Sich selbst öffnende (Werbe-)Webseiten, Startseiten-Änderung

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-06-2014
Ran by Heidi (administrator) on LENOVO-PC on 20-06-2014 15:05:20
Running from C:\Users\Heidi\Desktop
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Just Develop It) C:\Program Files (x86)\MyPC Backup\BackupStack.exe
(Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\nis.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
() C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\nis.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE
(MyPCBackup.com) C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe
(Pokki) C:\Users\Heidi\AppData\Local\Pokki\Engine\StartMenuIndexer.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
(Pokki) C:\Users\Heidi\AppData\Local\Pokki\Engine\HostAppService.exe
(Pokki) C:\Users\Heidi\AppData\Local\Pokki\Engine\HostAppService.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbwe\livecomm.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2013-08-11] (IDT, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2777840 2013-08-14] (Synaptics Incorporated)
HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17111056 2014-02-10] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [193008 2014-02-10] (Lenovo(beijing) Limited)
HKLM-x32\...\Run: [331BigDog] => C:\Program Files (x86)\USB Camera\VM331STI.EXE [552960 2013-05-14] (Vimicro)
HKLM-x32\...\Run: [Lenovo App Shop] => C:\Program Files (x86)\Lenovo\LenovoAppShop\bin\ismagent.exe [156000 2013-07-19] (Intel Corporation)
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [214312 2011-12-06] (CyberLink Corp.)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-09-07] ( (Atheros Communications))
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2850316643-2420343241-806179859-1001\...\Run: [Pokki] => C:\WINDOWS\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\bpsvc.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\browsersafeguard.exe: [Debugger] tasklist.exe
IFEO\dprotectsvc.exe: [Debugger] tasklist.exe
IFEO\jumpflip: [Debugger] tasklist.exe
IFEO\protectedsearch.exe: [Debugger] tasklist.exe
IFEO\searchinstaller.exe: [Debugger] tasklist.exe
IFEO\searchprotection.exe: [Debugger] tasklist.exe
IFEO\searchprotector.exe: [Debugger] tasklist.exe
IFEO\searchsettings.exe: [Debugger] tasklist.exe
IFEO\searchsettings64.exe: [Debugger] tasklist.exe
IFEO\snapdo.exe: [Debugger] tasklist.exe
IFEO\stinst32.exe: [Debugger] tasklist.exe
IFEO\stinst64.exe: [Debugger] tasklist.exe
IFEO\umbrella.exe: [Debugger] tasklist.exe
IFEO\utiljumpflip.exe: [Debugger] tasklist.exe
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
IFEO\websteroids.exe: [Debugger] tasklist.exe
IFEO\websteroidsservice.exe: [Debugger] tasklist.exe
Startup: C:\Users\Heidi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
ShortcutTarget: MyPC Backup.lnk -> C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)
HKLM\...\AppCertDlls: [x64] -> c:\program files (x86)\settings manager\systemk\x64\sysapcrt.dll
HKLM\...\AppCertDlls: [x86] -> c:\program files (x86)\settings manager\systemk\sysapcrt.dll
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

ProxyServer: http=127.0.0.1:14183;https=127.0.0.1:14183
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1400514282&from=tugs&uid=HGSTXHTS545050A7E380_TMA55CPY3JKGNL3JKGNLX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1400514282&from=tugs&uid=HGSTXHTS545050A7E380_TMA55CPY3JKGNL3JKGNLX&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM - {6D8294BC-F6B9-4C64-9174-5BCCFB8E85B5} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=LCJB
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2492} URL = hxxp://www.default-search.net/search?sid=492&aid=102&itype=a&ver=12692&tm=352&src=ds&p={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {6D8294BC-F6B9-4C64-9174-5BCCFB8E85B5} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=LCJB
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2492} URL = hxxp://www.default-search.net/search?sid=492&aid=102&itype=a&ver=12692&tm=352&src=ds&p={searchTerms}
SearchScopes: HKCU - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2492} URL = hxxp://www.default-search.net/search?sid=492&aid=102&itype=a&ver=12692&tm=352&src=ds&p={searchTerms}
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2492} URL = hxxp://www.default-search.net/search?sid=492&aid=102&itype=a&ver=12692&tm=352&src=ds&p={searchTerms}
SearchScopes: HKCU - {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = hxxp://nortonsafe.search.ask.com/web?q={SEARCHTERMS}&o=APN10506&l=dis&prt=NIS&chn=retail&geo=DE&ver=21&locale=de_DE&gct=kwd&qsrc=2869
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\IPS\IPSBHO.DLL (Symantec Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation)
Toolbar: HKCU - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\1j3fvgz4.default
FF NewTab: hxxp://www.trovi.com/?gd=&ctid=CT3324369&octid=EB_ORIGINAL_CTID&ISID=MB825A3A9-2EE3-42A1-832B-7A392BB10B28&SearchSource=69&CUI=&SSPV=SP215B_sp_ff&Lay=1&UM=5&UP=SPA5E9B081-C8CC-4AAE-BE5F-CACABF066B77
FF DefaultSearchEngine: webssearches
FF SearchEngineOrder.1: default-search.net
FF SelectedSearchEngine: webssearches
FF Homepage: https://www.startpage.com/
FF Keyword.URL: user_pref("keyword.URL", "");
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_14_0_0_125.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_125.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF - C:\Program Files (x86)\Nitro\Pro 8\npnitromozilla.dll (Nitro PDF)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 - C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 - C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @tools.Software.com/Software Update;version=3 - C:\Program Files (x86)\Software\Update\1.3.25.0\npSoftwareUpdate3.dll (The Software Group)
FF Plugin-x32: @tools.Software.com/Software Update;version=9 - C:\Program Files (x86)\Software\Update\1.3.25.0\npSoftwareUpdate3.dll (The Software Group)
FF Plugin HKCU: intel.com/AppUp - C:\Program Files (x86)\Lenovo\LenovoAppShop\bin\npAppUp.dll (Intel)
FF Plugin HKCU: intel.com/AppUpx64 - C:\Program Files (x86)\Lenovo\LenovoAppShop\bin\npAppUp_x64.dll (Intel)
FF user.js: detected! => C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\1j3fvgz4.default\user.js
FF SearchPlugin: C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\1j3fvgz4.default\searchplugins\safesearch.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Settings Manager - C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\1j3fvgz4.default\Extensions\{35FB143E-3B2D-374D-E78E-3E8B20AB8C9C} [2014-05-19]
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\IPSFF [2014-05-29]
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\coFFPlgn [2014-06-20]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\coFFPlgn\ []
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\IPSFF [2014-05-29]
FF HKCU\...\Firefox\Extensions: [{C498947A-67CC-C868-A155-E77523522BAE}] - C:\Program Files (x86)\BlockAndSurf-soft\172.xpi

==================== Services (Whitelisted) =================

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-09-07] (Windows (R) Win 7 DDK provider)
R2 BackupStack; C:\Program Files (x86)\MyPC Backup\BackupStack.exe [36392 2014-03-14] (Just Develop It)
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-05-19] (globalUpdate) [File not signed]
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-05-19] (globalUpdate) [File not signed]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [314696 2014-05-21] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-04] (Intel Corporation)
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [1663880 2014-05-06] ()
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\NIS.exe [276376 2014-05-11] (Symantec Corporation)
R2 NitroDriverReadSpool8; C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe [230408 2013-07-24] (Nitro PDF Software)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390632 2012-04-24] ()
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [338944 2013-08-11] (IDT, Inc.) [File not signed]
R2 VeriFaceSrv; C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe [68368 2014-02-10] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-09-07] (Atheros) [File not signed]
S2 yQZdXFPIJUb; "C:\ProgramData\PcPPnBYFE\yQZdXFPIJUb.exe" [X]

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Qualcomm Atheros Communications, Inc.)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\BASHDefs\20140606.001\BHDrvx64.sys [1530160 2014-05-10] (Symantec Corporation)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-07] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1503000.00C\ccSetx64.sys [162392 2014-02-21] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [486192 2014-06-11] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142128 2014-06-11] (Symantec Corporation)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\IPSDefs\20140619.001\IDSvia64.sys [525016 2014-05-28] (Symantec Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\VirusDefs\20140619.023\ENG64.SYS [126040 2014-06-17] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\VirusDefs\20140619.023\EX64.SYS [2099288 2014-06-17] (Symantec Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3344352 2013-07-08] (Intel Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924504 2014-02-22] (Microsoft Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [34544 2013-08-14] (Synaptics Incorporated)
R1 SRTSP; C:\Windows\System32\Drivers\NISx64\1503000.00C\SRTSP64.SYS [875736 2014-02-13] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1503000.00C\SRTSPX64.SYS [36952 2013-07-31] (Symantec Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1503000.00C\SYMDS64.SYS [493656 2013-08-01] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1503000.00C\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\NISx64\1503000.00C\SymELAM.sys [23568 2013-08-01] (Symantec Corporation)
