Neuer Acer mit Win 8.1 - Webseiten werden mit Werbung lahmgelegt/umgeleitet

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 13:34 on 11/01/2015 (Anna *****)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-01-2015
Ran by Anna ***** (administrator) on ***** on 11-01-2015 13:55:17
Running from C:\Users\Anna *****\Downloads
Loaded Profile: Anna ***** (Available profiles: Anna *****)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\tbaseprovisioning.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Security\Engine\22.1.0.9\NS.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Time Lapse Solutions) C:\ProgramData\dbdaJiwVaF\YvmrVLaSddg.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Security\Engine\22.1.0.9\NS.exe
() C:\Users\Anna *****\AppData\Local\gmsd_de_56\upgmsd_de_56.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMLockHandler.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(SoftBrain Technologies Ltd.) C:\Users\Anna *****\AppData\Local\SmartWeb\SmartWebHelper.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe
(SoftBrain Technologies Ltd.) C:\Users\Anna *****\AppData\Local\SmartWeb\SmartWebApp.exe
() C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\nacl64.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Security\Engine\22.1.0.9\coNatHst.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\nacl64.exe
() C:\Program Files\WindowsApps\Microsoft.BingMaps_2.0.2530.2317_x64__8wekyb3d8bbwe\Map.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Users\Anna *****\AppData\Roaming\PennyBee\UpdateProc\UpdateTask.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672304 2014-03-21] (Realtek Semiconductor)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766688 2014-05-22] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [BacKGround Agent] => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe [62208 2014-12-19] (Acer Incorporated)
HKLM-x32\...\Run: [gmsd_de_53] => [X]
HKLM-x32\...\Run: [OfferBoulevard] => C:\Program Files (x86)\OfferBoulevard\OfferBoulevardW.exe
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)
HKLM-x32\...\Run: [SmartWeb] => C:\Users\Anna *****\AppData\Local\SmartWeb\SmartWebHelper.exe [270696 2014-12-31] (SoftBrain Technologies Ltd.)
HKLM-x32\...\Run: [abDocsDllLoader] => C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe [90880 2014-12-19] ()
HKLM-x32\...\RunOnce: [upgmsd_de_56.exe] => C:\Users\Anna *****\AppData\Local\gmsd_de_56\upgmsd_de_56.exe [3307688 2015-01-03] ()
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [134784 2014-02-25] ( (Atheros Communications))
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2370106654-3361784890-3155618659-1001\...\MountPoints2: {0ba6fb77-9355-11e4-8264-c45444f5581a} - "E:\LaunchU3.exe" -a
Startup: C:\Users\Anna *****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SmartWeb.lnk
ShortcutTarget: SmartWeb.lnk -> C:\Users\Anna *****\AppData\Local\SmartWeb\SmartWebHelper.exe (SoftBrain Technologies Ltd.)
ShellIconOverlayIdentifiers: [ACloudSyncedRF] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)
ShellIconOverlayIdentifiers: [ACloudSyncedSF] -> {5D5F18B7-D59B-4B18-A3E9-0A4BDCCCB699} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)
ShellIconOverlayIdentifiers: [ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)
ShellIconOverlayIdentifiers: [ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=en&pid=NS&pvid=22.1.0.9
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://myhome.vi-view.com/web/?type=ds&ts=1420215648&from=cor&uid=WDCXWD10JPVX-22JC3T0_WD-WXB1E74LY10ELY10E&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://myhome.vi-view.com/web/?type=ds&ts=1420215648&from=cor&uid=WDCXWD10JPVX-22JC3T0_WD-WXB1E74LY10ELY10E&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://myhome.vi-view.com/web/?type=ds&ts=1420215648&from=cor&uid=WDCXWD10JPVX-22JC3T0_WD-WXB1E74LY10ELY10E&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://myhome.vi-view.com/web/?type=ds&ts=1420215648&from=cor&uid=WDCXWD10JPVX-22JC3T0_WD-WXB1E74LY10ELY10E&q={searchTerms}
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=en&pid=NS&pvid=22.1.0.9
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=en&pid=NS&pvid=22.1.0.9
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=en&pid=NS&pvid=22.1.0.9
HKU\S-1-5-21-2370106654-3361784890-3155618659-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=en&pid=NS&pvid=22.1.0.9
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2514} URL = hxxp://www.default-search.net/search?sid=514&aid=101&itype=a&ver=15005&tm=581&src=ds&p={searchTerms}
SearchScopes: HKLM -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2514} URL = hxxp://www.default-search.net/search?sid=514&aid=101&itype=a&ver=15005&tm=581&src=ds&p={searchTerms}
SearchScopes: HKLM-x32 -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2370106654-3361784890-3155618659-1001 -> {2F15DCBA-0948-44B9-BFC2-8F2041E1300B} URL = 
BHO: CinPlus-2.8dV02.01 -> {11111111-1111-1111-1111-110611901161} -> C:\Program Files (x86)\CinPlus-2.8dV02.01\CinPlus-2.8dV02.01-bho64.dll (CinPlus2.8dV02.01)
BHO: YYoutubeAdBlockee -> {267e9dd0-b896-4414-b8be-00ab8a7f71de} -> C:\Program Files (x86)\YYoutubeAdBlockee\DEALz2cE8zmfQT.x64.dll No File
BHO: PriceLessi -> {43d64262-84d5-4015-a503-6d5b9b00f51f} -> C:\Program Files (x86)\PriceLessi\y1pMbLmMxFOssg.x64.dll ()
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Security\Engine64\22.1.0.9\coIEPlg.dll (Symantec Corporation)
BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: No Name -> {F086AB7C-3437-81C6-54D4-A9AE8ADC1DEA} ->  No File
BHO-x32: CinPlus-2.8dV02.01 -> {11111111-1111-1111-1111-110611901161} -> C:\Program Files (x86)\CinPlus-2.8dV02.01\CinPlus-2.8dV02.01-bho.dll (CinPlus2.8dV02.01)
BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Security\Engine\22.1.0.9\coIEPlg.dll (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO-x32: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security\Engine64\22.1.0.9\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security\Engine\22.1.0.9\coIEPlg.dll (Symantec Corporation)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.179.1

FireFox:
========
FF ProfilePath: C:\Users\Anna *****\AppData\Roaming\Mozilla\Firefox\Profiles\ndxmlw8i.default
FF Homepage: https://www.google.de/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF user.js: detected! => C:\Users\Anna *****\AppData\Roaming\Mozilla\Firefox\Profiles\ndxmlw8i.default\user.js
FF SearchPlugin: C:\Users\Anna *****\AppData\Roaming\Mozilla\Firefox\Profiles\ndxmlw8i.default\searchplugins\safesearch.xml
FF Extension: Adblock Plus - C:\Users\Anna *****\AppData\Roaming\Mozilla\Firefox\Profiles\ndxmlw8i.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-01-05]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2014-07-14]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NS_22.1.0.9\coFFPlgn
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NS_22.1.0.9\coFFPlgn [2015-01-10]
FF HKU\S-1-5-21-2370106654-3361784890-3155618659-1001\...\Firefox\Extensions: [{E28D4A62-26C1-553F-16DF-FC0551EA3C80}] - C:\Program Files (x86)\ver9BlockAndSurf\185.xpi

Chrome: 
=======
CHR Profile: C:\Users\Anna *****\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\Anna *****\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-02]
CHR Extension: (Google Docs) - C:\Users\Anna *****\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-01-02]
CHR Extension: (Google Drive) - C:\Users\Anna *****\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-02]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Anna *****\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-01-02]
CHR Extension: (YouTube) - C:\Users\Anna *****\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-02]
CHR Extension: (Norton Security Toolbar) - C:\Users\Anna *****\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjabmdjcfcfdmffimndhafhblfmpjdpe [2015-01-10]
CHR Extension: (Google-Suche) - C:\Users\Anna *****\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-02]
CHR Extension: (Google Tabellen) - C:\Users\Anna *****\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-02]
CHR Extension: (SiteAdvisor) - C:\Users\Anna *****\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2015-01-02]
CHR Extension: (fjnbnpbmkenffdnngjfgmeleoegfcffe) - C:\Users\Anna *****\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe [2015-01-10]
CHR Extension: (Norton Identity Safe) - C:\Users\Anna *****\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2015-01-10]
CHR Extension: (Google Wallet) - C:\Users\Anna *****\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-02]
CHR Extension: (Techgile) - C:\Users\Anna *****\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohfpklbmjjijallflamcdlkgglcehpfb [2015-01-03]
CHR Extension: (Google Mail) - C:\Users\Anna *****\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-02]
CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Security\Engine\22.1.0.9\Exts\Chrome.crx [2015-01-10]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-01-02]
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - No Path
CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Security\Engine\22.1.0.9\Exts\Chrome.crx [2015-01-10]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - No Path
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - No Path

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [319104 2014-02-25] (Windows (R) Win 7 DDK provider)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2713856 2014-12-19] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573032 2014-06-12] (Acer Incorporated)
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2015-01-02] (globalUpdate) [File not signed]
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2015-01-02] (globalUpdate) [File not signed]
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [466664 2014-06-10] (Acer Incorporate)
R2 McAfee SiteAdvisor Service; c:\Program Files (x86)\McAfee\siteadvisor\mcsacore.exe [140424 2014-04-23] (McAfee, Inc.)
