 _____ C:\Windows\system32\nvcoproc.bin
2013-09-10 10:54 - 2013-09-10 10:56 - 01588294 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-09-10 10:46 - 2013-06-21 14:06 - 27781920 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 21102368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 15144928 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 13411896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 11235104 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-09-10 10:46 - 2013-06-21 14:06 - 09239344 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 07687592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 07641832 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 06324360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 02953504 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 02777888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 02597856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 02363680 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 02002720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 01832224 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432049.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432049.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 01059560 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 00925648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 00572704 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 00570656 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 00467232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 00465184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 00266448 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 00218592 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 00214448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 00181488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-09-10 10:46 - 2013-02-25 07:27 - 00194848 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2013-09-10 10:46 - 2013-02-25 07:27 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2013-09-10 10:46 - 2013-01-29 10:35 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2013-09-10 10:44 - 2013-09-10 10:44 - 00000000 ____D C:\NVIDIA
2013-09-10 10:18 - 2013-09-12 15:46 - 00000000 ____D C:\Program Files (x86)\Dr. Hardware 2013
2013-09-10 10:18 - 2013-07-21 18:41 - 00013760 _____ C:\Windows\system32\Drivers\DRHMSR64.sys
2013-09-10 10:18 - 2011-11-03 19:05 - 00021984 _____ (Licensed for Gebhard Software) C:\Windows\system32\Drivers\DRHARD64.sys
2013-09-10 10:07 - 2013-09-10 10:07 - 00000000 ____D C:\Users\Bispinosa\Documents\CyberLink
2013-09-10 10:06 - 2013-09-10 10:07 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\PowerCinema
2013-09-10 10:06 - 2013-09-10 10:06 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\Cyberlink
2013-09-10 09:11 - 2013-09-12 21:45 - 00000000 ____D C:\ProgramData\clear.fi
2013-09-10 09:11 - 2013-09-10 09:10 - 00001082 _____ C:\Users\Public\Desktop\Kaspersky PURE 3.0.lnk
2013-09-10 09:10 - 2012-07-11 17:09 - 00064856 _____ (Kaspersky Lab) C:\Windows\system32\klfphc.dll
2013-09-10 09:09 - 2011-06-02 14:39 - 00084536 _____ (Infowatch) C:\Windows\system32\Drivers\CSCrySec.sys
2013-09-10 09:09 - 2011-06-02 14:39 - 00066616 _____ (Infowatch) C:\Windows\system32\Drivers\CSVirtualDiskDrv.sys
2013-09-10 09:08 - 2013-09-12 22:14 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-09-10 09:08 - 2013-09-10 09:08 - 00000000 ____D C:\Windows\ELAMBKUP
2013-09-10 09:08 - 2013-09-10 09:08 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-09-10 09:07 - 2013-09-10 09:30 - 00620128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2013-09-10 09:07 - 2013-09-10 09:30 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2013-09-10 08:51 - 2013-09-10 10:56 - 00696132 _____ C:\Windows\system32\perfh007.dat
2013-09-10 08:51 - 2013-09-10 10:56 - 00147428 _____ C:\Windows\system32\perfc007.dat
2013-09-10 08:51 - 2013-09-10 08:51 - 00295922 _____ C:\Windows\system32\perfi007.dat
2013-09-10 08:51 - 2013-09-10 08:51 - 00038104 _____ C:\Windows\system32\perfd007.dat
2013-09-10 08:51 - 2013-09-10 08:51 - 00002386 _____ C:\Users\Bispinosa\Desktop\Google Chrome.lnk
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Windows\SysWOW64\de
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Windows\SysWOW64\0407
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Windows\system32\de
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Windows\system32\0407
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2013-09-10 08:50 - 2013-09-12 22:01 - 00001136 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2651500920-1956776048-2349371349-1001UA.job
2013-09-10 08:50 - 2013-09-12 09:01 - 00001084 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2651500920-1956776048-2349371349-1001Core.job
2013-09-10 08:50 - 2013-09-10 08:56 - 00004114 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2651500920-1956776048-2349371349-1001UA
2013-09-10 08:50 - 2013-09-10 08:56 - 00003718 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2651500920-1956776048-2349371349-1001Core
2013-09-10 08:50 - 2013-09-10 08:51 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\Google
2013-09-10 08:37 - 2013-09-10 08:37 - 00000000 ____D C:\Windows\NAPP_Dism_Log
2013-09-10 08:28 - 2013-09-10 08:28 - 00000000 ____D C:\kleaner.tmp
2013-09-10 08:18 - 2013-09-12 15:24 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\Adobe
2013-09-10 08:13 - 2013-09-10 08:13 - 00001447 _____ C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-09-10 08:13 - 2013-09-10 08:13 - 00001413 _____ C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2013-09-10 08:13 - 2013-09-10 08:13 - 00000000 ___RD C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-10 08:13 - 2013-09-10 08:13 - 00000000 ___RD C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-10 08:13 - 2013-09-10 08:13 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\OEM
2013-09-10 08:13 - 2013-09-10 08:13 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\Macromedia
2013-09-10 08:13 - 2013-09-10 08:13 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\EgisTec IPS
2013-09-10 08:06 - 2013-09-10 11:46 - 00057952 _____ C:\Users\Bispinosa\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-10 08:06 - 2013-09-10 08:06 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\CyberLink
2013-09-10 08:06 - 2013-09-10 08:06 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\Acer
2013-09-10 08:06 - 2013-09-10 08:06 - 00000000 ____D C:\Program Files\Accessory Store
2013-09-10 08:06 - 2013-09-10 08:06 - 00000000 ____D C:\Program Files (x86)\OEM
2013-09-10 08:06 - 2012-06-03 00:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2013-09-10 08:06 - 2012-06-03 00:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2013-09-10 08:06 - 2012-06-03 00:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2013-09-10 08:06 - 2012-06-03 00:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2013-09-10 08:06 - 2012-06-03 00:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2013-09-10 08:06 - 2012-06-03 00:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2013-09-10 08:06 - 2012-06-03 00:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2013-09-10 08:05 - 2013-09-10 10:06 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\PowerCinema
2013-09-10 08:04 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2013-09-10 08:04 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2013-09-10 08:03 - 2013-09-10 08:03 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\VirtualStore
2013-09-10 08:02 - 2013-09-11 10:26 - 00000000 ____D C:\Users\Bispinosa
2013-09-10 08:02 - 2013-09-10 08:02 - 00000020 ___SH C:\Users\Bispinosa\ntuser.ini
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Vorlagen
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Startmenü
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Netzwerkumgebung
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Lokale Einstellungen
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Eigene Dateien
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Druckumgebung
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Documents\Eigene Musik
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Documents\Eigene Bilder
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\AppData\Local\Verlauf
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\AppData\Local\Anwendungsdaten
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Anwendungsdaten
2013-09-10 08:02 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-09-10 08:02 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Programme
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\ProgramData\Favoriten
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Dokumente und Einstellungen
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 ____D C:\Recovery
2013-09-09 23:47 - 2013-09-09 23:47 - 17773056 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 12268544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 10884096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 09702400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 03695416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-09-09 23:47 - 2013-09-09 23:47 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-09-09 23:47 - 2013-09-09 23:47 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-09 23:47 - 2013-09-09 23:47 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-09 23:47 - 2013-09-09 23:47 - 02303488 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 02136064 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 01797632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 01785344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 01492992 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-09-09 23:47 - 2013-09-09 23:47 - 01427456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-09-09 23:47 - 2013-09-09 23:47 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 01344000 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 01126912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 01102336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00818176 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00716800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00697344 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00603648 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00580608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-09-09 23:47 - 2013-09-09 23:47 - 00434176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00403248 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-09-09 23:47 - 2013-09-09 23:47 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00353584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00227840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieaksie.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakui.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakeng.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00123392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\admparse.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-09-09 23:47 - 2013-09-09 23:47 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ie4uinit.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00072704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-09-09 23:47 - 2013-09-09 23:47 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-09-09 23:46 - 2013-09-09 23:48 - 00003758 _____ C:\Windows\IE9_main.log
2013-09-09 23:41 - 2013-09-09 23:41 - 00003418 _____ C:\Windows\System32\Tasks\clear.fi
2013-09-09 23:41 - 2013-09-09 23:41 - 00003366 _____ C:\Windows\System32\Tasks\DMREngine
2013-09-09 23:41 - 2013-09-09 23:41 - 00003348 _____ C:\Windows\System32\Tasks\clear.fiAgent
2013-09-09 23:40 - 2013-09-09 23:40 - 00000000 ____D C:\Program Files (x86)\Cyberlink
2013-09-09 23:38 - 2013-09-10 10:06 - 00000000 ____D C:\ProgramData\CyberLink
2013-09-09 23:38 - 2013-09-09 23:42 - 00014802 _____ C:\ProgramData\ArcadeDeluxe5.log
2013-09-09 23:37 - 2013-09-09 23:37 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-09-09 23:24 - 2010-12-20 12:08 - 00008192 _____ C:\Windows\system32\Drivers\IntelMEFWVer.dll
2013-09-09 23:22 - 2013-09-09 23:22 - 00000000 ____D C:\Program Files (x86)\Etron Technology
2013-09-09 23:19 - 2010-11-05 23:45 - 00438808 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStor.sys
2013-09-09 23:18 - 2013-09-09 23:18 - 00000000 ____D C:\ProgramData\EgisTec
2013-09-09 23:17 - 2013-09-09 23:17 - 00000000 ____D C:\book
2013-09-09 23:15 - 2013-09-12 21:43 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-09 23:15 - 2011-06-30 08:03 - 00054784 _____ (Etron Technology Inc) C:\Windows\system32\Drivers\EtronHub3.sys
2013-09-09 23:10 - 2013-09-10 11:23 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2013-09-09 23:10 - 2013-09-09 23:10 - 00000000 ____D C:\Program Files\Realtek
2013-09-09 23:10 - 2010-11-04 21:38 - 02580824 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2013-09-09 23:10 - 2010-11-04 04:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2013-09-09 23:10 - 2010-07-23 02:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2013-09-09 23:10 - 2009-11-24 19:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2013-09-09 23:10 - 2009-11-24 19:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2013-09-09 23:10 - 2009-11-24 19:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2013-09-09 23:10 - 2009-11-24 19:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2013-09-09 23:09 - 2013-09-09 23:09 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-09-09 23:09 - 2010-11-08 17:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2013-09-09 23:09 - 2010-11-08 17:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2013-09-09 23:09 - 2010-11-08 17:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2013-09-09 23:09 - 2010-11-08 17:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2013-09-09 23:09 - 2010-11-08 17:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2013-09-09 23:09 - 2010-11-08 17:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2013-09-09 23:09 - 2010-11-04 21:37 - 01870168 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll
2013-09-09 23:09 - 2010-11-04 04:30 - 00082024 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInst64.dll
2013-09-09 23:09 - 2010-10-28 20:46 - 01251944 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2013-09-09 23:09 - 2010-09-27 19:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2013-09-09 23:09 - 2009-11-19 04:42 - 02197264 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2013-09-09 23:08 - 2013-09-10 11:06 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-09-09 23:08 - 2013-09-10 11:03 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-09-09 23:07 - 2013-09-10 11:05 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-09-09 23:07 - 2013-06-21 14:06 - 15920536 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-09-09 23:07 - 2013-06-21 14:06 - 12427240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-09-09 23:07 - 2013-06-21 14:06 - 02936208 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-09-09 23:07 - 2013-06-21 14:06 - 00021578 _____ C:\Windows\system32\nvinfo.pb
2013-09-09 23:07 - 2011-03-24 08:48 - 01614440 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco642090.dll
2013-09-09 23:07 - 2011-03-24 08:48 - 01359976 _____ (NVIDIA Corporation) C:\Windows\system32\nvgenco642040.dll
2013-09-09 23:07 - 2011-03-24 08:48 - 00067176 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2013-09-09 23:07 - 2011-03-24 08:48 - 00057960 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2013-09-09 23:07 - 2011-03-24 08:48 - 00011240 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvBridge.kmd
2013-09-09 23:07 - 2011-03-03 17:59 - 01359976 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco642040.dll
2013-09-09 23:06 - 2013-09-09 23:06 - 00035497 _____ C:\Windows\ATIDetect.txt
2013-09-09 23:03 - 2013-09-12 21:33 - 01304896 _____ C:\Windows\WindowsUpdate.log

