Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: C:\Windows\SysWOW64\cleanmgr.exe wurde blockiert

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

 
Alt 02.01.2015, 16:06   #4
Paenkie
 
C:\Windows\SysWOW64\cleanmgr.exe wurde blockiert - Standard

C:\Windows\SysWOW64\cleanmgr.exe wurde blockiert



Frst.txt part1

Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-01-2015
Ran by ***** (administrator) on *****-PC on 01-01-2015 16:46:34
Running from C:\Users\*****\Computer\Downloads
Loaded Profile: ***** (Available profiles: *****)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Acer Incorporated) C:\Program Files\Acer\Optical Drive Power Management\ODDPWR.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cleanmgr.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Vodafone) C:\Program Files (x86)\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(NTI, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Acer Incorporated) C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe
() C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
() C:\Program Files (x86)\Tor\tor.exe
(Vodafone) C:\Program Files (x86)\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11046504 2010-07-13] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2103912 2010-07-13] (Realtek Semiconductor)
HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [320000 2009-04-09] (AlcorMicro Co., Ltd.)
HKLM\...\Run: [ODDPwr] => C:\Program Files\Acer\Optical Drive Power Management\ODDPwr.exe [223264 2010-04-22] (Acer Incorporated)
HKLM\...\Run: [mwlDaemon] => C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe [349552 2010-05-27] (Egis Technology Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2107176 2010-03-11] (Synaptics Incorporated)
HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [861216 2010-06-11] (Acer Incorporated)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-04] (Intel Corporation)
HKLM-x32\...\Run: [SuiteTray] => C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [337264 2010-05-27] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisUpdate] => C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201584 2010-03-11] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisTecPMMUpdate] => C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [407920 2010-03-11] (Egis Technology Inc.)
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [265984 2010-06-28] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [975952 2010-08-10] (Dritek System Inc.)
HKLM-x32\...\Run: [MDS_Menu] => C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [ArcadeMovieService] => C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe [124136 2010-06-25] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [MobileConnect] => C:\Program Files (x86)\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe [2403840 2009-09-11] (Vodafone)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5226600 2014-12-31] (AVAST Software)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-1902139459-1109185879-2378804310-1000\...\Run: [nlsluhxz] => C:\Users\*****\AppData\Roaming\Izlwcl\jhhhxzuhxz.exe [126464 2015-01-01] (CJSC "Computing Forces")
HKU\S-1-5-21-1902139459-1109185879-2378804310-1000\...\Run: [poet-tear] => C:\Users\*****\AppData\Roaming\Poet_value\poetorganize.exe [131584 2014-12-30] ()
HKU\S-1-5-21-1902139459-1109185879-2378804310-1000\...\Run: [audience-scratch] => C:\Users\*****\AppData\Roaming\Audience_extend\audience_remain.exe
HKU\S-1-5-21-1902139459-1109185879-2378804310-1000\...\Run: [courage-adjust] => C:\Users\*****\AppData\Local\Temp\Courage-contact\courage-divide.exe <===== ATTENTION
HKU\S-1-5-21-1902139459-1109185879-2378804310-1000\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7780120 2014-12-15] (SUPERAntiSpyware)
HKU\S-1-5-21-1902139459-1109185879-2378804310-1000\...\Run: [Spybot-S&D Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [4566952 2014-06-24] (Safer-Networking Ltd.)
HKU\S-1-5-21-1902139459-1109185879-2378804310-1000\...\RunOnce: [poet-tear] => C:\Users\*****\AppData\Roaming\Poet_value\poetorganize.exe [131584 2014-12-30] ()
HKU\S-1-5-21-1902139459-1109185879-2378804310-1000\...\MountPoints2: E - E:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-1902139459-1109185879-2378804310-1000\...\MountPoints2: {3e9e0011-4cae-11e1-92f8-001e101fb4df} - D:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-1902139459-1109185879-2378804310-1000\...\MountPoints2: {4c5bd968-44d5-11e1-8bc1-4c0f6e8abc1f} - E:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-1902139459-1109185879-2378804310-1000\...\MountPoints2: {eb2516f7-45d0-11e1-bb1c-001e101f50a4} - D:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2014-12-17] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer VCM.lnk
ShortcutTarget: Acer VCM.lnk -> C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe (Acer Incorporated)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers: [egisPSDP] -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec MyWinLocker\x64\psdprotect.dll (Egis Technology Inc.)
ShellIconOverlayIdentifiers-x32: [egisPSDP] -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec MyWinLocker\x86\psdprotect.dll (Egis Technology Inc.)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1902139459-1109185879-2378804310-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKU\S-1-5-21-1902139459-1109185879-2378804310-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1902139459-1109185879-2378804310-1000 -> {46859B34-070D-4BCD-A641-B52C9FC5C16E} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=827316&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1902139459-1109185879-2378804310-1000 -> {86BDA780-BD66-4CC1-B214-E876E2ED898B} URL = hxxp://www.google.de/search?q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} ->  No File
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKU\S-1-5-21-1902139459-1109185879-2378804310-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 217.0.43.65 217.0.43.81

FireFox:
========
FF ProfilePath: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\oa3r0bhf.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_246.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_246.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1214154.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8117.0416 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Avira Browser Safety - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\oa3r0bhf.default\Extensions\abs@avira.com [2014-12-11]
FF Extension: anonymoX - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\oa3r0bhf.default\Extensions\client@anonymox.net.xpi [2013-10-03]
FF Extension: Adblock Plus - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\oa3r0bhf.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-10-03]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-12-30]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-30]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-07-23] (SUPERAntiSpyware.com)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [992560 2014-12-04] (Avira Operations GmbH & Co. KG)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-31] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-12-31] (Avast Software)
R2 LMS; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [262144 2009-09-30] (Intel Corporation) [File not signed]
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
S3 MWLService; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [305520 2010-05-27] (Egis Technology Inc.)
R2 NTISchedulerSvc; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [144640 2010-04-17] (NTI, Inc.)
R2 ODDPwrSvc; C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe [171040 2010-04-22] (Acer Incorporated)
R2 RichVideo; C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [244904 2010-02-03] () [File not signed]
R2 RS_Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [260640 2010-01-30] (Acer Incorporated)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 tor; C:\Program Files (x86)\Tor\tor.exe [3233806 2013-08-28] () [File not signed]
R2 UNS; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2314240 2009-09-30] (Intel Corporation) [File not signed]
R2 VMCService; C:\Program Files (x86)\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe [9216 2009-09-11] (Vodafone) [File not signed]
S2 settings; C:\Windows\assembly\GAC_32\Policy.1.0.Microsoft.Interop.Security.AzRoles\6.1.7600.16385__31bf3856ad364e35\genre\promotional_image.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-12-31] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-12-31] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-12-31] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-12-31] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-30] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-12-31] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-12-31] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-12-31] ()
S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [132608 2009-06-29] (Huawei Technologies Co., Ltd.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-01-01] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-12-31] (Avast Software)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-01 16:46 - 2015-01-01 16:46 - 00000000 ____D () C:\FRST
2015-01-01 16:44 - 2015-01-01 16:44 - 00000000 _____ () C:\Users\*****\defogger_reenable
2015-01-01 16:43 - 2015-01-01 16:43 - 00000197 _____ () C:\Windows\system32\2015-01-01-15-43-06.048-AvastVBoxSVC.exe-3852.log
2015-01-01 13:15 - 2015-01-01 16:41 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-01-01 08:58 - 2015-01-01 08:58 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Izlwcl
2015-01-01 08:57 - 2015-01-01 08:57 - 00000280 _____ () C:\Windows\system32\2015-01-01-07-57-18.047-aswFe.exe-5284.log
2015-01-01 08:56 - 2015-01-01 08:56 - 00000197 _____ () C:\Windows\system32\2015-01-01-07-56-50.074-AvastVBoxSVC.exe-4288.log
2015-01-01 00:09 - 2015-01-01 00:09 - 01657389 _____ () C:\Users\*****\Documents\virus.txt
2014-12-31 16:12 - 2014-12-31 16:12 - 00001359 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-12-31 16:12 - 2014-12-31 16:12 - 00001347 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-12-31 16:12 - 2014-12-31 16:12 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-12-31 16:12 - 2014-12-31 16:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-12-31 16:12 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2014-12-31 16:11 - 2015-01-01 13:11 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-12-31 16:11 - 2015-01-01 11:16 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-12-31 16:10 - 2014-12-31 16:10 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-12-31 16:08 - 2015-01-01 16:39 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2014-12-31 16:08 - 2014-12-31 16:08 - 00001812 _____ () C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