R2 NS; C:\Program Files (x86)\Norton Security\Engine\22.1.0.9\NS.exe [282528 2014-12-10] (Symantec Corporation)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [458984 2014-06-26] (Acer Incorporate)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-24] ()
R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [449768 2014-06-26] (Acer Incorporate)
R2 tbaseprovisioning; C:\Windows\SysWOW64\tbaseprovisioning.exe [51712 2014-04-16] (Advanced Micro Devices, Inc.)
R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [233216 2014-06-23] (acer)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
R2 YvmrVLaSddg; C:\ProgramData\dbdaJiwVaF\YvmrVLaSddg.exe [2726256 2015-01-03] (Time Lapse Solutions)
S3 COMSysApp; %SystemRoot%\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
S2 Update Techgile; "C:\Program Files (x86)\Techgile\updateTechgile.exe" [X]
S2 Util Techgile; "C:\Program Files (x86)\Techgile\bin\utilTechgile.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 amdkmcsp; C:\Windows\system32\DRIVERS\amdkmcsp.sys [85704 2014-04-16] (Advanced Micro Devices, Inc. )
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36608 2013-12-12] (Advanced Micro Devices, Inc.)
R0 amdpsp; C:\Windows\System32\DRIVERS\amdpsp.sys [230088 2014-04-16] (Advanced Micro Devices, Inc. )
R2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [224992 2013-11-01] (AppEx Networks Corporation)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3888640 2014-02-14] (Qualcomm Atheros Communications, Inc.)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [222720 2013-12-19] (Advanced Micro Devices)
S3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [8536752 2013-07-01] (Broadcom Corporation)
R1 BHDrvx64; C:\Program Files (x86)\Norton Security\NortonData\22.1.0.9\Definitions\BASHDefs\20141209.001\BHDrvx64.sys [1587416 2014-12-09] (Symantec Corporation)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-02-25] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R1 ccSet_NS; C:\Windows\system32\drivers\NSx64\1601000.009\ccSetx64.sys [165080 2014-09-09] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2014-11-25] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142640 2014-11-25] (Symantec Corporation)
S3 GeneStor; C:\Windows\System32\drivers\GeneStor.sys [111336 2014-04-28] (GenesysLogic)
R1 IDSVia64; C:\Program Files (x86)\Norton Security\NortonData\22.1.0.9\Definitions\IPSDefs\20150108.002\IDSvia64.sys [668888 2015-01-08] (Symantec Corporation)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 NAVENG; C:\Program Files (x86)\Norton Security\NortonData\22.1.0.9\Definitions\VirusDefs\20150110.001\ENG64.SYS [129752 2014-08-11] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Security\NortonData\22.1.0.9\Definitions\VirusDefs\20150110.001\EX64.SYS [2137304 2014-08-11] (Symantec Corporation)
S3 QRDCIO; C:\Windows\System32\drivers\QRDCIO.sys [9728 2009-10-20] (QUANTA)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
R1 SMR430; C:\Windows\System32\drivers\SMR430.SYS [108216 2015-01-10] (Symantec Corporation)
R1 SRTSP; C:\Windows\system32\drivers\NSx64\1601000.009\SRTSP64.SYS [914648 2014-12-02] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NSx64\1601000.009\SRTSPX64.SYS [42200 2014-12-02] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NSx64\1601000.009\SYMDS64.SYS [490712 2014-09-09] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NSx64\1601000.009\SYMEFA64.SYS [1151704 2014-09-09] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\NSx64\1601000.009\SymELAM.sys [23568 2014-09-09] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [102616 2015-01-10] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NSx64\1601000.009\Ironx64.SYS [271576 2014-09-09] (Symantec Corporation)
R1 SymNetS; C:\Windows\system32\drivers\NSx64\1601000.009\SYMNETS.SYS [565464 2014-09-09] (Symantec Corporation)
R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42224 2014-02-20] (Synaptics Incorporated)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
R2 webinstrNHK; C:\Windows\system32\Drivers\webinstrNHK.sys [56432 2015-01-05] (Corsica)
S1 F06DEFF2-5B9C-490D-910F-35D3A91196222; \??\C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfmgrc3.cfg [X]
S1 wpnfd_1_10_0_1; system32\drivers\wpnfd_1_10_0_1.sys [X]
S1 wpnfd_1_10_0_5; system32\drivers\wpnfd_1_10_0_5.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-11 13:55 - 2015-01-11 13:55 - 00026371 _____ () C:\Users\Anna *****\Downloads\FRST.txt
2015-01-11 13:55 - 2015-01-11 13:55 - 00000000 ____D () C:\FRST
2015-01-11 13:53 - 2015-01-11 13:53 - 02124288 _____ (Farbar) C:\Users\Anna *****\Downloads\frst64.exe
2015-01-11 13:35 - 2015-01-11 13:35 - 00000800 _____ () C:\Users\Anna *****\Desktop\defogger_disable.log - Verknüpfung.lnk
2015-01-11 13:33 - 2015-01-11 13:35 - 00000484 _____ () C:\Users\Anna *****\Downloads\defogger_disable.log
2015-01-11 13:33 - 2015-01-11 13:33 - 00000000 _____ () C:\Users\Anna *****\defogger_reenable
2015-01-11 13:20 - 2015-01-11 13:20 - 00050477 _____ () C:\Users\Anna *****\Downloads\Defogger.exe
2015-01-10 20:49 - 2015-01-10 20:49 - 00000124 _____ () C:\Users\Anna *****\Desktop\E-Mail.url
2015-01-10 20:21 - 2015-01-10 20:21 - 00000020 _____ () C:\Windows\system32\Drivers\SMR430.dat
2015-01-10 19:43 - 2015-01-10 20:21 - 00108216 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SMR430.SYS
2015-01-10 19:31 - 2015-01-10 20:17 - 00000000 ____D () C:\NPE
2015-01-10 19:25 - 2015-01-10 20:21 - 00000000 ____D () C:\Users\Anna *****\AppData\Local\NPE
2015-01-10 18:21 - 2015-01-10 18:21 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Security
2015-01-10 18:19 - 2015-01-10 18:19 - 00102616 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2015-01-10 18:19 - 2015-01-10 18:19 - 00008214 _____ () C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2015-01-10 18:19 - 2015-01-10 18:19 - 00003214 _____ () C:\Windows\System32\Tasks\Norton WSC Integration
2015-01-10 18:19 - 2015-01-10 18:19 - 00002437 _____ () C:\Users\Public\Desktop\Norton Security.lnk
2015-01-10 18:19 - 2015-01-10 18:19 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared
2015-01-10 18:18 - 2015-01-10 18:19 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security
2015-01-10 18:18 - 2015-01-10 18:18 - 00000000 ____D () C:\Windows\system32\Drivers\NSx64
2015-01-10 18:18 - 2015-01-10 18:18 - 00000000 ____D () C:\Program Files (x86)\Norton Security
2015-01-10 18:16 - 2014-12-31 12:14 - 00298120 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-01-10 18:13 - 2015-01-10 19:29 - 00000000 ____D () C:\ProgramData\Norton
2015-01-10 18:13 - 2015-01-10 18:13 - 01038256 _____ (Symantec Corporation) C:\Users\Anna *****\Downloads\NSDownloader.exe
2015-01-10 18:13 - 2015-01-10 18:13 - 00001276 _____ () C:\Users\Anna *****\Desktop\Norton Installation Files.lnk
2015-01-10 18:13 - 2015-01-10 18:13 - 00000000 ____D () C:\Users\Public\Downloads\Norton
2015-01-10 18:08 - 2015-01-10 18:08 - 00000000 ____D () C:\Users\Anna *****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnyProtect PC Backup
2015-01-10 18:05 - 2015-01-10 19:30 - 00000000 ____D () C:\Program Files (x86)\gmsd_de_75
2015-01-10 18:05 - 2015-01-10 18:05 - 00000000 ____D () C:\Users\Anna *****\AppData\Local\gmsd_de_75
2015-01-10 17:53 - 2015-01-10 17:53 - 00001929 _____ () C:\Users\Public\Desktop\abDocs.lnk
2015-01-05 15:04 - 2015-01-05 15:04 - 00056432 _____ (Corsica) C:\Windows\system32\Drivers\webinstrNHK.sys
2015-01-05 15:01 - 2015-01-11 13:06 - 00000000 ____D () C:\Users\Anna *****\AppData\Local\gmsd_de_56
2015-01-05 15:01 - 2015-01-10 19:30 - 00000000 ____D () C:\Program Files (x86)\gmsd_de_56
2015-01-05 15:01 - 2015-01-05 15:01 - 00004060 _____ () C:\Windows\System32\Tasks\SmartWeb Upgrade Trigger Task