R3 SymEvent; C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-05-29] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1503000.00C\Ironx64.SYS [264280 2013-07-31] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1503000.00C\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [1065472 2013-08-30] (Vimicro Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
R0 Wof; C:\Windows\System32\Drivers\Wof.sys [157016 2014-03-13] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink)
R1 {55685567-4840-4a91-962b-49a412e9485a}Gw64; C:\Windows\System32\drivers\{55685567-4840-4a91-962b-49a412e9485a}Gw64.sys [61112 2014-05-28] (StdLib)
R1 {9edd0ea8-2819-47c2-8320-b007d5996f8a}Gw64; C:\Windows\System32\drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}Gw64.sys [61112 2014-05-22] (StdLib)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-20 15:05 - 2014-06-20 15:05 - 00020912 _____ () C:\Users\Heidi\Desktop\FRST.txt
2014-06-20 15:05 - 2014-06-20 15:05 - 00000000 ____D () C:\FRST
2014-06-20 15:04 - 2014-06-20 15:04 - 02082304 _____ (Farbar) C:\Users\Heidi\Desktop\FRST64.exe
2014-06-20 14:23 - 2014-06-20 14:23 - 00000451 _____ () C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2014-06-20 14:09 - 2014-05-15 00:47 - 04720640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-06-20 14:09 - 2014-05-13 09:01 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\BulkOperationHost.exe
2014-06-20 14:09 - 2014-05-13 07:07 - 02844160 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-06-20 14:09 - 2014-05-13 06:41 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-06-20 14:09 - 2014-05-13 06:27 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-06-20 14:09 - 2014-05-13 06:26 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll
2014-06-20 14:09 - 2014-05-13 05:59 - 01035264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-06-20 14:09 - 2014-05-13 05:41 - 01118720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-06-20 14:09 - 2014-05-13 05:31 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll
2014-06-20 14:09 - 2014-05-05 08:11 - 00440664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
2014-06-20 14:09 - 2014-05-05 08:11 - 00418136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2014-06-20 14:09 - 2014-05-05 08:11 - 00089944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
2014-06-20 14:09 - 2014-05-05 08:11 - 00027480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
2014-06-20 14:09 - 2014-05-03 13:29 - 01726224 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-06-20 14:09 - 2014-05-03 11:20 - 01473080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2014-06-20 14:09 - 2014-05-03 09:41 - 04190208 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-06-20 14:09 - 2014-05-03 09:40 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys
2014-06-20 14:09 - 2014-05-03 07:36 - 00997888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2014-06-20 14:09 - 2014-05-03 07:19 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncobjapi.dll
2014-06-20 14:09 - 2014-05-03 07:08 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedynos.dll
2014-06-20 14:09 - 2014-05-03 07:07 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedyn.dll
2014-06-20 14:09 - 2014-05-03 06:46 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncobjapi.dll
2014-06-20 14:09 - 2014-05-03 06:37 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedynos.dll
2014-06-20 14:09 - 2014-05-03 06:37 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedyn.dll
2014-06-20 14:09 - 2014-05-03 05:30 - 02641920 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-06-20 14:09 - 2014-05-03 05:27 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-06-20 14:09 - 2014-05-03 01:26 - 00050745 _____ () C:\WINDOWS\system32\srms.dat
2014-06-20 14:09 - 2014-05-01 15:19 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-06-20 14:09 - 2014-05-01 07:44 - 01025536 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-06-20 14:09 - 2014-05-01 07:34 - 03464192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-06-20 14:09 - 2014-04-30 09:11 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-06-20 14:09 - 2014-04-30 08:43 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwififlt.sys
2014-06-20 14:09 - 2014-04-30 08:41 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-06-20 14:09 - 2014-04-30 08:41 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys
2014-06-20 14:09 - 2014-04-30 08:41 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys
2014-06-20 14:09 - 2014-04-30 08:10 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-06-20 14:09 - 2014-04-30 07:45 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Robocopy.exe
2014-06-20 14:09 - 2014-04-30 06:48 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Robocopy.exe
2014-06-20 14:09 - 2014-04-30 06:24 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
2014-06-20 14:09 - 2014-04-30 06:23 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2014-06-20 14:09 - 2014-04-30 06:23 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2014-06-20 14:09 - 2014-04-30 06:23 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
2014-06-20 14:09 - 2014-04-30 06:21 - 01417216 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-06-20 14:09 - 2014-04-30 06:14 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-06-20 14:09 - 2014-04-30 05:59 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-06-20 14:09 - 2014-04-30 05:46 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2014-06-20 14:09 - 2014-04-30 05:46 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2014-06-20 14:09 - 2014-04-30 05:46 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll
2014-06-20 14:09 - 2014-04-30 05:45 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll
2014-06-20 14:09 - 2014-04-30 05:42 - 00403968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2014-06-20 14:09 - 2014-04-29 00:40 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2014-06-20 14:09 - 2014-04-27 00:03 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-06-20 14:09 - 2014-04-26 22:14 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-06-20 14:09 - 2014-04-26 18:39 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2014-06-20 14:09 - 2014-04-14 11:37 - 02125344 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2014-06-20 14:09 - 2014-04-14 10:08 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2014-06-20 14:09 - 2014-04-14 07:18 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2014-06-20 14:09 - 2014-04-09 08:11 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll
2014-06-20 14:09 - 2014-04-09 07:20 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll
2014-06-20 14:08 - 2014-05-31 08:27 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2014-06-20 12:37 - 2014-06-20 12:37 - 00036384 _____ () C:\Users\Heidi\Desktop\mbam-Logfiles.zip
2014-06-20 12:30 - 2014-06-20 12:30 - 00016732 _____ () C:\Users\Heidi\Desktop\mbam-log-2014-06-20_09_25_55.zip
2014-06-20 11:52 - 2014-06-20 11:52 - 00168526 _____ () C:\Users\Heidi\Desktop\Erstes.txt
2014-06-20 11:51 - 2014-06-20 11:51 - 00182618 _____ () C:\Users\Heidi\Desktop\Zweites.txt
2014-06-20 11:50 - 2014-06-20 11:50 - 00013529 _____ () C:\Users\Heidi\Desktop\Drittes.txt
2014-06-19 16:02 - 2014-06-20 11:40 - 00122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-06-19 15:56 - 2014-06-19 15:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-06-19 15:56 - 2014-06-19 15:56 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-19 15:56 - 2014-06-19 15:56 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-06-19 15:56 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-06-19 15:56 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-06-19 15:56 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-06-19 15:52 - 2014-06-19 15:52 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_ldiagio_uefi_01009.Wdf
2014-06-19 14:13 - 2014-06-19 14:15 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Heidi\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-19 14:12 - 2014-06-19 14:12 - 00002018 _____ () C:\Users\Public\Desktop\Lenovo Solution Center.lnk
2014-06-18 21:39 - 2014-06-18 21:39 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-14 21:37 - 2014-06-14 21:38 - 00000000 ____D () C:\Program Files (x86)\Flash Player Pro
2014-06-14 21:37 - 2014-06-14 21:37 - 00001126 _____ () C:\Users\Heidi\Desktop\Flash Player Pro.lnk
2014-06-14 21:37 - 2014-06-14 21:37 - 00000000 ____D () C:\Users\Heidi\Documents\Flash Player Pro
2014-06-14 21:37 - 2014-06-14 21:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Flash Player Pro
2014-06-14 21:34 - 2014-06-20 10:59 - 00000000 ____D () C:\Program Files (x86)\Premium Software
2014-06-14 21:34 - 2014-06-20 10:50 - 00000000 ____D () C:\ProgramData\Systweak
2014-06-14 21:34 - 2014-06-20 09:59 - 00003120 _____ () C:\WINDOWS\System32\Tasks\Advanced System Protector_startup
2014-06-14 21:34 - 2014-06-14 21:34 - 00001992 _____ () C:\Users\Heidi\Desktop\Sync Folder.lnk
2014-06-14 21:34 - 2014-06-14 21:34 - 00001224 _____ () C:\Users\Public\Desktop\Advanced System Protector.lnk
2014-06-14 21:34 - 2014-06-14 21:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Premium Software
2014-06-14 21:34 - 2012-07-25 12:03 - 00016896 _____ () C:\WINDOWS\system32\sasnative64.exe
2014-06-14 21:33 - 2014-06-14 21:47 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup
2014-06-14 21:33 - 2014-06-14 21:33 - 00003322 _____ () C:\WINDOWS\System32\Tasks\Advanced System Protector
2014-06-14 21:33 - 2014-06-14 21:33 - 00001110 _____ () C:\Users\Heidi\Desktop\MyPC Backup.lnk
2014-06-14 21:33 - 2014-06-14 21:33 - 00000000 ____D () C:\Users\Heidi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2014-06-14 21:32 - 2014-06-20 14:37 - 00000936 _____ () C:\WINDOWS\Tasks\SoftwareUpdateTaskMachineUA.job
2014-06-14 21:32 - 2014-06-20 10:59 - 00000000 ____D () C:\Program Files (x86)\Boxore
2014-06-14 21:32 - 2014-06-14 21:32 - 00003908 _____ () C:\WINDOWS\System32\Tasks\SoftwareUpdateTaskMachineUA
2014-06-14 21:32 - 2014-06-14 21:32 - 00000000 ____D () C:\Users\Heidi\AppData\Local\Software
2014-06-14 21:32 - 2014-06-14 21:32 - 00000000 ____D () C:\Program Files (x86)\Software