==================== One Month Modified Files and Folders =======

2013-09-12 22:16 - 2013-09-12 22:16 - 01949660 _____ (Farbar) C:\Users\Bispinosa\Downloads\FRST64 (1).exe
2013-09-12 22:14 - 2013-09-10 09:08 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-09-12 22:14 - 2013-09-09 23:03 - 01304896 _____ C:\Windows\WindowsUpdate.log
2013-09-12 22:13 - 2013-09-12 22:13 - 00001178 _____ C:\Users\Bispinosa\Desktop\JRT.txt
2013-09-12 22:05 - 2013-09-11 22:40 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-12 22:04 - 2013-09-12 22:04 - 00000000 ____D C:\Windows\ERUNT
2013-09-12 22:03 - 2013-09-12 22:02 - 01029509 _____ (Thisisu) C:\Users\Bispinosa\Downloads\JRT.exe
2013-09-12 22:01 - 2013-09-10 08:50 - 00001136 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2651500920-1956776048-2349371349-1001UA.job
2013-09-12 21:59 - 2013-09-12 21:59 - 00002930 _____ C:\Windows\System32\Tasks\{C4E7E569-4021-4DB5-8233-FED66CFFD288}
2013-09-12 21:59 - 2009-07-14 06:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-12 21:59 - 2009-07-14 06:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-12 21:45 - 2013-09-10 09:11 - 00000000 ____D C:\ProgramData\clear.fi
2013-09-12 21:45 - 2009-07-14 06:51 - 00050224 _____ C:\Windows\setupact.log
2013-09-12 21:43 - 2013-09-09 23:15 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-12 21:43 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-12 21:41 - 2013-09-12 21:41 - 00000000 ____D C:\Windows\SysWOW64\%Report%
2013-09-12 21:41 - 2013-09-12 21:41 - 00000000 ____D C:\Windows\SysWOW64\%DataRoot%
2013-09-12 21:32 - 2013-09-12 20:15 - 00000000 ____D C:\AdwCleaner
2013-09-12 20:57 - 2010-11-21 05:47 - 00117588 _____ C:\Windows\PFRO.log
2013-09-12 20:15 - 2013-09-12 20:12 - 01037278 _____ C:\Users\Bispinosa\Desktop\adwcleaner.exe
2013-09-12 19:31 - 2013-09-12 19:31 - 00001117 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-12 19:31 - 2013-09-12 19:31 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\Malwarebytes
2013-09-12 19:31 - 2013-09-12 19:31 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-12 19:31 - 2013-09-12 19:30 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-12 19:29 - 2013-09-12 19:29 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Bispinosa\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-12 15:46 - 2013-09-10 10:18 - 00000000 ____D C:\Program Files (x86)\Dr. Hardware 2013
2013-09-12 15:33 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-09-12 15:24 - 2013-09-10 08:18 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\Adobe
2013-09-12 15:23 - 2013-09-12 15:23 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\Adobe
2013-09-12 15:16 - 2013-09-12 15:16 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2013-09-12 14:55 - 2013-09-12 14:49 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2013-09-12 14:50 - 2013-09-12 14:50 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\NVIDIA
2013-09-12 14:49 - 2013-09-12 14:49 - 09159560 _____ (BlueStack Systems Inc.) C:\Users\Bispinosa\Downloads\BlueStacks-SplitInstaller_native.exe
2013-09-12 13:22 - 2013-09-12 12:48 - 00000000 ____D C:\ComboFix
2013-09-12 13:19 - 2013-09-12 12:48 - 00000000 ____D C:\Qoobox
2013-09-12 13:18 - 2013-09-12 13:18 - 00040930 _____ C:\ComboFix.txt
2013-09-12 13:18 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2013-09-12 13:15 - 2013-09-12 12:48 - 00000000 ____D C:\Windows\erdnt
2013-09-12 13:05 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-09-12 12:58 - 2009-07-14 04:34 - 54263808 _____ C:\Windows\system32\config\SOFTWARE.bak
2013-09-12 12:58 - 2009-07-14 04:34 - 15990784 _____ C:\Windows\system32\config\SYSTEM.bak
2013-09-12 12:58 - 2009-07-14 04:34 - 00262144 _____ C:\Windows\system32\config\SECURITY.bak
2013-09-12 12:58 - 2009-07-14 04:34 - 00262144 _____ C:\Windows\system32\config\SAM.bak
2013-09-12 12:58 - 2009-07-14 04:34 - 00262144 _____ C:\Windows\system32\config\DEFAULT.bak
2013-09-12 12:47 - 2013-09-12 12:46 - 05124599 ____R (Swearware) C:\Users\Bispinosa\Downloads\ComboFix.exe
2013-09-12 09:01 - 2013-09-10 08:50 - 00001084 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2651500920-1956776048-2349371349-1001Core.job
2013-09-12 08:06 - 2013-09-11 22:40 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-12 08:06 - 2013-09-11 22:40 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-12 08:06 - 2011-07-11 12:28 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-12 07:23 - 2013-09-12 07:23 - 00003416 ____N C:\bootsqm.dat
2013-09-11 22:40 - 2013-09-11 22:40 - 00000000 ____D C:\Windows\system32\Macromed
2013-09-11 22:39 - 2013-09-11 22:39 - 00000000 _____ C:\Users\Bispinosa\Downloads\install_flash_player_ax.exe
2013-09-11 22:23 - 2013-09-11 22:23 - 00079808 _____ C:\Users\Bispinosa\Downloads\Avira_Ereignisse.txt
2013-09-11 20:35 - 2013-09-11 11:20 - 00122983 _____ C:\Users\Bispinosa\Desktop\FRST.Txt.txt
2013-09-11 20:21 - 2013-09-11 20:21 - 00000094 _____ C:\Users\Bispinosa\AppData\Roaming\WB.CFG
2013-09-11 20:21 - 2013-09-11 20:21 - 00000005 _____ C:\Users\Bispinosa\AppData\Roaming\WBPU-TTL.DAT
2013-09-11 19:19 - 2013-09-11 19:19 - 00000000 ____D C:\Program Files (x86)\7-Zip
2013-09-11 19:18 - 2013-09-11 19:17 - 01110476 _____ C:\Users\Bispinosa\Downloads\7z920.exe
2013-09-11 19:13 - 2013-09-11 19:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-11 11:27 - 2013-09-11 11:27 - 00262144 _____ C:\Windows\system32\config\elam
2013-09-11 11:20 - 2013-09-11 11:18 - 00032525 _____ C:\Users\Bispinosa\Desktop\Addition.Txt.txt
2013-09-11 11:16 - 2013-09-11 11:15 - 01949408 _____ (Farbar) C:\Users\Bispinosa\Downloads\FRST64.exe
2013-09-11 11:15 - 2013-09-11 11:15 - 00000480 _____ C:\Users\Bispinosa\Desktop\defogger_disable.log
2013-09-11 11:14 - 2013-09-11 11:14 - 00050477 _____ C:\Users\Bispinosa\Downloads\Defogger.exe
2013-09-11 10:52 - 2013-09-11 10:52 - 00010201 _____ C:\Users\Bispinosa\Desktop\Gmer.Txt.log
2013-09-11 10:30 - 2013-09-11 10:30 - 00000000 ____D C:\FRST
2013-09-11 10:26 - 2013-09-11 10:26 - 00000000 _____ C:\Users\Bispinosa\defogger_reenable
2013-09-11 10:26 - 2013-09-10 08:02 - 00000000 ____D C:\Users\Bispinosa
2013-09-11 10:20 - 2013-09-11 10:20 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat
2013-09-11 10:20 - 2013-09-11 10:20 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\WebPlayer
2013-09-11 10:19 - 2013-09-11 10:19 - 00000000 ____D C:\Windows\SysWOW64\searchplugins
2013-09-11 10:19 - 2013-09-11 10:19 - 00000000 ____D C:\Windows\SysWOW64\Extensions
2013-09-11 10:19 - 2013-09-11 10:19 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\avgchrome
2013-09-10 11:46 - 2013-09-10 08:06 - 00057952 _____ C:\Users\Bispinosa\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-10 11:42 - 2013-09-10 11:42 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_point64_01011.Wdf
2013-09-10 11:40 - 2009-07-14 06:45 - 00275192 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-10 11:36 - 2013-09-10 11:36 - 00003062 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe
2013-09-10 11:36 - 2013-09-10 11:36 - 00003060 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe
2013-09-10 11:36 - 2013-09-10 11:15 - 00284868 _____ C:\Windows\DPINST.LOG
2013-09-10 11:35 - 2013-09-10 11:35 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf
2013-09-10 11:35 - 2013-09-10 11:35 - 00000000 ____D C:\Program Files\Microsoft Mouse and Keyboard Center
2013-09-10 11:31 - 2013-09-10 11:31 - 00000000 ____H C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Coinstaller_Critical.Wdf
2013-09-10 11:31 - 2013-09-10 11:31 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2013-09-10 11:25 - 2013-09-10 11:25 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_Apfiltr_01007.Wdf
2013-09-10 11:25 - 2013-09-10 11:25 - 00000000 ____D C:\Program Files\Apoint
2013-09-10 11:24 - 2013-09-10 11:24 - 00000000 ____D C:\Program Files\DIFX
2013-09-10 11:23 - 2013-09-09 23:10 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2013-09-10 11:15 - 2013-09-10 11:01 - 00000000 ____D C:\Program Files (x86)\DriverTuner
2013-09-10 11:06 - 2013-09-09 23:08 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-09-10 11:05 - 2013-09-10 11:05 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\NVIDIA
2013-09-10 11:05 - 2013-09-09 23:07 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-09-10 11:03 - 2013-09-09 23:08 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-09-10 11:02 - 2013-09-10 11:02 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\DriverTuner
2013-09-10 11:01 - 2013-09-10 11:01 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-09-10 11:00 - 2013-09-10 11:00 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-09-10 10:56 - 2013-09-10 10:54 - 01588294 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-09-10 10:56 - 2013-09-10 08:51 - 00696132 _____ C:\Windows\system32\perfh007.dat
2013-09-10 10:56 - 2013-09-10 08:51 - 00147428 _____ C:\Windows\system32\perfc007.dat
2013-09-10 10:55 - 2009-07-14 07:13 - 01588294 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-10 10:44 - 2013-09-10 10:44 - 00000000 ____D C:\NVIDIA
2013-09-10 10:07 - 2013-09-10 10:07 - 00000000 ____D C:\Users\Bispinosa\Documents\CyberLink
2013-09-10 10:07 - 2013-09-10 10:06 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\PowerCinema
2013-09-10 10:06 - 2013-09-10 10:06 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\Cyberlink
2013-09-10 10:06 - 2013-09-10 08:05 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\PowerCinema
2013-09-10 10:06 - 2013-09-09 23:38 - 00000000 ____D C:\ProgramData\CyberLink
2013-09-10 09:30 - 2013-09-10 09:07 - 00620128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2013-09-10 09:30 - 2013-09-10 09:07 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2013-09-10 09:30 - 2012-10-18 14:50 - 00054368 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kltdi.sys
2013-09-10 09:30 - 2012-08-13 16:49 - 00178448 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kneps.sys
2013-09-10 09:10 - 2013-09-10 09:11 - 00001082 _____ C:\Users\Public\Desktop\Kaspersky PURE 3.0.lnk
2013-09-10 09:08 - 2013-09-10 09:08 - 00000000 ____D C:\Windows\ELAMBKUP
2013-09-10 09:08 - 2013-09-10 09:08 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-09-10 09:00 - 2011-07-11 11:55 - 00000000 ____D C:\Program Files\Common Files\mcafee
2013-09-10 08:56 - 2013-09-10 08:50 - 00004114 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2651500920-1956776048-2349371349-1001UA
2013-09-10 08:56 - 2013-09-10 08:50 - 00003718 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2651500920-1956776048-2349371349-1001Core
2013-09-10 08:54 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\winrm
2013-09-10 08:54 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\WCN
2013-09-10 08:54 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\sysprep
2013-09-10 08:54 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\slmgr
2013-09-10 08:54 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\system32\winrm
2013-09-10 08:54 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\system32\WCN
2013-09-10 08:54 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\system32\slmgr
2013-09-10 08:54 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\oobe
2013-09-10 08:54 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\MUI
2013-09-10 08:54 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\MUI
2013-09-10 08:54 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Dism
2013-09-10 08:54 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\servicing
2013-09-10 08:51 - 2013-09-10 08:51 - 00295922 _____ C:\Windows\system32\perfi007.dat
2013-09-10 08:51 - 2013-09-10 08:51 - 00038104 _____ C:\Windows\system32\perfd007.dat
2013-09-10 08:51 - 2013-09-10 08:51 - 00002386 _____ C:\Users\Bispinosa\Desktop\Google Chrome.lnk
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Windows\SysWOW64\de
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Windows\SysWOW64\0407
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Windows\system32\de
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Windows\system32\0407
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2013-09-10 08:51 - 2013-09-10 08:50 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\Google
2013-09-10 08:51 - 2010-11-21 09:17 - 00000000 ____D C:\Program Files\Windows Journal
2013-09-10 08:51 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts
2013-09-10 08:51 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts
2013-09-10 08:51 - 2009-07-14 07:37 - 00000000 ____D C:\Windows\DigitalLocker
2013-09-10 08:51 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2013-09-10 08:51 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Sidebar
2013-09-10 08:51 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2013-09-10 08:51 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-09-10 08:51 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\DVD Maker
2013-09-10 08:51 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar
2013-09-10 08:51 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2013-09-10 08:51 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-09-10 08:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Setup
2013-09-10 08:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\migwiz
2013-09-10 08:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2013-09-10 08:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\com
2013-09-10 08:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Setup
2013-09-10 08:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\oobe
2013-09-10 08:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\migwiz
2013-09-10 08:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\com
2013-09-10 08:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\IME
2013-09-10 08:51 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System
2013-09-10 08:37 - 2013-09-10 08:37 - 00000000 ____D C:\Windows\NAPP_Dism_Log
2013-09-10 08:28 - 2013-09-10 08:28 - 00000000 ____D C:\kleaner.tmp
2013-09-10 08:20 - 2009-07-14 07:38 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG
2013-09-10 08:20 - 2009-07-14 07:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2013-09-10 08:13 - 2013-09-10 08:13 - 00001447 _____ C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-09-10 08:13 - 2013-09-10 08:13 - 00001413 _____ C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2013-09-10 08:13 - 2013-09-10 08:13 - 00000000 ___RD C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-10 08:13 - 2013-09-10 08:13 - 00000000 ___RD C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-10 08:13 - 2013-09-10 08:13 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\OEM
2013-09-10 08:13 - 2013-09-10 08:13 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\Macromedia
2013-09-10 08:13 - 2013-09-10 08:13 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\EgisTec IPS
2013-09-10 08:13 - 2011-07-11 12:27 - 00018168 _____ C:\Windows\patch.log
2013-09-10 08:13 - 2011-07-11 12:26 - 00000000 ____D C:\ProgramData\oem
2013-09-10 08:13 - 2011-07-11 11:55 - 00000000 ____D C:\ProgramData\McAfee
2013-09-10 08:10 - 2011-07-11 11:58 - 00000000 ____D C:\OEM
2013-09-10 08:06 - 2013-09-10 08:06 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\CyberLink
2013-09-10 08:06 - 2013-09-10 08:06 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\Acer
2013-09-10 08:06 - 2013-09-10 08:06 - 00000000 ____D C:\Program Files\Accessory Store
2013-09-10 08:06 - 2013-09-10 08:06 - 00000000 ____D C:\Program Files (x86)\OEM
2013-09-10 08:03 - 2013-09-10 08:03 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\VirtualStore
2013-09-10 08:02 - 2013-09-10 08:02 - 00000020 ___SH C:\Users\Bispinosa\ntuser.ini
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Vorlagen
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Startmenü
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Netzwerkumgebung
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Lokale Einstellungen
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Eigene Dateien
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Druckumgebung
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Documents\Eigene Musik
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Documents\Eigene Bilder
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\AppData\Local\Verlauf
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\AppData\Local\Anwendungsdaten
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Anwendungsdaten
2013-09-10 08:02 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\restore
2013-09-10 08:02 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Programme
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\ProgramData\Favoriten
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Dokumente und Einstellungen
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 ____D C:\Recovery
2013-09-10 08:01 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Windows NT
2013-09-10 00:22 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sysprep
2013-09-10 00:22 - 2007-07-12 03:49 - 00000000 ____D C:\Windows\Panther
2013-09-10 00:21 - 2009-07-14 06:46 - 00004059 _____ C:\Windows\DtcInstall.log
2013-09-10 00:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help
2013-09-09 23:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-09-09 23:57 - 2011-07-11 11:57 - 00000000 ____D C:\Program Files (x86)\Acer
2013-09-09 23:51 - 2011-07-11 12:04 - 00000000 ____D C:\Program Files (x86)\Windows Live
2013-09-09 23:51 - 2011-07-11 12:00 - 00000582 _____ C:\Windows\DirectX.log
2013-09-09 23:48 - 2013-09-09 23:46 - 00003758 _____ C:\Windows\IE9_main.log
2013-09-09 23:47 - 2013-09-09 23:47 - 17773056 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 12268544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 10884096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 09702400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 03695416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-09-09 23:47 - 2013-09-09 23:47 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-09-09 23:47 - 2013-09-09 23:47 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-09 23:47 - 2013-09-09 23:47 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-09 23:47 - 2013-09-09 23:47 - 02303488 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 02136064 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 01797632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 01785344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 01492992 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-09-09 23:47 - 2013-09-09 23:47 - 01427456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-09-09 23:47 - 2013-09-09 23:47 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 01344000 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 01126912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 01102336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00818176 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00716800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00697344 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00603648 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00580608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-09-09 23:47 - 2013-09-09 23:47 - 00434176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00403248 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-09-09 23:47 - 2013-09-09 23:47 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00353584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00227840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieaksie.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakui.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakeng.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00123392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\admparse.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-09-09 23:47 - 2013-09-09 23:47 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ie4uinit.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00072704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-09-09 23:47 - 2013-09-09 23:47 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-09-09 23:42 - 2013-09-09 23:38 - 00014802 _____ C:\ProgramData\ArcadeDeluxe5.log
2013-09-09 23:42 - 2011-07-11 11:58 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-09-09 23:41 - 2013-09-09 23:41 - 00003418 _____ C:\Windows\System32\Tasks\clear.fi
2013-09-09 23:41 - 2013-09-09 23:41 - 00003366 _____ C:\Windows\System32\Tasks\DMREngine
2013-09-09 23:41 - 2013-09-09 23:41 - 00003348 _____ C:\Windows\System32\Tasks\clear.fiAgent
2013-09-09 23:40 - 2013-09-09 23:40 - 00000000 ____D C:\Program Files (x86)\Cyberlink
2013-09-09 23:38 - 2011-07-11 11:27 - 00000000 ____D C:\Program Files (x86)\Acer Games
2013-09-09 23:37 - 2013-09-09 23:37 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-09-09 23:23 - 2011-07-11 11:24 - 00000000 ____D C:\Program Files (x86)\Intel
2013-09-09 23:22 - 2013-09-09 23:22 - 00000000 ____D C:\Program Files (x86)\Etron Technology
2013-09-09 23:18 - 2013-09-09 23:18 - 00000000 ____D C:\ProgramData\EgisTec
2013-09-09 23:18 - 2011-02-12 05:43 - 00000000 ____D C:\Windows\DeployWinRE2
2013-09-09 23:17 - 2013-09-09 23:17 - 00000000 ____D C:\book
2013-09-09 23:17 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Recovery
2013-09-09 23:16 - 2011-07-11 12:20 - 00000000 ____D C:\ProgramData\EgisTec IPS
2013-09-09 23:11 - 2009-07-14 06:51 - 00000268 _____ C:\Windows\setuperr.log
2013-09-09 23:10 - 2013-09-09 23:10 - 00000000 ____D C:\Program Files\Realtek
2013-09-09 23:09 - 2013-09-09 23:09 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-09-09 23:06 - 2013-09-09 23:06 - 00035497 _____ C:\Windows\ATIDetect.txt
2013-09-09 23:04 - 2011-07-11 11:07 - 00003652 _____ C:\Windows\TSSysprep.log
2013-08-20 15:33 - 2013-09-10 11:05 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-08-20 15:32 - 2013-09-10 11:05 - 00029984 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2013-08-20 15:32 - 2013-09-10 11:05 - 00028448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll

Files to move or delete:
====================
C:\Users\Bispinosa\AppData\Local\Temp\Quarantine.exe
C:\Users\Bispinosa\AppData\Local\Temp\uninst1.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-10 00:20

==================== End Of Log ============================
         

--- --- ---

--- --- ---

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=ccc3d72724c30147bede9edbac3303b8
# engine=15109
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-09-13 03:48:11
# local_time=2013-09-13 05:48:11 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5122 16777214 0 9 290870 87958951 0 0
# compatibility_mode=5893 16776573 100 94 32515 130717141 0 0
# scanned=150598
# found=0
# cleaned=0
# scan_time=18028
         

 Results of screen317's Security Check version 0.99.73  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 10  
``````````````Antivirus/Firewall Check:`````````````` 
Kaspersky PURE 3.0   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 Google Chrome 29.0.1547.66  
````````Process Check: objlist.exe by Laurent````````  
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbamgui.exe  
 Malwarebytes' Anti-Malware mbamscheduler.exe   
 Symantec Norton Online Backup NOBuAgent.exe  
 Kaspersky Lab Kaspersky PURE 3.0 avp.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         

[CODE]Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-09-2013
Ran by Bispinosa (administrator) on PC on 13-09-2013 18:27:39
Running from C:\Users\Bispinosa\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() C:\OEM\USBDECTION\USBS3S4Detection.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Microsoft Corporation) C:\Windows\system32\LogonUI.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
(CyberLink) C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
() C:\Users\Bispinosa\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apntex.exe
(ALPS) C:\Program Files\Apoint\Apvfb.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe
() C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
(Google Inc.) C:\Users\Bispinosa\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Bispinosa\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Bispinosa\AppData\Local\Google\Chrome\Application\chrome.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Windows\system32\taskmgr.exe
(Farbar) C:\Users\Bispinosa\Downloads\FRST64 (1).exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\ComUpdatus.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13632216 2013-07-09] (Realtek Semiconductor)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-08-27] (NVIDIA Corporation)
HKLM\...\Run: [Apoint] - C:\Program Files\Apoint\Apoint.exe [208384 2009-10-19] (Alps Electric Co., Ltd.)
HKCU\...\Run: [AppsHat] - C:\Users\Bispinosa\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe [202752 2012-10-26] ()
HKLM-x32\...\Run: [SuiteTray] - C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [340848 2011-04-02] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisTecPMMUpdate] - C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [408432 2011-03-29] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisUpdate] - C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [202608 2011-03-29] (Egis Technology Inc.)
HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-02] (Symantec Corporation)
HKLM-x32\...\Run: [ArcadeMovieService] - C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe [177448 2011-05-13] (CyberLink Corp.)
HKLM-x32\...\Run: [Hotkey Utility] - C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe [627304 2011-08-11] ()
HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356968 2012-12-20] (Kaspersky Lab ZAO)
HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-07-29] ()
HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-07-29] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer.msn.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer.msn.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKLM-x32 - Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Chrome:
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.google.de/"
CHR DefaultSearchURL: (Babylon Search) - hxxp://search.babylon.com/?q={searchTerms}&babsrc=SP_ss&mntrId=8CE9C89CDC2D6E60&affID=124684&tsp=5002
CHR DefaultSuggestURL: (Babylon Search) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefi xUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Users\Bispinosa\AppData\Local\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Bispinosa\AppData\Local\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Bispinosa\AppData\Local\Google\Chrome\Application\29.0.1547.66\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Users\Bispinosa\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll ( Microsoft Corporation)
CHR Extension: (Kaspersky URL Advisor) - C:\Users\BISPIN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\13.0.2.558_0
CHR Extension: (Safe Money) - C:\Users\BISPIN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh\13.0.2.558_1
CHR Extension: (Chrome In-App Payments service) - C:\Users\BISPIN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Anti-Banner) - C:\Users\BISPIN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\13.0.2.558_1
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\urladvisor.crx
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\online_banking_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\content_blocker_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\virtkbd.crx
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\ab.crx
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356968 2012-12-20] (Kaspersky Lab ZAO)
R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [819040 2012-12-21] (Infowatch)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14997280 2013-08-27] (NVIDIA Corporation)
R2 USBS3S4Detection; C:\OEM\USBDECTION\USBS3S4Detection.exe [76320 2009-12-09] ()
S2 0053221378793026mcinstcleanup; C:\Windows\TEMP\005322~1.EXE C:\PROGRA~2\COMMON~1\McAfee\INSTAL~1\cleanup.ini -cleanup -nolog -service