2015-01-05 15:01 - 2015-01-05 15:01 - 00000000 ____D () C:\Users\Anna *****\AppData\Local\SmartWeb
2015-01-05 15:01 - 2015-01-05 15:01 - 00000000 ____D () C:\Program Files (x86)\WordProser_1.10.0.5
2015-01-05 14:40 - 2015-01-05 14:40 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-01-05 14:40 - 2015-01-05 14:40 - 00000000 ____D () C:\ProgramData\Sun
2015-01-05 14:40 - 2015-01-05 14:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-01-05 14:39 - 2015-01-05 14:41 - 00000000 ____D () C:\ProgramData\Oracle
2015-01-05 14:39 - 2015-01-05 14:39 - 00000000 ____D () C:\Program Files (x86)\Java
2015-01-05 14:01 - 2015-01-05 14:01 - 00000000 __SHD () C:\Users\Anna *****\AppData\Local\EmieBrowserModeList
2015-01-05 13:55 - 2015-01-05 13:55 - 00000000 ____D () C:\ProgramData\846063261
2015-01-05 13:49 - 2014-11-26 22:10 - 00714720 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-01-05 13:49 - 2014-11-26 22:10 - 00106976 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-05 13:28 - 2015-01-05 13:31 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-05 13:28 - 2014-11-27 16:40 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-01-05 13:13 - 2014-04-14 04:29 - 01018880 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2015-01-05 13:09 - 2014-11-10 03:29 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\DeviceSetupStatusProvider.dll
2015-01-05 13:09 - 2014-11-10 02:51 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceSetupStatusProvider.dll
2015-01-05 13:09 - 2014-10-31 00:39 - 01970432 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-01-05 13:09 - 2014-10-31 00:38 - 01612992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-01-05 12:34 - 2015-01-11 13:11 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-01-05 12:34 - 2015-01-05 12:34 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-01-05 12:34 - 2015-01-05 12:34 - 00000000 ____D () C:\Users\Anna *****\AppData\Local\Macromedia
2015-01-05 12:33 - 2015-01-05 12:34 - 00000000 ____D () C:\Users\Anna *****\AppData\Local\Adobe
2015-01-05 12:32 - 2014-10-13 03:33 - 00116032 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-01-05 12:32 - 2014-10-11 01:58 - 03320320 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-01-05 12:32 - 2014-10-11 01:53 - 03607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-01-05 12:32 - 2014-10-08 08:30 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-01-05 12:32 - 2014-10-08 08:09 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-01-05 12:32 - 2014-10-08 07:27 - 00325120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-01-05 12:32 - 2014-10-08 06:32 - 02773504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-01-05 12:32 - 2014-10-08 06:19 - 02459136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-01-05 12:17 - 2015-01-05 12:18 - 00000000 ____D () C:\Users\Anna *****\AppData\Roaming\Mozilla
2015-01-05 12:17 - 2015-01-05 12:18 - 00000000 ____D () C:\Users\Anna *****\AppData\Local\Mozilla
2015-01-05 12:17 - 2015-01-05 12:17 - 00244264 _____ () C:\Users\Anna *****\Downloads\Firefox Setup Stub 34.0.5.exe
2015-01-05 12:17 - 2015-01-05 12:17 - 00001139 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-01-05 12:17 - 2015-01-05 12:17 - 00001127 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-01-05 12:17 - 2015-01-05 12:17 - 00000000 ____D () C:\ProgramData\Mozilla
2015-01-05 12:17 - 2015-01-05 12:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-05 12:17 - 2015-01-05 12:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-05 12:15 - 2015-01-05 13:55 - 00000000 ____D () C:\ProgramData\1887373585
2015-01-05 12:02 - 2015-01-05 12:02 - 00003114 _____ () C:\Windows\System32\Tasks\{2E01E33D-5800-4045-A75F-021D2D7B4D7D}
2015-01-05 12:01 - 2015-01-05 12:01 - 00000000 ____D () C:\Program Files (x86)\predm
2015-01-05 11:49 - 2015-01-05 11:49 - 00000000 ____D () C:\Users\Anna *****\AppData\Local\Acer Aspire R7 Tutorial
2015-01-05 11:34 - 2015-01-05 11:34 - 00000000 ____D () C:\ProgramData\Browser
2015-01-03 16:35 - 2014-11-01 00:57 - 01091072 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2015-01-03 16:35 - 2014-11-01 00:47 - 00790528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2015-01-03 16:21 - 2015-01-03 16:21 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2015-01-03 15:57 - 2015-01-05 12:15 - 00000000 ____D () C:\ProgramData\2355320829
2015-01-03 15:15 - 2015-01-10 19:18 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2015-01-03 15:13 - 2015-01-03 15:13 - 00021976 _____ () C:\Windows\system32\Drivers\SPPD.sys
2015-01-03 15:04 - 2015-01-03 15:04 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2015-01-03 15:03 - 2015-01-03 15:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-01-03 15:03 - 2015-01-03 15:03 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2015-01-03 15:02 - 2015-01-03 15:02 - 00000000 ____D () C:\Windows\PCHEALTH
2015-01-03 14:59 - 2015-01-03 14:59 - 00000000 ____D () C:\Program Files\Microsoft Analysis Services
2015-01-03 14:59 - 2015-01-03 14:59 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2015-01-03 14:58 - 2015-01-03 15:12 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-01-03 14:58 - 2015-01-03 15:02 - 00000000 ____D () C:\Program Files\Microsoft Office
2015-01-03 14:58 - 2015-01-03 14:58 - 00000000 __RHD () C:\MSOCache
2015-01-03 14:58 - 2015-01-03 14:58 - 00000000 ____D () C:\Users\Anna *****\AppData\Local\Microsoft Help
2015-01-03 14:54 - 2015-01-03 14:54 - 00000000 ____D () C:\Users\Anna *****\AppData\Roaming\WildTangent
2015-01-03 14:43 - 2015-01-11 13:43 - 00000095 _____ () C:\Users\Anna *****\AppData\Roaming\WB.CFG
2015-01-03 14:19 - 2015-01-05 14:15 - 00000000 ____D () C:\Users\Anna *****\AppData\Local\ZombieNews
2015-01-03 11:08 - 2015-01-10 19:08 - 00000000 ____D () C:\Program Files (x86)\Settings Manager
2015-01-03 11:08 - 2015-01-10 18:43 - 00000000 ____D () C:\ProgramData\dbdaJiwVaF
2015-01-03 11:08 - 2015-01-03 11:09 - 00000000 ____D () C:\ProgramData\ZombieNews
2015-01-03 11:04 - 2015-01-03 11:04 - 00000000 ____D () C:\Users\Anna *****\AppData\Local\Desktop_Dock
2015-01-02 22:33 - 2014-04-30 05:43 - 01975296 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-01-02 22:33 - 2014-04-30 05:26 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-01-02 22:33 - 2014-04-30 04:47 - 01509888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-01-02 22:32 - 2014-05-19 07:31 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe
2015-01-02 22:32 - 2014-05-19 07:21 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe
2015-01-02 22:32 - 2014-05-19 06:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2015-01-02 22:32 - 2014-05-01 14:31 - 00055328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys
2015-01-02 22:32 - 2014-05-01 06:24 - 02834944 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
2015-01-02 22:27 - 2015-01-02 22:27 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2015-01-02 22:19 - 2015-01-02 22:19 - 00000000 ____D () C:\Users\Anna *****\AppData\Roaming\CareCenter
2015-01-02 22:19 - 2015-01-02 17:29 - 00000000 ____D () C:\Users\Anna *****\AppData\Local\CareCenter
2015-01-02 22:17 - 2015-01-02 22:17 - 00000000 ____D () C:\Users\Anna *****\AppData\Roaming\Foxit Software
2015-01-02 22:16 - 2015-01-02 22:17 - 00000000 ____D () C:\Users\Anna *****\AppData\Roaming\CyberLink
2015-01-02 22:16 - 2015-01-02 22:16 - 00000000 ____D () C:\Users\Anna *****\Documents\CyberLink
2015-01-02 22:14 - 2015-01-02 22:16 - 00000000 ____D () C:\Users\Anna *****\AppData\Local\Cyberlink
2015-01-02 22:10 - 2015-01-11 13:06 - 00003954 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{483B9464-CE8A-4602-AD3F-CBEA23E9FF7F}
2015-01-02 22:10 - 2015-01-02 22:10 - 00000000 __SHD () C:\Users\Anna *****\AppData\Local\EmieUserList
