Trojaner-Board - Trojaner eingefangen...Pc langsam geworden, Seiten gehen langsam zu laden

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Trojaner eingefangen...Pc langsam geworden, Seiten gehen langsam zu laden (https://www.trojaner-board.de/146168-trojaner-eingefangen-pc-langsam-geworden-seiten-gehen-langsam-laden.html)

Trojaner eingefangen...Pc langsam geworden, Seiten gehen langsam zu laden

Bitte helfen sie mir, ich habe einen Viruseingefangen...MC afee meldet dass es Trojaner ist....viren wurden durch Mc affe isoliert....kommen aber immer wieder.Pc ist langsam geworden:
HELP bitte!

Hallo und :hallo:

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!

Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

http://www.trojaner-board.de/picture...&pictureid=307

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-12-2013

Ran by Lilia220982 (administrator) on LILIA on 15-12-2013 22:05:14

Running from C:\Users\Lilia220982\Downloads

Windows 8 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe

(McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe

(McAfee, Inc.) C:\Windows\System32\mfevtps.exe

(Dritek System INC.) C:\Windows\RfBtnSvc64.exe

(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe

(McAfee, Inc.) C:\Program Files\mcafee\MSC\McAPExe.exe

(McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe

(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(McAfee, Inc.) C:\Program Files (x86)\McAfee Online Backup\MOBKbackup.exe

(McAfee, Inc.) C:\Program Files (x86)\McAfee Online Backup\MOBKbackup.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe

(McAfee, Inc.) C:\Program Files (x86)\McAfee Online Backup\MOBKbackup.exe

(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4406.1205_x64__8wekyb3d8bbwe\LiveComm.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe

() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIIXE.EXE

(CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe

(McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McUICnt.exe

(                                                            ) C:\Users\Lilia220982\Downloads\DownloadAcceleratorSetup.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()

HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2874256 2012-12-07] (ELAN Microelectronics Corp.)

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13267016 2013-01-29] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1276488 2013-01-18] (Realtek Semiconductor)

HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [472984 2013-09-25] (Adobe Systems Incorporated)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-01-28] ( (Atheros Communications))

HKLM\...\Policies\Explorer: [NoControlPanel] 0

HKCU\...\Run: [EPLTarget\P0000000000000000] - C:\Windows\System32\spool\drivers\x64\3\E_YATIIXE.EXE [283232 2012-10-15] (SEIKO EPSON CORPORATION)

HKCU\...\Runonce: [Del8958609] - cmd.exe /Q /D /c del "C:\Users\LILIA2~1\AppData\Local\Temp\0.del"

HKLM-x32\...\Run: [mcui_exe] - C:\Program Files\mcafee.com\agent\mcagent.exe [537512 2013-09-24] (McAfee, Inc.)

HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)

HKLM-x32\...\Run: [mcpltui_exe] - C:\Program Files\mcafee.com\agent\mcagent.exe [537512 2013-09-24] (McAfee, Inc.)

HKLM-x32\...\Run: [Iminent] - C:\Program Files (x86)\Iminent\Iminent.exe [1074736 2013-10-16] (Iminent)

HKLM-x32\...\Run: [IminentMessenger] - C:\Program Files (x86)\Iminent\Iminent.Messengers.exe [884784 2013-10-16] (Iminent)

HKU\Default\...\RunOnce: [RegAutoPlay] - C:\Program Files (x86)\Acer\clear.fi Media\RegAutoplay.exe [1845832 2013-02-20] (Acer Incorporated)

HKU\Default User\...\RunOnce: [RegAutoPlay] - C:\Program Files (x86)\Acer\clear.fi Media\RegAutoplay.exe [1845832 2013-02-20] (Acer Incorporated)

AppInit_DLLs: C:\Windows\System32\nvinitx.dll [245872 2013-02-20] (NVIDIA Corporation)

AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [201576 2013-02-20] (NVIDIA Corporation)

IFEO\excel.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"

IFEO\groove.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"

IFEO\infopath.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"

IFEO\misc.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"

IFEO\msaccess.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"

IFEO\msoxmled.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"

IFEO\mspub.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"

IFEO\mstore.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"

IFEO\ois.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"

IFEO\onenote.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"

IFEO\outlook.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"

IFEO\powerpnt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"

IFEO\vscontentinstaller.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"

IFEO\vslauncher.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"

IFEO\Winword.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=dsites1202&cd=2XzuyEtN2Y1L1QzuyDyE0B0E0FyBtC0ByEzzzztC0D0BtC0CtN0D0Tzu0CyBtCyDtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=583277578&ir=