2014-06-12 19:40 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-06-12 19:40 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-06-12 19:40 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-06-12 19:40 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-06-12 19:40 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-06-12 19:40 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-06-12 19:40 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-06-12 19:40 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-06-12 19:40 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-06-12 19:40 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-06-12 19:40 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-06-12 19:40 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-06-12 19:40 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-06-12 19:40 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-06-12 19:40 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-06-12 19:40 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-06-12 19:40 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-06-12 19:40 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-06-12 19:40 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-06-12 19:40 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-06-12 19:40 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-06-12 19:40 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-06-12 19:40 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-06-12 19:40 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-06-12 19:40 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-06-12 19:40 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-06-12 19:40 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-06-12 19:40 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-06-12 19:40 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-06-12 13:55 - 2014-05-10 05:46 - 02151424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-06-12 13:55 - 2014-05-10 05:22 - 01312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-06-12 13:55 - 2014-05-09 01:06 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2014-06-12 13:55 - 2014-05-05 06:02 - 03360256 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2014-06-12 13:55 - 2014-05-03 09:14 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe
2014-06-12 13:55 - 2014-05-03 06:21 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-12 13:55 - 2014-05-03 06:07 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-12 13:55 - 2014-05-03 05:41 - 00921088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-06-12 13:55 - 2014-05-03 05:38 - 00754688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-06-12 13:55 - 2014-04-30 13:16 - 01336648 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-06-12 13:55 - 2014-04-30 05:51 - 01064448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2014-06-12 13:55 - 2014-04-03 09:59 - 02518872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-06-12 13:55 - 2014-04-03 09:59 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-06-12 13:54 - 2014-04-18 16:57 - 00032600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-06-12 13:54 - 2014-04-18 16:44 - 01466856 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-06-12 13:54 - 2014-04-18 15:29 - 01200288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-06-12 13:54 - 2014-04-18 11:44 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll
2014-06-12 13:54 - 2014-04-18 11:32 - 13287936 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-06-12 13:54 - 2014-04-18 10:58 - 11792384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-06-12 13:54 - 2014-04-18 10:32 - 00805376 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-06-12 13:54 - 2014-04-18 10:21 - 01126912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-06-12 13:54 - 2014-04-18 10:09 - 08652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-06-12 13:54 - 2014-04-18 09:51 - 00836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-06-12 13:54 - 2014-04-18 09:49 - 05833216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-06-12 13:54 - 2014-04-14 11:20 - 00324888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2014-06-12 13:54 - 2014-04-14 10:01 - 00285144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2014-06-12 13:54 - 2014-04-11 08:13 - 01200128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2014-06-12 13:54 - 2014-04-11 06:51 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2014-06-12 13:54 - 2014-04-11 06:23 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2014-06-12 13:54 - 2014-04-11 05:30 - 00449536 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2014-06-12 13:54 - 2014-04-09 13:53 - 00337240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-06-12 13:54 - 2014-04-09 08:39 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll
2014-06-12 13:54 - 2014-04-09 07:44 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpchttp.dll
2014-06-12 13:54 - 2014-04-09 05:33 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2014-06-12 13:54 - 2014-04-08 04:01 - 00589656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2014-06-12 13:54 - 2014-04-06 18:34 - 00372568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2014-06-12 13:54 - 2014-04-06 18:34 - 00275800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2014-06-12 13:54 - 2014-04-06 18:32 - 00125496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2014-06-12 13:54 - 2014-04-06 18:31 - 21268952 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-06-12 13:54 - 2014-04-06 18:30 - 00201920 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2014-06-12 13:54 - 2014-04-06 18:24 - 00360792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2014-06-12 13:54 - 2014-04-06 18:20 - 01403856 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-06-12 13:54 - 2014-04-06 18:20 - 01379064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-06-12 13:54 - 2014-04-06 18:20 - 00881616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2014-06-12 13:54 - 2014-04-06 18:20 - 00765408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-06-12 13:54 - 2014-04-06 18:20 - 00609448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2014-06-12 13:54 - 2014-04-06 18:20 - 00491744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-06-12 13:54 - 2014-04-06 18:20 - 00467496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-06-12 13:54 - 2014-04-06 18:20 - 00463256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-06-12 13:54 - 2014-04-06 18:20 - 00364640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-06-12 13:54 - 2014-04-06 18:20 - 00244880 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-06-12 13:54 - 2014-04-06 18:20 - 00028408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2014-06-12 13:54 - 2014-04-06 17:23 - 00098584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2014-06-12 13:54 - 2014-04-06 17:22 - 18755672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-06-12 13:54 - 2014-04-06 17:22 - 00178184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
2014-06-12 13:54 - 2014-04-06 17:16 - 01209616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-06-12 13:54 - 2014-04-06 17:16 - 00707048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2014-06-12 13:54 - 2014-04-06 17:16 - 00669856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-06-12 13:54 - 2014-04-06 17:16 - 00518544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2014-06-12 13:54 - 2014-04-06 17:16 - 00406504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-06-12 13:54 - 2014-04-06 17:16 - 00387896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-06-12 13:54 - 2014-04-06 17:16 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-06-12 13:54 - 2014-04-06 17:16 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-06-12 13:54 - 2014-04-06 14:58 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll
2014-06-12 13:54 - 2014-04-06 14:51 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2014-06-12 13:54 - 2014-04-06 14:33 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-06-12 13:54 - 2014-04-06 14:24 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2014-06-12 13:54 - 2014-04-06 14:06 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srclient.dll
2014-06-12 13:54 - 2014-04-06 13:55 - 16872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-06-12 13:54 - 2014-04-06 13:54 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-06-12 13:54 - 2014-04-06 13:26 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2014-06-12 13:54 - 2014-04-06 13:20 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-06-12 13:54 - 2014-04-06 13:01 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-06-12 13:54 - 2014-04-06 12:52 - 00955904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-06-12 13:54 - 2014-04-06 12:51 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-06-12 13:54 - 2014-04-06 12:37 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-06-12 13:54 - 2014-04-06 12:36 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2014-06-12 13:54 - 2014-04-06 12:05 - 01222656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-06-12 13:54 - 2014-04-06 11:59 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2014-06-12 13:54 - 2014-04-03 10:12 - 00307304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2014-06-12 13:54 - 2014-04-03 10:12 - 00130144 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2014-06-12 13:54 - 2014-04-03 06:03 - 00230808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2014-06-12 13:54 - 2014-04-03 06:03 - 00111528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpapi.dll
2014-06-12 13:54 - 2014-04-03 04:53 - 00677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-06-12 13:54 - 2014-04-03 04:51 - 01584128 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2014-06-12 13:54 - 2014-04-03 04:23 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2014-06-12 13:54 - 2014-04-03 04:23 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tlscsp.dll
2014-06-12 13:54 - 2014-04-03 04:22 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\tlscsp.dll