2015-01-02 22:10 - 2015-01-02 22:10 - 00000000 __SHD () C:\Users\Anna *****\AppData\Local\EmieSiteList
2015-01-02 22:09 - 2015-01-02 22:09 - 00000000 ____D () C:\Users\Public\Pokki
2015-01-02 22:04 - 2015-01-02 22:04 - 00003334 _____ () C:\Windows\System32\Tasks\AcerCloud
2015-01-02 22:02 - 2015-01-11 13:05 - 00000000 ____D () C:\Users\Anna *****\AppData\Local\CrashDumps
2015-01-02 22:01 - 2015-01-11 13:08 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2370106654-3361784890-3155618659-1001
2015-01-02 22:00 - 2015-01-03 15:00 - 00000000 ____D () C:\Users\Public\OEM
2015-01-02 21:58 - 2015-01-02 21:58 - 00000000 ____D () C:\Users\Anna *****\AppData\Roaming\Macromedia
2015-01-02 21:57 - 2015-01-10 17:50 - 00000000 ____D () C:\Users\Anna *****\AppData\Local\clear.fi
2015-01-02 21:57 - 2015-01-02 21:57 - 00000000 ____D () C:\Users\Anna *****\PicStream
2015-01-02 21:56 - 2015-01-02 21:56 - 00001458 _____ () C:\Users\Anna *****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-02 21:56 - 2015-01-02 21:56 - 00001280 _____ () C:\Users\Anna *****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HD Audio-Manager.lnk
2015-01-02 21:56 - 2015-01-02 21:56 - 00000000 ____D () C:\Windows\oem
2015-01-02 21:56 - 2015-01-02 21:56 - 00000000 ____D () C:\Users\Anna *****\AppData\Roaming\Atheros
2015-01-02 21:56 - 2015-01-02 21:56 - 00000000 ____D () C:\Users\Anna *****\AppData\Roaming\Adobe
2015-01-02 21:56 - 2015-01-02 21:56 - 00000000 ____D () C:\Users\Anna *****\AppData\Local\OEM
2015-01-02 21:56 - 2015-01-02 21:56 - 00000000 ____D () C:\Users\Anna *****\AppData\Local\iGware
2015-01-02 21:56 - 2015-01-02 21:56 - 00000000 ____D () C:\Users\Anna *****\AppData\Local\AOP SDK
2015-01-02 21:56 - 2015-01-02 21:56 - 00000000 ____D () C:\ProgramData\OEM_YAHOO
2015-01-02 21:56 - 2015-01-02 21:56 - 00000000 ____D () C:\Program Files\Accessory Store
2015-01-02 21:56 - 2015-01-02 17:03 - 00000000 ____D () C:\Users\Anna *****\AppData\Local\VirtualStore
2015-01-02 21:55 - 2015-01-11 13:33 - 00000000 ____D () C:\Users\Anna *****
2015-01-02 21:55 - 2015-01-02 21:57 - 00000000 ____D () C:\Users\Anna *****\AppData\Local\Packages
2015-01-02 21:55 - 2015-01-02 21:55 - 00000020 ___SH () C:\Users\Anna *****\ntuser.ini
2015-01-02 21:55 - 2015-01-02 21:55 - 00000000 _SHDL () C:\Users\Anna *****\Vorlagen
2015-01-02 21:55 - 2015-01-02 21:55 - 00000000 _SHDL () C:\Users\Anna *****\Startmenü
2015-01-02 21:55 - 2015-01-02 21:55 - 00000000 _SHDL () C:\Users\Anna *****\Netzwerkumgebung
2015-01-02 21:55 - 2015-01-02 21:55 - 00000000 _SHDL () C:\Users\Anna *****\Lokale Einstellungen
2015-01-02 21:55 - 2015-01-02 21:55 - 00000000 _SHDL () C:\Users\Anna *****\Eigene Dateien
2015-01-02 21:55 - 2015-01-02 21:55 - 00000000 _SHDL () C:\Users\Anna *****\Druckumgebung
2015-01-02 21:55 - 2015-01-02 21:55 - 00000000 _SHDL () C:\Users\Anna *****\Documents\Eigene Musik
2015-01-02 21:55 - 2015-01-02 21:55 - 00000000 _SHDL () C:\Users\Anna *****\Documents\Eigene Bilder
2015-01-02 21:55 - 2015-01-02 21:55 - 00000000 _SHDL () C:\Users\Anna *****\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-01-02 21:55 - 2015-01-02 21:55 - 00000000 _SHDL () C:\Users\Anna *****\AppData\Local\Verlauf
2015-01-02 21:55 - 2015-01-02 21:55 - 00000000 _SHDL () C:\Users\Anna *****\AppData\Local\Anwendungsdaten
2015-01-02 21:55 - 2015-01-02 21:55 - 00000000 _SHDL () C:\Users\Anna *****\Anwendungsdaten
2015-01-02 21:55 - 2014-07-14 18:53 - 00000000 ___RD () C:\Users\Anna *****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-01-02 21:55 - 2014-03-18 11:33 - 00000000 ___RD () C:\Users\Anna *****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-01-02 21:55 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Anna *****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-01-02 21:55 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Anna *****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-01-02 21:55 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Anna *****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-01-02 21:55 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Anna *****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-01-02 21:36 - 2015-01-02 21:36 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2015-01-02 21:36 - 2015-01-02 21:36 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2015-01-02 21:36 - 2015-01-02 21:36 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2015-01-02 21:36 - 2015-01-02 21:36 - 00000000 _SHDL () C:\Users\Default\Startmenü
2015-01-02 21:36 - 2015-01-02 21:36 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2015-01-02 21:36 - 2015-01-02 21:36 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2015-01-02 21:36 - 2015-01-02 21:36 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2015-01-02 21:36 - 2015-01-02 21:36 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2015-01-02 21:36 - 2015-01-02 21:36 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2015-01-02 21:36 - 2015-01-02 21:36 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2015-01-02 21:36 - 2015-01-02 21:36 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-01-02 21:36 - 2015-01-02 21:36 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2015-01-02 21:36 - 2015-01-02 21:36 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2015-01-02 21:36 - 2015-01-02 21:36 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2015-01-02 21:36 - 2015-01-02 21:36 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2015-01-02 21:36 - 2015-01-02 21:36 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2015-01-02 21:36 - 2015-01-02 21:36 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-01-02 21:36 - 2015-01-02 21:36 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2015-01-02 21:36 - 2015-01-02 21:36 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2015-01-02 21:36 - 2015-01-02 21:36 - 00000000 _SHDL () C:\Programme
2015-01-02 21:36 - 2015-01-02 21:36 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2015-01-02 21:36 - 2015-01-02 21:36 - 00000000 _SHDL () C:\ProgramData\Startmenü
2015-01-02 21:36 - 2015-01-02 21:36 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2015-01-02 21:36 - 2015-01-02 21:36 - 00000000 _SHDL () C:\ProgramData\Dokumente
2015-01-02 21:36 - 2015-01-02 21:36 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2015-01-02 21:36 - 2015-01-02 21:36 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2015-01-02 21:36 - 2015-01-02 21:36 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2015-01-02 18:10 - 2015-01-11 13:15 - 00001138 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-02 18:10 - 2015-01-11 13:03 - 00001134 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-02 18:10 - 2015-01-02 18:11 - 00000000 ____D () C:\Users\Anna *****\AppData\Local\Google
2015-01-02 18:10 - 2015-01-02 18:10 - 00004110 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-01-02 18:10 - 2015-01-02 18:10 - 00003874 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-01-02 18:10 - 2015-01-02 18:10 - 00002275 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-01-02 18:10 - 2015-01-02 18:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-01-02 18:10 - 2015-01-02 18:10 - 00000000 ____D () C:\Program Files (x86)\Google
2015-01-02 18:09 - 2015-01-10 18:30 - 00000000 ____D () C:\Users\Anna *****\AppData\Local\Apps\2.0
2015-01-02 18:09 - 2015-01-02 18:10 - 00000000 ____D () C:\Users\Anna *****\AppData\Local\Deployment
2015-01-02 17:54 - 2015-01-02 17:54 - 00000000 ____D () C:\Users\Anna *****\AppData\Local\ICSharpCode.net
2015-01-02 17:43 - 2015-01-11 13:43 - 00000328 _____ () C:\Windows\Tasks\PennyBee.job
2015-01-02 17:43 - 2015-01-02 17:43 - 00002666 _____ () C:\Windows\System32\Tasks\PennyBee