2014-12-31 16:08 - 2014-12-31 16:08 - 00000000 ____D () C:\Users\*****\AppData\Roaming\SUPERAntiSpyware.com
2014-12-31 16:08 - 2014-12-31 16:08 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com
2014-12-31 16:08 - 2014-12-31 16:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2014-12-31 16:06 - 2014-12-31 16:06 - 00001070 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-12-31 16:06 - 2014-12-31 16:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-12-31 16:06 - 2014-12-31 16:06 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-12-31 16:06 - 2014-11-21 06:54 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-12-31 16:06 - 2014-11-21 06:53 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-12-31 16:06 - 2014-11-21 06:53 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-12-31 16:02 - 2014-12-31 16:02 - 00000197 _____ () C:\Windows\system32\2014-12-31-15-02-05.063-AvastVBoxSVC.exe-3792.log
2014-12-31 13:29 - 2014-12-31 13:29 - 00000247 _____ () C:\Windows\system32\2014-12-31-12-29-13.019-aswFe.exe-3656.log
2014-12-31 13:20 - 2014-12-31 13:28 - 00000247 _____ () C:\Windows\system32\2014-12-31-12-20-51.055-aswFe.exe-3680.log
2014-12-31 13:20 - 2014-12-31 13:20 - 00000197 _____ () C:\Windows\system32\2014-12-31-12-20-45.042-AvastVBoxSVC.exe-424.log
2014-12-31 09:06 - 2014-12-31 09:06 - 00364512 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-12-31 09:05 - 2014-12-31 09:05 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-12-31 09:05 - 2014-12-31 09:05 - 00000197 _____ () C:\Windows\system32\2014-12-31-08-05-44.056-AvastVBoxSVC.exe-3240.log
2014-12-31 09:01 - 2014-12-31 09:01 - 00000197 _____ () C:\Windows\system32\2014-12-31-08-01-48.023-AvastVBoxSVC.exe-4584.log
2014-12-30 18:34 - 2014-12-30 18:34 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia
2014-12-30 18:34 - 2014-12-30 18:34 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia
2014-12-30 18:24 - 2014-12-31 17:57 - 00000000 ____D () C:\Windows\SysWOW64\vbox
2014-12-30 18:24 - 2014-12-31 17:57 - 00000000 ____D () C:\Windows\system32\vbox
2014-12-30 18:22 - 2014-12-30 18:22 - 00000000 ____D () C:\Users\*****\AppData\Roaming\AVAST Software
2014-12-30 18:19 - 2015-01-01 13:56 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-12-30 18:19 - 2014-12-31 17:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2014-12-30 18:19 - 2014-12-31 09:06 - 00436624 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-12-30 18:19 - 2014-12-31 09:06 - 00267632 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-12-30 18:19 - 2014-12-31 09:06 - 00116728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-12-30 18:19 - 2014-12-31 09:06 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-12-30 18:19 - 2014-12-31 09:06 - 00083280 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys
2014-12-30 18:19 - 2014-12-31 09:06 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-12-30 18:19 - 2014-12-31 09:06 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-12-30 18:19 - 2014-12-31 09:06 - 00001968 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2014-12-30 18:19 - 2014-12-30 18:19 - 01050432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2014-12-30 18:17 - 2014-12-30 18:17 - 00000000 ____D () C:\Program Files\AVAST Software
2014-12-30 18:16 - 2014-12-30 18:16 - 00000000 ____D () C:\OETemp
2014-12-30 18:12 - 2014-12-30 18:17 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-12-30 18:01 - 2014-12-30 18:02 - 00000345 _____ () C:\DelFix.txt
2014-12-30 16:23 - 2014-12-30 16:23 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-12-30 07:13 - 2014-12-30 15:12 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Boss-milk
2014-12-30 07:13 - 2014-12-30 07:13 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Poet_value
2014-12-27 00:51 - 2014-12-30 07:13 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Hqrk
2014-12-26 21:47 - 2014-12-30 17:06 - 00000000 ___HD () C:\Users\*****\AppData\Local\Access-bed
2014-12-24 22:04 - 2014-12-24 22:04 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-rise
2014-12-24 21:28 - 2014-12-24 21:28 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencelip
2014-12-24 21:15 - 2014-12-24 21:15 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencewell
2014-12-24 20:55 - 2014-12-24 21:28 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_camp
2014-12-24 20:55 - 2014-12-24 20:55 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audienceclub
2014-12-24 20:53 - 2014-12-24 20:53 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audienceexchange
2014-12-24 20:51 - 2014-12-24 21:29 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencetowel
2014-12-24 20:50 - 2014-12-24 21:29 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audienceare
2014-12-24 20:43 - 2014-12-24 21:36 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-toe
2014-12-24 20:37 - 2014-12-24 20:37 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencelost
2014-12-24 20:29 - 2014-12-24 21:27 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-summer
2014-12-24 20:27 - 2014-12-24 21:46 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-drop
2014-12-24 20:25 - 2014-12-24 20:56 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_married
2014-12-24 20:24 - 2014-12-24 21:19 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-rely
2014-12-24 20:22 - 2014-12-24 21:22 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_charge
2014-12-24 20:20 - 2014-12-24 21:05 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencetell
2014-12-24 20:15 - 2014-12-24 20:45 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-web
2014-12-24 20:14 - 2014-12-24 20:20 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-guard
2014-12-24 20:12 - 2014-12-24 20:12 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_value
2014-12-24 20:08 - 2014-12-24 21:11 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-open
2014-12-24 20:07 - 2014-12-24 22:00 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-job
2014-12-24 20:06 - 2014-12-24 21:27 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_candle
2014-12-24 20:06 - 2014-12-24 21:07 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_win
2014-12-24 20:05 - 2014-12-24 21:55 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-lesson
2014-12-24 20:03 - 2014-12-24 21:58 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_join
2014-12-24 19:58 - 2014-12-24 21:50 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencemarket
2014-12-24 19:53 - 2014-12-24 19:59 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_range
2014-12-24 19:52 - 2014-12-24 21:28 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audienceseek
2014-12-24 19:52 - 2014-12-24 20:13 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-log
2014-12-24 19:51 - 2014-12-24 22:01 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencelip
2014-12-24 19:51 - 2014-12-24 21:28 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_depend
2014-12-24 19:50 - 2014-12-24 21:43 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-rice
2014-12-24 19:49 - 2014-12-24 22:03 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencelook
2014-12-24 19:47 - 2014-12-24 19:47 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-encourage
2014-12-24 19:45 - 2014-12-24 20:17 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-document
2014-12-24 19:42 - 2014-12-24 22:03 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-ice
2014-12-24 19:41 - 2014-12-24 21:46 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_slide
2014-12-24 19:40 - 2014-12-24 21:48 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_adopt
2014-12-24 19:39 - 2014-12-24 21:26 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-improve
2014-12-24 19:39 - 2014-12-24 21:21 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencediffer
2014-12-24 19:39 - 2014-12-24 20:45 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_boss
2014-12-24 19:37 - 2014-12-24 21:51 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-body
2014-12-24 19:35 - 2014-12-24 21:53 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_profile
2014-12-24 19:35 - 2014-12-24 21:53 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_bake
2014-12-24 19:35 - 2014-12-24 21:39 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_send
2014-12-24 19:33 - 2014-12-24 19:33 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_doctor
2014-12-24 19:32 - 2014-12-24 20:50 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-shock
2014-12-24 19:29 - 2014-12-24 21:49 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-rock
2014-12-24 19:29 - 2014-12-24 20:03 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-trash
2014-12-24 19:28 - 2014-12-24 21:22 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_overcome
2014-12-24 19:27 - 2014-12-24 21:59 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audienceperfect
2014-12-24 19:27 - 2014-12-24 21:35 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencereply
2014-12-24 19:27 - 2014-12-24 19:27 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencebase
2014-12-24 19:26 - 2014-12-24 21:46 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencerisk
2014-12-24 19:26 - 2014-12-24 21:45 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencefix
2014-12-24 19:26 - 2014-12-24 21:22 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_factor
2014-12-24 19:25 - 2014-12-24 21:31 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencecloud
2014-12-24 19:24 - 2014-12-24 22:01 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audienceorganize
2014-12-24 19:24 - 2014-12-24 20:40 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_title
2014-12-24 19:24 - 2014-12-24 19:24 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-ice
2014-12-24 19:23 - 2014-12-24 21:22 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-film
2014-12-24 19:22 - 2014-12-24 20:43 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-war
2014-12-24 19:20 - 2014-12-24 19:24 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_continue
2014-12-24 19:19 - 2014-12-24 21:23 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-date
2014-12-24 19:19 - 2014-12-24 21:22 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-beat
2014-12-24 19:18 - 2014-12-24 22:01 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencedig
2014-12-24 19:18 - 2014-12-24 21:57 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-collect
2014-12-24 19:18 - 2014-12-24 20:59 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-anticipate
2014-12-24 19:17 - 2014-12-24 21:59 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencemove
2014-12-24 19:15 - 2014-12-24 20:53 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_check
2014-12-24 19:14 - 2014-12-24 21:41 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-complicated
2014-12-24 19:14 - 2014-12-24 21:23 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-frequent
2014-12-24 19:13 - 2014-12-24 21:30 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-roll