==================== Drivers (Whitelisted) ====================

R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [84536 2011-06-02] (Infowatch)
R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66616 2011-06-02] (Infowatch)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-06-19] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [620128 2013-09-10] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29016 2012-09-03] (Kaspersky Lab)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29528 2012-09-03] (Kaspersky Lab)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-09-10] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-09-10] (Kaspersky Lab ZAO)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [100312 2013-07-02] (Intel Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-08-20] (NVIDIA Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [90208 2013-09-10] (Kaspersky Lab ZAO)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-13 18:26 - 2013-09-13 18:27 - 01949572 _____ (Farbar) C:\Users\Bispinosa\Downloads\FRST64 (1).exe
2013-09-13 17:58 - 2013-09-13 17:59 - 00891144 _____ C:\Users\Bispinosa\Downloads\SecurityCheck (1).exe
2013-09-13 12:34 - 2013-09-13 12:34 - 00891144 _____ C:\Users\Bispinosa\Downloads\SecurityCheck.exe
2013-09-13 10:35 - 2013-09-13 10:35 - 02347384 _____ (ESET) C:\Users\Bispinosa\Downloads\esetsmartinstaller_enu.exe
2013-09-13 08:12 - 2013-09-13 08:14 - 00290408 _____ C:\Windows\Minidump\091313-251052-01.dmp
2013-09-13 08:12 - 2013-09-13 08:12 - 00000000 ____D C:\Windows\Minidump
2013-09-13 08:11 - 2013-09-13 08:11 - 330160545 _____ C:\Windows\MEMORY.DMP
2013-09-13 04:12 - 2013-07-31 16:17 - 17833472 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-13 04:12 - 2013-07-31 15:42 - 10926080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-13 04:12 - 2013-07-31 15:29 - 02312704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-13 04:12 - 2013-07-31 15:20 - 01346560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-13 04:12 - 2013-07-31 15:19 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-13 04:12 - 2013-07-31 15:18 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-09-13 04:12 - 2013-07-31 15:17 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-09-13 04:12 - 2013-07-31 15:16 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-13 04:12 - 2013-07-31 15:14 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-09-13 04:12 - 2013-07-31 15:13 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-13 04:12 - 2013-07-31 15:13 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-09-13 04:12 - 2013-07-31 15:11 - 02147840 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-13 04:12 - 2013-07-31 15:11 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-13 04:12 - 2013-07-31 15:09 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-09-13 04:12 - 2013-07-31 15:08 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-13 04:12 - 2013-07-31 15:05 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-13 04:12 - 2013-07-31 12:30 - 12335104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-13 04:12 - 2013-07-31 12:05 - 09738752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-13 04:12 - 2013-07-31 12:00 - 01800704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-13 04:12 - 2013-07-31 11:53 - 01104896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-13 04:12 - 2013-07-31 11:52 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-09-13 04:12 - 2013-07-31 11:52 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-13 04:12 - 2013-07-31 11:51 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-09-13 04:12 - 2013-07-31 11:49 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-13 04:12 - 2013-07-31 11:48 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-13 04:12 - 2013-07-31 11:48 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-09-13 04:12 - 2013-07-31 11:48 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-09-13 04:12 - 2013-07-31 11:47 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-13 04:12 - 2013-07-31 11:46 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-13 04:12 - 2013-07-31 11:45 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-13 04:12 - 2013-07-31 11:45 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-09-13 04:12 - 2013-07-31 11:42 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-13 04:06 - 2013-09-13 04:11 - 00442646 _____ C:\Windows\msxml4-KB973688-enu.LOG
2013-09-13 03:57 - 2013-09-13 04:01 - 00442962 _____ C:\Windows\msxml4-KB954430-enu.LOG
2013-09-13 03:49 - 2010-02-23 10:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe
2013-09-13 03:30 - 2012-12-16 19:11 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-09-13 03:30 - 2012-12-16 16:45 - 00367616 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-09-13 03:30 - 2012-12-16 16:13 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-09-13 03:30 - 2012-12-16 16:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-09-13 03:28 - 2012-07-26 05:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2013-09-13 03:28 - 2012-07-26 05:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2013-09-13 03:28 - 2012-07-26 05:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2013-09-13 03:28 - 2012-07-26 05:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2013-09-13 03:28 - 2012-07-26 05:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2013-09-13 03:28 - 2012-07-26 04:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2013-09-13 03:28 - 2012-07-26 04:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2013-09-13 03:28 - 2012-06-02 16:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2013-09-13 03:07 - 2012-03-01 08:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2013-09-13 03:07 - 2012-03-01 08:33 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-09-13 03:07 - 2012-03-01 08:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2013-09-13 03:07 - 2012-03-01 07:33 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-09-13 03:07 - 2012-03-01 07:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2013-09-13 02:59 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-09-13 02:59 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-09-13 02:59 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-09-13 02:59 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-09-13 02:59 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-09-13 02:59 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-09-13 02:59 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-09-13 02:59 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-09-13 02:59 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-09-13 02:59 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-09-13 02:59 - 2013-04-12 16:45 - 01656680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2013-09-13 02:59 - 2013-04-10 08:01 - 00983400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-09-13 02:59 - 2013-04-10 08:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2013-09-13 02:59 - 2013-03-19 07:53 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2013-09-13 02:59 - 2013-03-19 07:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2013-09-13 02:59 - 2013-02-27 08:02 - 00111448 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2013-09-13 02:59 - 2013-02-27 07:48 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-09-13 02:59 - 2013-02-27 07:47 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2013-09-13 02:59 - 2013-02-27 06:49 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-09-13 02:59 - 2013-02-15 08:08 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2013-09-13 02:59 - 2013-02-15 08:06 - 03717632 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2013-09-13 02:59 - 2013-02-15 08:02 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2013-09-13 02:59 - 2013-02-15 06:37 - 03217408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2013-09-13 02:59 - 2013-02-15 06:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2013-09-13 02:59 - 2013-02-15 05:25 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2013-09-13 02:59 - 2012-10-09 20:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2013-09-13 02:59 - 2012-10-09 20:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2013-09-13 02:59 - 2012-10-09 19:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2013-09-13 02:59 - 2012-10-09 19:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2013-09-13 02:59 - 2012-01-04 12:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2013-09-13 02:59 - 2012-01-04 10:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2013-09-13 02:59 - 2011-12-30 08:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2013-09-13 02:59 - 2011-12-30 07:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2013-09-13 02:59 - 2011-11-17 08:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2013-09-13 02:59 - 2011-11-17 07:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2013-09-13 02:59 - 2011-10-26 07:25 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2013-09-13 02:59 - 2011-10-26 07:25 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2013-09-13 02:59 - 2011-10-26 06:32 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2013-09-13 02:59 - 2011-10-26 06:32 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2013-09-13 02:59 - 2011-07-09 04:46 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2013-09-13 02:59 - 2011-06-16 07:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2013-09-13 02:59 - 2011-06-16 06:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
2013-09-13 02:59 - 2011-06-15 12:02 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2013-09-13 02:59 - 2011-06-15 12:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2013-09-13 02:59 - 2011-06-15 12:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2013-09-13 02:59 - 2011-06-15 12:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
2013-09-13 02:59 - 2011-06-15 10:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll
2013-09-13 02:59 - 2011-06-15 10:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll
2013-09-13 02:59 - 2011-06-15 10:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll
2013-09-13 02:59 - 2011-06-15 10:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll
2013-09-13 02:59 - 2011-06-15 10:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll
2013-09-13 02:59 - 2011-05-04 07:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2013-09-13 02:59 - 2011-05-04 07:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2013-09-13 02:59 - 2011-05-04 07:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2013-09-13 02:59 - 2011-05-04 07:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2013-09-13 02:59 - 2011-05-04 07:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2013-09-13 02:59 - 2011-05-04 07:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2013-09-13 02:59 - 2011-05-04 07:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2013-09-13 02:59 - 2011-05-04 07:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2013-09-13 02:59 - 2011-05-04 07:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2013-09-13 02:59 - 2011-05-04 06:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2013-09-13 02:59 - 2011-05-04 06:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2013-09-13 02:59 - 2011-05-04 06:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2013-09-13 02:59 - 2011-05-04 06:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2013-09-13 02:59 - 2011-05-04 06:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2013-09-13 02:59 - 2011-05-04 06:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2013-09-13 02:59 - 2011-05-04 06:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2013-09-13 02:59 - 2011-05-04 06:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2013-09-13 02:59 - 2011-05-04 06:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2013-09-13 02:59 - 2011-04-27 04:40 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2013-09-13 02:59 - 2011-04-27 04:39 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2013-09-13 02:59 - 2011-04-09 08:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2013-09-13 02:59 - 2011-04-09 07:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2013-09-13 02:59 - 2011-02-25 08:19 - 02871808 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2013-09-13 02:59 - 2011-02-25 07:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2013-09-13 02:59 - 2011-02-03 13:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2013-09-13 02:58 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-13 02:58 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-13 02:58 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-13 02:58 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-13 02:58 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-09-13 02:58 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-09-13 02:58 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-09-13 02:58 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-13 02:58 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-09-13 02:58 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-13 02:58 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-13 02:58 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-13 02:58 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-09-13 02:58 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-13 02:58 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-13 02:58 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-13 02:58 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-13 02:58 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-13 02:58 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-13 02:58 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-13 02:58 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-13 02:58 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-13 02:58 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-13 02:58 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-13 02:58 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-13 02:58 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-13 02:58 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-13 02:58 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-13 02:58 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-09-13 02:58 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-09-13 02:58 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-09-13 02:58 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-09-13 02:58 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-09-13 02:58 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-09-13 02:58 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-09-13 02:58 - 2013-02-12 06:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2013-09-13 02:58 - 2012-12-07 15:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2013-09-13 02:58 - 2012-12-07 15:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2013-09-13 02:58 - 2012-12-07 14:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2013-09-13 02:58 - 2012-12-07 14:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2013-09-13 02:58 - 2012-12-07 13:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2013-09-13 02:58 - 2012-12-07 13:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2013-09-13 02:58 - 2012-12-07 13:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2013-09-13 02:58 - 2012-12-07 13:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2013-09-13 02:58 - 2012-12-07 13:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2013-09-13 02:58 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2013-09-13 02:58 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2013-09-13 02:58 - 2012-12-07 13:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2013-09-13 02:58 - 2012-12-07 13:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2013-09-13 02:58 - 2012-12-07 13:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2013-09-13 02:58 - 2012-12-07 13:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2013-09-13 02:58 - 2012-12-07 13:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2013-09-13 02:58 - 2012-12-07 13:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2013-09-13 02:58 - 2012-12-07 13:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2013-09-13 02:58 - 2012-12-07 12:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2013-09-13 02:58 - 2012-12-07 12:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2013-09-13 02:58 - 2012-12-07 12:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2013-09-13 02:58 - 2012-12-07 12:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2013-09-13 02:58 - 2012-12-07 12:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2013-09-13 02:58 - 2012-12-07 12:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2013-09-13 02:58 - 2012-12-07 12:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2013-09-13 02:58 - 2012-12-07 12:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2013-09-13 02:58 - 2012-12-07 12:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2013-09-13 02:58 - 2012-12-07 12:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2013-09-13 02:58 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2013-09-13 02:58 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2013-09-13 02:58 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2013-09-13 02:58 - 2012-12-07 12:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2013-09-13 02:58 - 2012-11-22 07:44 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2013-09-13 02:58 - 2012-11-22 06:45 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2013-09-13 02:58 - 2012-11-20 07:48 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-09-13 02:58 - 2012-11-20 06:51 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-09-13 02:58 - 2012-11-02 07:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2013-09-13 02:58 - 2012-11-02 07:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2013-09-13 02:58 - 2012-11-01 07:43 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2013-09-13 02:58 - 2012-11-01 07:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2013-09-13 02:58 - 2012-11-01 06:47 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2013-09-13 02:58 - 2012-11-01 06:47 - 01236992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2013-09-13 02:58 - 2012-10-03 19:44 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2013-09-13 02:58 - 2012-10-03 19:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2013-09-13 02:58 - 2012-10-03 19:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2013-09-13 02:58 - 2012-10-03 19:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2013-09-13 02:58 - 2012-10-03 19:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2013-09-13 02:58 - 2012-10-03 19:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2013-09-13 02:58 - 2012-10-03 18:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2013-09-13 02:58 - 2012-10-03 18:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2013-09-13 02:58 - 2012-10-03 18:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2013-09-13 02:58 - 2012-10-03 18:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2013-09-13 02:58 - 2012-08-22 20:12 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2013-09-13 02:58 - 2012-08-21 23:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2013-09-13 02:58 - 2012-08-11 02:56 - 00715776 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2013-09-13 02:58 - 2012-08-11 01:56 - 00542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2013-09-13 02:58 - 2012-07-04 22:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2013-09-13 02:58 - 2012-06-02 07:50 - 00458704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-09-13 02:58 - 2012-06-02 07:48 - 00151920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-09-13 02:58 - 2012-06-02 07:48 - 00095600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-09-13 02:58 - 2012-06-02 07:45 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-09-13 02:58 - 2012-06-02 06:40 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-09-13 02:58 - 2012-06-02 06:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-09-13 02:58 - 2012-06-02 06:34 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-09-13 02:58 - 2012-05-01 07:40 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2013-09-13 02:58 - 2012-04-28 05:55 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2013-09-13 02:58 - 2012-04-26 07:41 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2013-09-13 02:58 - 2012-04-26 07:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2013-09-13 02:58 - 2012-04-26 07:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2013-09-13 02:58 - 2012-04-07 14:31 - 03216384 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2013-09-13 02:58 - 2012-04-07 13:26 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2013-09-13 02:58 - 2012-03-17 09:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2013-09-13 02:58 - 2012-01-13 09:12 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2013-09-13 02:58 - 2011-12-28 05:59 - 00498688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-09-13 02:58 - 2011-11-17 08:35 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-09-13 02:58 - 2011-11-17 08:35 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-09-13 02:58 - 2011-11-17 08:35 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-09-13 02:58 - 2011-11-17 08:35 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-09-13 02:58 - 2011-11-17 08:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-09-13 02:58 - 2011-08-17 07:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2013-09-13 02:58 - 2011-08-17 07:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2013-09-13 02:58 - 2011-08-17 06:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2013-09-13 02:58 - 2011-08-17 06:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
2013-09-13 02:58 - 2011-04-29 05:06 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2013-09-13 02:58 - 2011-04-29 05:05 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2013-09-13 02:58 - 2011-04-29 05:05 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2013-09-13 02:58 - 2011-04-23 00:15 - 00027520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2013-09-13 02:58 - 2010-06-26 05:55 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2013-09-13 02:58 - 2010-06-26 05:24 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2013-09-13 02:57 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-13 02:57 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-13 02:57 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-13 02:57 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-13 02:57 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-09-13 02:57 - 2013-05-13 07:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2013-09-13 02:57 - 2013-05-13 05:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2013-09-13 02:57 - 2013-05-13 05:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-09-13 02:57 - 2013-05-13 05:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-09-13 02:57 - 2013-05-10 07:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2013-09-13 02:57 - 2013-05-10 05:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-09-13 02:57 - 2013-04-26 07:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2013-09-13 02:57 - 2013-04-26 06:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-09-13 02:57 - 2013-04-10 07:45 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-09-13 02:57 - 2013-04-10 07:02 - 01077760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-09-13 02:57 - 2013-01-24 08:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2013-09-13 02:57 - 2013-01-03 08:00 - 00288088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2013-09-13 02:57 - 2012-11-30 01:17 - 00420064 _____ C:\Windows\SysWOW64\locale.nls
2013-09-13 02:57 - 2012-11-30 01:15 - 00420064 _____ C:\Windows\system32\locale.nls