2015-01-02 17:43 - 2015-01-02 17:43 - 00000000 ____D () C:\Users\Anna *****\AppData\Roaming\PennyBee
2015-01-02 17:41 - 2015-01-02 17:41 - 00000000 ____D () C:\Program Files (x86)\Smart Saver
2015-01-02 17:40 - 2015-01-10 18:30 - 00000000 ____D () C:\Program Files (x86)\PriceLessi
2015-01-02 17:39 - 2015-01-02 17:39 - 00000000 ____D () C:\ProgramData\7618370632075376306
2015-01-02 17:39 - 2015-01-02 17:39 - 00000000 ____D () C:\Program Files (x86)\PriceeLess
2015-01-02 17:29 - 2015-01-02 17:29 - 00000000 __SHD () C:\Users\Anna *****\AppData\Roaming\AnyProtectEx
2015-01-02 17:27 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-01-02 17:27 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-01-02 17:27 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-01-02 17:27 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-01-02 17:27 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-01-02 17:27 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-01-02 17:27 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-01-02 17:27 - 2014-11-22 02:59 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-01-02 17:27 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-01-02 17:27 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-01-02 17:27 - 2014-11-22 02:49 - 00373760 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-01-02 17:27 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-01-02 17:27 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-01-02 17:27 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-01-02 17:27 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-01-02 17:27 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-01-02 17:27 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-01-02 17:27 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-01-02 17:27 - 2014-11-22 02:23 - 00326656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-01-02 17:27 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-01-02 17:27 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-01-02 17:27 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-01-02 17:27 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-01-02 17:27 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-01-02 17:27 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-01-02 17:27 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-01-02 17:27 - 2014-10-31 05:57 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-01-02 17:27 - 2014-10-31 05:51 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-01-02 17:27 - 2014-10-31 05:50 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-01-02 17:27 - 2014-10-31 05:38 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-01-02 17:27 - 2014-10-31 05:30 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-01-02 17:27 - 2014-10-31 04:44 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2015-01-02 17:27 - 2014-10-31 04:11 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-01-02 17:27 - 2014-10-31 04:02 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-01-02 17:27 - 2014-10-31 03:26 - 01042944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2015-01-02 17:26 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-01-02 17:26 - 2014-11-22 03:49 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-01-02 17:26 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-01-02 17:26 - 2014-11-22 03:35 - 00812544 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-01-02 17:26 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-01-02 17:26 - 2014-11-22 03:06 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-01-02 17:26 - 2014-11-22 03:06 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2015-01-02 17:26 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-01-02 17:26 - 2014-11-22 02:55 - 00661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-01-02 17:26 - 2014-11-22 02:52 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-01-02 17:26 - 2014-11-22 02:34 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2015-01-02 17:26 - 2014-11-22 02:29 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-01-02 17:26 - 2014-11-22 02:25 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-01-02 17:26 - 2014-10-31 06:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2015-01-02 17:26 - 2014-10-31 06:12 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2015-01-02 17:26 - 2014-10-31 06:10 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2015-01-02 17:26 - 2014-10-31 06:09 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2015-01-02 17:26 - 2014-10-31 06:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2015-01-02 17:26 - 2014-10-31 06:06 - 00237568 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2015-01-02 17:26 - 2014-10-31 06:06 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-01-02 17:26 - 2014-10-31 06:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-01-02 17:26 - 2014-10-31 05:56 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-01-02 17:26 - 2014-10-31 05:54 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2015-01-02 17:26 - 2014-10-31 05:53 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-01-02 17:26 - 2014-10-31 05:52 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
2015-01-02 17:26 - 2014-10-31 05:51 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-01-02 17:26 - 2014-10-31 05:40 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2015-01-02 17:26 - 2014-10-31 05:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2015-01-02 17:26 - 2014-10-31 05:29 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2015-01-02 17:26 - 2014-10-31 05:28 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2015-01-02 17:26 - 2014-10-31 05:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-01-02 17:26 - 2014-10-31 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2015-01-02 17:26 - 2014-10-31 05:19 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2015-01-02 17:26 - 2014-10-31 04:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2015-01-02 17:26 - 2014-10-31 04:28 - 00137728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2015-01-02 17:26 - 2014-10-31 04:28 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2015-01-02 17:26 - 2014-10-31 04:27 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2015-01-02 17:26 - 2014-10-31 04:26 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2015-01-02 17:26 - 2014-10-31 04:25 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2015-01-02 17:26 - 2014-10-31 04:24 - 00235520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2015-01-02 17:26 - 2014-10-31 04:24 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-01-02 17:26 - 2014-10-31 04:23 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-01-02 17:26 - 2014-10-31 04:16 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-01-02 17:26 - 2014-10-31 04:15 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-01-02 17:26 - 2014-10-31 04:14 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2015-01-02 17:26 - 2014-10-31 04:13 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-01-02 17:26 - 2014-10-31 04:13 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll
2015-01-02 17:26 - 2014-10-31 04:12 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-01-02 17:26 - 2014-10-31 04:03 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2015-01-02 17:26 - 2014-10-31 03:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-01-02 17:26 - 2014-10-31 03:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2015-01-02 17:26 - 2014-10-31 03:56 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2015-01-02 17:26 - 2014-10-31 03:56 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2015-01-02 17:26 - 2014-10-31 03:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-01-02 17:26 - 2014-10-31 03:53 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2015-01-02 17:26 - 2014-10-31 03:48 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2015-01-02 17:26 - 2014-10-31 03:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2015-01-02 17:26 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-01-02 17:25 - 2015-01-02 17:25 - 00000000 ____D () C:\Users\Anna *****\AppData\Roaming\VooUpdate