2014-12-24 19:13 - 2014-12-24 20:42 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencegarden
2014-12-24 19:11 - 2014-12-24 20:54 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-eye
2014-12-24 19:09 - 2014-12-24 21:52 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-swim
2014-12-24 19:09 - 2014-12-24 21:09 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_intend
2014-12-24 19:09 - 2014-12-24 21:06 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_shake
2014-12-24 19:08 - 2014-12-24 22:03 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-hunt
2014-12-24 19:08 - 2014-12-24 20:04 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_witness
2014-12-24 19:07 - 2014-12-24 21:11 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audienceadmire
2014-12-24 19:06 - 2014-12-24 21:59 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-employ
2014-12-24 19:06 - 2014-12-24 21:43 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencedoubt
2014-12-24 19:05 - 2014-12-24 22:01 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-surprised
2014-12-24 19:05 - 2014-12-24 21:57 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audienceinstall
2014-12-24 19:04 - 2014-12-24 21:32 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-guess
2014-12-24 19:04 - 2014-12-24 21:28 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_network
2014-12-24 19:03 - 2014-12-24 21:20 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-want
2014-12-24 19:02 - 2014-12-24 22:02 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-tie
2014-12-24 19:02 - 2014-12-24 20:39 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_send
2014-12-24 19:01 - 2014-12-24 20:04 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_expand
2014-12-24 19:00 - 2014-12-24 22:05 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-strain
2014-12-24 19:00 - 2014-12-24 21:40 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_team
2014-12-24 19:00 - 2014-12-24 21:24 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencebend
2014-12-24 19:00 - 2014-12-24 20:48 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencepiece
2014-12-24 18:59 - 2014-12-24 21:34 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audienceadvanced
2014-12-24 18:59 - 2014-12-24 21:03 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-lesson
2014-12-24 18:58 - 2014-12-24 21:43 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-score
2014-12-24 18:58 - 2014-12-24 21:24 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-bottom
2014-12-24 18:57 - 2014-12-30 18:02 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_harm
2014-12-24 18:57 - 2014-12-24 22:01 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-wear
2014-12-24 18:57 - 2014-12-24 21:55 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencedistrict
2014-12-24 18:57 - 2014-12-24 21:38 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-brush
2014-12-24 18:57 - 2014-12-24 20:46 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-strip
2014-12-24 18:56 - 2014-12-24 21:30 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-shift
2014-12-24 18:55 - 2014-12-24 22:00 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencelift
2014-12-24 18:55 - 2014-12-24 21:59 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_source
2014-12-24 18:55 - 2014-12-24 21:50 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-conference
2014-12-24 18:55 - 2014-12-24 21:43 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencereference
2014-12-24 18:54 - 2014-12-24 22:02 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-remember
2014-12-24 18:54 - 2014-12-24 21:40 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-gear
2014-12-24 18:54 - 2014-12-24 19:45 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_spot
2014-12-24 18:53 - 2014-12-24 22:01 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_twist
2014-12-24 18:52 - 2014-12-24 21:53 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_award
2014-12-24 18:52 - 2014-12-24 21:42 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-blind
2014-12-24 18:52 - 2014-12-24 20:47 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_salary
2014-12-24 18:50 - 2014-12-24 20:04 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-upset
2014-12-24 18:49 - 2014-12-24 22:02 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencebattle
2014-12-24 18:49 - 2014-12-24 18:49 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-worry
2014-12-24 18:48 - 2014-12-24 21:44 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-pass
2014-12-24 18:48 - 2014-12-24 21:28 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencedistrict
2014-12-24 18:48 - 2014-12-24 20:58 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencesearch
2014-12-24 18:48 - 2014-12-24 20:05 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_table
2014-12-24 18:47 - 2014-12-24 21:24 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_tip
2014-12-24 18:47 - 2014-12-24 21:00 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-comfort
2014-12-24 18:46 - 2014-12-24 21:50 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-card
2014-12-24 18:46 - 2014-12-24 21:34 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_nerve
2014-12-24 18:46 - 2014-12-24 20:13 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_paint
2014-12-24 18:45 - 2014-12-24 21:48 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-leave
2014-12-24 18:45 - 2014-12-24 21:38 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-load
2014-12-24 18:45 - 2014-12-24 21:37 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-rid
2014-12-24 18:45 - 2014-12-24 21:16 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencesucceed
2014-12-24 18:45 - 2014-12-24 18:45 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-collar
2014-12-24 18:43 - 2014-12-24 22:03 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencebone
2014-12-24 18:43 - 2014-12-24 21:54 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencereduce
2014-12-24 18:43 - 2014-12-24 21:34 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-package
2014-12-24 18:43 - 2014-12-24 21:25 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-complete
2014-12-24 18:43 - 2014-12-24 19:56 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-relieve
2014-12-24 18:42 - 2014-12-24 22:02 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audienceassume
2014-12-24 18:42 - 2014-12-24 21:40 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencemuscle
2014-12-24 18:42 - 2014-12-24 20:53 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-prompt
2014-12-24 18:42 - 2014-12-24 20:48 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_slide
2014-12-24 18:41 - 2014-12-24 21:58 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-examine
2014-12-24 18:41 - 2014-12-24 21:56 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-brick
2014-12-24 18:41 - 2014-12-24 21:35 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencezone
2014-12-24 18:41 - 2014-12-24 21:29 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-worry
2014-12-24 18:41 - 2014-12-24 20:36 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencesort
2014-12-24 18:41 - 2014-12-24 18:41 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-slip
2014-12-24 18:40 - 2014-12-24 21:34 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencestay
2014-12-24 18:40 - 2014-12-24 21:21 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-button
2014-12-24 18:40 - 2014-12-24 21:15 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_witness
2014-12-24 18:40 - 2014-12-24 19:34 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-leg
2014-12-24 18:40 - 2014-12-24 19:20 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audienceprint
2014-12-24 18:39 - 2014-12-24 22:02 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-ring
2014-12-24 18:39 - 2014-12-24 21:37 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audienceinvite
2014-12-24 18:38 - 2014-12-30 18:02 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_impress
2014-12-24 18:38 - 2014-12-24 21:56 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-ball
2014-12-24 18:38 - 2014-12-24 21:53 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audienceflower
2014-12-24 18:38 - 2014-12-24 21:51 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencewise
2014-12-24 18:38 - 2014-12-24 21:21 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_remain
2014-12-24 18:38 - 2014-12-24 20:26 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_wheel
2014-12-24 18:38 - 2014-12-24 19:50 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_build
2014-12-24 18:37 - 2014-12-24 21:29 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-excuse
2014-12-24 18:37 - 2014-12-24 21:24 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-mistake
2014-12-24 18:37 - 2014-12-24 19:17 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-wrap
2014-12-24 18:37 - 2014-12-24 18:37 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_blank
2014-12-24 18:36 - 2014-12-24 21:31 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-employ
2014-12-24 18:35 - 2014-12-24 20:44 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencenose
2014-12-24 18:35 - 2014-12-24 20:09 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-golf
2014-12-24 18:35 - 2014-12-24 19:31 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-protect
2014-12-24 18:34 - 2014-12-24 21:46 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_sleep
2014-12-24 18:34 - 2014-12-24 21:05 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-league
2014-12-24 18:32 - 2014-12-24 22:01 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audienceavoid
2014-12-24 18:32 - 2014-12-24 21:57 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencescrew
2014-12-24 18:32 - 2014-12-24 21:30 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_frame
2014-12-24 18:32 - 2014-12-24 21:27 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-spring
2014-12-24 18:32 - 2014-12-24 21:15 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-stick
2014-12-24 18:32 - 2014-12-24 21:15 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-issue
2014-12-24 18:31 - 2014-12-24 22:04 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencecelebrate
2014-12-24 18:31 - 2014-12-24 22:04 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_let
2014-12-24 18:31 - 2014-12-24 22:03 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencesize
2014-12-24 18:31 - 2014-12-24 21:57 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-closet
2014-12-24 18:31 - 2014-12-24 21:39 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-number
2014-12-24 18:31 - 2014-12-24 21:02 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_guy
2014-12-24 18:31 - 2014-12-24 20:21 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-distribute
2014-12-24 18:31 - 2014-12-24 19:28 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencestage
2014-12-24 18:30 - 2014-12-24 22:00 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audienceinfluence
2014-12-24 18:30 - 2014-12-24 21:49 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_fail
2014-12-24 18:30 - 2014-12-24 21:38 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-like
2014-12-24 18:30 - 2014-12-24 20:58 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_nail
2014-12-24 18:30 - 2014-12-24 20:10 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencedream
2014-12-24 18:29 - 2014-12-24 22:04 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-fold
2014-12-24 18:29 - 2014-12-24 22:00 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_sandwich
2014-12-24 18:29 - 2014-12-24 20:32 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencepound
2014-12-24 18:29 - 2014-12-24 20:02 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencebattle
2014-12-24 18:28 - 2014-12-24 21:54 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_insist
2014-12-24 18:28 - 2014-12-24 21:45 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-sport
2014-12-24 18:28 - 2014-12-24 21:24 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-laugh
2014-12-24 18:28 - 2014-12-24 20:59 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-approve
2014-12-24 18:27 - 2014-12-24 21:47 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_adopt
2014-12-24 18:26 - 2014-12-24 21:46 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-handle
2014-12-24 18:25 - 2014-12-24 22:03 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-eat
2014-12-24 18:25 - 2014-12-24 21:59 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_buddy
2014-12-24 18:25 - 2014-12-24 21:47 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audienceradio
2014-12-24 18:24 - 2014-12-24 21:12 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-noise
2014-12-24 18:24 - 2014-12-24 20:35 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-cup
2014-12-24 18:23 - 2014-12-24 21:31 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencetower
2014-12-24 18:23 - 2014-12-24 21:22 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_secure
2014-12-24 18:23 - 2014-12-24 19:39 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencecommit
2014-12-24 18:22 - 2014-12-24 21:55 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-research
2014-12-24 18:22 - 2014-12-24 21:45 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audienceremove
2014-12-24 18:22 - 2014-12-24 21:44 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencehope
2014-12-24 18:22 - 2014-12-24 18:22 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-according
2014-12-24 18:21 - 2014-12-24 22:02 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_expect
2014-12-24 18:21 - 2014-12-24 21:51 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencetrust
2014-12-24 18:21 - 2014-12-24 21:44 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-rest
2014-12-24 18:21 - 2014-12-24 21:38 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-convert
2014-12-24 18:21 - 2014-12-24 21:20 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-assure
2014-12-24 18:20 - 2014-12-24 21:51 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-pair
2014-12-24 18:20 - 2014-12-24 21:38 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audienceinstall
2014-12-24 18:20 - 2014-12-24 20:39 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-push
2014-12-24 18:20 - 2014-12-24 20:07 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-fruit
2014-12-24 18:19 - 2014-12-24 21:36 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-wave
2014-12-24 18:19 - 2014-12-24 21:13 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencehappen
2014-12-24 18:19 - 2014-12-24 20:47 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-slight
2014-12-24 18:18 - 2014-12-24 21:42 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-mean
2014-12-24 18:18 - 2014-12-24 21:06 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-speed
2014-12-24 18:18 - 2014-12-24 21:05 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-handle
2014-12-24 18:18 - 2014-12-24 20:58 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_nerve
2014-12-24 18:18 - 2014-12-24 20:32 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-manage
2014-12-24 18:18 - 2014-12-24 20:21 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-rice
2014-12-24 18:18 - 2014-12-24 19:20 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audienceadvanced
2014-12-24 18:18 - 2014-12-24 18:53 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audienceattempt
2014-12-24 18:17 - 2014-12-24 22:01 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audienceadapt
2014-12-24 18:17 - 2014-12-24 21:53 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-term
2014-12-24 18:17 - 2014-12-24 21:46 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-grass
2014-12-24 18:17 - 2014-12-24 21:33 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-investigate
2014-12-24 18:16 - 2014-12-24 22:03 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_curve
2014-12-24 18:16 - 2014-12-24 21:58 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-bar
2014-12-24 18:16 - 2014-12-24 21:37 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audienceset
2014-12-24 18:16 - 2014-12-24 21:31 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-share
2014-12-24 18:16 - 2014-12-24 21:18 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-upset
2014-12-24 18:16 - 2014-12-24 21:14 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_relax
2014-12-24 18:16 - 2014-12-24 20:59 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencetowel
2014-12-24 18:16 - 2014-12-24 20:25 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-post
2014-12-24 18:16 - 2014-12-24 19:46 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-kid
2014-12-24 18:16 - 2014-12-24 18:16 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-kiss
2014-12-24 18:15 - 2014-12-24 21:37 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_born
2014-12-24 18:14 - 2014-12-24 21:58 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-oil
2014-12-24 18:14 - 2014-12-24 21:06 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-promise
2014-12-24 18:14 - 2014-12-24 19:42 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-teach
2014-12-24 18:13 - 2014-12-24 21:48 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-damage
2014-12-24 18:13 - 2014-12-24 21:16 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-school
2014-12-24 18:13 - 2014-12-24 20:56 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-step
2014-12-24 18:13 - 2014-12-24 20:40 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_mail
2014-12-24 18:13 - 2014-12-24 20:19 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-demand
2014-12-24 18:13 - 2014-12-24 19:54 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audienceresult
2014-12-24 18:12 - 2014-12-24 22:04 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-bet
2014-12-24 18:12 - 2014-12-24 21:51 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_add
2014-12-24 18:12 - 2014-12-24 21:46 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-replace
2014-12-24 18:12 - 2014-12-24 21:42 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-grass
2014-12-24 18:12 - 2014-12-24 21:31 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencelost
2014-12-24 18:12 - 2014-12-24 20:27 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-hook
2014-12-24 18:11 - 2014-12-24 21:52 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-approach
2014-12-24 18:11 - 2014-12-24 21:49 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-review
2014-12-24 18:11 - 2014-12-24 18:11 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-pain
2014-12-24 18:10 - 2014-12-30 18:02 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_implement
2014-12-24 18:10 - 2014-12-24 22:03 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-side
2014-12-24 18:10 - 2014-12-24 21:37 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencereserve
2014-12-24 18:10 - 2014-12-24 20:22 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audienceblack
2014-12-24 18:09 - 2014-12-24 21:49 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencedesire
2014-12-24 18:09 - 2014-12-24 21:32 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audienceflower
2014-12-24 18:09 - 2014-12-24 21:31 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencehesitate
2014-12-24 18:09 - 2014-12-24 21:16 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencedish
2014-12-24 18:09 - 2014-12-24 19:21 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_pleasure
2014-12-24 18:08 - 2014-12-24 21:57 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_emphasize
2014-12-24 18:08 - 2014-12-24 21:56 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-pursue
2014-12-24 18:08 - 2014-12-24 21:39 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencespace
2014-12-24 18:08 - 2014-12-24 21:06 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-behave
2014-12-24 18:07 - 2014-12-24 22:04 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-step
2014-12-24 18:07 - 2014-12-24 21:53 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-organized
2014-12-24 18:07 - 2014-12-24 21:09 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-fuel
2014-12-24 18:07 - 2014-12-24 18:21 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-examine
2014-12-24 18:06 - 2014-12-24 22:00 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-dare
2014-12-24 18:06 - 2014-12-24 21:39 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-ride
2014-12-24 18:06 - 2014-12-24 20:52 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_mortgage
2014-12-24 18:06 - 2014-12-24 19:22 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-diet
2014-12-24 18:06 - 2014-12-24 18:06 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-bit
2014-12-24 18:05 - 2014-12-24 22:01 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-sing
2014-12-24 18:05 - 2014-12-24 22:00 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-announce
2014-12-24 18:05 - 2014-12-24 21:42 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-ruin
2014-12-24 18:05 - 2014-12-24 21:20 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audienceneed
2014-12-24 18:05 - 2014-12-24 20:29 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-spell
2014-12-24 18:05 - 2014-12-24 20:26 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-farm
2014-12-24 18:04 - 2014-12-24 22:00 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-bit
2014-12-24 18:04 - 2014-12-24 21:52 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-pool
2014-12-24 18:04 - 2014-12-24 21:46 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-change
2014-12-24 18:04 - 2014-12-24 21:34 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencereport
2014-12-24 18:04 - 2014-12-24 18:04 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_host