2013-09-13 02:57 - 2012-11-23 05:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2013-09-13 02:57 - 2012-09-26 00:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2013-09-13 02:57 - 2012-09-26 00:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2013-09-13 02:57 - 2012-08-22 20:12 - 00376688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2013-09-13 02:57 - 2012-07-05 00:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2013-09-13 02:57 - 2012-07-05 00:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2013-09-13 02:57 - 2012-07-05 00:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2013-09-13 02:57 - 2012-07-04 23:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2013-09-13 02:57 - 2012-07-04 23:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2013-09-13 02:57 - 2012-06-06 08:02 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2013-09-13 02:57 - 2012-06-06 07:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2013-09-13 02:57 - 2012-05-14 07:26 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2013-09-13 02:57 - 2012-05-05 10:36 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2013-09-13 02:57 - 2012-05-05 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2013-09-13 02:57 - 2012-02-11 08:36 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2013-09-13 02:57 - 2012-02-11 08:36 - 00067072 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2013-09-13 02:57 - 2011-12-16 10:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2013-09-13 02:57 - 2011-12-16 09:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2013-09-13 02:57 - 2011-11-19 16:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2013-09-13 02:57 - 2011-11-19 16:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2013-09-13 02:57 - 2011-10-15 08:31 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2013-09-13 02:57 - 2011-10-15 07:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2013-09-13 02:57 - 2011-08-27 07:37 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2013-09-13 02:57 - 2011-08-27 07:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2013-09-13 02:57 - 2011-08-27 06:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2013-09-13 02:57 - 2011-08-27 06:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2013-09-13 02:57 - 2011-05-24 13:42 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2013-09-13 02:57 - 2011-05-24 12:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
2013-09-13 02:57 - 2011-05-24 12:40 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
2013-09-13 02:57 - 2011-05-24 12:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
2013-09-13 02:57 - 2011-05-24 12:37 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2013-09-13 02:57 - 2011-05-03 07:29 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2013-09-13 02:57 - 2011-05-03 06:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2013-09-13 02:57 - 2011-02-18 12:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2013-09-13 02:57 - 2011-02-18 07:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
2013-09-12 22:13 - 2013-09-12 22:13 - 00001178 _____ C:\Users\Bispinosa\Desktop\JRT.txt
2013-09-12 22:04 - 2013-09-12 22:04 - 00000000 ____D C:\Windows\ERUNT
2013-09-12 22:02 - 2013-09-12 22:03 - 01029509 _____ (Thisisu) C:\Users\Bispinosa\Downloads\JRT.exe
2013-09-12 21:59 - 2013-09-12 21:59 - 00002930 _____ C:\Windows\System32\Tasks\{C4E7E569-4021-4DB5-8233-FED66CFFD288}
2013-09-12 21:41 - 2013-09-12 21:41 - 00000000 ____D C:\Windows\SysWOW64\%Report%
2013-09-12 21:41 - 2013-09-12 21:41 - 00000000 ____D C:\Windows\SysWOW64\%DataRoot%
2013-09-12 20:15 - 2013-09-12 21:32 - 00000000 ____D C:\AdwCleaner
2013-09-12 20:12 - 2013-09-12 20:15 - 01037278 _____ C:\Users\Bispinosa\Desktop\adwcleaner.exe
2013-09-12 19:31 - 2013-09-12 19:31 - 00001117 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-12 19:31 - 2013-09-12 19:31 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\Malwarebytes
2013-09-12 19:31 - 2013-09-12 19:31 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-12 19:30 - 2013-09-12 19:31 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-12 19:30 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-09-12 19:29 - 2013-09-12 19:29 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Bispinosa\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-12 15:23 - 2013-09-12 15:23 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\Adobe
2013-09-12 15:16 - 2013-09-12 15:16 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2013-09-12 14:50 - 2013-09-12 14:50 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\NVIDIA
2013-09-12 14:49 - 2013-09-12 14:55 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2013-09-12 14:49 - 2013-09-12 14:49 - 09159560 _____ (BlueStack Systems Inc.) C:\Users\Bispinosa\Downloads\BlueStacks-SplitInstaller_native.exe
2013-09-12 13:18 - 2013-09-12 13:18 - 00040930 _____ C:\ComboFix.txt
2013-09-12 12:48 - 2013-09-12 13:22 - 00000000 ____D C:\ComboFix
2013-09-12 12:48 - 2013-09-12 13:19 - 00000000 ____D C:\Qoobox
2013-09-12 12:48 - 2013-09-12 13:15 - 00000000 ____D C:\Windows\erdnt
2013-09-12 12:48 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-09-12 12:48 - 2011-06-26 08:45 - 00256000 _____ C:\Users\Bispinosa\Desktop\PEV.exe
2013-09-12 12:48 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-09-12 12:48 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-09-12 12:48 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-09-12 12:48 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-09-12 12:48 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-09-12 12:48 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-09-12 12:48 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-09-12 12:46 - 2013-09-12 12:47 - 05124599 ____R (Swearware) C:\Users\Bispinosa\Downloads\ComboFix.exe
2013-09-12 07:23 - 2013-09-12 07:23 - 00003416 ____N C:\bootsqm.dat
2013-09-11 22:40 - 2013-09-13 18:05 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-11 22:40 - 2013-09-13 10:06 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-11 22:40 - 2013-09-13 10:05 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-11 22:40 - 2013-09-11 22:40 - 00000000 ____D C:\Windows\system32\Macromed
2013-09-11 22:39 - 2013-09-11 22:39 - 00000000 _____ C:\Users\Bispinosa\Downloads\install_flash_player_ax.exe
2013-09-11 22:23 - 2013-09-11 22:23 - 00079808 _____ C:\Users\Bispinosa\Downloads\Avira_Ereignisse.txt
2013-09-11 20:21 - 2013-09-11 20:21 - 00000094 _____ C:\Users\Bispinosa\AppData\Roaming\WB.CFG
2013-09-11 20:21 - 2013-09-11 20:21 - 00000005 _____ C:\Users\Bispinosa\AppData\Roaming\WBPU-TTL.DAT
2013-09-11 19:19 - 2013-09-11 19:19 - 00000000 ____D C:\Program Files (x86)\7-Zip
2013-09-11 19:17 - 2013-09-11 19:18 - 01110476 _____ C:\Users\Bispinosa\Downloads\7z920.exe
2013-09-11 19:13 - 2013-09-11 19:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-11 11:27 - 2013-09-11 11:27 - 00262144 _____ C:\Windows\system32\config\elam
2013-09-11 11:20 - 2013-09-11 20:35 - 00122983 _____ C:\Users\Bispinosa\Desktop\FRST.Txt.txt
2013-09-11 11:18 - 2013-09-11 11:20 - 00032525 _____ C:\Users\Bispinosa\Desktop\Addition.Txt.txt
2013-09-11 11:15 - 2013-09-11 11:16 - 01949408 _____ (Farbar) C:\Users\Bispinosa\Downloads\FRST64.exe
2013-09-11 11:15 - 2013-09-11 11:15 - 00000480 _____ C:\Users\Bispinosa\Desktop\defogger_disable.log
2013-09-11 11:14 - 2013-09-11 11:14 - 00050477 _____ C:\Users\Bispinosa\Downloads\Defogger.exe
2013-09-11 10:52 - 2013-09-11 10:52 - 00010201 _____ C:\Users\Bispinosa\Desktop\Gmer.Txt.log
2013-09-11 10:30 - 2013-09-11 10:30 - 00000000 ____D C:\FRST
2013-09-11 10:26 - 2013-09-11 10:26 - 00000000 _____ C:\Users\Bispinosa\defogger_reenable
2013-09-11 10:24 - 2012-02-17 08:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2013-09-11 10:24 - 2012-02-17 07:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2013-09-11 10:24 - 2012-02-17 06:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2013-09-11 10:20 - 2013-09-11 10:20 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat
2013-09-11 10:20 - 2013-09-11 10:20 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\WebPlayer
2013-09-11 10:19 - 2013-09-11 10:19 - 00000000 ____D C:\Windows\SysWOW64\searchplugins
2013-09-11 10:19 - 2013-09-11 10:19 - 00000000 ____D C:\Windows\SysWOW64\Extensions
2013-09-11 10:19 - 2013-09-11 10:19 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\avgchrome
2013-09-10 11:42 - 2013-09-10 11:42 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_point64_01011.Wdf
2013-09-10 11:36 - 2013-09-10 11:36 - 00003062 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe
2013-09-10 11:36 - 2013-09-10 11:36 - 00003060 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe
2013-09-10 11:35 - 2013-09-10 11:35 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf
2013-09-10 11:35 - 2013-09-10 11:35 - 00000000 ____D C:\Program Files\Microsoft Mouse and Keyboard Center
2013-09-10 11:31 - 2013-09-10 11:31 - 00000000 ____H C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Coinstaller_Critical.Wdf
2013-09-10 11:31 - 2013-09-10 11:31 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2013-09-10 11:30 - 2012-07-26 06:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-09-10 11:30 - 2012-07-26 06:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2013-09-10 11:30 - 2012-07-26 04:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2013-09-10 11:30 - 2012-06-02 16:35 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2013-09-10 11:25 - 2013-09-10 11:25 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_Apfiltr_01007.Wdf
2013-09-10 11:25 - 2013-09-10 11:25 - 00000000 ____D C:\Program Files\Apoint
2013-09-10 11:24 - 2013-09-10 11:24 - 00000000 ____D C:\Program Files\DIFX
2013-09-10 11:15 - 2013-09-10 11:36 - 00284868 _____ C:\Windows\DPINST.LOG
2013-09-10 11:05 - 2013-09-10 11:05 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\NVIDIA
2013-09-10 11:05 - 2013-08-20 15:33 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-09-10 11:05 - 2013-08-20 15:32 - 00029984 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2013-09-10 11:05 - 2013-08-20 15:32 - 00028448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-09-10 11:02 - 2013-09-10 11:02 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\DriverTuner
2013-09-10 11:01 - 2013-09-10 11:15 - 00000000 ____D C:\Program Files (x86)\DriverTuner
2013-09-10 11:01 - 2013-09-10 11:01 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-09-10 11:00 - 2013-09-10 11:00 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-09-10 10:59 - 2013-06-20 06:17 - 03253909 _____ C:\Windows\system32\nvcoproc.bin
2013-09-10 10:54 - 2013-09-13 04:32 - 01589618 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-09-10 10:46 - 2013-06-21 14:06 - 27781920 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 21102368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 15144928 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 13411896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 11235104 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-09-10 10:46 - 2013-06-21 14:06 - 09239344 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 07687592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 07641832 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 06324360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 02953504 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 02777888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 02597856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 02363680 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 02002720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 01832224 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432049.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432049.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 01059560 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 00925648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 00572704 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 00570656 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 00467232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 00465184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 00266448 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 00218592 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 00214448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-09-10 10:46 - 2013-06-21 14:06 - 00181488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-09-10 10:46 - 2013-02-25 07:27 - 00194848 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2013-09-10 10:46 - 2013-02-25 07:27 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2013-09-10 10:46 - 2013-01-29 10:35 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2013-09-10 10:44 - 2013-09-10 10:44 - 00000000 ____D C:\NVIDIA
2013-09-10 10:18 - 2013-09-12 15:46 - 00000000 ____D C:\Program Files (x86)\Dr. Hardware 2013
2013-09-10 10:18 - 2013-07-21 18:41 - 00013760 _____ C:\Windows\system32\Drivers\DRHMSR64.sys
2013-09-10 10:18 - 2011-11-03 19:05 - 00021984 _____ (Licensed for Gebhard Software) C:\Windows\system32\Drivers\DRHARD64.sys
2013-09-10 10:07 - 2013-09-10 10:07 - 00000000 ____D C:\Users\Bispinosa\Documents\CyberLink
2013-09-10 10:06 - 2013-09-10 10:07 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\PowerCinema
2013-09-10 10:06 - 2013-09-10 10:06 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\Cyberlink
2013-09-10 09:11 - 2013-09-13 08:27 - 00000000 ____D C:\ProgramData\clear.fi
2013-09-10 09:11 - 2013-09-10 09:10 - 00001082 _____ C:\Users\Public\Desktop\Kaspersky PURE 3.0.lnk
2013-09-10 09:10 - 2012-07-11 17:09 - 00064856 _____ (Kaspersky Lab) C:\Windows\system32\klfphc.dll
2013-09-10 09:09 - 2011-06-02 14:39 - 00084536 _____ (Infowatch) C:\Windows\system32\Drivers\CSCrySec.sys
2013-09-10 09:09 - 2011-06-02 14:39 - 00066616 _____ (Infowatch) C:\Windows\system32\Drivers\CSVirtualDiskDrv.sys
2013-09-10 09:08 - 2013-09-13 18:15 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-09-10 09:08 - 2013-09-10 09:08 - 00000000 ____D C:\Windows\ELAMBKUP
2013-09-10 09:08 - 2013-09-10 09:08 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-09-10 09:07 - 2013-09-10 09:30 - 00620128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2013-09-10 09:07 - 2013-09-10 09:30 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2013-09-10 08:51 - 2013-09-13 09:15 - 00696832 _____ C:\Windows\system32\perfh007.dat
2013-09-10 08:51 - 2013-09-13 09:15 - 00148128 _____ C:\Windows\system32\perfc007.dat
2013-09-10 08:51 - 2013-09-10 08:51 - 00295922 _____ C:\Windows\system32\perfi007.dat
2013-09-10 08:51 - 2013-09-10 08:51 - 00038104 _____ C:\Windows\system32\perfd007.dat
2013-09-10 08:51 - 2013-09-10 08:51 - 00002386 _____ C:\Users\Bispinosa\Desktop\Google Chrome.lnk
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Windows\SysWOW64\de
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Windows\SysWOW64\0407
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Windows\system32\de
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Windows\system32\0407
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2013-09-10 08:50 - 2013-09-13 18:01 - 00001136 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2651500920-1956776048-2349371349-1001UA.job
2013-09-10 08:50 - 2013-09-13 09:12 - 00001084 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2651500920-1956776048-2349371349-1001Core.job
2013-09-10 08:50 - 2013-09-10 08:56 - 00004114 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2651500920-1956776048-2349371349-1001UA
2013-09-10 08:50 - 2013-09-10 08:56 - 00003718 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2651500920-1956776048-2349371349-1001Core
2013-09-10 08:50 - 2013-09-10 08:51 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\Google
2013-09-10 08:37 - 2013-09-10 08:37 - 00000000 ____D C:\Windows\NAPP_Dism_Log
2013-09-10 08:28 - 2013-09-10 08:28 - 00000000 ____D C:\kleaner.tmp
2013-09-10 08:18 - 2013-09-12 15:24 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\Adobe
2013-09-10 08:13 - 2013-09-13 08:49 - 00000000 ___RD C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-10 08:13 - 2013-09-13 08:49 - 00000000 ___RD C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-10 08:13 - 2013-09-10 08:13 - 00001447 _____ C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-09-10 08:13 - 2013-09-10 08:13 - 00001413 _____ C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2013-09-10 08:13 - 2013-09-10 08:13 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\OEM
2013-09-10 08:13 - 2013-09-10 08:13 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\Macromedia
2013-09-10 08:13 - 2013-09-10 08:13 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\EgisTec IPS
2013-09-10 08:06 - 2013-09-10 11:46 - 00057952 _____ C:\Users\Bispinosa\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-10 08:06 - 2013-09-10 08:06 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\CyberLink
2013-09-10 08:06 - 2013-09-10 08:06 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\Acer
2013-09-10 08:06 - 2013-09-10 08:06 - 00000000 ____D C:\Program Files\Accessory Store
2013-09-10 08:06 - 2013-09-10 08:06 - 00000000 ____D C:\Program Files (x86)\OEM
2013-09-10 08:06 - 2012-06-03 00:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2013-09-10 08:06 - 2012-06-03 00:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2013-09-10 08:06 - 2012-06-03 00:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2013-09-10 08:06 - 2012-06-03 00:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2013-09-10 08:06 - 2012-06-03 00:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2013-09-10 08:06 - 2012-06-03 00:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2013-09-10 08:06 - 2012-06-03 00:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2013-09-10 08:05 - 2013-09-10 10:06 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\PowerCinema
2013-09-10 08:04 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2013-09-10 08:04 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2013-09-10 08:03 - 2013-09-10 08:03 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\VirtualStore
2013-09-10 08:02 - 2013-09-11 10:26 - 00000000 ____D C:\Users\Bispinosa
2013-09-10 08:02 - 2013-09-10 08:02 - 00000020 ___SH C:\Users\Bispinosa\ntuser.ini
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Vorlagen
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Startmenü
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Netzwerkumgebung
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Lokale Einstellungen
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Eigene Dateien
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Druckumgebung
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Documents\Eigene Musik
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Documents\Eigene Bilder
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\AppData\Local\Verlauf
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\AppData\Local\Anwendungsdaten
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Anwendungsdaten
2013-09-10 08:02 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-09-10 08:02 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Programme
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\ProgramData\Favoriten
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Dokumente und Einstellungen
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 ____D C:\Recovery
2013-09-09 23:47 - 2013-09-09 23:47 - 03695416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-09-09 23:47 - 2013-09-09 23:47 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-09-09 23:47 - 2013-09-09 23:47 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-09-09 23:47 - 2013-09-09 23:47 - 00434176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00403248 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-09-09 23:47 - 2013-09-09 23:47 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00353584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00227840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieaksie.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakui.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakeng.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00123392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\admparse.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-09-09 23:47 - 2013-09-09 23:47 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ie4uinit.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-09-09 23:47 - 2013-09-09 23:47 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-09-09 23:46 - 2013-09-09 23:48 - 00003758 _____ C:\Windows\IE9_main.log
2013-09-09 23:41 - 2013-09-09 23:41 - 00003418 _____ C:\Windows\System32\Tasks\clear.fi
2013-09-09 23:41 - 2013-09-09 23:41 - 00003366 _____ C:\Windows\System32\Tasks\DMREngine
2013-09-09 23:41 - 2013-09-09 23:41 - 00003348 _____ C:\Windows\System32\Tasks\clear.fiAgent
2013-09-09 23:40 - 2013-09-09 23:40 - 00000000 ____D C:\Program Files (x86)\Cyberlink
2013-09-09 23:38 - 2013-09-10 10:06 - 00000000 ____D C:\ProgramData\CyberLink
2013-09-09 23:38 - 2013-09-09 23:42 - 00014802 _____ C:\ProgramData\ArcadeDeluxe5.log
2013-09-09 23:37 - 2013-09-09 23:37 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-09-09 23:24 - 2010-12-20 12:08 - 00008192 _____ C:\Windows\system32\Drivers\IntelMEFWVer.dll
2013-09-09 23:22 - 2013-09-09 23:22 - 00000000 ____D C:\Program Files (x86)\Etron Technology
2013-09-09 23:19 - 2010-11-05 23:45 - 00438808 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStor.sys
2013-09-09 23:18 - 2013-09-09 23:18 - 00000000 ____D C:\ProgramData\EgisTec
2013-09-09 23:17 - 2013-09-09 23:17 - 00000000 ____D C:\book
2013-09-09 23:15 - 2013-09-13 08:12 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-09 23:15 - 2011-06-30 08:03 - 00054784 _____ (Etron Technology Inc) C:\Windows\system32\Drivers\EtronHub3.sys
2013-09-09 23:10 - 2013-09-10 11:23 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2013-09-09 23:10 - 2013-09-09 23:10 - 00000000 ____D C:\Program Files\Realtek
2013-09-09 23:10 - 2010-11-04 21:38 - 02580824 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2013-09-09 23:10 - 2010-11-04 04:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2013-09-09 23:10 - 2010-07-23 02:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2013-09-09 23:10 - 2009-11-24 19:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2013-09-09 23:10 - 2009-11-24 19:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2013-09-09 23:10 - 2009-11-24 19:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2013-09-09 23:10 - 2009-11-24 19:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2013-09-09 23:09 - 2013-09-09 23:09 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-09-09 23:09 - 2010-11-08 17:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2013-09-09 23:09 - 2010-11-08 17:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2013-09-09 23:09 - 2010-11-08 17:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2013-09-09 23:09 - 2010-11-08 17:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2013-09-09 23:09 - 2010-11-08 17:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2013-09-09 23:09 - 2010-11-08 17:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2013-09-09 23:09 - 2010-11-04 21:37 - 01870168 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll
2013-09-09 23:09 - 2010-11-04 04:30 - 00082024 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInst64.dll
2013-09-09 23:09 - 2010-10-28 20:46 - 01251944 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2013-09-09 23:09 - 2010-09-27 19:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2013-09-09 23:09 - 2009-11-19 04:42 - 02197264 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2013-09-09 23:08 - 2013-09-10 11:06 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-09-09 23:08 - 2013-09-10 11:03 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-09-09 23:07 - 2013-09-10 11:05 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-09-09 23:07 - 2013-06-21 14:06 - 15920536 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-09-09 23:07 - 2013-06-21 14:06 - 12427240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-09-09 23:07 - 2013-06-21 14:06 - 02936208 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-09-09 23:07 - 2013-06-21 14:06 - 00021578 _____ C:\Windows\system32\nvinfo.pb
2013-09-09 23:07 - 2011-03-24 08:48 - 01614440 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco642090.dll
2013-09-09 23:07 - 2011-03-24 08:48 - 01359976 _____ (NVIDIA Corporation) C:\Windows\system32\nvgenco642040.dll
2013-09-09 23:07 - 2011-03-24 08:48 - 00067176 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2013-09-09 23:07 - 2011-03-24 08:48 - 00057960 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2013-09-09 23:07 - 2011-03-24 08:48 - 00011240 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvBridge.kmd
2013-09-09 23:07 - 2011-03-03 17:59 - 01359976 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco642040.dll
2013-09-09 23:06 - 2013-09-09 23:06 - 00035497 _____ C:\Windows\ATIDetect.txt
2013-09-09 23:03 - 2013-09-13 17:43 - 01983783 _____ C:\Windows\WindowsUpdate.log