2014-06-12 13:54 - 2014-04-01 08:23 - 00384856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-06-12 13:54 - 2014-03-31 07:42 - 07425368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-06-12 13:54 - 2014-03-31 02:01 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2014-06-12 13:54 - 2014-03-31 01:43 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2014-06-12 13:54 - 2014-03-31 00:54 - 01308160 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2014-06-12 13:54 - 2014-03-31 00:49 - 01287168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-06-12 13:54 - 2014-03-31 00:35 - 01029120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-06-12 13:54 - 2014-03-28 17:58 - 00407016 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2014-06-12 13:54 - 2014-03-27 08:16 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-06-12 13:54 - 2014-03-27 07:36 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2014-06-12 13:54 - 2014-03-27 06:59 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-06-12 13:54 - 2014-03-27 06:48 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2014-06-12 13:54 - 2014-03-27 06:19 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2014-06-12 13:54 - 2014-03-27 05:46 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2014-06-12 13:54 - 2014-03-27 05:15 - 00718336 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2014-06-12 13:54 - 2014-03-27 05:10 - 01436160 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2014-06-12 13:54 - 2014-03-20 05:48 - 00263424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-06-12 13:54 - 2014-03-20 02:44 - 06645248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-06-12 13:54 - 2014-03-20 01:33 - 05774848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-06-12 13:54 - 2014-03-19 10:15 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-06-12 13:54 - 2014-03-19 10:07 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-06-12 13:54 - 2014-03-19 09:24 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-06-12 13:54 - 2014-03-19 09:17 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2014-06-12 13:54 - 2014-03-19 08:36 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-06-12 13:54 - 2014-03-19 07:56 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-06-12 13:54 - 2014-03-19 07:45 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2014-06-12 13:54 - 2014-03-19 07:19 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-06-12 13:54 - 2014-03-19 07:07 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-06-12 13:54 - 2014-03-19 07:02 - 01527296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-06-12 13:54 - 2014-03-19 07:00 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2014-06-12 13:54 - 2014-03-19 06:51 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2014-06-12 13:54 - 2014-03-19 06:31 - 02100736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-06-12 13:54 - 2014-03-19 06:18 - 02688000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-06-12 13:54 - 2014-03-18 10:19 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
2014-06-12 13:54 - 2014-03-18 07:00 - 07173120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2014-06-12 13:54 - 2014-03-18 06:52 - 05104640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2014-06-12 13:54 - 2014-03-17 07:09 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-06-12 13:54 - 2014-03-17 06:11 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-06-12 13:54 - 2014-03-17 05:01 - 00486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2014-06-12 13:54 - 2014-03-17 04:45 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2014-06-12 13:54 - 2014-03-14 08:26 - 00491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll
2014-06-12 13:54 - 2014-03-14 08:10 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll
2014-06-12 13:54 - 2014-03-06 14:42 - 00310616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-06-12 13:51 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-06-12 13:51 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-06-12 13:51 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe
2014-06-12 13:51 - 2014-04-30 06:43 - 01975296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2014-06-12 13:51 - 2014-04-30 06:26 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2014-06-12 13:51 - 2014-04-30 05:47 - 01509888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2014-06-12 13:50 - 2014-06-12 13:50 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-06-12 13:50 - 2014-06-12 13:50 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-06-12 13:50 - 2014-06-12 13:50 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-06-12 13:50 - 2014-06-12 13:50 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-06-12 13:50 - 2014-06-12 13:50 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-06-12 13:50 - 2014-06-12 13:50 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-06-12 13:50 - 2014-06-12 13:50 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-06-12 13:50 - 2014-06-12 13:50 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-06-12 13:50 - 2014-06-12 13:50 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-06-12 13:50 - 2014-06-12 13:50 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-06-12 13:50 - 2014-06-12 13:50 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-06-12 13:50 - 2014-06-12 13:50 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-06-12 13:50 - 2014-05-01 15:31 - 03048904 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-06-12 13:50 - 2014-05-01 15:31 - 00055328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wpcfltr.sys
2014-06-12 13:50 - 2014-05-01 09:14 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2014-06-12 13:50 - 2014-05-01 09:05 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2014-06-12 13:50 - 2014-05-01 08:51 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2014-06-12 13:50 - 2014-05-01 07:24 - 02834944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll
2014-06-12 13:48 - 2014-06-12 13:48 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-06-10 20:08 - 2014-06-10 20:08 - 00000000 ____D () C:\ProgramData\PcPPnBYFE
2014-06-10 19:18 - 2014-06-10 19:18 - 00017920 ___SH () C:\Users\Heidi\Desktop\Thumbs.db
2014-06-06 16:41 - 2014-06-20 10:23 - 00001146 _____ () C:\Users\Heidi\Desktop\Continue VuuPC Installation.lnk
2014-06-01 22:07 - 2014-06-01 22:07 - 00000000 ____D () C:\ProgramData\SMR410
2014-06-01 21:54 - 2014-06-06 16:24 - 00000000 ____D () C:\Users\Heidi\Documents\PCSpeedRepair
2014-06-01 21:54 - 2014-06-06 14:42 - 00003466 _____ () C:\WINDOWS\System32\Tasks\PCSpeedRepair_Popup
2014-06-01 21:54 - 2014-06-01 21:54 - 00003202 _____ () C:\WINDOWS\System32\Tasks\PCSpeedRepair_Start
2014-06-01 21:53 - 2014-06-06 16:26 - 00000000 __SHD () C:\WINDOWS\SysWOW64\AI_RecycleBin
2014-06-01 21:52 - 2014-06-01 21:52 - 05354920 _____ (ShieldApps) C:\Users\Heidi\Desktop\PCSpeedRepairSetup.exe
2014-05-31 13:53 - 2014-06-01 22:48 - 00000000 ____D () C:\Users\Heidi\AppData\Local\NPE
2014-05-30 22:29 - 2014-05-31 12:49 - 00001656 _____ () C:\WINDOWS\system32\ASOROSet.bin
2014-05-30 22:29 - 2014-05-30 22:29 - 00003118 _____ () C:\WINDOWS\System32\Tasks\{29DDA3AE-9BCF-4B5A-9FE9-A87B6070FE34}
2014-05-30 22:29 - 2014-05-30 22:29 - 00000000 ____D () C:\WINDOWS\system32\config\RCCBakup
2014-05-30 21:38 - 2014-05-30 21:38 - 00003122 _____ () C:\WINDOWS\System32\Tasks\{5632E2B6-48EE-4DD5-A763-E0A593301535}
2014-05-29 21:52 - 2014-05-29 21:52 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Norton Internet Security
2014-05-29 19:02 - 2014-05-29 19:02 - 00003154 _____ () C:\WINDOWS\System32\Tasks\{920C45B4-2759-4C1E-8D05-F7E7A268C763}
2014-05-29 18:59 - 2014-05-29 18:59 - 00000000 ____D () C:\Program Files (x86)\predm
2014-05-29 18:57 - 2014-05-29 18:57 - 00003086 _____ () C:\WINDOWS\System32\Tasks\{607C7325-1C22-45EA-AB60-E0073EA239C1}
2014-05-29 18:34 - 2014-06-19 14:12 - 00000000 ____D () C:\Users\Heidi\AppData\Local\LSC
2014-05-29 09:48 - 2014-05-28 17:41 - 00061112 _____ (StdLib) C:\WINDOWS\system32\Drivers\{55685567-4840-4a91-962b-49a412e9485a}Gw64.sys
2014-05-29 09:46 - 2014-05-29 09:46 - 00000000 __SHD () C:\Users\Heidi\AppData\Local\EmieUserList
2014-05-29 09:46 - 2014-05-29 09:46 - 00000000 __SHD () C:\Users\Heidi\AppData\Local\EmieSiteList
2014-05-29 09:41 - 2014-06-04 17:25 - 00000318 _____ () C:\Users\Heidi\AppData\Roaming\aps.uninstall.scan.results
2014-05-29 09:37 - 2014-06-20 10:59 - 00000000 ____D () C:\Users\Heidi\AppData\Roaming\systweak
2014-05-29 09:34 - 2014-05-29 09:34 - 00000000 ____D () C:\Users\Heidi\Documents\Optimizer Pro
2014-05-29 09:29 - 2014-05-30 22:03 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro
2014-05-29 09:18 - 2014-05-29 09:18 - 00000000 ____D () C:\Users\Heidi\Documents\Symantec
2014-05-29 09:11 - 2014-05-29 21:46 - 00003234 _____ () C:\WINDOWS\System32\Tasks\Norton WSC Integration
2014-05-29 09:11 - 2014-05-29 21:46 - 00002532 _____ () C:\Users\Public\Desktop\Norton Internet Security.lnk
2014-05-29 09:11 - 2014-05-29 09:11 - 00177752 _____ (Symantec Corporation) C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS
2014-05-29 09:11 - 2014-05-29 09:11 - 00008222 _____ () C:\WINDOWS\system32\Drivers\SYMEVENT64x86.CAT
2014-05-29 09:11 - 2014-05-29 09:11 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared
2014-05-29 09:10 - 2014-05-31 13:54 - 00000000 ____D () C:\ProgramData\Norton
2014-05-29 09:10 - 2014-05-29 21:46 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security
2014-05-29 09:10 - 2014-05-29 21:46 - 00000000 ____D () C:\WINDOWS\system32\Drivers\NISx64
2014-05-29 09:10 - 2014-05-29 09:10 - 00000000 ____D () C:\Program Files (x86)\Norton Internet Security
2014-05-23 19:01 - 2014-05-22 16:05 - 00061112 _____ (StdLib) C:\WINDOWS\system32\Drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}Gw64.sys
2014-05-23 18:58 - 2014-05-23 18:58 - 00012432 _____ () C:\WINDOWS\system32\ScanResults.xml