2014-12-24 18:03 - 2014-12-24 21:56 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_force
2014-12-24 18:03 - 2014-12-24 21:54 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-bed
2014-12-24 18:03 - 2014-12-24 21:02 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_drink
2014-12-24 18:02 - 2014-12-24 21:50 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-sex
2014-12-24 18:02 - 2014-12-24 21:33 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-repeat
2014-12-24 18:02 - 2014-12-24 21:32 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audienceattract
2014-12-24 18:02 - 2014-12-24 21:13 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencesit
2014-12-24 18:02 - 2014-12-24 20:17 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-purpose
2014-12-24 18:01 - 2014-12-24 22:04 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-know
2014-12-24 18:01 - 2014-12-24 21:58 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-class
2014-12-24 18:01 - 2014-12-24 21:02 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-bid
2014-12-24 18:01 - 2014-12-24 21:01 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencemarch
2014-12-24 18:01 - 2014-12-24 20:26 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_throw
2014-12-24 18:01 - 2014-12-24 19:58 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-narrow
2014-12-24 18:00 - 2014-12-24 21:37 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-read
2014-12-24 18:00 - 2014-12-24 21:12 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_suggest
2014-12-24 18:00 - 2014-12-24 20:53 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-jacket
2014-12-24 18:00 - 2014-12-24 20:44 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-fly
2014-12-24 17:59 - 2014-12-24 21:31 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_company
2014-12-24 17:59 - 2014-12-24 21:21 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-nurse
2014-12-24 17:59 - 2014-12-24 20:18 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_structure
2014-12-24 17:59 - 2014-12-24 17:59 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencepersuade
2014-12-24 17:58 - 2014-12-24 22:04 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_buddy
2014-12-24 17:58 - 2014-12-24 22:02 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_argue
2014-12-24 17:58 - 2014-12-24 21:50 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-weekend
2014-12-24 17:58 - 2014-12-24 21:24 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_devil
2014-12-24 17:58 - 2014-12-24 21:05 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-truck
2014-12-24 17:58 - 2014-12-24 20:38 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audienceconfirm
2014-12-24 17:58 - 2014-12-24 20:38 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-qualify
2014-12-24 17:57 - 2014-12-24 21:52 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-lie
2014-12-24 17:57 - 2014-12-24 21:30 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-text
2014-12-24 17:57 - 2014-12-24 21:30 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_part
2014-12-24 17:57 - 2014-12-24 21:28 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-egg
2014-12-24 17:57 - 2014-12-24 21:27 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-attack
2014-12-24 17:57 - 2014-12-24 21:25 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_officer
2014-12-24 17:57 - 2014-12-24 21:08 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-grow
2014-12-24 17:57 - 2014-12-24 21:02 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_would
2014-12-24 17:56 - 2014-12-24 21:56 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-tank
2014-12-24 17:56 - 2014-12-24 21:41 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-rid
2014-12-24 17:56 - 2014-12-24 21:35 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_stroke
2014-12-24 17:56 - 2014-12-24 20:36 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audienceaddress
2014-12-24 17:56 - 2014-12-24 20:18 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-complain
2014-12-24 17:55 - 2014-12-24 22:03 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audienceaccount
2014-12-24 17:55 - 2014-12-24 21:47 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-skin
2014-12-24 17:55 - 2014-12-24 21:04 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencelisten
2014-12-24 17:54 - 2014-12-24 21:58 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-watch
2014-12-24 17:54 - 2014-12-24 21:56 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencekick
2014-12-24 17:54 - 2014-12-24 21:48 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencedraft
2014-12-24 17:54 - 2014-12-24 21:33 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-hand
2014-12-24 17:54 - 2014-12-24 21:31 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_profit
2014-12-24 17:54 - 2014-12-24 21:26 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-indicate
2014-12-24 17:54 - 2014-12-24 21:25 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-explain
2014-12-24 17:54 - 2014-12-24 21:10 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-involve
2014-12-24 17:54 - 2014-12-24 20:54 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_tone
2014-12-24 17:53 - 2014-12-24 21:50 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-put
2014-12-24 17:53 - 2014-12-24 21:40 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencebe
2014-12-24 17:53 - 2014-12-24 21:13 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencesolve
2014-12-24 17:53 - 2014-12-24 20:49 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-log
2014-12-24 17:53 - 2014-12-24 20:46 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_case
2014-12-24 17:53 - 2014-12-24 20:28 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-destroy
2014-12-24 17:52 - 2014-12-24 22:01 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-resist
2014-12-24 17:52 - 2014-12-24 21:55 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_travel
2014-12-24 17:52 - 2014-12-24 21:52 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_drive
2014-12-24 17:52 - 2014-12-24 21:43 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_gift
2014-12-24 17:52 - 2014-12-24 21:33 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-scratch
2014-12-24 17:52 - 2014-12-24 21:25 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-view
2014-12-24 17:52 - 2014-12-24 21:18 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audienceconcern
2014-12-24 17:52 - 2014-12-24 21:11 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_bake
2014-12-24 17:51 - 2014-12-30 18:02 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_heat
2014-12-24 17:51 - 2014-12-24 22:02 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_gather
2014-12-24 17:51 - 2014-12-24 21:54 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-plan
2014-12-24 17:51 - 2014-12-24 21:37 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-survive
2014-12-24 17:51 - 2014-12-24 21:21 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencetower
2014-12-24 17:51 - 2014-12-24 21:21 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-plan
2014-12-24 17:51 - 2014-12-24 21:01 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencepress
2014-12-24 17:50 - 2014-12-31 09:00 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_extend
2014-12-24 17:50 - 2014-12-24 22:00 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-tie
2014-12-24 17:50 - 2014-12-24 21:16 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_waste
2014-12-24 17:49 - 2014-12-24 22:04 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencestable
2014-12-24 17:49 - 2014-12-24 21:55 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-mind
2014-12-24 17:49 - 2014-12-24 21:52 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-pair
2014-12-24 17:49 - 2014-12-24 21:41 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_strike
2014-12-24 17:49 - 2014-12-24 21:34 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencediffer
2014-12-24 17:49 - 2014-12-24 21:31 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-wind
2014-12-24 17:49 - 2014-12-24 21:21 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_suggest
2014-12-24 17:49 - 2014-12-24 18:10 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audienceroom
2014-12-24 17:48 - 2014-12-24 21:56 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-concert
2014-12-24 17:48 - 2014-12-24 21:51 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-edge
2014-12-24 17:48 - 2014-12-24 21:51 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-sock
2014-12-24 17:48 - 2014-12-24 21:46 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_interest
2014-12-24 17:48 - 2014-12-24 21:25 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_option
2014-12-24 17:48 - 2014-12-24 21:18 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_burn
2014-12-24 17:48 - 2014-12-24 21:14 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audienceapply
2014-12-24 17:48 - 2014-12-24 20:30 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-conflict
2014-12-24 17:48 - 2014-12-24 20:00 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencecash
2014-12-24 17:47 - 2014-12-24 21:54 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-border
2014-12-24 17:47 - 2014-12-24 21:44 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-submit
2014-12-24 17:47 - 2014-12-24 21:40 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audienceboard
2014-12-24 17:47 - 2014-12-24 21:05 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-recover
2014-12-24 17:47 - 2014-12-24 20:01 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-cut
2014-12-24 17:46 - 2014-12-24 22:00 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-must
2014-12-24 17:46 - 2014-12-24 21:56 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-remind
2014-12-24 17:46 - 2014-12-24 21:38 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-jump
2014-12-24 17:46 - 2014-12-24 21:36 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_effect
2014-12-24 17:46 - 2014-12-24 21:30 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-want
2014-12-24 17:46 - 2014-12-24 21:02 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencedecide
2014-12-24 17:46 - 2014-12-24 21:01 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audienceoccasion
2014-12-24 17:45 - 2014-12-24 21:46 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_feel
2014-12-24 17:45 - 2014-12-24 21:44 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_distance
2014-12-24 17:45 - 2014-12-24 21:43 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_bill
2014-12-24 17:45 - 2014-12-24 21:41 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-crew
2014-12-24 17:45 - 2014-12-24 21:36 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_rip
2014-12-24 17:45 - 2014-12-24 21:33 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencewake
2014-12-24 17:45 - 2014-12-24 21:12 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_glove
2014-12-24 17:45 - 2014-12-24 20:09 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-mouth
2014-12-24 17:45 - 2014-12-24 19:12 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_emphasize
2014-12-24 17:44 - 2014-12-24 21:58 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_father
2014-12-24 17:44 - 2014-12-24 21:49 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-own
2014-12-24 17:44 - 2014-12-24 21:31 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-choose
2014-12-24 17:44 - 2014-12-24 21:07 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-command
2014-12-24 17:44 - 2014-12-24 21:04 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-earn
2014-12-24 17:44 - 2014-12-24 20:23 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-post
2014-12-24 17:44 - 2014-12-24 20:10 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-job
2014-12-24 17:43 - 2014-12-30 18:03 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_inform
2014-12-24 17:43 - 2014-12-24 21:50 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-amazing
2014-12-24 17:43 - 2014-12-24 21:34 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-specify
2014-12-24 17:43 - 2014-12-24 21:22 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-lie
2014-12-24 17:43 - 2014-12-24 21:11 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-border
2014-12-24 17:43 - 2014-12-24 20:58 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-switch
2014-12-24 17:43 - 2014-12-24 20:34 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-phase
2014-12-24 17:43 - 2014-12-24 20:00 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-contain
2014-12-24 17:43 - 2014-12-24 19:58 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_candidate
2014-12-24 17:42 - 2014-12-24 21:44 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_attach
2014-12-24 17:42 - 2014-12-24 21:43 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-frequent
2014-12-24 17:42 - 2014-12-24 21:32 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_career
2014-12-24 17:42 - 2014-12-24 21:31 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_refuse
2014-12-24 17:42 - 2014-12-24 20:54 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-partner
2014-12-24 17:42 - 2014-12-24 19:37 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-crew
2014-12-24 17:41 - 2014-12-31 20:09 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-achieve
2014-12-24 17:41 - 2014-12-24 21:33 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-assist
2014-12-24 17:41 - 2014-12-24 21:29 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencelawyer
2014-12-24 17:41 - 2014-12-24 21:27 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_talk
2014-12-24 17:41 - 2014-12-24 21:19 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_style
2014-12-24 17:41 - 2014-12-24 21:17 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-shape
2014-12-24 17:41 - 2014-12-24 20:56 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-empty
2014-12-24 17:41 - 2014-12-24 20:07 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-window
2014-12-24 17:41 - 2014-12-24 19:01 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencereport
2014-12-24 17:40 - 2014-12-24 22:03 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencereact
2014-12-24 17:40 - 2014-12-24 22:00 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencewell
2014-12-24 17:40 - 2014-12-24 21:47 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_run
2014-12-24 17:40 - 2014-12-24 21:44 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-package
2014-12-24 17:40 - 2014-12-24 21:34 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_develop
2014-12-24 17:40 - 2014-12-24 21:28 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-partner
2014-12-24 17:40 - 2014-12-24 21:25 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-find
2014-12-24 17:40 - 2014-12-24 21:25 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-bowl
2014-12-24 17:40 - 2014-12-24 21:21 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_progress
2014-12-24 17:40 - 2014-12-24 20:53 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_sentence
2014-12-24 17:40 - 2014-12-24 18:09 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-mouse
2014-12-24 17:39 - 2014-12-24 22:02 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_concerned
2014-12-24 17:39 - 2014-12-24 21:53 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-relieve
2014-12-24 17:39 - 2014-12-24 21:52 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audienceare
2014-12-24 17:39 - 2014-12-24 21:46 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencepull
2014-12-24 17:39 - 2014-12-24 21:30 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-earth
2014-12-24 17:39 - 2014-12-24 21:28 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-gain
2014-12-24 17:39 - 2014-12-24 21:10 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_possess
2014-12-24 17:39 - 2014-12-24 21:03 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-position
2014-12-24 17:39 - 2014-12-24 20:28 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-angle
2014-12-24 17:39 - 2014-12-24 19:56 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-spell
2014-12-24 17:39 - 2014-12-24 19:43 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-imply
2014-12-24 17:38 - 2014-12-24 22:00 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_court
2014-12-24 17:38 - 2014-12-24 21:56 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-afford
2014-12-24 17:38 - 2014-12-24 21:44 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_counter
2014-12-24 17:38 - 2014-12-24 21:25 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_talk
2014-12-24 17:38 - 2014-12-24 21:25 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencesail
2014-12-24 17:38 - 2014-12-24 21:14 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-soil
2014-12-24 17:38 - 2014-12-24 20:51 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_recommend
2014-12-24 17:38 - 2014-12-24 20:47 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-breast
2014-12-24 17:38 - 2014-12-24 19:55 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencepractice
2014-12-24 17:37 - 2014-12-24 22:03 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audienceman
2014-12-24 17:37 - 2014-12-24 22:01 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencehold
2014-12-24 17:37 - 2014-12-24 21:57 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencepersuade
2014-12-24 17:37 - 2014-12-24 21:57 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_fail
2014-12-24 17:37 - 2014-12-24 21:53 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencemachine
2014-12-24 17:37 - 2014-12-24 21:46 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audienceclock
2014-12-24 17:37 - 2014-12-24 21:45 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-till
2014-12-24 17:37 - 2014-12-24 21:28 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-hand
2014-12-24 17:37 - 2014-12-24 21:21 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-layer
2014-12-24 17:37 - 2014-12-24 21:20 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_disagree
2014-12-24 17:37 - 2014-12-24 20:45 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-farm
2014-12-24 17:37 - 2014-12-24 20:36 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audienceexperience
2014-12-24 17:36 - 2014-12-24 22:02 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencecrash
2014-12-24 17:36 - 2014-12-24 21:55 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-net
2014-12-24 17:36 - 2014-12-24 21:55 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-increase
2014-12-24 17:36 - 2014-12-24 21:26 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-age
2014-12-24 17:36 - 2014-12-24 21:06 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-count
2014-12-24 17:36 - 2014-12-24 21:05 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-concentrate
2014-12-24 17:36 - 2014-12-24 20:42 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-count
2014-12-24 17:36 - 2014-12-24 19:53 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audienceclock
2014-12-24 17:35 - 2014-12-24 21:31 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-air
2014-12-24 17:35 - 2014-12-24 21:19 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-lead
2014-12-24 17:35 - 2014-12-24 21:09 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_script
2014-12-24 17:35 - 2014-12-24 20:35 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_tour
2014-12-24 17:35 - 2014-12-24 19:29 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_source
2014-12-24 17:35 - 2014-12-24 18:32 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_string
2014-12-24 17:34 - 2014-12-24 22:01 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-league
2014-12-24 17:34 - 2014-12-24 21:52 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_continue
2014-12-24 17:34 - 2014-12-24 21:50 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-dimension
2014-12-24 17:34 - 2014-12-24 21:30 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_structure
2014-12-24 17:34 - 2014-12-24 21:27 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_target
2014-12-24 17:34 - 2014-12-24 21:24 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-weight
2014-12-24 17:34 - 2014-12-24 21:07 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-come
2014-12-24 17:34 - 2014-12-24 20:46 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_jury
2014-12-24 17:34 - 2014-12-24 20:09 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-sand
2014-12-24 17:34 - 2014-12-24 19:43 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-mess
2014-12-24 17:34 - 2014-12-24 17:34 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencediscover
2014-12-24 17:33 - 2014-12-24 21:59 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audienceclub
2014-12-24 17:33 - 2014-12-24 21:55 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-were
2014-12-24 17:33 - 2014-12-24 21:55 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-rush
2014-12-24 17:33 - 2014-12-24 21:44 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_force
2014-12-24 17:33 - 2014-12-24 21:21 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-button
2014-12-24 17:33 - 2014-12-24 21:06 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-treat
2014-12-24 17:33 - 2014-12-24 20:59 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_fire
2014-12-24 17:33 - 2014-12-24 20:35 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencelunch
2014-12-24 17:32 - 2014-12-24 21:59 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencelimited
2014-12-24 17:32 - 2014-12-24 21:57 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencenegotiate
2014-12-24 17:32 - 2014-12-24 21:51 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-concert