==================== One Month Modified Files and Folders =======

2013-09-13 18:27 - 2013-09-13 18:26 - 01949572 _____ (Farbar) C:\Users\Bispinosa\Downloads\FRST64 (1).exe
2013-09-13 18:15 - 2013-09-10 09:08 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-09-13 18:05 - 2013-09-11 22:40 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-13 18:01 - 2013-09-10 08:50 - 00001136 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2651500920-1956776048-2349371349-1001UA.job
2013-09-13 17:59 - 2013-09-13 17:58 - 00891144 _____ C:\Users\Bispinosa\Downloads\SecurityCheck (1).exe
2013-09-13 17:43 - 2013-09-09 23:03 - 01983783 _____ C:\Windows\WindowsUpdate.log
2013-09-13 17:02 - 2009-07-14 06:51 - 00052262 _____ C:\Windows\setupact.log
2013-09-13 12:34 - 2013-09-13 12:34 - 00891144 _____ C:\Users\Bispinosa\Downloads\SecurityCheck.exe
2013-09-13 10:35 - 2013-09-13 10:35 - 02347384 _____ (ESET) C:\Users\Bispinosa\Downloads\esetsmartinstaller_enu.exe
2013-09-13 10:06 - 2013-09-11 22:40 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-13 10:05 - 2013-09-11 22:40 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-13 10:05 - 2011-07-11 12:28 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-13 09:15 - 2013-09-10 08:51 - 00696832 _____ C:\Windows\system32\perfh007.dat
2013-09-13 09:15 - 2013-09-10 08:51 - 00148128 _____ C:\Windows\system32\perfc007.dat
2013-09-13 09:15 - 2009-07-14 07:13 - 01613340 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-13 09:12 - 2013-09-10 08:50 - 00001084 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2651500920-1956776048-2349371349-1001Core.job
2013-09-13 08:49 - 2013-09-10 08:13 - 00000000 ___RD C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-13 08:49 - 2013-09-10 08:13 - 00000000 ___RD C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-13 08:27 - 2013-09-10 09:11 - 00000000 ____D C:\ProgramData\clear.fi
2013-09-13 08:26 - 2009-07-14 06:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-13 08:26 - 2009-07-14 06:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-13 08:14 - 2013-09-13 08:12 - 00290408 _____ C:\Windows\Minidump\091313-251052-01.dmp
2013-09-13 08:14 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-13 08:12 - 2013-09-13 08:12 - 00000000 ____D C:\Windows\Minidump
2013-09-13 08:12 - 2013-09-09 23:15 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-13 08:12 - 2009-07-14 06:45 - 00276584 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-13 08:11 - 2013-09-13 08:11 - 330160545 _____ C:\Windows\MEMORY.DMP
2013-09-13 04:54 - 2010-11-21 09:17 - 00000000 ____D C:\Program Files\Windows Journal
2013-09-13 04:54 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-09-13 04:54 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-09-13 04:54 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System
2013-09-13 04:32 - 2013-09-10 10:54 - 01589618 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-09-13 04:11 - 2013-09-13 04:06 - 00442646 _____ C:\Windows\msxml4-KB973688-enu.LOG
2013-09-13 04:01 - 2013-09-13 03:57 - 00442962 _____ C:\Windows\msxml4-KB954430-enu.LOG
2013-09-12 22:13 - 2013-09-12 22:13 - 00001178 _____ C:\Users\Bispinosa\Desktop\JRT.txt
2013-09-12 22:04 - 2013-09-12 22:04 - 00000000 ____D C:\Windows\ERUNT
2013-09-12 22:03 - 2013-09-12 22:02 - 01029509 _____ (Thisisu) C:\Users\Bispinosa\Downloads\JRT.exe
2013-09-12 21:59 - 2013-09-12 21:59 - 00002930 _____ C:\Windows\System32\Tasks\{C4E7E569-4021-4DB5-8233-FED66CFFD288}
2013-09-12 21:41 - 2013-09-12 21:41 - 00000000 ____D C:\Windows\SysWOW64\%Report%
2013-09-12 21:41 - 2013-09-12 21:41 - 00000000 ____D C:\Windows\SysWOW64\%DataRoot%
2013-09-12 21:32 - 2013-09-12 20:15 - 00000000 ____D C:\AdwCleaner
2013-09-12 20:57 - 2010-11-21 05:47 - 00117588 _____ C:\Windows\PFRO.log
2013-09-12 20:15 - 2013-09-12 20:12 - 01037278 _____ C:\Users\Bispinosa\Desktop\adwcleaner.exe
2013-09-12 19:31 - 2013-09-12 19:31 - 00001117 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-12 19:31 - 2013-09-12 19:31 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\Malwarebytes
2013-09-12 19:31 - 2013-09-12 19:31 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-12 19:31 - 2013-09-12 19:30 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-12 19:29 - 2013-09-12 19:29 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Bispinosa\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-12 15:46 - 2013-09-10 10:18 - 00000000 ____D C:\Program Files (x86)\Dr. Hardware 2013
2013-09-12 15:33 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-09-12 15:24 - 2013-09-10 08:18 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\Adobe
2013-09-12 15:23 - 2013-09-12 15:23 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\Adobe
2013-09-12 15:16 - 2013-09-12 15:16 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2013-09-12 14:55 - 2013-09-12 14:49 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2013-09-12 14:50 - 2013-09-12 14:50 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\NVIDIA
2013-09-12 14:49 - 2013-09-12 14:49 - 09159560 _____ (BlueStack Systems Inc.) C:\Users\Bispinosa\Downloads\BlueStacks-SplitInstaller_native.exe
2013-09-12 13:22 - 2013-09-12 12:48 - 00000000 ____D C:\ComboFix
2013-09-12 13:19 - 2013-09-12 12:48 - 00000000 ____D C:\Qoobox
2013-09-12 13:18 - 2013-09-12 13:18 - 00040930 _____ C:\ComboFix.txt
2013-09-12 13:18 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2013-09-12 13:15 - 2013-09-12 12:48 - 00000000 ____D C:\Windows\erdnt
2013-09-12 13:05 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-09-12 12:58 - 2009-07-14 04:34 - 54263808 _____ C:\Windows\system32\config\SOFTWARE.bak
2013-09-12 12:58 - 2009-07-14 04:34 - 15990784 _____ C:\Windows\system32\config\SYSTEM.bak
2013-09-12 12:58 - 2009-07-14 04:34 - 00262144 _____ C:\Windows\system32\config\SECURITY.bak
2013-09-12 12:58 - 2009-07-14 04:34 - 00262144 _____ C:\Windows\system32\config\SAM.bak
2013-09-12 12:58 - 2009-07-14 04:34 - 00262144 _____ C:\Windows\system32\config\DEFAULT.bak
2013-09-12 12:47 - 2013-09-12 12:46 - 05124599 ____R (Swearware)

C:\Users\Bispinosa\Downloads\ComboFix.exe
2013-09-12 07:23 - 2013-09-12 07:23 - 00003416 ____N C:\bootsqm.dat
2013-09-11 22:40 - 2013-09-11 22:40 - 00000000 ____D C:\Windows\system32\Macromed
2013-09-11 22:39 - 2013-09-11 22:39 - 00000000 _____ C:\Users\Bispinosa\Downloads\install_flash_player_ax.exe
2013-09-11 22:23 - 2013-09-11 22:23 - 00079808 _____ C:\Users\Bispinosa\Downloads\Avira_Ereignisse.txt
2013-09-11 20:35 - 2013-09-11 11:20 - 00122983 _____ C:\Users\Bispinosa\Desktop\FRST.Txt.txt
2013-09-11 20:21 - 2013-09-11 20:21 - 00000094 _____ C:\Users\Bispinosa\AppData\Roaming\WB.CFG
2013-09-11 20:21 - 2013-09-11 20:21 - 00000005 _____ C:\Users\Bispinosa\AppData\Roaming\WBPU-TTL.DAT
2013-09-11 19:19 - 2013-09-11 19:19 - 00000000 ____D C:\Program Files (x86)\7-Zip
2013-09-11 19:18 - 2013-09-11 19:17 - 01110476 _____ C:\Users\Bispinosa\Downloads\7z920.exe
2013-09-11 19:13 - 2013-09-11 19:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-11 11:27 - 2013-09-11 11:27 - 00262144 _____ C:\Windows\system32\config\elam
2013-09-11 11:20 - 2013-09-11 11:18 - 00032525 _____ C:\Users\Bispinosa\Desktop\Addition.Txt.txt
2013-09-11 11:16 - 2013-09-11 11:15 - 01949408 _____ (Farbar) C:\Users\Bispinosa\Downloads\FRST64.exe
2013-09-11 11:15 - 2013-09-11 11:15 - 00000480 _____ C:\Users\Bispinosa\Desktop\defogger_disable.log
2013-09-11 11:14 - 2013-09-11 11:14 - 00050477 _____ C:\Users\Bispinosa\Downloads\Defogger.exe
2013-09-11 10:52 - 2013-09-11 10:52 - 00010201 _____ C:\Users\Bispinosa\Desktop\Gmer.Txt.log
2013-09-11 10:30 - 2013-09-11 10:30 - 00000000 ____D C:\FRST
2013-09-11 10:26 - 2013-09-11 10:26 - 00000000 _____ C:\Users\Bispinosa\defogger_reenable
2013-09-11 10:26 - 2013-09-10 08:02 - 00000000 ____D C:\Users\Bispinosa
2013-09-11 10:20 - 2013-09-11 10:20 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat
2013-09-11 10:20 - 2013-09-11 10:20 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\WebPlayer
2013-09-11 10:19 - 2013-09-11 10:19 - 00000000 ____D C:\Windows\SysWOW64\searchplugins
2013-09-11 10:19 - 2013-09-11 10:19 - 00000000 ____D C:\Windows\SysWOW64\Extensions
2013-09-11 10:19 - 2013-09-11 10:19 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\avgchrome
2013-09-10 11:46 - 2013-09-10 08:06 - 00057952 _____ C:\Users\Bispinosa\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-10 11:42 - 2013-09-10 11:42 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_point64_01011.Wdf
2013-09-10 11:36 - 2013-09-10 11:36 - 00003062 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe
2013-09-10 11:36 - 2013-09-10 11:36 - 00003060 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe
2013-09-10 11:36 - 2013-09-10 11:15 - 00284868 _____ C:\Windows\DPINST.LOG
2013-09-10 11:35 - 2013-09-10 11:35 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf
2013-09-10 11:35 - 2013-09-10 11:35 - 00000000 ____D C:\Program Files\Microsoft Mouse and Keyboard Center
2013-09-10 11:31 - 2013-09-10 11:31 - 00000000 ____H C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Coinstaller_Critical.Wdf
2013-09-10 11:31 - 2013-09-10 11:31 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2013-09-10 11:25 - 2013-09-10 11:25 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_Apfiltr_01007.Wdf
2013-09-10 11:25 - 2013-09-10 11:25 - 00000000 ____D C:\Program Files\Apoint
2013-09-10 11:24 - 2013-09-10 11:24 - 00000000 ____D C:\Program Files\DIFX
2013-09-10 11:23 - 2013-09-09 23:10 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2013-09-10 11:15 - 2013-09-10 11:01 - 00000000 ____D C:\Program Files (x86)\DriverTuner
2013-09-10 11:06 - 2013-09-09 23:08 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-09-10 11:05 - 2013-09-10 11:05 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\NVIDIA
2013-09-10 11:05 - 2013-09-09 23:07 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-09-10 11:03 - 2013-09-09 23:08 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-09-10 11:02 - 2013-09-10 11:02 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\DriverTuner
2013-09-10 11:01 - 2013-09-10 11:01 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-09-10 11:01 - 2013-09-10 11:01 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-09-10 11:00 - 2013-09-10 11:00 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-09-10 10:44 - 2013-09-10 10:44 - 00000000 ____D C:\NVIDIA
2013-09-10 10:07 - 2013-09-10 10:07 - 00000000 ____D C:\Users\Bispinosa\Documents\CyberLink
2013-09-10 10:07 - 2013-09-10 10:06 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\PowerCinema
2013-09-10 10:06 - 2013-09-10 10:06 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\Cyberlink
2013-09-10 10:06 - 2013-09-10 08:05 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\PowerCinema
2013-09-10 10:06 - 2013-09-09 23:38 - 00000000 ____D C:\ProgramData\CyberLink
2013-09-10 09:30 - 2013-09-10 09:07 - 00620128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2013-09-10 09:30 - 2013-09-10 09:07 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2013-09-10 09:30 - 2012-10-18 14:50 - 00054368 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kltdi.sys
2013-09-10 09:30 - 2012-08-13 16:49 - 00178448 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kneps.sys
2013-09-10 09:10 - 2013-09-10 09:11 - 00001082 _____ C:\Users\Public\Desktop\Kaspersky PURE 3.0.lnk
2013-09-10 09:08 - 2013-09-10 09:08 - 00000000 ____D C:\Windows\ELAMBKUP
2013-09-10 09:08 - 2013-09-10 09:08 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-09-10 09:00 - 2011-07-11 11:55 - 00000000 ____D C:\Program Files\Common Files\mcafee
2013-09-10 08:56 - 2013-09-10 08:50 - 00004114 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2651500920-1956776048-2349371349-1001UA
2013-09-10 08:56 - 2013-09-10 08:50 - 00003718 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2651500920-1956776048-2349371349-1001Core
2013-09-10 08:54 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\winrm
2013-09-10 08:54 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\WCN
2013-09-10 08:54 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\sysprep
2013-09-10 08:54 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\slmgr
2013-09-10 08:54 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\system32\winrm
2013-09-10 08:54 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\system32\WCN
2013-09-10 08:54 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\system32\slmgr
2013-09-10 08:54 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\oobe
2013-09-10 08:54 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\MUI
2013-09-10 08:54 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\MUI
2013-09-10 08:54 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Dism
2013-09-10 08:54 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\servicing
2013-09-10 08:51 - 2013-09-10 08:51 - 00295922 _____ C:\Windows\system32\perfi007.dat
2013-09-10 08:51 - 2013-09-10 08:51 - 00038104 _____ C:\Windows\system32\perfd007.dat
2013-09-10 08:51 - 2013-09-10 08:51 - 00002386 _____ C:\Users\Bispinosa\Desktop\Google Chrome.lnk
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Windows\SysWOW64\de
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Windows\SysWOW64\0407
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Windows\system32\de
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Windows\system32\0407
2013-09-10 08:51 - 2013-09-10 08:51 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2013-09-10 08:51 - 2013-09-10 08:50 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\Google
2013-09-10 08:51 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts
2013-09-10 08:51 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts
2013-09-10 08:51 - 2009-07-14 07:37 - 00000000 ____D C:\Windows\DigitalLocker
2013-09-10 08:51 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2013-09-10 08:51 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Sidebar
2013-09-10 08:51 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2013-09-10 08:51 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\DVD Maker
2013-09-10 08:51 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar
2013-09-10 08:51 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2013-09-10 08:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Setup
2013-09-10 08:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\migwiz
2013-09-10 08:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2013-09-10 08:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\com
2013-09-10 08:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Setup
2013-09-10 08:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\oobe
2013-09-10 08:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\migwiz
2013-09-10 08:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\com
2013-09-10 08:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\IME
2013-09-10 08:37 - 2013-09-10 08:37 - 00000000 ____D C:\Windows\NAPP_Dism_Log
2013-09-10 08:28 - 2013-09-10 08:28 - 00000000 ____D C:\kleaner.tmp
2013-09-10 08:20 - 2009-07-14 07:38 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG
2013-09-10 08:20 - 2009-07-14 07:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2013-09-10 08:13 - 2013-09-10 08:13 - 00001447 _____ C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-09-10 08:13 - 2013-09-10 08:13 - 00001413 _____ C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2013-09-10 08:13 - 2013-09-10 08:13 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\OEM
2013-09-10 08:13 - 2013-09-10 08:13 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\Macromedia
2013-09-10 08:13 - 2013-09-10 08:13 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\EgisTec IPS
2013-09-10 08:13 - 2011-07-11 12:27 - 00018168 _____ C:\Windows\patch.log
2013-09-10 08:13 - 2011-07-11 12:26 - 00000000 ____D C:\ProgramData\oem
2013-09-10 08:13 - 2011-07-11 11:55 - 00000000 ____D C:\ProgramData\McAfee
2013-09-10 08:10 - 2011-07-11 11:58 - 00000000 ____D C:\OEM
2013-09-10 08:06 - 2013-09-10 08:06 - 00000000 ____D C:\Users\Bispinosa\AppData\Roaming\CyberLink
2013-09-10 08:06 - 2013-09-10 08:06 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\Acer
2013-09-10 08:06 - 2013-09-10 08:06 - 00000000 ____D C:\Program Files\Accessory Store
2013-09-10 08:06 - 2013-09-10 08:06 - 00000000 ____D C:\Program Files (x86)\OEM
2013-09-10 08:03 - 2013-09-10 08:03 - 00000000 ____D C:\Users\Bispinosa\AppData\Local\VirtualStore
2013-09-10 08:02 - 2013-09-10 08:02 - 00000020 ___SH C:\Users\Bispinosa\ntuser.ini
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Vorlagen
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Startmenü
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Netzwerkumgebung
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Lokale Einstellungen
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Eigene Dateien
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Druckumgebung
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Documents\Eigene Musik
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Documents\Eigene Bilder
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\AppData\Local\Verlauf
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\AppData\Local\Anwendungsdaten
2013-09-10 08:02 - 2013-09-10 08:02 - 00000000 _SHDL C:\Users\Bispinosa\Anwendungsdaten
2013-09-10 08:02 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\restore
2013-09-10 08:02 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Programme
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\ProgramData\Favoriten
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 _SHDL C:\Dokumente und Einstellungen
2013-09-10 08:01 - 2013-09-10 08:01 - 00000000 ____D C:\Recovery
2013-09-10 08:01 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Windows NT
2013-09-10 00:22 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sysprep
2013-09-10 00:22 - 2007-07-12 03:49 - 00000000 ____D C:\Windows\Panther
2013-09-10 00:21 - 2009-07-14 06:46 - 00004059 _____ C:\Windows\DtcInstall.log
2013-09-10 00:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help
2013-09-09 23:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-09-09 23:57 - 2011-07-11 11:57 - 00000000 ____D C:\Program Files (x86)\Acer
2013-09-09 23:51 - 2011-07-11 12:04 - 00000000 ____D C:\Program Files (x86)\Windows Live
2013-09-09 23:51 - 2011-07-11 12:00 - 00000582 _____ C:\Windows\DirectX.log
2013-09-09 23:48 - 2013-09-09 23:46 - 00003758 _____ C:\Windows\IE9_main.log
2013-09-09 23:47 - 2013-09-09 23:47 - 03695416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-09-09 23:47 - 2013-09-09 23:47 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-09-09 23:47 - 2013-09-09 23:47 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-09-09 23:47 - 2013-09-09 23:47 - 00434176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00403248 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-09-09 23:47 - 2013-09-09 23:47 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00353584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00227840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieaksie.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakui.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakeng.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00123392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\admparse.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-09-09 23:47 - 2013-09-09 23:47 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ie4uinit.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-09-09 23:47 - 2013-09-09 23:47 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-09-09 23:47 - 2013-09-09 23:47 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-09-09 23:47 - 2013-09-09 23:47 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-09-09 23:42 - 2013-09-09 23:38 - 00014802 _____ C:\ProgramData\ArcadeDeluxe5.log
2013-09-09 23:42 - 2011-07-11 11:58 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-09-09 23:41 - 2013-09-09 23:41 - 00003418 _____ C:\Windows\System32\Tasks\clear.fi
2013-09-09 23:41 - 2013-09-09 23:41 - 00003366 _____ C:\Windows\System32\Tasks\DMREngine
2013-09-09 23:41 - 2013-09-09 23:41 - 00003348 _____ C:\Windows\System32\Tasks\clear.fiAgent
2013-09-09 23:40 - 2013-09-09 23:40 - 00000000 ____D C:\Program Files (x86)\Cyberlink
2013-09-09 23:38 - 2011-07-11 11:27 - 00000000 ____D C:\Program Files (x86)\Acer Games
2013-09-09 23:37 - 2013-09-09 23:37 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-09-09 23:23 - 2011-07-11 11:24 - 00000000 ____D C:\Program Files (x86)\Intel
2013-09-09 23:22 - 2013-09-09 23:22 - 00000000 ____D C:\Program Files (x86)\Etron Technology
2013-09-09 23:18 - 2013-09-09 23:18 - 00000000 ____D C:\ProgramData\EgisTec
2013-09-09 23:18 - 2011-02-12 05:43 - 00000000 ____D C:\Windows\DeployWinRE2
2013-09-09 23:17 - 2013-09-09 23:17 - 00000000 ____D C:\book
2013-09-09 23:17 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Recovery
2013-09-09 23:16 - 2011-07-11 12:20 - 00000000 ____D C:\ProgramData\EgisTec IPS
2013-09-09 23:11 - 2009-07-14 06:51 - 00000268 _____ C:\Windows\setuperr.log
2013-09-09 23:10 - 2013-09-09 23:10 - 00000000 ____D C:\Program Files\Realtek
2013-09-09 23:09 - 2013-09-09 23:09 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-09-09 23:06 - 2013-09-09 23:06 - 00035497 _____ C:\Windows\ATIDetect.txt
2013-09-09 23:04 - 2011-07-11 11:07 - 00003652 _____ C:\Windows\TSSysprep.log
2013-08-20 15:33 - 2013-09-10 11:05 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-08-20 15:32 - 2013-09-10 11:05 - 00029984 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2013-08-20 15:32 - 2013-09-10 11:05 - 00028448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll

Files to move or delete:
====================
C:\Users\Bispinosa\AppData\Local\Temp\Quarantine.exe
C:\Users\Bispinosa\AppData\Local\Temp\uninst1.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-10 00:20

==================== End Of Log ============================
         

[/CODE]

Also im Allgemeinen ist der Rechner um einiges schneller geworden. Jedoch braucht der Rechner beim Hochfahren noch sehr lange, und zwischendurch passiert es das der Rechner einfach einfriert und ich wie durch ein weisses Tuch die geöffneten Seiten bzw. Dateien sehe. Woran kann das jetzt noch liegen?