2014-05-23 18:43 - 2014-05-23 18:43 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2014-05-21 00:34 - 2014-05-21 00:34 - 00187348 _____ () C:\WINDOWS\system32\resTHA.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00180164 _____ () C:\WINDOWS\system32\resELL.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00176020 _____ () C:\WINDOWS\system32\resRUS.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00161876 _____ () C:\WINDOWS\system32\resARA.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00161332 _____ () C:\WINDOWS\system32\resHEB.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00161268 _____ () C:\WINDOWS\system32\resJPN.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00156692 _____ () C:\WINDOWS\system32\resFRA.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00156676 _____ () C:\WINDOWS\system32\resHUN.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00154980 _____ () C:\WINDOWS\system32\resKOR.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00154884 _____ () C:\WINDOWS\system32\resITA.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00154884 _____ () C:\WINDOWS\system32\resDEU.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00154724 _____ () C:\WINDOWS\system32\resROM.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00154612 _____ () C:\WINDOWS\system32\resESN.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00154180 _____ () C:\WINDOWS\system32\resPLK.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00154036 _____ () C:\WINDOWS\system32\resSKY.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00153844 _____ () C:\WINDOWS\system32\resNLD.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00153284 _____ () C:\WINDOWS\system32\resPTB.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00153140 _____ () C:\WINDOWS\system32\resTRK.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00153108 _____ () C:\WINDOWS\system32\resCSY.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00152980 _____ () C:\WINDOWS\system32\resPTG.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00152564 _____ () C:\WINDOWS\system32\resFIN.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00152132 _____ () C:\WINDOWS\system32\resHRV.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00151684 _____ () C:\WINDOWS\system32\resSVE.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00151508 _____ () C:\WINDOWS\system32\resSLV.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00150580 _____ () C:\WINDOWS\system32\resNOR.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00150068 _____ () C:\WINDOWS\system32\resDAN.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00148756 _____ () C:\WINDOWS\system32\resENU.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00146980 _____ () C:\WINDOWS\system32\resCHT.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00146148 _____ () C:\WINDOWS\system32\resCHS.cui
2014-05-21 00:33 - 2014-05-21 00:33 - 23048704 _____ (Intel Corporation) C:\WINDOWS\system32\igdfcl64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 18032640 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdfcl32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 16586584 _____ (Intel Corporation) C:\WINDOWS\system32\igdumdim64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 16114320 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdumdim32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 08120320 _____ (Intel Corporation) C:\WINDOWS\system32\ig7icd64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 06364672 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ig7icd32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 04342088 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv4_0.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 04338504 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv2_0.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 04011168 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiAAC64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 03791872 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\igdkmd64.sys
2014-05-21 00:33 - 2014-05-21 00:33 - 02477728 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiVAD64.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 02023936 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmjit64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 01755648 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmjit32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 01673216 _____ (Intel Corporation) C:\WINDOWS\system32\igdrcl64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 01551872 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdrcl32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 01455776 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiSecureSourceFilter64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 01137080 _____ (Intel Corporation) C:\WINDOWS\system32\iglhsip64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 01132960 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhsip32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00929608 _____ (Intel Corporation) C:\WINDOWS\system32\GfxUIEx.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00792736 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiWinNextAgent64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00734208 _____ (Intel Corporation) C:\WINDOWS\system32\MetroIntelGenericUIFramework.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00655360 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDH.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00646304 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiAudioFilter64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00603296 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiMux64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00543560 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyApp.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00543048 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyAppv2_0.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00501064 _____ (Intel Corporation) C:\WINDOWS\system32\igfxEM.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00433560 _____ () C:\WINDOWS\system32\igdmd64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00415560 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiUMS64.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00392520 _____ (Intel Corporation) C:\WINDOWS\system32\CustomModeApp.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00392008 _____ (Intel Corporation) C:\WINDOWS\system32\CustomModeAppv2_0.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00373248 _____ (Intel Corporation) C:\WINDOWS\system32\igfxOSP.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00358912 _____ (Intel Corporation) C:\WINDOWS\system32\IntelOpenCL64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00348088 _____ () C:\WINDOWS\SysWOW64\igdmd32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00344736 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiSilenceFilter64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00330240 _____ (Intel Corporation) C:\WINDOWS\system32\igdbcl64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00314696 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCUIService.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00294912 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelOpenCL32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00291328 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdbcl32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00278344 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelCpHeciSvc.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00267264 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDI.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00254976 _____ () C:\WINDOWS\system32\igfxCPL.cpl
2014-05-21 00:33 - 2014-05-21 00:33 - 00249856 _____ (Intel Corporation) C:\WINDOWS\system32\igfxLHM.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00243528 _____ (Intel Corporation) C:\WINDOWS\system32\igfxHK.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00223744 _____ () C:\WINDOWS\system32\igdde64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00218808 _____ (Intel Corporation) C:\WINDOWS\system32\iglhcp64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00212992 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDTCM.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00210592 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiUtils64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00190792 _____ (Intel Corporation) C:\WINDOWS\system32\igfxext.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00187408 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmrt64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00183808 _____ () C:\WINDOWS\SysWOW64\igdde32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00183800 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhcp32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00182784 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCoIn_v3621.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00182784 _____ (Intel Corporation) C:\WINDOWS\system32\igfx11cmrt64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00177824 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiDDEAgent64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00160256 _____ () C:\WINDOWS\system32\igdail64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00158032 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmrt32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00155136 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfx11cmrt32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00152392 _____ (Intel Corporation) C:\WINDOWS\system32\difx64.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00142848 _____ () C:\WINDOWS\SysWOW64\igdail32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00128672 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiMCUMD64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00094368 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiLogServer64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00070144 _____ () C:\WINDOWS\system32\igfxCUIServicePS.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00069632 _____ ( ) C:\WINDOWS\system32\igfxDHLibv2_0.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00057856 _____ ( ) C:\WINDOWS\system32\igfxDHLib.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00031408 _____ (Intel Corporation) C:\WINDOWS\system32\igfxexps.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00030720 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxexps32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00010752 _____ ( ) C:\WINDOWS\system32\igfxDILib.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00010240 _____ ( ) C:\WINDOWS\system32\igfxEMLibv2_0.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00010240 _____ ( ) C:\WINDOWS\system32\igfxEMLib.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00010240 _____ ( ) C:\WINDOWS\system32\igfxDILibv2_0.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00005120 _____ ( ) C:\WINDOWS\system32\igfxLHMLibv2_0.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00005120 _____ ( ) C:\WINDOWS\system32\igfxLHMLib.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00002568 _____ () C:\WINDOWS\system32\iglhxs64.vp