2014-12-24 17:32 - 2014-12-24 21:50 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencepace
2014-12-24 17:32 - 2014-12-24 21:44 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencereveal
2014-12-24 17:32 - 2014-12-24 21:40 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-link
2014-12-24 17:32 - 2014-12-24 21:37 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audienceignore
2014-12-24 17:32 - 2014-12-24 21:19 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-begin
2014-12-24 17:32 - 2014-12-24 21:00 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_pin
2014-12-24 17:32 - 2014-12-24 20:55 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-bug
2014-12-24 17:32 - 2014-12-24 20:39 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audienceblack
2014-12-24 17:32 - 2014-12-24 20:26 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_involved
2014-12-24 17:32 - 2014-12-24 19:21 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-fuel
2014-12-24 17:31 - 2014-12-24 21:57 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_lay
2014-12-24 17:31 - 2014-12-24 21:49 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-metal
2014-12-24 17:31 - 2014-12-24 21:41 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-encouraging
2014-12-24 17:31 - 2014-12-24 21:41 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_bite
2014-12-24 17:31 - 2014-12-24 21:23 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencelandscape
2014-12-24 17:31 - 2014-12-24 20:53 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-sky
2014-12-24 17:31 - 2014-12-24 20:52 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_walk
2014-12-24 17:31 - 2014-12-24 20:29 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-correct
2014-12-24 17:31 - 2014-12-24 20:16 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-bag
2014-12-24 17:31 - 2014-12-24 17:44 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-pick
2014-12-24 17:30 - 2014-12-24 21:58 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-see
2014-12-24 17:30 - 2014-12-24 21:42 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_does
2014-12-24 17:30 - 2014-12-24 21:40 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencesit
2014-12-24 17:30 - 2014-12-24 21:39 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-sex
2014-12-24 17:30 - 2014-12-24 21:31 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_survey
2014-12-24 17:30 - 2014-12-24 21:21 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-blind
2014-12-24 17:30 - 2014-12-24 20:58 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_enhance
2014-12-24 17:30 - 2014-12-24 19:15 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_candidate
2014-12-24 17:29 - 2014-12-24 21:59 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_obtain
2014-12-24 17:29 - 2014-12-24 21:57 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencebranch
2014-12-24 17:29 - 2014-12-24 21:55 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-benefit
2014-12-24 17:29 - 2014-12-24 21:53 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-prove
2014-12-24 17:29 - 2014-12-24 21:38 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-calendar
2014-12-24 17:29 - 2014-12-24 21:23 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_judge
2014-12-24 17:29 - 2014-12-24 20:50 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-dust
2014-12-24 17:29 - 2014-12-24 20:10 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-code
2014-12-24 17:29 - 2014-12-24 20:09 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-highlight
2014-12-24 17:29 - 2014-12-24 18:38 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-strip
2014-12-24 17:28 - 2014-12-24 21:56 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencecommunicate
2014-12-24 17:28 - 2014-12-24 21:35 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-cook
2014-12-24 17:28 - 2014-12-24 21:34 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_network
2014-12-24 17:28 - 2014-12-24 21:03 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_jury
2014-12-24 17:28 - 2014-12-24 20:48 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-pretend
2014-12-24 17:28 - 2014-12-24 20:46 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-grandfather
2014-12-24 17:28 - 2014-12-24 20:16 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-breakfast
2014-12-24 17:28 - 2014-12-24 19:52 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencecloud
2014-12-24 17:27 - 2014-12-24 22:01 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-gas
2014-12-24 17:27 - 2014-12-24 21:50 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-bottom
2014-12-24 17:27 - 2014-12-24 21:48 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_win
2014-12-24 17:27 - 2014-12-24 21:47 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-surround
2014-12-24 17:27 - 2014-12-24 21:43 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencediscover
2014-12-24 17:27 - 2014-12-24 21:20 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_concerned
2014-12-24 17:27 - 2014-12-24 21:11 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-school
2014-12-24 17:27 - 2014-12-24 19:54 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-knife
2014-12-24 17:27 - 2014-12-24 19:00 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_boat
2014-12-24 17:27 - 2014-12-24 17:27 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audienceshoot
2014-12-24 17:26 - 2014-12-24 22:04 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-pension
2014-12-24 17:26 - 2014-12-24 22:03 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-suit
2014-12-24 17:26 - 2014-12-24 22:01 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-hurry
2014-12-24 17:26 - 2014-12-24 22:01 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_quote
2014-12-24 17:26 - 2014-12-24 21:58 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-regret
2014-12-24 17:26 - 2014-12-24 21:43 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-rule
2014-12-24 17:26 - 2014-12-24 21:42 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-speak
2014-12-24 17:26 - 2014-12-24 21:25 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencequestion
2014-12-24 17:26 - 2014-12-24 20:43 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_yard
2014-12-24 17:26 - 2014-12-24 20:42 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-rub
2014-12-24 17:26 - 2014-12-24 20:37 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_impress
2014-12-24 17:26 - 2014-12-24 20:34 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencehabit
2014-12-24 17:26 - 2014-12-24 20:33 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-register
2014-12-24 17:26 - 2014-12-24 20:32 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_cycle
2014-12-24 17:26 - 2014-12-24 20:26 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audienceloan
2014-12-24 17:25 - 2014-12-24 22:02 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_struggle
2014-12-24 17:25 - 2014-12-24 21:57 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-been
2014-12-24 17:25 - 2014-12-24 21:56 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencequestion
2014-12-24 17:25 - 2014-12-24 21:55 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audienceconfirm
2014-12-24 17:25 - 2014-12-24 21:43 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_roof
2014-12-24 17:25 - 2014-12-24 21:36 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-steal
2014-12-24 17:25 - 2014-12-24 21:32 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_surprise
2014-12-24 17:25 - 2014-12-24 21:31 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-diet
2014-12-24 17:25 - 2014-12-24 21:12 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-grow
2014-12-24 17:25 - 2014-12-24 21:11 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-translate
2014-12-24 17:25 - 2014-12-24 21:10 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-rush
2014-12-24 17:25 - 2014-12-24 20:38 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-concentrate
2014-12-24 17:25 - 2014-12-24 20:01 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-phrase
2014-12-24 17:25 - 2014-12-24 19:41 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_yard
2014-12-24 17:24 - 2014-12-24 22:03 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-shape
2014-12-24 17:24 - 2014-12-24 22:00 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-pop
2014-12-24 17:24 - 2014-12-24 21:52 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencedesire
2014-12-24 17:24 - 2014-12-24 21:52 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-shut
2014-12-24 17:24 - 2014-12-24 21:52 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-regret
2014-12-24 17:24 - 2014-12-24 21:47 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencecommunicate
2014-12-24 17:24 - 2014-12-24 21:17 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-block
2014-12-24 17:24 - 2014-12-24 20:57 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencefault
2014-12-24 17:24 - 2014-12-24 20:52 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-rest
2014-12-24 17:24 - 2014-12-24 20:46 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencecoat
2014-12-24 17:24 - 2014-12-24 20:37 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencethink
2014-12-24 17:24 - 2014-12-24 20:18 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencecatch
2014-12-24 17:24 - 2014-12-24 20:18 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencetrade
2014-12-24 17:24 - 2014-12-24 20:07 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencegive
2014-12-24 17:24 - 2014-12-24 19:45 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-support
2014-12-24 17:24 - 2014-12-24 19:26 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_appear
2014-12-24 17:23 - 2014-12-24 22:04 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencewait
2014-12-24 17:23 - 2014-12-24 22:04 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-code
2014-12-24 17:23 - 2014-12-24 21:51 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audienceresolve
2014-12-24 17:23 - 2014-12-24 21:47 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-pension
2014-12-24 17:23 - 2014-12-24 21:46 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-answer
2014-12-24 17:23 - 2014-12-24 21:40 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_enjoy
2014-12-24 17:23 - 2014-12-24 21:32 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-tap
2014-12-24 17:23 - 2014-12-24 20:22 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-consist
2014-12-24 17:23 - 2014-12-24 19:47 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencechart
2014-12-24 17:22 - 2014-12-24 22:01 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-pattern
2014-12-24 17:22 - 2014-12-24 21:55 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-accuse
2014-12-24 17:22 - 2014-12-24 21:53 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-cook