2015-01-02 17:20 - 2015-01-05 12:06 - 00000000 ____D () C:\Users\Anna *****\AppData\Roaming\vi-view
2015-01-02 17:17 - 2015-01-02 17:17 - 00280960 _____ () C:\Windows\Minidump\010215-53265-01.dmp
2015-01-02 17:17 - 2015-01-02 17:17 - 00000000 ____D () C:\Windows\Minidump
2015-01-02 17:16 - 2015-01-02 17:16 - 936388793 _____ () C:\Windows\MEMORY.DMP
2015-01-02 17:14 - 2014-11-07 05:16 - 01762840 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-01-02 17:14 - 2014-11-07 04:26 - 01489072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-01-02 17:14 - 2014-10-30 23:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2015-01-02 17:14 - 2014-10-30 23:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2015-01-02 17:14 - 2014-10-13 03:43 - 00238912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2015-01-02 17:14 - 2014-10-13 03:43 - 00153920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2015-01-02 17:14 - 2014-10-13 03:43 - 00086336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2015-01-02 17:14 - 2014-10-13 03:43 - 00039744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys
2015-01-02 17:06 - 2014-11-10 00:19 - 00991232 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-01-02 17:06 - 2014-11-10 00:19 - 00806400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-01-02 17:06 - 2014-11-10 00:18 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2015-01-02 17:06 - 2014-11-10 00:18 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2015-01-02 17:06 - 2014-10-10 02:58 - 00177472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-01-02 17:06 - 2014-10-10 02:58 - 00027456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2015-01-02 17:06 - 2014-10-10 02:44 - 00563976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-01-02 17:06 - 2014-10-08 08:37 - 00736768 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-01-02 17:06 - 2014-10-08 08:37 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-01-02 17:06 - 2014-10-08 08:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2015-01-02 17:06 - 2014-10-08 08:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\rfxvmt.dll
2015-01-02 17:06 - 2014-10-08 07:56 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-01-02 17:06 - 2014-10-08 07:51 - 00736768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-01-02 17:06 - 2014-10-08 07:51 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-01-02 17:06 - 2014-10-08 07:18 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2015-01-02 17:06 - 2014-10-08 07:17 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-01-02 17:06 - 2014-10-08 06:23 - 03547648 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-01-02 17:06 - 2014-08-23 06:18 - 02149376 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-01-02 17:06 - 2014-08-23 06:03 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-01-02 17:05 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2015-01-02 17:05 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2015-01-02 17:05 - 2014-10-17 08:01 - 00789184 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-01-02 17:05 - 2014-10-17 07:58 - 00602768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-01-02 17:05 - 2014-10-07 07:28 - 00500016 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-01-02 17:05 - 2014-10-07 07:27 - 00482872 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-01-02 17:05 - 2014-10-07 07:27 - 00394120 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-01-02 17:05 - 2014-10-07 07:27 - 00272248 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-01-02 17:05 - 2014-10-07 07:27 - 00108432 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-01-02 17:05 - 2014-10-07 04:34 - 00370424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-01-02 17:05 - 2014-10-07 04:34 - 00344536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-01-02 17:05 - 2014-10-07 04:33 - 00424544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-01-02 17:05 - 2014-10-07 04:30 - 04182016 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-01-02 17:05 - 2014-10-07 02:54 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2015-01-02 17:05 - 2014-10-07 02:46 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-01-02 17:05 - 2014-09-27 08:13 - 00104336 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2015-01-02 17:05 - 2014-09-27 06:24 - 00088800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll
2015-01-02 17:05 - 2014-09-27 04:38 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-01-02 17:05 - 2014-09-27 04:30 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2015-01-02 17:05 - 2014-09-27 04:17 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-01-02 17:04 - 2014-09-10 07:25 - 00474432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2015-01-02 17:04 - 2014-09-08 04:07 - 02497344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2015-01-02 17:04 - 2014-09-08 04:07 - 00428864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2015-01-02 17:04 - 2014-09-07 23:08 - 00389176 _____ () C:\Windows\system32\ApnDatabase.xml
2015-01-02 17:04 - 2014-09-04 23:30 - 00822272 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2015-01-02 17:04 - 2014-09-04 23:21 - 01053184 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2015-01-02 17:04 - 2014-09-04 04:05 - 00836176 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2015-01-02 17:04 - 2014-09-04 03:22 - 00670384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2015-01-02 17:04 - 2014-09-04 02:01 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2015-01-02 17:04 - 2014-09-04 01:32 - 00334336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
2015-01-02 17:04 - 2014-09-04 01:10 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll
2015-01-02 17:04 - 2014-08-31 01:17 - 00148800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2015-01-02 17:04 - 2014-08-31 01:15 - 21197152 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-01-02 17:04 - 2014-08-30 23:59 - 18723112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-01-02 17:04 - 2014-08-30 23:05 - 00615424 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOMEX.dll
2015-01-02 17:04 - 2014-08-30 22:58 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\FXSAPI.dll
2015-01-02 17:04 - 2014-08-30 22:04 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2015-01-02 17:04 - 2014-08-30 21:53 - 00239104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSAPI.dll
2015-01-02 17:04 - 2014-08-30 21:17 - 00799744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2015-01-02 17:04 - 2014-08-28 03:55 - 07484224 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-01-02 17:04 - 2014-08-28 01:21 - 02480128 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2015-01-02 17:04 - 2014-08-28 01:06 - 02030592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2015-01-02 17:04 - 2014-08-23 06:14 - 13424128 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2015-01-02 17:04 - 2014-08-23 06:04 - 11820544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2015-01-02 17:04 - 2014-08-23 05:50 - 02714112 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2015-01-02 17:04 - 2014-08-02 01:51 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2015-01-02 17:04 - 2014-08-02 01:35 - 00485376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2015-01-02 17:04 - 2014-07-24 12:22 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll
2015-01-02 17:04 - 2014-07-24 10:53 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\prnntfy.dll
2015-01-02 17:04 - 2014-07-24 10:13 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prnntfy.dll
2015-01-02 17:04 - 2014-07-24 09:20 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll
2015-01-02 17:04 - 2014-07-24 09:08 - 00162816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiapi.dll
2015-01-02 17:04 - 2014-07-24 08:49 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll
2015-01-02 17:04 - 2014-07-24 08:43 - 00200192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll
2015-01-02 17:03 - 2014-09-22 05:38 - 01519488 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2015-01-02 17:03 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2015-01-02 17:03 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys
2015-01-02 17:03 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2015-01-02 17:03 - 2014-09-19 01:16 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2015-01-02 17:03 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\winshfhc.dll
2015-01-02 17:03 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winshfhc.dll
2015-01-02 17:02 - 2014-08-23 08:48 - 02374784 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2015-01-02 17:02 - 2014-08-23 08:13 - 02084520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2015-01-02 17:02 - 2014-08-23 07:10 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2015-01-02 17:02 - 2014-08-23 06:32 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2015-01-02 17:02 - 2014-08-23 05:33 - 00796672 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2015-01-02 17:02 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2015-01-02 17:02 - 2014-08-16 05:01 - 01710184 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-01-02 17:02 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-01-02 17:02 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
2015-01-02 17:02 - 2014-08-16 04:03 - 01467384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-01-02 17:02 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-01-02 17:02 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2015-01-02 17:02 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2015-01-02 17:02 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\httpprxm.dll
2015-01-02 17:02 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\ProximityService.dll
2015-01-02 17:02 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2015-01-02 17:02 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
2015-01-02 17:02 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\adhsvc.dll
2015-01-02 17:02 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2015-01-02 17:02 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll
2015-01-02 17:02 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-01-02 17:02 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2015-01-02 17:02 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2015-01-02 17:02 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll
2015-01-02 17:02 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-01-02 17:02 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2015-01-02 17:02 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2015-01-02 17:02 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll
2015-01-02 17:02 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-01-02 17:02 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2015-01-02 17:02 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2015-01-02 17:02 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2015-01-02 17:02 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2015-01-02 17:02 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-01-02 17:02 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2015-01-02 17:02 - 2014-07-24 16:28 - 00468288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2015-01-02 17:02 - 2014-07-24 12:42 - 01200640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2015-01-02 17:02 - 2014-07-24 12:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys
2015-01-02 17:02 - 2014-07-24 11:09 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2015-01-02 17:02 - 2014-07-24 10:27 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2015-01-02 17:01 - 2015-01-11 13:03 - 00003148 _____ () C:\Windows\Tasks\9ccb267b-01c7-447f-8be3-94fe2404ee75-1.job
2015-01-02 17:01 - 2015-01-11 13:03 - 00002470 _____ () C:\Windows\Tasks\9ccb267b-01c7-447f-8be3-94fe2404ee75-5_user.job
2015-01-02 17:01 - 2015-01-11 13:03 - 00002470 _____ () C:\Windows\Tasks\9ccb267b-01c7-447f-8be3-94fe2404ee75-5.job
2015-01-02 17:01 - 2015-01-11 13:03 - 00002134 _____ () C:\Windows\Tasks\9ccb267b-01c7-447f-8be3-94fe2404ee75-2.job
2015-01-02 17:01 - 2015-01-11 13:03 - 00001000 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2015-01-02 17:01 - 2015-01-10 19:31 - 00001988 _____ () C:\Windows\patsearch.bin
2015-01-02 17:01 - 2015-01-03 14:52 - 00000000 ____D () C:\Program Files (x86)\CinPlus-2.8dV02.01
2015-01-02 17:01 - 2015-01-03 11:06 - 00001004 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2015-01-02 17:01 - 2015-01-02 17:01 - 01843688 _____ (CinPlus2.8dV02.01) C:\Users\Anna *****\AppData\Roaming\EPQT.exe
2015-01-02 17:01 - 2015-01-02 17:01 - 00006152 _____ () C:\Windows\System32\Tasks\9ccb267b-01c7-447f-8be3-94fe2404ee75-1
2015-01-02 17:01 - 2015-01-02 17:01 - 00005474 _____ () C:\Windows\System32\Tasks\9ccb267b-01c7-447f-8be3-94fe2404ee75-5
2015-01-02 17:01 - 2015-01-02 17:01 - 00005138 _____ () C:\Windows\System32\Tasks\9ccb267b-01c7-447f-8be3-94fe2404ee75-2
2015-01-02 17:01 - 2015-01-02 17:01 - 00003976 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
2015-01-02 17:01 - 2015-01-02 17:01 - 00003740 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
2015-01-02 17:01 - 2015-01-02 17:01 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webinstrNewH_01009.Wdf
2015-01-02 17:01 - 2015-01-02 17:01 - 00000000 ____D () C:\Users\Anna *****\AppData\Local\globalUpdate
2015-01-02 17:01 - 2015-01-02 17:01 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
2015-01-02 17:00 - 2014-09-04 01:12 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2015-01-02 17:00 - 2014-09-04 01:01 - 00514048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2015-01-02 16:59 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2015-01-02 16:59 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2015-01-02 16:58 - 2014-08-02 01:18 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2015-01-02 16:58 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll
2015-01-02 16:58 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll
2015-01-02 16:56 - 2014-08-07 03:12 - 01336624 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-01-02 16:56 - 2014-08-02 04:56 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-01-02 16:56 - 2014-07-15 19:16 - 03048880 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe
2015-01-02 16:56 - 2014-07-15 09:29 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2015-01-02 16:56 - 2014-07-15 09:22 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll
2015-01-02 16:56 - 2014-07-15 09:03 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2015-01-02 16:56 - 2014-07-12 05:17 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2015-01-02 16:56 - 2014-06-05 15:13 - 00216368 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll
2015-01-02 16:56 - 2014-06-05 14:14 - 00189016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll
2015-01-02 16:56 - 2014-06-02 03:10 - 00423768 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2015-01-02 16:56 - 2014-05-31 11:07 - 00440664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2015-01-02 16:56 - 2014-05-31 11:07 - 00419672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2015-01-02 16:56 - 2014-05-31 11:07 - 00089944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2015-01-02 16:56 - 2014-05-31 11:07 - 00027480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2015-01-02 16:56 - 2014-05-31 07:30 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2015-01-02 16:56 - 2014-05-31 07:27 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2015-01-02 16:56 - 2014-05-31 07:26 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2015-01-02 16:56 - 2014-05-31 05:01 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2015-01-02 16:56 - 2014-05-31 05:01 - 00209408 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2015-01-02 16:56 - 2014-05-31 05:01 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2015-01-02 16:56 - 2014-05-27 10:56 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\DaOtpCredentialProvider.dll
2015-01-02 16:56 - 2014-05-27 10:53 - 00270848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DaOtpCredentialProvider.dll
2015-01-02 16:56 - 2014-05-17 05:59 - 16871936 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2015-01-02 16:56 - 2014-05-17 05:13 - 12711424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2015-01-02 16:55 - 2014-06-20 02:48 - 01273184 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-01-02 16:55 - 2014-06-20 00:52 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-01-02 16:55 - 2014-06-13 02:15 - 00517528 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2015-01-02 16:55 - 2014-06-13 02:14 - 01557848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2015-01-02 16:55 - 2014-06-13 01:10 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2015-01-02 16:55 - 2014-06-06 12:34 - 02133504 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-01-02 16:55 - 2014-05-31 07:27 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-01-02 16:50 - 2014-06-16 23:26 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2015-01-02 16:50 - 2014-06-16 23:24 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2015-01-02 16:50 - 2014-06-06 14:04 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2015-01-02 16:50 - 2014-06-06 13:18 - 00488960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2015-01-02 16:50 - 2014-05-31 11:07 - 00054776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-01-02 16:50 - 2014-05-31 11:06 - 00555736 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2015-01-02 16:50 - 2014-05-31 04:06 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-01-02 16:50 - 2014-05-31 04:03 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-01-02 16:50 - 2014-05-31 03:56 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-01-02 16:50 - 2014-05-31 03:54 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-01-02 16:50 - 2014-05-31 03:48 - 03463680 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-01-02 16:50 - 2014-05-31 03:37 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2015-01-02 16:50 - 2014-05-31 03:35 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2015-01-02 16:50 - 2014-05-30 04:03 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-11 13:44 - 2014-10-23 22:01 - 01322560 _____ () C:\Windows\WindowsUpdate.log
2015-01-11 13:03 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sru
2015-01-10 20:18 - 2014-10-23 21:14 - 00602776 _____ () C:\Windows\SysWOW64\rootpa.e2e
2015-01-10 20:18 - 2013-08-22 16:20 - 00000000 ____D () C:\Windows\CbsTemp
2015-01-10 20:16 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-10 19:29 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2015-01-10 19:18 - 2014-07-14 18:58 - 00000000 ____D () C:\ProgramData\McAfee
2015-01-10 19:18 - 2014-07-14 18:58 - 00000000 ____D () C:\Program Files\Common Files\mcafee
2015-01-10 19:18 - 2014-07-14 18:58 - 00000000 ____D () C:\Program Files (x86)\McAfee
2015-01-10 19:17 - 2014-03-18 10:54 - 00026356 _____ () C:\Windows\PFRO.log
2015-01-10 18:30 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\GroupPolicy
2015-01-10 18:20 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2015-01-10 18:19 - 2013-08-22 16:36 - 00000000 ___HD () C:\Windows\ELAMBKUP
2015-01-10 18:15 - 2014-07-14 18:36 - 00000000 ____D () C:\Users\Administrator
2015-01-10 17:53 - 2014-10-23 21:20 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2015-01-10 17:53 - 2014-10-23 21:20 - 00000000 ____D () C:\Program Files (x86)\Acer
2015-01-06 12:24 - 2014-10-24 05:58 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2015-01-06 12:24 - 2014-10-24 05:58 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2015-01-06 12:24 - 2014-03-18 11:03 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-05 15:15 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-01-05 15:15 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-01-05 15:15 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender
2015-01-05 15:15 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2015-01-05 15:10 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-RS
2015-01-05 15:10 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS
2015-01-05 15:04 - 2013-08-22 15:46 - 00019655 _____ () C:\Windows\setupact.log
2015-01-05 13:47 - 2013-08-22 15:44 - 00420208 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-01-05 13:44 - 2014-03-18 10:45 - 00000000 ____D () C:\Program Files\Windows Journal
2015-01-05 13:44 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ToastData
2015-01-05 13:44 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2015-01-05 13:44 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-01-05 13:44 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-01-05 13:44 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\WinStore
2015-01-05 13:44 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-01-05 13:44 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\MediaViewer
2015-01-05 13:44 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\FileManager
2015-01-05 13:44 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\Camera
2015-01-05 13:44 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-01-05 11:50 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\Recovery
2015-01-05 11:39 - 2013-08-22 14:25 - 00000226 _____ () C:\Windows\win.ini
2015-01-03 14:59 - 2014-03-18 10:45 - 00000000 ____D () C:\Windows\ShellNew
2015-01-03 14:58 - 2014-10-23 21:33 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2015-01-03 14:56 - 2014-07-14 18:55 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-01-03 14:54 - 2014-10-23 21:18 - 00000000 ____D () C:\Program Files (x86)\Spotify
2015-01-03 14:54 - 2014-07-14 18:55 - 00000000 ____D () C:\ProgramData\WildTangent
2015-01-02 22:30 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\restore
2015-01-02 22:15 - 2014-10-23 21:25 - 00000000 ____D () C:\ProgramData\CyberLink
2015-01-02 22:14 - 2014-10-23 21:36 - 00000000 ____D () C:\Users\Public\CyberLink
2015-01-02 22:06 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness
2015-01-02 22:02 - 2014-10-23 21:20 - 00000000 ____D () C:\ProgramData\OEM
2015-01-02 21:59 - 2014-10-23 21:20 - 00000000 ____D () C:\ProgramData\Acer
2015-01-02 21:58 - 2014-07-14 19:33 - 00000000 ___HD () C:\OEM
2015-01-02 21:56 - 2014-07-14 19:34 - 00000000 ____D () C:\Windows\Panther
2015-01-02 21:37 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\rescache
2015-01-02 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT
2015-01-02 21:36 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-07-14 18:35

==================== End Of Log ============================