==================== One Month Modified Files and Folders =======

2014-06-20 15:05 - 2014-06-20 15:05 - 00020912 _____ () C:\Users\Heidi\Desktop\FRST.txt
2014-06-20 15:05 - 2014-06-20 15:05 - 00000000 ____D () C:\FRST
2014-06-20 15:04 - 2014-06-20 15:04 - 02082304 _____ (Farbar) C:\Users\Heidi\Desktop\FRST64.exe
2014-06-20 15:00 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-06-20 14:47 - 2014-04-07 09:35 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2850316643-2420343241-806179859-1001
2014-06-20 14:44 - 2014-02-10 21:13 - 01182520 _____ () C:\WINDOWS\WindowsUpdate.log
2014-06-20 14:37 - 2014-06-14 21:32 - 00000936 _____ () C:\WINDOWS\Tasks\SoftwareUpdateTaskMachineUA.job
2014-06-20 14:33 - 2013-08-22 16:46 - 00022230 _____ () C:\WINDOWS\setupact.log
2014-06-20 14:24 - 2014-04-16 21:53 - 00000000 ___DO () C:\Users\Heidi\SkyDrive
2014-06-20 14:24 - 2014-04-08 10:54 - 00002170 _____ () C:\Users\Heidi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startmenü.lnk
2014-06-20 14:23 - 2014-06-20 14:23 - 00000451 _____ () C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2014-06-20 14:23 - 2014-05-19 17:45 - 00000930 _____ () C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-06-20 14:23 - 2014-04-07 09:29 - 00000000 ____D () C:\Users\Heidi
2014-06-20 14:20 - 2013-10-07 20:23 - 00248716 _____ () C:\WINDOWS\PFRO.log
2014-06-20 14:20 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-06-20 14:20 - 2013-08-22 16:44 - 00344840 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-06-20 14:19 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-06-20 14:18 - 2014-02-10 21:12 - 00004608 _____ () C:\WINDOWS\system32\VfService.trf
2014-06-20 14:18 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-06-20 14:18 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-06-20 14:18 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-06-20 14:14 - 2013-08-22 17:20 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-06-20 14:09 - 2014-04-15 11:27 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-06-20 12:37 - 2014-06-20 12:37 - 00036384 _____ () C:\Users\Heidi\Desktop\mbam-Logfiles.zip
2014-06-20 12:30 - 2014-06-20 12:30 - 00016732 _____ () C:\Users\Heidi\Desktop\mbam-log-2014-06-20_09_25_55.zip
2014-06-20 11:52 - 2014-06-20 11:52 - 00168526 _____ () C:\Users\Heidi\Desktop\Erstes.txt
2014-06-20 11:52 - 2014-05-19 17:45 - 00000934 _____ () C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-06-20 11:51 - 2014-06-20 11:51 - 00182618 _____ () C:\Users\Heidi\Desktop\Zweites.txt
2014-06-20 11:50 - 2014-06-20 11:50 - 00013529 _____ () C:\Users\Heidi\Desktop\Drittes.txt
2014-06-20 11:40 - 2014-06-19 16:02 - 00122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-06-20 11:25 - 2014-05-19 17:58 - 00000000 ____D () C:\Program Files (x86)\Settings Manager
2014-06-20 11:25 - 2014-05-19 17:45 - 00000000 ____D () C:\Users\Heidi\AppData\Roaming\VOPackage
2014-06-20 11:25 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\LiveKernelReports
2014-06-20 11:04 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-06-20 10:59 - 2014-06-14 21:34 - 00000000 ____D () C:\Program Files (x86)\Premium Software
2014-06-20 10:59 - 2014-06-14 21:32 - 00000000 ____D () C:\Program Files (x86)\Boxore
2014-06-20 10:59 - 2014-05-29 09:37 - 00000000 ____D () C:\Users\Heidi\AppData\Roaming\systweak
2014-06-20 10:51 - 2014-05-19 17:58 - 00000000 ____D () C:\Users\Heidi\AppData\Roaming\Settings Manager
2014-06-20 10:50 - 2014-06-14 21:34 - 00000000 ____D () C:\ProgramData\Systweak
2014-06-20 10:50 - 2014-05-19 17:45 - 00000000 ____D () C:\Users\Heidi\AppData\Roaming\SupTab
2014-06-20 10:50 - 2014-05-19 17:45 - 00000000 ____D () C:\ProgramData\WPM
2014-06-20 10:23 - 2014-06-06 16:41 - 00001146 _____ () C:\Users\Heidi\Desktop\Continue VuuPC Installation.lnk
2014-06-20 09:59 - 2014-06-14 21:34 - 00003120 _____ () C:\WINDOWS\System32\Tasks\Advanced System Protector_startup
2014-06-20 09:42 - 2014-04-08 10:52 - 00003934 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{A64BA2BB-3CBA-4CAE-B184-18653812EED3}
2014-06-20 09:21 - 2014-04-07 09:29 - 00000000 ____D () C:\Users\Heidi\AppData\Local\Pokki
2014-06-19 15:56 - 2014-06-19 15:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-06-19 15:56 - 2014-06-19 15:56 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-19 15:56 - 2014-06-19 15:56 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-06-19 15:52 - 2014-06-19 15:52 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_ldiagio_uefi_01009.Wdf
2014-06-19 15:47 - 2014-04-11 22:50 - 00000000 ____D () C:\Users\Heidi\AppData\Local\CrashDumps
2014-06-19 15:39 - 2014-04-14 19:58 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-19 14:15 - 2014-06-19 14:13 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Heidi\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-19 14:12 - 2014-06-19 14:12 - 00002018 _____ () C:\Users\Public\Desktop\Lenovo Solution Center.lnk
2014-06-19 14:12 - 2014-05-29 18:34 - 00000000 ____D () C:\Users\Heidi\AppData\Local\LSC
2014-06-19 14:12 - 2014-02-10 21:07 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Lenovo
2014-06-19 14:12 - 2014-02-10 21:07 - 00000000 ____D () C:\Program Files\Lenovo
2014-06-19 14:12 - 2014-02-10 20:58 - 00000000 ____D () C:\ProgramData\Lenovo
2014-06-19 14:11 - 2014-02-10 21:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-06-19 14:09 - 2014-02-10 21:07 - 00000000 ____D () C:\WINDOWS\Downloaded Installations
2014-06-18 21:39 - 2014-06-18 21:39 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-16 10:43 - 2014-02-11 05:24 - 00765582 _____ () C:\WINDOWS\system32\perfh007.dat
2014-06-16 10:43 - 2014-02-11 05:24 - 00159366 _____ () C:\WINDOWS\system32\perfc007.dat
2014-06-16 10:43 - 2013-10-07 20:27 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-06-14 21:47 - 2014-06-14 21:33 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup
2014-06-14 21:47 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-06-14 21:38 - 2014-06-14 21:37 - 00000000 ____D () C:\Program Files (x86)\Flash Player Pro
2014-06-14 21:37 - 2014-06-14 21:37 - 00001126 _____ () C:\Users\Heidi\Desktop\Flash Player Pro.lnk
2014-06-14 21:37 - 2014-06-14 21:37 - 00000000 ____D () C:\Users\Heidi\Documents\Flash Player Pro
2014-06-14 21:37 - 2014-06-14 21:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Flash Player Pro
2014-06-14 21:37 - 2014-04-15 11:27 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-06-14 21:34 - 2014-06-14 21:34 - 00001992 _____ () C:\Users\Heidi\Desktop\Sync Folder.lnk
2014-06-14 21:34 - 2014-06-14 21:34 - 00001224 _____ () C:\Users\Public\Desktop\Advanced System Protector.lnk
2014-06-14 21:34 - 2014-06-14 21:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Premium Software
2014-06-14 21:33 - 2014-06-14 21:33 - 00003322 _____ () C:\WINDOWS\System32\Tasks\Advanced System Protector
2014-06-14 21:33 - 2014-06-14 21:33 - 00001110 _____ () C:\Users\Heidi\Desktop\MyPC Backup.lnk
2014-06-14 21:33 - 2014-06-14 21:33 - 00000000 ____D () C:\Users\Heidi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2014-06-14 21:32 - 2014-06-14 21:32 - 00003908 _____ () C:\WINDOWS\System32\Tasks\SoftwareUpdateTaskMachineUA
2014-06-14 21:32 - 2014-06-14 21:32 - 00000000 ____D () C:\Users\Heidi\AppData\Local\Software
2014-06-14 21:32 - 2014-06-14 21:32 - 00000000 ____D () C:\Program Files (x86)\Software
2014-06-14 19:34 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-06-14 19:30 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-06-13 08:50 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-06-13 08:50 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-06-13 08:50 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-06-13 08:50 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-06-12 19:43 - 2014-04-09 16:40 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-06-12 19:42 - 2014-04-09 16:40 - 95414520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-06-12 13:50 - 2014-06-12 13:50 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-06-12 13:50 - 2014-06-12 13:50 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-06-12 13:50 - 2014-06-12 13:50 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-06-12 13:50 - 2014-06-12 13:50 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-06-12 13:50 - 2014-06-12 13:50 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-06-12 13:50 - 2014-06-12 13:50 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-06-12 13:50 - 2014-06-12 13:50 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-06-12 13:50 - 2014-06-12 13:50 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-06-12 13:50 - 2014-06-12 13:50 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-06-12 13:50 - 2014-06-12 13:50 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-06-12 13:50 - 2014-06-12 13:50 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-06-12 13:50 - 2014-06-12 13:50 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-06-12 13:48 - 2014-06-12 13:48 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-06-10 20:09 - 2014-05-19 17:44 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-06-10 20:08 - 2014-06-10 20:08 - 00000000 ____D () C:\ProgramData\PcPPnBYFE