Hm, öffne mal FRST, setz nen Haken bei Additional und scanne, poste nur die Additional.txt.

Hoffe ist das Richtige. Das Programm hat mir 2 logs geöffnet

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-09-2013 04
Ran by Bispinosa at 2013-09-15 07:53:16
Running from C:\Users\Bispinosa\Downloads
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

7-Zip 9.20 (x32)
Acer eRecovery Management (x32 Version: 5.00.3502)
Acer Games (x32 Version: 1.0.2.5)
Acer Registration (x32 Version: 1.04.3503)
Acer ScreenSaver (x32 Version: 1.1.0609.2011)
Acer Updater (x32 Version: 1.02.3500)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.174)
Adobe Reader X (10.1.8) MUI (x32 Version: 10.1.8)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98)
Alps Pointing-device for VAIO
AppsHat Mobile Apps (HKCU Version: 1.0.0.0)
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95)
Chuzzle Deluxe (x32 Version: 2.2.0.95)
clear.fi (x32 Version: 1.0.1517_36458)
clear.fi (x32 Version: 1.0.1720.15)
clear.fi (x32 Version: 9.0.7713)
clear.fi Client (x32 Version: 1.01.3500)
Crazy Chicken Kart 2 (x32 Version: 2.2.0.97)
D3DX10 (x32 Version: 15.4.2368.0902)
DriverTuner 3.1.0.1 (x32 Version: 3.1.0.1)
eBay Worldwide (x32 Version: 2.2.0409)
Etron USB3.0 Host Controller (x32 Version: 0.103)
FATE (x32 Version: 2.2.0.97)
Final Drive: Nitro (x32 Version: 2.2.0.95)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922)
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922)
Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922)
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922)
Galerie foto Windows Live (x32 Version: 15.4.3502.0922)
GeForce Experience NvStream Client Components (Version: 0.1.87)
Google Chrome (HKCU Version: 29.0.1547.66)
Hotkey Utility (x32 Version: 2.05.3505)
Identity Card (x32 Version: 1.00.3501)
Insaniquarium Deluxe (x32 Version: 2.2.0.97)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144)
Intel(R) Rapid Storage Technology (x32 Version: 10.1.0.1008)
Jewel Match 3 (x32 Version: 2.2.0.97)
John Deere Drive Green (x32 Version: 2.2.0.95)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
Kaspersky PURE 3.0 (x32 Version: 13.0.2.558)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Mouse and Keyboard Center (Version: 2.2.173.0)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Silverlight (x32 Version: 4.0.50401.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
Mystery of Mortlake Mansion (x32 Version: 2.2.0.98)
MyWinLocker (Version: 4.0.14.25)
MyWinLocker 4 (x32 Version: 4.0.14.25)
MyWinLocker Suite (x32 Version: 4.0.14.15)
Nero Control Center 10 (x32 Version: 10.2.11100.1.1)
Nero ControlCenter 10 Help (CHM) (x32 Version: 10.5.10000)
Nero Core Components 10 (x32 Version: 2.0.18100.8.8)
Nero DiscSpeed 10 (x32 Version: 6.2.10500.2.100)
Nero DiscSpeed 10 Help (CHM) (x32 Version: 10.5.10000)
Nero Express 10 (x32 Version: 10.2.12000.21.100)
Nero Express 10 Help (CHM) (x32 Version: 10.5.10200)
Nero Multimedia Suite 10 Essentials (x32 Version: 10.5.10300)
Nero StartSmart 10 (x32 Version: 10.2.11600.14.100)
Nero StartSmart 10 Help (CHM) (x32 Version: 10.5.10000)
Nero Update (x32 Version: 1.0.0018)
Norton Online Backup (x32 Version: 2.1.17869)
NVIDIA 3D Vision Controller-Treiber 320.49 (Version: 320.49)
NVIDIA 3D Vision Treiber 320.49 (Version: 320.49)
NVIDIA GeForce Experience 1.6.1 (Version: 1.6.1)
NVIDIA Grafiktreiber 320.49 (Version: 320.49)
NVIDIA HD-Audiotreiber 1.3.24.2 (Version: 1.3.24.2)
NVIDIA Install Application (Version: 2.1002.133.902)
NVIDIA PhysX (x32 Version: 9.13.0604)
NVIDIA PhysX-Systemsoftware 9.13.0604 (Version: 9.13.0604)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.2049)
NVIDIA Systemsteuerung 320.49 (Version: 320.49)
NVIDIA Update 8.3.14 (Version: 8.3.14)
NVIDIA Update Components (Version: 8.3.14)
NVIDIA Virtual Audio 1.2.5 (Version: 1.2.5)
Penguins! (x32 Version: 2.2.0.95)
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.95)
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922)
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922)
Polar Bowler (x32 Version: 2.2.0.97)
Pošta Windows Live (x32 Version: 15.4.3502.0922)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6971)
SHIELD Streaming (Version: 1.05.28)
Shredder (Version: 2.0.8.9)
Shredder (x32 Version: 2.0.8.9)
Skype™ 5.3 (x32 Version: 5.3.116)
Slingo Deluxe (x32 Version: 2.2.0.95)
Torchlight (x32 Version: 2.2.0.97)
Update for Zip Opener (HKCU)
Update Installer for WildTangent Games App (x32)
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.97)
WebConnect 3.0.0 (Version: 3.0.0)
Wedding Dash (x32 Version: 2.2.0.95)
Welcome Center (x32 Version: 1.02.3502)
WildTangent Games App (Acer Games) (x32 Version: 4.0.5.14)
Windows Live Argazki Galeria (x32 Version: 15.4.3502.0922)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3508.1109)
Windows Live Fotogaléria (x32 Version: 15.4.3502.0922)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live Fotogalleri (x32 Version: 15.4.3502.0922)
Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922)
Windows Live Fotótár (x32 Version: 15.4.3502.0922)
Windows Live Galeria de Fotos (x32 Version: 15.4.3502.0922)
Windows Live Galerija fotografija (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3508.1109)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Messenger (x32 Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Windows Live 影像中心 (x32 Version: 15.4.3502.0922)
Windows Live 程式集 (x32 Version: 15.4.3502.0922)
Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922)
Windows Liven sähköposti (x32 Version: 15.4.3502.0922)
Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922)
Windows-Treiberpaket - Alps Touch Pad Driver (07/23/2009 7.202.505.108) (Version: 07/23/2009 7.202.505.108)
Windows-Treiberpaket - Intel (MEIx64) System  (06/10/2013 9.5.10.1580) (Version: 06/10/2013 9.5.10.1580)
Windows-Treiberpaket - Intel System  (10/05/2012 9.2.0.1032) (Version: 10/05/2012 9.2.0.1032)
Windows-Treiberpaket - Intel USB  (10/05/2012 9.2.0.1032) (Version: 10/05/2012 9.2.0.1032)
Windows-Treiberpaket - Realtek Semiconductor Corp. HD Audio Driver (07/16/2013 6.0.1.6971) (Version: 07/16/2013 6.0.1.6971)
Zuma Deluxe (x32 Version: 2.2.0.95)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922)
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922)
Почта Windows Live (x32 Version: 15.4.3502.0922)
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922)
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922)
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922)
بريد Windows Live (x32 Version: 15.4.3502.0922)
معرض صور Windows Live (x32 Version: 15.4.3502.0922)

==================== Restore Points  =========================

14-09-2013 22:00:01 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2009-07-14 04:34 - 2013-09-12 13:04 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started
Task: {0FE833D6-1CC1-4D33-AD84-2DA4D5B307D0} - System32\Tasks\Adobe Reader Speed Launcher => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2013-09-03] (Adobe Systems Incorporated)
Task: {2185B401-F684-420A-BFED-C6715E1679E2} - System32\Tasks\DMREngine => C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe [2011-05-20] (CyberLink)
Task: {3AAA7C64-AC64-46D6-AC29-DFD7E5864F96} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {445E08B1-6AD9-4DC1-9440-2C80D5689B22} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-13] (Adobe Systems Incorporated)
Task: {52318BAB-6DD2-4BED-AF99-1CED2A88CFC8} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2651500920-1956776048-2349371349-1001Core => C:\Users\Bispinosa\AppData\Local\Google\Update\GoogleUpdate.exe [2013-09-10] (Google Inc.)
Task: {59AAC593-5E6D-4307-872D-8AAE1BB057E4} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {5C5FE30A-AAA1-4C2E-AD79-30544C05DA33} - System32\Tasks\Adobe ARM => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {6596FA47-5DB6-4B5E-B372-ED83548323B5} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {7C6BB910-B68F-4E65-AF7C-F0B7573E1304} - System32\Tasks\clear.fiAgent => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe [2011-05-20] (CyberLink Corp.)
Task: {7E1881D0-5FB9-4DE7-B7D5-57DA0035175C} - \EPUpdater No Task File
Task: {85CC8EB9-6E0C-4E68-940E-30D155561916} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {879D9630-748D-4222-B575-C4FA9BC128AC} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2651500920-1956776048-2349371349-1001UA => C:\Users\Bispinosa\AppData\Local\Google\Update\GoogleUpdate.exe [2013-09-10] (Google Inc.)
Task: {A468F21D-0DF1-4E86-AF65-C9FF5588938A} - \BrowserDefendert No Task File
Task: {BF046C88-3509-4547-8141-5C412BA0AAFA} - System32\Tasks\clear.fi => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fi.exe [2011-05-20] (Acer Incorporated)
Task: {D02C1703-F8A0-4B7D-9080-04DB6522052E} - System32\Tasks\{C4E7E569-4021-4DB5-8233-FED66CFFD288} => C:\Users\Bispinosa\Desktop\JRT.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2651500920-1956776048-2349371349-1001Core.job => C:\Users\Bispinosa\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2651500920-1956776048-2349371349-1001UA.job => C:\Users\Bispinosa\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-09-09 23:07 - 2013-06-21 14:06 - 15920536 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2012-12-20 18:22 - 2012-12-20 18:22 - 00492040 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\shellex.dll
2013-09-09 23:10 - 2010-11-04 04:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2013-07-09 14:20 - 2013-07-09 14:20 - 03760344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2009-10-19 10:37 - 2009-10-19 10:37 - 00098816 _____ (Alps Electric Co., Ltd.) C:\Windows\system32\VXDIF.DLL
2011-05-20 11:13 - 2011-05-20 11:13 - 00206216 _____ () C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\CLNetMediaDMA.dll
2011-08-11 05:57 - 2011-08-11 05:57 - 00151656 _____ () C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyHook.dll
2012-12-20 18:20 - 2013-09-10 09:23 - 00083648 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ushata.dll
2012-12-20 18:19 - 2012-12-20 18:19 - 00013832 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avpinit.dll
2012-12-20 18:19 - 2013-09-10 09:23 - 00834240 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avpmain.dll
2012-12-20 18:19 - 2013-09-10 09:23 - 00097984 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\fssync.DLL
2012-12-20 18:19 - 2012-12-20 18:19 - 00149000 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\DumpWriter.dll
2012-12-20 18:20 - 2012-12-20 18:20 - 00612872 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\service.dll
2012-12-20 18:20 - 2012-12-20 18:20 - 00160776 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\prremote.DLL
2012-12-20 18:20 - 2013-09-10 09:23 - 00353472 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\prloader.dll
2012-12-20 18:21 - 2012-12-20 18:21 - 00114184 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\nfio.ppl
2012-12-20 18:21 - 2012-12-20 18:21 - 00022024 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\fsdrvplg.ppl
2012-12-20 18:22 - 2012-12-20 18:22 - 00039432 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\winreg.ppl
2012-12-20 18:21 - 2012-12-20 18:21 - 00049672 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\pxstub.ppl
2012-12-20 18:21 - 2013-09-10 09:23 - 01390272 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\params.ppl
2012-12-20 18:19 - 2012-12-20 18:19 - 01102856 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\app_core_legacy.dll
2012-12-20 18:19 - 2012-12-20 18:19 - 00609288 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\key_value_storage.DLL
2012-12-20 18:20 - 2012-12-20 18:20 - 00253960 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\updater_meta.dll
2012-12-20 18:19 - 2012-12-20 18:19 - 00127496 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\content_filtering_meta.dll
2012-12-20 18:19 - 2012-12-20 18:19 - 00283656 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\am_meta.dll
2012-12-20 18:19 - 2012-12-20 18:19 - 00435208 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ac_meta.dll
2012-12-20 18:19 - 2012-12-20 18:19 - 00363528 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\app_core_meta.dll
2012-12-20 18:20 - 2012-12-20 18:20 - 00826376 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\product_metainfo.dll
2012-12-20 18:20 - 2012-12-20 18:20 - 00209416 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\plugins_meta.dll
2012-12-20 18:19 - 2012-12-20 18:19 - 00324104 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ksn_meta.dll
2012-12-20 18:20 - 2013-09-10 09:23 - 00255344 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ucp_meta.dll
2012-12-20 18:19 - 2012-12-20 18:19 - 00258056 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\eka_meta.dll
2012-12-20 18:19 - 2012-12-20 18:19 - 00184328 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\klifpp_meta.dll
2012-12-20 18:19 - 2012-12-20 18:19 - 00098312 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\instrumental_meta.dll
2012-12-20 18:20 - 2012-12-20 18:20 - 00141320 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\pure_metainfo.dll
2012-12-20 18:20 - 2012-12-20 18:20 - 00396296 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\storage.dll
2012-12-20 18:21 - 2013-09-10 09:23 - 06974656 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avpgui.ppl
2012-12-20 18:20 - 2012-12-20 18:20 - 02321928 _____ (Digia Plc) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\QtCore4.dll
2012-12-20 18:20 - 2012-12-20 18:20 - 02289672 _____ (Digia Plc) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\QtDeclarative4.dll
2012-12-20 18:20 - 2012-12-20 18:20 - 01297416 _____ (Digia Plc) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\QtScript4.dll
2012-12-20 18:20 - 2012-12-20 18:20 - 00182792 _____ (Digia Plc) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\QtSql4.dll
2012-12-20 18:20 - 2012-12-20 18:20 - 07270408 _____ (Digia Plc) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\QtGui4.dll
2012-12-20 18:20 - 2012-12-20 18:20 - 02052104 _____ (Digia Plc) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\QtNetwork4.dll
2012-12-20 18:19 - 2012-12-20 18:19 - 00479752 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\dblite.dll
2012-12-20 18:21 - 2013-09-10 09:23 - 02176704 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\basegui.ppl
2012-12-20 18:22 - 2013-09-10 09:24 - 00040640 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\thpimpl.ppl
2012-12-20 18:19 - 2012-12-20 18:19 - 00086536 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\memmon.dll
2012-12-20 18:19 - 2012-12-20 18:19 - 00658440 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\localization_manager.dll
2012-12-20 18:20 - 2012-12-20 18:20 - 00312840 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\parental_control_gui.dll
2012-12-20 18:21 - 2012-12-20 18:21 - 00018952 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\hashmd5.ppl
2012-12-20 18:21 - 2012-12-20 18:21 - 00089096 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\propmap.ppl
2012-12-20 18:20 - 2012-12-20 18:20 - 00034824 _____ (Digia Plc) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\imageformats\qgif4.dll
2012-12-20 18:20 - 2012-12-20 18:20 - 00037384 _____ (Digia Plc) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\imageformats\qico4.dll
2012-12-20 18:20 - 2012-12-20 18:20 - 00189960 _____ (Digia Plc) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\imageformats\qjpeg4.dll
2013-09-10 08:51 - 2013-09-02 22:34 - 47074256 _____ (Google Inc.) C:\Users\Bispinosa\AppData\Local\Google\Chrome\Application\29.0.1547.66\chrome.dll
2013-09-10 08:51 - 2013-09-02 22:35 - 09962960 _____ (The ICU Project) C:\Users\Bispinosa\AppData\Local\Google\Chrome\Application\29.0.1547.66\icudt.dll
2013-09-10 08:51 - 2013-09-02 20:46 - 00081768 _____ (Microsoft Corporation) C:\Users\Bispinosa\AppData\Local\Google\Chrome\Application\29.0.1547.66\xinput1_3.dll
2012-12-20 18:20 - 2012-12-20 18:20 - 00459784 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\shellex.dll
2012-12-20 18:20 - 2013-09-10 09:23 - 00352448 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\office_antivirus.dll
2012-12-20 18:20 - 2012-12-20 18:20 - 00160776 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\prremote.dll
2013-09-10 08:51 - 2013-09-02 20:46 - 03231688 _____ (Microsoft Corporation) C:\Users\Bispinosa\AppData\Local\Google\Chrome\Application\29.0.1547.66\D3DCompiler_46.dll
2013-09-10 08:51 - 2013-09-02 22:35 - 00709584 _____ () C:\Users\Bispinosa\AppData\Local\Google\Chrome\Application\29.0.1547.66\libglesv2.dll
2013-09-10 08:51 - 2013-09-02 22:35 - 00099792 _____ () C:\Users\Bispinosa\AppData\Local\Google\Chrome\Application\29.0.1547.66\libegl.dll
2013-09-10 08:51 - 2013-09-02 22:35 - 04053456 _____ () C:\Users\Bispinosa\AppData\Local\Google\Chrome\Application\29.0.1547.66\pdf.dll
2013-09-10 08:51 - 2013-09-02 22:35 - 00410576 _____ () C:\Users\Bispinosa\AppData\Local\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll
2013-09-10 08:51 - 2013-09-02 22:35 - 02110928 _____ (Google Inc.) C:\Users\Bispinosa\AppData\Local\Google\Chrome\Application\29.0.1547.66\libpeerconnection.dll
2013-09-10 08:51 - 2013-09-02 22:35 - 01604560 _____ () C:\Users\Bispinosa\AppData\Local\Google\Chrome\Application\29.0.1547.66\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) ==========



==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (09/14/2013 07:16:15 PM) (Source: Application Hang) (User: )
Description: Programm avp.exe, Version 13.0.2.558 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: dec

Startzeit: 01ceb1247ba6d474

Endzeit: 22230

Anwendungspfad: C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe

Berichts-ID: 4af5625f-1d61-11e3-8b94-c89cdc2d6e60

Error: (09/14/2013 10:27:20 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/13/2013 10:56:08 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/13/2013 10:53:38 PM) (Source: NvStreamSvc) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]

Error: (09/13/2013 10:53:38 PM) (Source: NvStreamSvc) (User: )
Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]

Error: (09/13/2013 10:49:10 PM) (Source: Microsoft-Windows-User Profiles Service) (User: NT-AUTORITÄT)
Description: Die Registrierungsdatei konnte nicht entladen werden. Der für die Registrierung verwendete Arbeitsspeicher wurde nicht freigegeben. Dieses wird oft durch Dienste verursacht, die unter einem Benutzerkonto ausgeführt werden. Versuchen Sie die Dienste entweder unter dem Konto "LocalService" oder "NetworkService" auszuführen. 