2014-12-24 17:22 - 2014-12-24 21:51 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_tour
2014-12-24 17:22 - 2014-12-24 21:49 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-cup
2014-12-24 17:22 - 2014-12-24 21:43 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_involved
2014-12-24 17:22 - 2014-12-24 21:35 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-drag
2014-12-24 17:22 - 2014-12-24 21:16 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencelandscape
2014-12-24 17:22 - 2014-12-24 20:36 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_cancel
2014-12-24 17:22 - 2014-12-24 20:29 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-settle
2014-12-24 17:22 - 2014-12-24 20:12 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-dirty
2014-12-24 17:22 - 2014-12-24 18:24 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-juice
2014-12-24 10:53 - 2014-12-24 21:25 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-push
2014-12-24 10:53 - 2014-12-24 20:46 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-order
2014-12-24 10:53 - 2014-12-24 20:43 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_fall
2014-12-24 10:52 - 2014-12-24 22:02 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-help
2014-12-24 10:52 - 2014-12-24 21:57 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_factor
2014-12-24 10:52 - 2014-12-24 21:53 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-survive
2014-12-24 10:52 - 2014-12-24 21:53 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-position
2014-12-24 10:52 - 2014-12-24 21:48 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-cover
2014-12-24 10:52 - 2014-12-24 21:44 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-shift
2014-12-24 10:52 - 2014-12-24 21:43 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencetransition
2014-12-24 10:52 - 2014-12-24 21:34 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-fly
2014-12-24 10:52 - 2014-12-24 21:29 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audienceexplore
2014-12-24 10:52 - 2014-12-24 21:29 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_let
2014-12-24 10:52 - 2014-12-24 21:28 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-enter
2014-12-24 10:52 - 2014-12-24 21:24 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-ride
2014-12-24 10:52 - 2014-12-24 21:23 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-recognize
2014-12-24 10:52 - 2014-12-24 21:15 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencefirm
2014-12-24 10:52 - 2014-12-24 21:04 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-appropriate
2014-12-24 10:52 - 2014-12-24 21:01 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-prevent
2014-12-24 10:51 - 2014-12-31 20:09 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-accept
2014-12-24 10:51 - 2014-12-24 22:03 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencepack
2014-12-24 10:51 - 2014-12-24 22:00 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_refuse
2014-12-24 10:51 - 2014-12-24 21:59 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_peak
2014-12-24 10:51 - 2014-12-24 21:58 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-forget
2014-12-24 10:51 - 2014-12-24 21:57 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audienceshall
2014-12-24 10:51 - 2014-12-24 21:55 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-web
2014-12-24 10:51 - 2014-12-24 21:41 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_belt
2014-12-24 10:51 - 2014-12-24 21:39 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_candle
2014-12-24 10:51 - 2014-12-24 21:24 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-trouble
2014-12-24 10:51 - 2014-12-24 21:11 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencedog
2014-12-24 10:51 - 2014-12-24 20:57 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-word
2014-12-24 10:51 - 2014-12-24 20:57 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-bug
2014-12-24 10:51 - 2014-12-24 20:45 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audienceresort
2014-12-24 10:51 - 2014-12-24 20:34 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-mix
2014-12-24 10:51 - 2014-12-24 20:23 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_sentence
2014-12-24 10:51 - 2014-12-24 20:19 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_include
2014-12-24 10:51 - 2014-12-24 19:50 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-mistake
2014-12-24 10:51 - 2014-12-24 19:34 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-sign
2014-12-24 10:50 - 2014-12-30 18:03 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_incorporate
2014-12-24 10:50 - 2014-12-24 22:00 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-trouble
2014-12-24 10:50 - 2014-12-24 21:55 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_get
2014-12-24 10:50 - 2014-12-24 21:48 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-remember
2014-12-24 10:50 - 2014-12-24 21:41 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audienceapply
2014-12-24 10:50 - 2014-12-24 21:31 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencepound
2014-12-24 10:50 - 2014-12-24 20:44 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-consist
2014-12-24 10:50 - 2014-12-24 20:39 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-forget
2014-12-24 10:50 - 2014-12-24 20:35 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_attend
2014-12-24 10:50 - 2014-12-24 20:20 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_picture
2014-12-24 10:50 - 2014-12-24 20:04 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audienceexercise
2014-12-24 10:50 - 2014-12-24 19:31 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-compare
2014-12-24 10:49 - 2014-12-24 21:55 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-monitor
2014-12-24 10:49 - 2014-12-24 21:49 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-beach
2014-12-24 10:49 - 2014-12-24 21:43 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-sun
2014-12-24 10:49 - 2014-12-24 21:34 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencegrade
2014-12-24 10:49 - 2014-12-24 21:23 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audiencedance
2014-12-24 10:49 - 2014-12-24 21:18 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_interview
2014-12-24 10:49 - 2014-12-24 21:05 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_doctor
2014-12-24 10:49 - 2014-12-24 20:39 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-advance
2014-12-24 10:49 - 2014-12-24 20:16 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-conflict
2014-12-24 10:49 - 2014-12-24 18:52 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-worried
2014-12-24 10:49 - 2014-12-24 18:52 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience-cover
2014-12-24 10:48 - 2014-12-24 22:03 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_matter
2014-12-24 10:48 - 2014-12-24 21:50 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audiencefear
2014-12-24 10:48 - 2014-12-24 21:44 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-anger
2014-12-24 10:48 - 2014-12-24 21:43 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audienceplace
2014-12-24 10:48 - 2014-12-24 21:35 - 00000000 ___HD () C:\Users\*****\AppData\Roaming\Audience_baby
2014-12-24 10:48 - 2014-12-24 21:08 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience_reach
2014-12-24 10:48 - 2014-12-24 21:00 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-channel
2014-12-24 10:48 - 2014-12-24 20:48 - 00000000 ___HD () C:\Users\*****\AppData\Local\Audience-settle
2014-12-24 10:48 - 2014-12-24 20:10 - 00000000 ___HD () C:\Users\*****\AppData\Loca\Audience-stand
         

 

Themen zu C:\Windows\SysWOW64\cleanmgr.exe wurde blockiert
adware.domaiq, backdoor.agent.stl, backdoor.agent.stlgen, computer, converter, device driver, dllhost.exe, dvdvideosoft ltd., fehlercode windows, flash player, helper.exe, iexplore.exe, microsoft, pdfforge toolbar v4.6 entfernen, pup.optional.babsolution.a, pup.optional.babylon.a, pup.optional.delta.a, pup.optional.oneclickdownloader.a, pup.optional.optimizepro.a, pup.optional.spigot.a, pup.optional.vplmedia.a, refresh, registry key, security, software, trojan.agent, trojan.agent.ed, trojan.domaiq, trojaner, wow64\cleanmgr.exe wurde blockiert




Ähnliche Themen: C:\Windows\SysWOW64\cleanmgr.exe wurde blockiert


  1. Infizierte Kopie von c:\windows\SysWow64\wshtcpip.dll wurde gefunden und desinfiziert
    Plagegeister aller Art und deren Bekämpfung - 21.09.2013 (2)
  2. Mein Online-Banking wurde ausspioniert!! / Fehler in C:\Windows\SysWOW64\rundll32.exe. Folgender Eintrag fehlt: FQ10 (Beim Windows-Start)
    Plagegeister aller Art und deren Bekämpfung - 19.08.2012 (2)
  3. Windows wurde blockiert - 50€
    Plagegeister aller Art und deren Bekämpfung - 06.04.2012 (19)
  4. Windows wurde blockiert
    Plagegeister aller Art und deren Bekämpfung - 24.03.2012 (45)
  5. Windows System wurde blockiert
    Plagegeister aller Art und deren Bekämpfung - 17.02.2012 (47)
  6. Aus Sicherheitsgründen wurde Windows blockiert!
    Plagegeister aller Art und deren Bekämpfung - 10.02.2012 (10)
  7. Windows wurde blockiert, Zahlungsaufforderung
    Log-Analyse und Auswertung - 09.02.2012 (9)
  8. Windows Security-Drohung - Ihr Windows System wurde blockiert!
    Plagegeister aller Art und deren Bekämpfung - 01.02.2012 (8)
  9. Windows 7 blockiert! Achtung! "Aus Sicherheitsgründen wurde ihr windowssystem blockiert"
    Log-Analyse und Auswertung - 17.01.2012 (8)
  10. Achtung Aus Sicherheitsgründen wurde ihr Windows System blockiert Windows xp
    Plagegeister aller Art und deren Bekämpfung - 03.01.2012 (7)
  11. Pc wird blockiert: Aus Sicherheitsgründen wurde ihr Windows System blockiert.....
    Log-Analyse und Auswertung - 29.12.2011 (19)
  12. Windows wurde blockiert
    Log-Analyse und Auswertung - 21.12.2011 (8)
  13. Windows wurde blockiert!
    Log-Analyse und Auswertung - 17.12.2011 (7)
  14. Gehe zum ersten neuen Beitrag Aus Sicherheitsgründen wurde ihr windows System blockiert (auf Windows
    Log-Analyse und Auswertung - 16.12.2011 (16)
  15. Windows wurde Blockiert
    Plagegeister aller Art und deren Bekämpfung - 16.12.2011 (3)
  16. Pc wird blockiert: Aus Sicherheitsgründen wurde ihr Windows System blockiert.....
    Plagegeister aller Art und deren Bekämpfung - 12.12.2011 (7)
  17. Aus Sicherheitsgründen wurde Windows blockiert
    Plagegeister aller Art und deren Bekämpfung - 08.12.2011 (3)

Zum Thema C:\Windows\SysWOW64\cleanmgr.exe wurde blockiert - Frst.txt part1 Code: Alles auswählen Aufklappen ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-01-2015 Ran by ***** (administrator) on *****-PC on 01-01-2015 16:46:34 Running from C:\Users\*****\Computer\Downloads - C:\Windows\SysWOW64\cleanmgr.exe wurde blockiert...
Archiv
Du betrachtest: C:\Windows\SysWOW64\cleanmgr.exe wurde blockiert auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.