2014-06-10 19:18 - 2014-06-10 19:18 - 00017920 ___SH () C:\Users\Heidi\Desktop\Thumbs.db
2014-06-06 16:28 - 2014-05-19 17:58 - 00000000 ____D () C:\Program Files (x86)\PC Speed Maximizer
2014-06-06 16:26 - 2014-06-01 21:53 - 00000000 __SHD () C:\WINDOWS\SysWOW64\AI_RecycleBin
2014-06-06 16:24 - 2014-06-01 21:54 - 00000000 ____D () C:\Users\Heidi\Documents\PCSpeedRepair
2014-06-06 14:42 - 2014-06-01 21:54 - 00003466 _____ () C:\WINDOWS\System32\Tasks\PCSpeedRepair_Popup
2014-06-04 17:25 - 2014-05-29 09:41 - 00000318 _____ () C:\Users\Heidi\AppData\Roaming\aps.uninstall.scan.results
2014-06-01 22:48 - 2014-05-31 13:53 - 00000000 ____D () C:\Users\Heidi\AppData\Local\NPE
2014-06-01 22:07 - 2014-06-01 22:07 - 00000000 ____D () C:\ProgramData\SMR410
2014-06-01 21:54 - 2014-06-01 21:54 - 00003202 _____ () C:\WINDOWS\System32\Tasks\PCSpeedRepair_Start
2014-06-01 21:52 - 2014-06-01 21:52 - 05354920 _____ (ShieldApps) C:\Users\Heidi\Desktop\PCSpeedRepairSetup.exe
2014-05-31 13:54 - 2014-05-29 09:10 - 00000000 ____D () C:\ProgramData\Norton
2014-05-31 12:53 - 2014-02-10 21:02 - 00000000 ____D () C:\ProgramData\McAfee
2014-05-31 12:49 - 2014-05-30 22:29 - 00001656 _____ () C:\WINDOWS\system32\ASOROSet.bin
2014-05-31 12:49 - 2013-08-22 15:25 - 62914560 _____ () C:\WINDOWS\system32\config\SOFTWARE.bak
2014-05-31 12:49 - 2013-08-22 15:25 - 11272192 _____ () C:\WINDOWS\system32\config\SYSTEM.bak
2014-05-31 12:49 - 2013-08-22 15:25 - 00262144 _____ () C:\WINDOWS\system32\config\SECURITY.bak
2014-05-31 08:27 - 2014-06-20 14:08 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2014-05-31 07:13 - 2014-04-10 12:21 - 00703992 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-05-31 07:13 - 2014-04-10 12:21 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-30 22:30 - 2013-08-22 15:25 - 00262144 _____ () C:\WINDOWS\system32\config\SAM.bak
2014-05-30 22:29 - 2014-05-30 22:29 - 00003118 _____ () C:\WINDOWS\System32\Tasks\{29DDA3AE-9BCF-4B5A-9FE9-A87B6070FE34}
2014-05-30 22:29 - 2014-05-30 22:29 - 00000000 ____D () C:\WINDOWS\system32\config\RCCBakup
2014-05-30 22:03 - 2014-05-29 09:29 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro
2014-05-30 21:38 - 2014-05-30 21:38 - 00003122 _____ () C:\WINDOWS\System32\Tasks\{5632E2B6-48EE-4DD5-A763-E0A593301535}
2014-05-30 12:21 - 2014-06-12 19:40 - 23414784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-05-30 11:45 - 2014-06-12 19:40 - 02768384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-05-30 11:28 - 2014-06-12 19:40 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-05-30 11:20 - 2014-06-12 19:40 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-05-30 11:18 - 2014-06-12 19:40 - 17271296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-05-30 11:08 - 2014-06-12 19:40 - 05782528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-05-30 11:06 - 2014-06-12 19:40 - 00452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-05-30 10:46 - 2014-06-12 19:40 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-05-30 10:44 - 2014-06-12 19:40 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-05-30 10:43 - 2014-06-12 19:40 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-05-30 10:38 - 2014-06-12 19:40 - 02179072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-05-30 10:35 - 2014-06-12 19:40 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-05-30 10:29 - 2014-06-12 19:40 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-05-30 10:27 - 2014-06-12 19:40 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-05-30 10:23 - 2014-06-12 19:40 - 02040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-05-30 10:16 - 2014-06-12 19:40 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-05-30 10:04 - 2014-06-12 19:40 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-05-30 10:02 - 2014-06-12 19:40 - 00242688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-05-30 09:56 - 2014-06-12 19:40 - 04244992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-05-30 09:56 - 2014-06-12 19:40 - 02266112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-05-30 09:54 - 2014-06-12 19:40 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-05-30 09:49 - 2014-06-12 19:40 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-05-30 09:43 - 2014-06-12 19:40 - 13522944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-05-30 09:40 - 2014-06-12 19:40 - 11725312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-05-30 09:30 - 2014-06-12 19:40 - 01398272 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-05-30 09:21 - 2014-06-12 19:40 - 01790976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-05-30 09:15 - 2014-06-12 19:40 - 01143296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-05-30 09:13 - 2014-06-12 19:40 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-05-30 09:13 - 2014-06-12 19:40 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-05-29 21:55 - 2013-08-22 17:36 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP
2014-05-29 21:52 - 2014-05-29 21:52 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Norton Internet Security
2014-05-29 21:46 - 2014-05-29 09:11 - 00003234 _____ () C:\WINDOWS\System32\Tasks\Norton WSC Integration
2014-05-29 21:46 - 2014-05-29 09:11 - 00002532 _____ () C:\Users\Public\Desktop\Norton Internet Security.lnk
2014-05-29 21:46 - 2014-05-29 09:10 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security
2014-05-29 21:46 - 2014-05-29 09:10 - 00000000 ____D () C:\WINDOWS\system32\Drivers\NISx64
2014-05-29 20:26 - 2014-04-14 19:58 - 00001182 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-05-29 20:26 - 2014-04-14 19:58 - 00001170 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-05-29 20:26 - 2014-04-07 09:30 - 00001461 _____ () C:\Users\Heidi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-29 19:02 - 2014-05-29 19:02 - 00003154 _____ () C:\WINDOWS\System32\Tasks\{920C45B4-2759-4C1E-8D05-F7E7A268C763}
2014-05-29 18:59 - 2014-05-29 18:59 - 00000000 ____D () C:\Program Files (x86)\predm
2014-05-29 18:57 - 2014-05-29 18:57 - 00003086 _____ () C:\WINDOWS\System32\Tasks\{607C7325-1C22-45EA-AB60-E0073EA239C1}
2014-05-29 09:46 - 2014-05-29 09:46 - 00000000 __SHD () C:\Users\Heidi\AppData\Local\EmieUserList
2014-05-29 09:46 - 2014-05-29 09:46 - 00000000 __SHD () C:\Users\Heidi\AppData\Local\EmieSiteList
2014-05-29 09:39 - 2014-05-19 17:51 - 00000163 _____ () C:\WINDOWS\Reimage.ini
2014-05-29 09:34 - 2014-05-29 09:34 - 00000000 ____D () C:\Users\Heidi\Documents\Optimizer Pro
2014-05-29 09:18 - 2014-05-29 09:18 - 00000000 ____D () C:\Users\Heidi\Documents\Symantec
2014-05-29 09:11 - 2014-05-29 09:11 - 00177752 _____ (Symantec Corporation) C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS
2014-05-29 09:11 - 2014-05-29 09:11 - 00008222 _____ () C:\WINDOWS\system32\Drivers\SYMEVENT64x86.CAT
2014-05-29 09:11 - 2014-05-29 09:11 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared
2014-05-29 09:10 - 2014-05-29 09:10 - 00000000 ____D () C:\Program Files (x86)\Norton Internet Security
2014-05-29 08:57 - 2014-02-10 21:03 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-05-28 17:41 - 2014-05-29 09:48 - 00061112 _____ (StdLib) C:\WINDOWS\system32\Drivers\{55685567-4840-4a91-962b-49a412e9485a}Gw64.sys
2014-05-27 13:25 - 2014-05-19 17:58 - 01705163 _____ (AnyProtect.com) C:\Users\Heidi\AppData\Local\AnyProtectScannerSetup.exe
2014-05-23 18:58 - 2014-05-23 18:58 - 00012432 _____ () C:\WINDOWS\system32\ScanResults.xml
2014-05-23 18:43 - 2014-05-23 18:43 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2014-05-22 16:05 - 2014-05-23 19:01 - 00061112 _____ (StdLib) C:\WINDOWS\system32\Drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}Gw64.sys
2014-05-21 00:34 - 2014-05-21 00:34 - 00187348 _____ () C:\WINDOWS\system32\resTHA.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00180164 _____ () C:\WINDOWS\system32\resELL.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00176020 _____ () C:\WINDOWS\system32\resRUS.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00161876 _____ () C:\WINDOWS\system32\resARA.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00161332 _____ () C:\WINDOWS\system32\resHEB.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00161268 _____ () C:\WINDOWS\system32\resJPN.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00156692 _____ () C:\WINDOWS\system32\resFRA.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00156676 _____ () C:\WINDOWS\system32\resHUN.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00154980 _____ () C:\WINDOWS\system32\resKOR.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00154884 _____ () C:\WINDOWS\system32\resITA.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00154884 _____ () C:\WINDOWS\system32\resDEU.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00154724 _____ () C:\WINDOWS\system32\resROM.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00154612 _____ () C:\WINDOWS\system32\resESN.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00154180 _____ () C:\WINDOWS\system32\resPLK.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00154036 _____ () C:\WINDOWS\system32\resSKY.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00153844 _____ () C:\WINDOWS\system32\resNLD.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00153284 _____ () C:\WINDOWS\system32\resPTB.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00153140 _____ () C:\WINDOWS\system32\resTRK.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00153108 _____ () C:\WINDOWS\system32\resCSY.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00152980 _____ () C:\WINDOWS\system32\resPTG.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00152564 _____ () C:\WINDOWS\system32\resFIN.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00152132 _____ () C:\WINDOWS\system32\resHRV.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00151684 _____ () C:\WINDOWS\system32\resSVE.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00151508 _____ () C:\WINDOWS\system32\resSLV.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00150580 _____ () C:\WINDOWS\system32\resNOR.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00150068 _____ () C:\WINDOWS\system32\resDAN.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00148756 _____ () C:\WINDOWS\system32\resENU.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00146980 _____ () C:\WINDOWS\system32\resCHT.cui