 Details - Das Medium ist schreibgeschützt.

Error: (09/13/2013 10:48:59 PM) (Source: WinMgmt) (User: )
Description: 0x80041014

Error: (09/13/2013 10:48:50 PM) (Source: NvStreamSvc) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]

Error: (09/13/2013 10:48:50 PM) (Source: NvStreamSvc) (User: )
Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]

Error: (09/13/2013 10:11:45 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (09/14/2013 02:22:33 PM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "C:" wurden aufgrund eines E/A-Fehlers auf Volume "C:" abgebrochen.

Error: (09/14/2013 01:58:36 PM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "C:" wurden aufgrund eines E/A-Fehlers auf Volume "C:" abgebrochen.

Error: (09/14/2013 11:42:00 AM) (Source: iaStor) (User: )
Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet.

Error: (09/14/2013 11:37:49 AM) (Source: iaStor) (User: )
Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet.

Error: (09/14/2013 11:29:54 AM) (Source: iaStor) (User: )
Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet.

Error: (09/14/2013 11:22:41 AM) (Source: iaStor) (User: )
Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet.

Error: (09/13/2013 11:37:04 PM) (Source: iaStor) (User: )
Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet.

Error: (09/13/2013 11:00:36 PM) (Source: iaStor) (User: )
Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet.

Error: (09/13/2013 10:56:23 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "IPsec-Richtlinien-Agent" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (09/13/2013 10:56:23 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst IPsec-Richtlinien-Agent erreicht.


Microsoft Office Sessions:
=========================
Error: (09/14/2013 07:16:15 PM) (Source: Application Hang)(User: )
Description: avp.exe13.0.2.558dec01ceb1247ba6d47422230C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe4af5625f-1d61-11e3-8b94-c89cdc2d6e60

Error: (09/14/2013 10:27:20 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/13/2013 10:56:08 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/13/2013 10:53:38 PM) (Source: NvStreamSvc)(User: )
Description: NvStreamSvcNvVAD initialization failed [6]

Error: (09/13/2013 10:53:38 PM) (Source: NvStreamSvc)(User: )
Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]

Error: (09/13/2013 10:49:10 PM) (Source: Microsoft-Windows-User Profiles Service)(User: NT-AUTORITÄT)
Description: Das Medium ist schreibgeschützt.

Error: (09/13/2013 10:48:59 PM) (Source: WinMgmt)(User: )
Description: 0x80041014

Error: (09/13/2013 10:48:50 PM) (Source: NvStreamSvc)(User: )
Description: NvStreamSvcNvVAD initialization failed [6]

Error: (09/13/2013 10:48:50 PM) (Source: NvStreamSvc)(User: )
Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]

Error: (09/13/2013 10:11:45 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


CodeIntegrity Errors:
===================================
  Date: 2013-09-15 00:39:16.232
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-15 00:39:16.232
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-15 00:39:16.232
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-15 00:39:16.232
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-15 00:39:16.232
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-15 00:39:16.232
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-15 00:39:16.216
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-15 00:39:16.216
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-15 00:39:16.201
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-14 04:39:13.628
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 29%
Total physical RAM: 6126.01 MB
Available physical RAM: 4327.61 MB
Total Pagefile: 12250.2 MB
Available Pagefile: 10039.28 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:456.71 GB) (Free:415.76 GB) NTFS
Drive d: (DATA) (Fixed) (Total:456.71 GB) (Free:444.18 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 39FC44F4)
Partition 1: (Not Active) - (Size=18 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=457 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=457 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1