2014-05-21 00:34 - 2014-05-21 00:34 - 00146148 _____ () C:\WINDOWS\system32\resCHS.cui
2014-05-21 00:33 - 2014-05-21 00:33 - 23048704 _____ (Intel Corporation) C:\WINDOWS\system32\igdfcl64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 18032640 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdfcl32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 16586584 _____ (Intel Corporation) C:\WINDOWS\system32\igdumdim64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 16114320 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdumdim32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 08120320 _____ (Intel Corporation) C:\WINDOWS\system32\ig7icd64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 06364672 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ig7icd32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 04342088 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv4_0.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 04338504 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv2_0.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 04011168 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiAAC64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 03791872 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\igdkmd64.sys
2014-05-21 00:33 - 2014-05-21 00:33 - 02477728 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiVAD64.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 02023936 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmjit64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 01755648 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmjit32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 01673216 _____ (Intel Corporation) C:\WINDOWS\system32\igdrcl64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 01551872 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdrcl32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 01455776 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiSecureSourceFilter64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 01137080 _____ (Intel Corporation) C:\WINDOWS\system32\iglhsip64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 01132960 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhsip32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00929608 _____ (Intel Corporation) C:\WINDOWS\system32\GfxUIEx.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00792736 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiWinNextAgent64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00734208 _____ (Intel Corporation) C:\WINDOWS\system32\MetroIntelGenericUIFramework.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00655360 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDH.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00646304 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiAudioFilter64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00603296 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiMux64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00543560 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyApp.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00543048 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyAppv2_0.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00501064 _____ (Intel Corporation) C:\WINDOWS\system32\igfxEM.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00433560 _____ () C:\WINDOWS\system32\igdmd64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00415560 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiUMS64.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00392520 _____ (Intel Corporation) C:\WINDOWS\system32\CustomModeApp.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00392008 _____ (Intel Corporation) C:\WINDOWS\system32\CustomModeAppv2_0.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00373248 _____ (Intel Corporation) C:\WINDOWS\system32\igfxOSP.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00358912 _____ (Intel Corporation) C:\WINDOWS\system32\IntelOpenCL64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00348088 _____ () C:\WINDOWS\SysWOW64\igdmd32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00344736 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiSilenceFilter64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00330240 _____ (Intel Corporation) C:\WINDOWS\system32\igdbcl64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00314696 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCUIService.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00294912 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelOpenCL32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00291328 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdbcl32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00278344 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelCpHeciSvc.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00267264 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDI.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00254976 _____ () C:\WINDOWS\system32\igfxCPL.cpl
2014-05-21 00:33 - 2014-05-21 00:33 - 00249856 _____ (Intel Corporation) C:\WINDOWS\system32\igfxLHM.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00243528 _____ (Intel Corporation) C:\WINDOWS\system32\igfxHK.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00223744 _____ () C:\WINDOWS\system32\igdde64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00218808 _____ (Intel Corporation) C:\WINDOWS\system32\iglhcp64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00212992 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDTCM.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00210592 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiUtils64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00190792 _____ (Intel Corporation) C:\WINDOWS\system32\igfxext.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00187408 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmrt64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00183808 _____ () C:\WINDOWS\SysWOW64\igdde32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00183800 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhcp32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00182784 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCoIn_v3621.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00182784 _____ (Intel Corporation) C:\WINDOWS\system32\igfx11cmrt64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00177824 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiDDEAgent64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00160256 _____ () C:\WINDOWS\system32\igdail64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00158032 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmrt32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00155136 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfx11cmrt32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00152392 _____ (Intel Corporation) C:\WINDOWS\system32\difx64.exe
2014-05-21 00:33 - 2014-05-21 00:33 - 00142848 _____ () C:\WINDOWS\SysWOW64\igdail32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00128672 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiMCUMD64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00094368 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiLogServer64.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00070144 _____ () C:\WINDOWS\system32\igfxCUIServicePS.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00069632 _____ ( ) C:\WINDOWS\system32\igfxDHLibv2_0.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00057856 _____ ( ) C:\WINDOWS\system32\igfxDHLib.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00031408 _____ (Intel Corporation) C:\WINDOWS\system32\igfxexps.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00030720 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxexps32.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00010752 _____ ( ) C:\WINDOWS\system32\igfxDILib.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00010240 _____ ( ) C:\WINDOWS\system32\igfxEMLibv2_0.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00010240 _____ ( ) C:\WINDOWS\system32\igfxEMLib.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00010240 _____ ( ) C:\WINDOWS\system32\igfxDILibv2_0.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00005120 _____ ( ) C:\WINDOWS\system32\igfxLHMLibv2_0.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00005120 _____ ( ) C:\WINDOWS\system32\igfxLHMLib.dll
2014-05-21 00:33 - 2014-05-21 00:33 - 00002568 _____ () C:\WINDOWS\system32\iglhxs64.vp
2014-05-21 00:33 - 2014-02-10 13:14 - 17791136 _____ (Intel Corporation) C:\WINDOWS\system32\igd10iumd64.dll
2014-05-21 00:33 - 2014-02-10 13:14 - 17409536 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10iumd32.dll
2014-05-21 00:33 - 2014-02-10 13:14 - 04590152 _____ (Intel Corporation) C:\WINDOWS\system32\igdusc64.dll
2014-05-21 00:33 - 2014-02-10 13:14 - 03658520 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdusc32.dll
2014-05-21 00:33 - 2014-02-10 13:14 - 00443720 _____ (Intel Corporation) C:\WINDOWS\system32\igfxTray.exe

Some content of TEMP:
====================
C:\Users\Heidi\AppData\Local\Temp\CloudBackup2684.exe
C:\Users\Heidi\AppData\Local\Temp\newvideoplayersetup.exe
C:\Users\Heidi\AppData\Local\Temp\nhpmonitor.exe
C:\Users\Heidi\AppData\Local\Temp\oi_{93FBBFAE-FD03-41D6-B132-52ACB1A4E17B}.exe
C:\Users\Heidi\AppData\Local\Temp\optprosetup.exe
C:\Users\Heidi\AppData\Local\Temp\ReimagePackage.exe
C:\Users\Heidi\AppData\Local\Temp\ReimageRepair.exe
C:\Users\Heidi\AppData\Local\Temp\UNINSTALL.EXE


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-17 19:10

==================== End Of Log ============================