WICHTIG - Speichere Combofix auf deinem Desktop

• Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

ComboFix 13-09-10.03 - Bispinosa 12.09.2013  12:50:04.1.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.6126.4821 [GMT 2:00]
ausgeführt von:: c:\users\Bispinosa\Downloads\ComboFix.exe
AV: Kaspersky PURE 3.0 *Disabled/Updated* {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5}
FW: Kaspersky PURE 3.0 *Disabled* {FB2ABE9A-01A4-4539-FCD2-C7EA1246D49E}
SP: Kaspersky PURE 3.0 *Disabled/Updated* {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Delta\delta\1.8.24.6\deltaTlbr.dll
c:\programdata\BrowserDefender
c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\bl
c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe
c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.settings
c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\dm
c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\00
c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\01
c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\02
c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\03
c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\10
c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\11
c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\12
c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\13
c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\20
c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\21
c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\22
c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\23
c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\uninstall.exe
c:\programdata\DSearchLink
c:\programdata\DSearchLink\DSearchLink.exe
c:\users\Bispinosa\AppData\Local\Minibar
c:\users\Bispinosa\AppData\Local\Minibar\chrome.crx
c:\users\Bispinosa\AppData\Local\Minibar\chrome.pem
c:\users\Bispinosa\AppData\Local\Minibar\chrome\background.html
c:\users\Bispinosa\AppData\Local\Minibar\chrome\cached_http_request.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\extension_info.json
c:\users\Bispinosa\AppData\Local\Minibar\chrome\icons\icon128.png
c:\users\Bispinosa\AppData\Local\Minibar\chrome\icons\icon19.png
c:\users\Bispinosa\AppData\Local\Minibar\chrome\icons\icon32.png
c:\users\Bispinosa\AppData\Local\Minibar\chrome\icons\icon48.png
c:\users\Bispinosa\AppData\Local\Minibar\chrome\includes\content.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\includes\content_kango.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\includes\content_menu.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\includes\content_messaging.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\includes\content_pageutils.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\includes\content_popup.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\includes\content_toolbar.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\includes\content_toolbar_customfixes.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\includes\content_userscript.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\initial_config.json
c:\users\Bispinosa\AppData\Local\Minibar\chrome\kango-ui\button.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\kango-ui\toolbar.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\kango-ui\ui.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\kango\browser.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\kango\console.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\kango\event_listener.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\kango\initialize.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\kango\io.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\kango\jsonstorage.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\kango\kango.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\kango\lang.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\kango\messaging.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\kango\userscript_engine.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\kango\xhr.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\main.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\manifest.json
c:\users\Bispinosa\AppData\Local\Minibar\chrome\minibar\actions.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\minibar\cachedxhr.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\minibar\config.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\minibar\macros.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\minibar\minibar.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\MinibarPlugin.dll
c:\users\Bispinosa\AppData\Local\Minibar\chrome\popup.html
c:\users\Bispinosa\AppData\Local\Minibar\chrome\popup.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome\tab.html
c:\users\Bispinosa\AppData\Local\Minibar\chrome\tab.js
c:\users\Bispinosa\AppData\Local\Minibar\chrome_installer.js
c:\users\Bispinosa\AppData\Local\Minibar\common.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome.manifest
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\content.xul
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\extension_info.json
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\icons\icon128.png
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\icons\icon19.png
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\icons\icon32.png
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\icons\icon48.png
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\button.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\popup.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\popup_window.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\popup_window.xul
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\bottom-left.png
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\bottom-middle.png
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\bottom-right.png
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\middle-left.png
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\middle-right.png
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\style.css
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\tail-bottom.png
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\tail-left.png
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\tail-right.png
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\tail-top.png
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\top-left.png
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\top-middle.png
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\top-right.png
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\toolbar.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\toolbar_stub.html
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango-ui\ui.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango\browser.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango\console.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango\event_listener.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango\initialize.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango\io.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango\jsonstorage.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango\kango.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango\lang.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango\messaging.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango\storage.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango\uninstall_observer.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango\userscript_engine.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\kango\xhr.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\main.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\minibar\actions.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\minibar\cachedxhr.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\minibar\config.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\minibar\homepage_helper.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\minibar\macros.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\minibar\minibar.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\minibar\search_helper.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\minibar\search_hook.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\chrome\content\minibar\tabpage_helper.js
c:\users\Bispinosa\AppData\Local\Minibar\firefox\install.rdf
c:\users\Bispinosa\AppData\Local\Minibar\firefox\plugins\npMinibarPlugin.dll
c:\users\Bispinosa\AppData\Local\Minibar\firefox_installer.js
c:\users\Bispinosa\AppData\Local\Minibar\ie_installer.js
c:\users\Bispinosa\AppData\Local\Minibar\minibar.crx
c:\users\Bispinosa\AppData\Local\Minibar\minibar.xpi
c:\users\Bispinosa\AppData\Local\Minibar\SettingsHelper.exe
c:\users\Bispinosa\AppData\Local\Minibar\Uninstall.exe
c:\users\Bispinosa\AppData\Local\Minibar\update_chrome.xml
.
.
(((((((((((((((((((((((((((((((((((((((   Treiber/Dienste   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_BrowserDefendert
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-08-12 bis 2013-09-12  ))))))))))))))))))))))))))))))
.
.
2013-09-12 10:56 . 2013-09-12 10:56	--------	d-----w-	c:\users\Default\AppData\Local\temp
2013-09-11 20:40 . 2013-09-12 06:06	692616	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2013-09-11 20:40 . 2013-09-11 20:40	--------	d-----w-	c:\windows\system32\Macromed
2013-09-11 17:19 . 2013-09-11 17:19	--------	d-----w-	c:\program files (x86)\7-Zip
2013-09-11 17:13 . 2013-09-11 17:13	--------	d-----w-	c:\program files (x86)\Delta
2013-09-11 17:12 . 2013-09-11 17:13	--------	d-----w-	c:\program files (x86)\WebConnect
2013-09-11 17:12 . 2013-09-11 17:12	--------	d-----w-	c:\program files (x86)\OpenIt
2013-09-11 08:30 . 2013-09-11 08:30	--------	d-----w-	C:\FRST
2013-09-11 08:24 . 2012-02-17 06:38	1031680	----a-w-	c:\windows\system32\rdpcore.dll
2013-09-11 08:24 . 2012-02-17 05:34	826880	----a-w-	c:\windows\SysWow64\rdpcore.dll
2013-09-11 08:24 . 2012-02-17 04:58	210944	----a-w-	c:\windows\system32\drivers\rdpwd.sys
2013-09-11 08:24 . 2012-02-17 04:57	23552	----a-w-	c:\windows\system32\drivers\tdtcp.sys
2013-09-11 08:20 . 2013-09-11 08:20	--------	d-----w-	c:\program files (x86)\Minibar
2013-09-11 08:19 . 2013-09-11 08:19	--------	d-----w-	c:\windows\SysWow64\searchplugins
2013-09-11 08:19 . 2013-09-11 08:19	--------	d-----w-	c:\windows\SysWow64\Extensions
2013-09-11 08:18 . 2013-09-11 08:18	--------	d-----w-	c:\programdata\Babylon
2013-09-10 09:35 . 2013-09-10 09:35	--------	d-----w-	c:\program files\Microsoft Mouse and Keyboard Center
2013-09-10 09:30 . 2012-07-26 04:55	785512	----a-w-	c:\windows\system32\drivers\Wdf01000.sys
2013-09-10 09:30 . 2012-07-26 04:55	54376	----a-w-	c:\windows\system32\drivers\WdfLdr.sys
2013-09-10 09:30 . 2012-07-26 02:36	9728	----a-w-	c:\windows\system32\Wdfres.dll
2013-09-10 09:25 . 2013-09-10 09:25	--------	d-----w-	c:\program files\Apoint
2013-09-10 09:24 . 2013-09-10 09:24	--------	d-----w-	c:\program files\DIFX
2013-09-10 09:05 . 2013-08-20 13:33	39200	----a-w-	c:\windows\system32\drivers\nvvad64v.sys
2013-09-10 09:05 . 2013-08-20 13:32	29984	----a-w-	c:\windows\system32\nvaudcap64v.dll
2013-09-10 09:05 . 2013-08-20 13:32	28448	----a-w-	c:\windows\SysWow64\nvaudcap32v.dll
2013-09-10 09:01 . 2013-09-10 09:01	--------	d-----w-	c:\users\UpdatusUser
2013-09-10 09:01 . 2013-09-10 09:15	--------	d-----w-	c:\program files (x86)\DriverTuner
2013-09-10 09:00 . 2013-09-10 09:00	--------	d-----w-	c:\program files (x86)\AGEIA Technologies
2013-09-10 08:59 . 2013-06-20 04:17	3253909	----a-w-	c:\windows\system32\nvcoproc.bin
2013-09-10 08:44 . 2013-09-10 08:44	--------	d-----w-	C:\NVIDIA
2013-09-10 08:18 . 2013-07-21 16:41	13760	----a-w-	c:\windows\system32\drivers\DRHMSR64.sys
2013-09-10 08:18 . 2011-11-03 17:05	21984	----a-w-	c:\windows\system32\drivers\DRHARD64.sys
2013-09-10 08:18 . 2013-07-21 16:41	13760	----a-w-	c:\windows\SysWow64\drivers\DRHMSR64.sys
2013-09-10 08:18 . 2011-11-03 17:05	21984	----a-w-	c:\windows\SysWow64\drivers\DRHARD64.sys
2013-09-10 08:18 . 2013-09-10 08:18	--------	d-----w-	c:\program files (x86)\Dr. Hardware 2013
2013-09-10 07:11 . 2013-09-12 05:58	--------	d-----w-	c:\programdata\clear.fi
2013-09-10 07:10 . 2012-07-11 15:09	64856	----a-w-	c:\windows\system32\klfphc.dll
2013-09-10 07:09 . 2011-06-02 12:39	66616	----a-w-	c:\windows\system32\drivers\CSVirtualDiskDrv.sys
2013-09-10 07:09 . 2013-09-10 07:09	--------	dc----w-	c:\windows\system32\DRVSTORE
2013-09-10 07:09 . 2011-06-02 12:39	84536	----a-w-	c:\windows\system32\drivers\CSCrySec.sys
2013-09-10 07:08 . 2013-09-10 07:08	--------	d-----w-	c:\windows\ELAMBKUP
2013-09-10 07:08 . 2013-09-10 07:08	--------	d-----w-	c:\program files (x86)\Common Files\InfoWatch
2013-09-10 07:08 . 2013-09-12 11:00	--------	d-----w-	c:\programdata\Kaspersky Lab
2013-09-10 07:08 . 2013-09-10 07:08	--------	d-----w-	c:\program files (x86)\Kaspersky Lab
2013-09-10 07:07 . 2013-09-10 07:30	90208	----a-w-	c:\windows\system32\drivers\klflt.sys
2013-09-10 07:07 . 2013-09-10 07:30	620128	----a-w-	c:\windows\system32\drivers\klif.sys
2013-09-10 06:51 . 2013-09-10 06:51	--------	d-----w-	c:\windows\SysWow64\XPSViewer
2013-09-10 06:51 . 2013-09-10 06:51	--------	d-----w-	c:\windows\SysWow64\drivers\UMDF\de-DE
2013-09-10 06:51 . 2013-09-10 06:51	--------	d-----w-	c:\windows\SysWow64\drivers\de-DE
2013-09-10 06:51 . 2013-09-10 06:51	--------	d-----w-	c:\windows\SysWow64\de
2013-09-10 06:51 . 2013-09-10 06:51	--------	d-----w-	c:\windows\SysWow64\0407
2013-09-10 06:51 . 2013-09-10 06:51	--------	d-----w-	c:\windows\de-DE
2013-09-10 06:51 . 2013-09-09 21:58	--------	d-----w-	c:\windows\SysWow64\wbem\de-DE
2013-09-10 06:51 . 2013-09-10 09:38	--------	d-----w-	c:\windows\system32\drivers\de-DE
2013-09-10 06:51 . 2013-09-10 06:51	--------	d-----w-	c:\windows\system32\drivers\UMDF\de-DE
2013-09-10 06:51 . 2013-09-10 06:51	--------	d-----w-	c:\windows\system32\0407
2013-09-10 06:51 . 2013-09-10 06:51	--------	d-----w-	c:\windows\system32\de
2013-09-10 06:51 . 2013-09-09 21:58	--------	d-----w-	c:\windows\system32\wbem\de-DE
2013-09-10 06:49 . 2013-09-10 06:49	3584	----a-w-	c:\windows\system32\Spool\prtprocs\x64\de-DE\LXKPTPRC.DLL.mui
2013-09-10 06:37 . 2013-09-10 06:37	--------	d-----w-	c:\windows\NAPP_Dism_Log
2013-09-10 06:28 . 2013-09-10 06:28	--------	d-----w-	C:\kleaner.tmp
2013-09-10 06:06 . 2012-06-02 22:19	2428952	----a-w-	c:\windows\system32\wuaueng.dll
2013-09-10 06:06 . 2012-06-02 22:19	57880	----a-w-	c:\windows\system32\wuauclt.exe
2013-09-10 06:06 . 2012-06-02 22:19	44056	----a-w-	c:\windows\system32\wups2.dll
2013-09-10 06:06 . 2012-06-02 22:15	2622464	----a-w-	c:\windows\system32\wucltux.dll
2013-09-10 06:06 . 2013-09-10 06:06	--------	d-----w-	c:\program files (x86)\OEM
2013-09-10 06:06 . 2012-06-02 22:19	38424	----a-w-	c:\windows\system32\wups.dll
2013-09-10 06:06 . 2012-06-02 22:19	701976	----a-w-	c:\windows\system32\wuapi.dll
2013-09-10 06:06 . 2012-06-02 22:15	99840	----a-w-	c:\windows\system32\wudriver.dll
2013-09-10 06:06 . 2013-09-10 06:06	--------	d-----w-	c:\program files\Accessory Store
2013-09-10 06:04 . 2012-06-02 13:19	186752	----a-w-	c:\windows\system32\wuwebv.dll
2013-09-10 06:04 . 2012-06-02 13:15	36864	----a-w-	c:\windows\system32\wuapp.exe
2013-09-10 06:02 . 2013-09-11 08:26	--------	d-----w-	c:\users\Bispinosa
2013-09-09 21:58 . 2013-09-09 21:58	--------	d-----w-	c:\windows\SysWow64\wbem\en-US
2013-09-09 21:58 . 2013-09-09 21:58	--------	d-----w-	c:\windows\system32\wbem\en-US
2013-09-09 21:40 . 2013-09-09 21:40	--------	d-----w-	c:\program files (x86)\Cyberlink
2013-09-09 21:38 . 2013-09-10 08:06	--------	d-----w-	c:\programdata\CyberLink
2013-09-09 21:36 . 2010-12-05 02:31	9177600	----a-w-	c:\programdata\Microsoft\OEMOffice14\Office14\Updates\mso.msp
2013-09-09 21:35 . 2010-11-03 03:45	1632144	----a-w-	c:\programdata\Microsoft\OEMOffice14\OStarter\de-de\SetupConsumerC2ROLW.exe
2013-09-09 21:35 . 2010-11-03 03:45	1632144	----a-w-	c:\programdata\Microsoft\OEMOffice14\OStarter\de-de\SetupConsumerC2R.exe
2013-09-09 21:35 . 2010-03-21 00:49	21952	----a-w-	c:\programdata\Microsoft\OEMOffice14\OStarter\de-de\launchofficeintl.dll
2013-09-09 21:35 . 2010-02-28 09:33	5336456	----a-w-	c:\programdata\Microsoft\OEMOffice14\OStarter\de-de\Office.exe
2013-09-09 21:35 . 2010-03-30 21:24	32998400	----a-w-	c:\programdata\Microsoft\OEMOffice14\OStarter\de-de\click2run64.msi
2013-09-09 21:35 . 2010-10-09 06:31	101888	----a-w-	c:\programdata\Microsoft\OEMOffice14\OOBE\oobe-x-none.msp
2013-09-09 21:35 . 2010-06-25 16:24	2376704	----a-w-	c:\programdata\Microsoft\OEMOffice14\OOBE\oobe.msi
2013-09-09 21:35 . 2010-03-30 21:20	26053120	----a-w-	c:\programdata\Microsoft\OEMOffice14\OStarter\de-de\click2run.msi
2013-09-09 21:33 . 2013-09-10 06:57	--------	d-----w-	c:\program files (x86)\Microsoft
2013-09-09 21:24 . 2010-12-20 10:08	8192	----a-w-	c:\windows\system32\drivers\IntelMEFWVer.dll
2013-09-09 21:23 . 2013-09-09 21:23	--------	d-----w-	c:\program files (x86)\Common Files\postureAgent
2013-09-09 21:22 . 2013-09-09 21:22	--------	d-----w-	c:\program files (x86)\Etron Technology
2013-09-09 21:19 . 2010-11-05 21:45	438808	----a-w-	c:\windows\system32\drivers\iaStor.sys
2013-09-09 21:18 . 2013-09-09 21:18	--------	d-----w-	c:\programdata\EgisTec
2013-09-09 21:17 . 2013-09-09 21:17	--------	d---a-w-	C:\book
2013-09-09 21:15 . 2011-06-30 06:03	54784	----a-w-	c:\windows\system32\drivers\EtronHub3.sys
2013-09-09 21:15 . 2013-09-12 10:59	--------	d-----w-	c:\programdata\NVIDIA
2013-09-09 21:10 . 2013-09-10 09:23	--------	d-----w-	c:\windows\SysWow64\RTCOM
2013-09-09 21:10 . 2013-09-09 21:10	--------	d-----w-	c:\program files\Realtek
2013-09-09 21:10 . 2010-11-04 19:38	2580824	----a-w-	c:\windows\system32\WavesGUILib.dll
2013-09-09 21:10 . 2010-07-23 00:48	74064	----a-w-	c:\windows\SysWow64\SFCOM.dll
2013-09-09 21:10 . 2009-11-24 17:55	518896	----a-w-	c:\windows\system32\SRSTSX64.dll
2013-09-09 21:10 . 2009-11-24 17:55	211184	----a-w-	c:\windows\system32\SRSTSH64.dll
2013-09-09 21:10 . 2009-11-24 17:55	198896	----a-w-	c:\windows\system32\SRSHP64.dll
2013-09-09 21:09 . 2013-09-09 21:09	--------	d-----w-	c:\program files (x86)\Realtek
2013-09-09 21:08 . 2013-09-10 09:06	--------	d-----w-	c:\program files (x86)\NVIDIA Corporation
2013-09-09 21:08 . 2013-09-10 09:03	--------	d-----w-	c:\programdata\NVIDIA Corporation
2013-09-09 21:07 . 2013-06-21 12:06	15920536	----a-w-	c:\windows\system32\nvwgf2umx.dll
2013-09-09 21:07 . 2011-03-03 15:59	1359976	----a-w-	c:\windows\system32\nvhdagenco642040.dll
2013-09-09 21:07 . 2013-06-21 12:06	12427240	----a-w-	c:\windows\SysWow64\nvd3dum.dll
2013-09-09 21:07 . 2011-03-24 06:48	1614440	----a-w-	c:\windows\system32\nvdispco642090.dll
2013-09-09 21:07 . 2011-03-24 06:48	1359976	----a-w-	c:\windows\system32\nvgenco642040.dll
2013-09-09 21:07 . 2013-06-21 12:06	2936208	----a-w-	c:\windows\system32\nvapi64.dll
2013-09-09 21:07 . 2011-03-24 06:48	67176	----a-w-	c:\windows\system32\OpenCL.dll
2013-09-09 21:07 . 2011-03-24 06:48	57960	----a-w-	c:\windows\SysWow64\OpenCL.dll
2013-09-09 21:07 . 2011-03-24 06:48	11240	----a-w-	c:\windows\system32\drivers\nvBridge.kmd
2013-09-09 21:07 . 2013-09-10 09:05	--------	d-----w-	c:\program files\NVIDIA Corporation
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-09-12 06:06 . 2011-07-11 10:28	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-09-10 07:30 . 2012-10-18 12:50	54368	----a-w-	c:\windows\system32\drivers\kltdi.sys
2013-09-10 07:30 . 2012-08-13 14:49	178448	----a-w-	c:\windows\system32\drivers\kneps.sys
2013-09-10 06:49 . 2013-09-10 06:49	2560	----a-w-	c:\windows\SysWow64\drivers\de-DE\qwavedrv.sys.mui
2013-09-10 06:49 . 2013-09-10 06:49	5632	----a-w-	c:\windows\SysWow64\drivers\de-DE\ndiscap.sys.mui
2013-09-10 06:49 . 2013-09-10 06:49	2560	----a-w-	c:\windows\SysWow64\drivers\de-DE\scfilter.sys.mui
2013-09-10 06:49 . 2013-09-10 06:49	51712	----a-w-	c:\windows\SysWow64\drivers\de-DE\tcpip.sys.mui
2013-09-10 06:49 . 2013-09-10 06:49	29696	----a-w-	c:\windows\SysWow64\drivers\de-DE\bfe.dll.mui
2013-09-10 06:49 . 2013-09-10 06:49	16896	----a-w-	c:\windows\SysWow64\drivers\de-DE\pacer.sys.mui
2013-09-09 21:16 . 2010-06-24 18:33	22240	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-08-05 09:50 . 2011-07-11 09:24	53248	----a-w-	c:\windows\SysWow64\CSVer.dll
2013-07-16 15:14 . 2013-07-16 15:14	3486680	----a-w-	c:\windows\system32\drivers\RTKVHD64.sys
2013-07-16 13:20 . 2013-07-16 13:20	29216256	----a-w-	c:\windows\system32\RCoRes64.dat
2013-07-16 08:52 . 2013-07-16 08:52	147160	----a-w-	c:\windows\system32\RCoInstII64.dll
2013-07-09 12:20 . 2013-07-09 12:20	3760344	----a-w-	c:\windows\system32\RtkAPO64.dll
2013-07-08 13:32 . 2013-07-08 13:32	4810008	----a-w-	c:\windows\system32\RTKSMlfx.dll
2013-07-08 13:31 . 2013-07-08 13:31	758104	----a-w-	c:\windows\system32\RTKSMSettingsIPC.dll
2013-07-01 22:27 . 2013-07-01 22:27	1795952	----a-w-	c:\windows\system32\WdfCoInstaller01011.dll
2013-07-01 22:27 . 2013-07-01 22:27	100312	----a-w-	c:\windows\system32\drivers\TeeDriverx64.sys
2013-06-27 09:12 . 2013-06-27 09:12	2795224	----a-w-	c:\windows\system32\RtPgEx64.dll
2013-06-26 13:18 . 2013-06-26 13:18	920832	----a-w-	c:\windows\system32\MaxxAudioAPOShell64.dll
2013-06-26 13:18 . 2013-06-26 13:18	14041344	----a-w-	c:\windows\system32\MaxxAudioRealtek64.dll
2013-06-26 13:17 . 2013-06-26 13:17	3603712	----a-w-	c:\windows\system32\MaxxAudioVnN64.dll
2013-06-26 13:17 . 2013-06-26 13:17	2032896	----a-w-	c:\windows\system32\MaxxAudioEQ64.dll
2013-06-26 13:17 . 2013-06-26 13:17	1904384	----a-w-	c:\windows\system32\MaxxAudioRealtek264.dll
2013-06-26 13:17 . 2013-06-26 13:17	2103040	----a-w-	c:\windows\system32\WavesGUILib64.dll
2013-06-26 13:17 . 2013-06-26 13:17	27515648	----a-w-	c:\windows\system32\MaxxAudioVnA64.dll
2013-06-21 10:23 . 2011-03-23 22:53	6496544	----a-w-	c:\windows\system32\nvcpl.dll
2013-06-21 10:23 . 2011-03-23 22:52	3514656	----a-w-	c:\windows\system32\nvsvc64.dll
2013-06-21 10:23 . 2011-03-23 22:53	884512	----a-w-	c:\windows\system32\nvvsvc.exe
2013-06-21 10:23 . 2011-03-23 22:53	63776	----a-w-	c:\windows\system32\nvshext.dll
2013-06-21 10:23 . 2011-03-23 22:53	2555680	----a-w-	c:\windows\system32\nvsvcr.dll
2013-06-21 10:23 . 2011-03-23 22:53	237856	----a-w-	c:\windows\system32\nvmctray.dll
2013-06-21 06:01 . 2013-06-21 06:01	109848	----a-w-	c:\windows\system32\AcpiServiceVnA64.dll
2013-06-21 03:16 . 2013-06-21 03:16	566048	----a-w-	c:\windows\SysWow64\nvStreaming.exe
2013-06-18 14:52 . 2013-06-18 14:52	1004248	----a-w-	c:\windows\system32\RtkApi64.dll
2013-06-18 12:44 . 2013-06-18 12:44	2736160	----a-w-	c:\windows\system32\FMAPO64.dll
2013-06-18 12:00 . 2013-06-18 12:00	947760	----a-w-	c:\windows\system32\SFSS_APO.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{2316c625-b487-4410-a1a5-ff040b65245f}]
2013-08-30 02:16	149288	----a-w-	c:\program files (x86)\WebConnect\WebConnectBHO.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{AA74D58F-ACD0-450D-A85E-6C04B171C044}]
2013-02-26 09:35	331264	----a-w-	c:\program files (x86)\Minibar\Minibar.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\KAVOverlayIcon]
@="{dd230880-495a-11d1-b064-008048ec2fc5}"
[HKEY_CLASSES_ROOT\CLSID\{dd230880-495a-11d1-b064-008048ec2fc5}]
2012-12-20 16:20	459784	----a-w-	c:\program files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\shellex.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SDP"="c:\users\Bispinosa\AppData\Local\FilesFrog Update Checker\update_checker.exe" [2013-01-31 201808]
"AppsHat"="c:\users\Bispinosa\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe" [2012-10-26 202752]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SuiteTray"="c:\program files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [2011-04-02 340848]
"EgisTecPMMUpdate"="c:\program files (x86)\EgisTec IPS\PmmUpdate.exe" [2011-03-29 408432]
"EgisUpdate"="c:\program files (x86)\EgisTec IPS\EgisUpdate.exe" [2011-03-29 202608]
"Norton Online Backup"="c:\program files (x86)\Symantec\Norton Online Backup\NOBuClient.exe" [2010-06-01 1155928]
"ArcadeMovieService"="c:\program files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe" [2011-05-13 177448]
"Hotkey Utility"="c:\program files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe" [2011-08-11 627304]
"AVP"="c:\program files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe" [2012-12-20 356968]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"IsMyWinLockerReboot"="msiexec.exe" [2010-11-21 73216]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
.
R2 0053221378793026mcinstcleanup;McAfee Application Installer Cleanup (0053221378793026);c:\windows\TEMP\005322~1.EXE;c:\windows\TEMP\005322~1.EXE [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
R2 Update WebConnect;Update WebConnect;c:\program files (x86)\WebConnect\updateWebConnect.exe;c:\program files (x86)\WebConnect\updateWebConnect.exe [x]
R3 EgisTec Ticket Service;EgisTec Ticket Service;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [x]
R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver;c:\windows\system32\Drivers\EtronHub3.sys;c:\windows\SYSNATIVE\Drivers\EtronHub3.sys [x]
R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver;c:\windows\system32\Drivers\EtronXHCI.sys;c:\windows\SYSNATIVE\Drivers\EtronXHCI.sys [x]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [x]
R3 netr28x;Ralink 802.11n Wireless Driver for Windows Vista;c:\windows\system32\DRIVERS\netr28x.sys;c:\windows\SYSNATIVE\DRIVERS\netr28x.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 CSCrySec;InfoWatch Encrypt Sector Library driver;c:\windows\system32\DRIVERS\CSCrySec.sys;c:\windows\SYSNATIVE\DRIVERS\CSCrySec.sys [x]
S1 CSVirtualDiskDrv;InfoWatch Virtual Disk driver;c:\windows\system32\DRIVERS\CSVirtualDiskDrv.sys;c:\windows\SYSNATIVE\DRIVERS\CSVirtualDiskDrv.sys [x]
S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys;c:\windows\SYSNATIVE\DRIVERS\klim6.sys [x]
S1 kltdi;kltdi;c:\windows\system32\DRIVERS\kltdi.sys;c:\windows\SYSNATIVE\DRIVERS\kltdi.sys [x]
S1 kneps;kneps;c:\windows\system32\DRIVERS\kneps.sys;c:\windows\SYSNATIVE\DRIVERS\kneps.sys [x]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDFilter.sys [x]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDNServ.sys [x]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDVDisk.sys [x]
S2 CSObjectsSrv;Verwaltungsservice vom CryproStorage-System;c:\program files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe;c:\program files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [x]
S2 DRHARD64;DRHARD64;c:\windows\system32\drivers\DRHARD64.sys;c:\windows\SYSNATIVE\drivers\DRHARD64.sys [x]
S2 DRHMSR64;DRHMSR64;c:\windows\system32\drivers\DRHMSR64.sys;c:\windows\SYSNATIVE\drivers\DRHMSR64.sys [x]
S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe;c:\program files (x86)\Acer\Registration\GREGsvc.exe [x]
S2 Live Updater Service;Live Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe;c:\program files\Acer\Acer Updater\UpdaterService.exe [x]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe;c:\program files (x86)\Nero\Update\NASvc.exe [x]
S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 USBS3S4Detection;USBS3S4Detection;c:\oem\USBDECTION\USBS3S4Detection.exe;c:\oem\USBDECTION\USBS3S4Detection.exe [x]
S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys;c:\windows\SYSNATIVE\DRIVERS\dc3d.sys [x]
S3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\DRIVERS\klkbdflt.sys;c:\windows\SYSNATIVE\DRIVERS\klkbdflt.sys [x]
S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys;c:\windows\SYSNATIVE\DRIVERS\klmouflt.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 Point64;Microsoft Mouse and Keyboard Center Filter Driver;c:\windows\system32\DRIVERS\point64.sys;c:\windows\SYSNATIVE\DRIVERS\point64.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
Inhalt des "geplante Tasks" Ordners
.
2013-09-12 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-11 06:06]
.
2013-09-12 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2651500920-1956776048-2349371349-1001Core.job
- c:\users\Bispinosa\AppData\Local\Google\Update\GoogleUpdate.exe [2013-09-10 06:50]
.
2013-09-12 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2651500920-1956776048-2349371349-1001UA.job
- c:\users\Bispinosa\AppData\Local\Google\Update\GoogleUpdate.exe [2013-09-10 06:50]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\KAVOverlayIcon]
@="{dd230880-495a-11d1-b064-008048ec2fc5}"
[HKEY_CLASSES_ROOT\CLSID\{dd230880-495a-11d1-b064-008048ec2fc5}]
2012-12-20 16:22	492040	----a-w-	c:\program files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\shellex.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2013-07-09 13632216]
"Nvtmru"="c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [2013-08-27 1028896]
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www2.delta-search.com/?babsrc=HP_ss&mntrId=8CE9C89CDC2D6E60&affID=119357&tt=110913_221&tsp=5002
uLocal Page = c:\windows\system32\blank.htm
mDefault_Page_URL = hxxp://acer.msn.com
mStart Page = hxxp://acer.msn.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: {{AAA38851-3CFF-475F-B5E0-720D3645E4A5} - {AAA38851-3CFF-475F-B5E0-720D3645E4A5} - c:\program files (x86)\Minibar\Minibar.dll
TCP: DhcpNameServer = 192.168.178.1
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
Toolbar-{82E1477C-B154-48D3-9891-33D83C26BCD3} - c:\program files (x86)\Delta\delta\1.8.24.6\deltaTlbr.dll
Toolbar-Locked - (no file)
HKLM-Run-Apoint - c:\program files (x86)\Apoint\Apoint.exe
AddRemove-{15D2D75C-9CB2-4efd-BAD7-B9B4CB4BC693} - c:\programdata\BrowserDefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\uninstall.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_168_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_168_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_168_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_168_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_168.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_168.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_168.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_168.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
c:\program files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2013-09-12  13:18:37 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2013-09-12 11:18
.
Vor Suchlauf: 9 Verzeichnis(se), 447.448.051.712 Bytes frei
Nach Suchlauf: 15 Verzeichnis(se), 448.046.292.992 Bytes frei
.
- - End Of File - - F6ECA092BEFFCFE40DF15E795F39561F
         

Rechner hängt sich nach ausführen von Combofix.exe jetzt noch mehr auf, und Hochfahren dauert noch länger