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com

SearchScopes: HKLM - DefaultScope {5545386B-4ACE-4EE2-8B8F-69C3BD58F376} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS

SearchScopes: HKLM - {5545386B-4ACE-4EE2-8B8F-69C3BD58F376} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS

SearchScopes: HKLM - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}

SearchScopes: HKLM-x32 - DefaultScope {5545386B-4ACE-4EE2-8B8F-69C3BD58F376} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS

SearchScopes: HKLM-x32 - {5545386B-4ACE-4EE2-8B8F-69C3BD58F376} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS

SearchScopes: HKLM-x32 - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}

SearchScopes: HKCU - DefaultScope {6ED4DC01-1AD4-4A69-A6C6-1EF7E0662295} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dsites1202&cd=2XzuyEtN2Y1L1QzuyDyE0B0E0FyBtC0ByEzzzztC0D0BtC0CtN0D0Tzu0CyBtCyDtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=583277578&ir=

SearchScopes: HKCU - {5545386B-4ACE-4EE2-8B8F-69C3BD58F376} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus

SearchScopes: HKCU - {6ED4DC01-1AD4-4A69-A6C6-1EF7E0662295} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dsites1202&cd=2XzuyEtN2Y1L1QzuyDyE0B0E0FyBtC0ByEzzzztC0D0BtC0CtN0D0Tzu0CyBtCyDtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=583277578&ir=

SearchScopes: HKCU - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://de.search.yahoo.com/search?fr=mcafee&type=A011DE0&p={SearchTerms}

SearchScopes: HKCU - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}

BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO: YoutubeAdblocker - {73806476-0A4F-ECF2-F30C-E1F4AFB4E4FA} - C:\Program Files (x86)\YoutubeAdblocker\OXfYcs.x64.dll ()

BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)

BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: suerF aNNd Keep - {E8E33312-5161-31C6-837E-0B3E51C7CCDA} - C:\Program Files (x86)\suerF aNNd Keep\A3I88hGn.x64.dll ()

BHO-x32: Plus-HD-3.8 - {11111111-1111-1111-1111-110311901130} - C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-bho.dll (Plus HD)

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: YoutubeAdblocker - {73806476-0A4F-ECF2-F30C-E1F4AFB4E4FA} - C:\Program Files (x86)\YoutubeAdblocker\OXfYcs.dll ()

BHO-x32: IMinent WebBooster (BHO) - {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} - C:\Program Files (x86)\Iminent\Iminent.WebBooster.InternetExplorer.dll (SIEN)

BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Web Optimizer - {bbb1d54d-cf70-4a80-bf2f-3bafca0225ce} - C:\Program Files (x86)\Web Optimizer\weboptimizer.dll (Web Optimizer)

BHO-x32: suerF aNNd Keep - {E8E33312-5161-31C6-837E-0B3E51C7CCDA} - C:\Program Files (x86)\suerF aNNd Keep\A3I88hGn.dll ()

Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)

Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)

Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)

Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)

Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)

Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)

Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\mcafee\MSC\McSnIePl64.dll (McAfee, Inc.)

Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\MSC\McSnIePl.dll (McAfee, Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 

Chrome: 

=======

CHR HomePage: hxxp://start.mysearchdial.com/?f=1&a=dsites1202&cd=2XzuyEtN2Y1L1QzuyDyE0B0E0FyBtC0ByEzzzztC0D0BtC0CtN0D0Tzu0CyBtCyDtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=583277578&ir=

CHR RestoreOnStartup: "hxxp://start.mysearchdial.com/?f=1&a=dsites1202&cd=2XzuyEtN2Y1L1QzuyDyE0B0E0FyBtC0ByEzzzztC0D0BtC0CtN0D0Tzu0CyBtCyDtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=583277578&ir="

CHR DefaultSearchKeyword: mysearchdial.com

CHR DefaultSearchProvider: Mysearchdial

CHR DefaultSearchURL: hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dsites1202&cd=2XzuyEtN2Y1L1QzuyDyE0B0E0FyBtC0ByEzzzztC0D0BtC0CtN0D0Tzu0CyBtCyDtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=583277578&ir=

CHR DefaultNewTabURL: 

CHR Extension: (Google Docs) - C:\Users\Lilia220982\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0

CHR Extension: (Google Drive) - C:\Users\Lilia220982\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0

CHR Extension: (YoutubeBookmark) - C:\Users\Lilia220982\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhnmahipmkmalgebclphdijfbkfcdgkj\1.0

CHR Extension: (YouTube) - C:\Users\Lilia220982\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0

CHR Extension: (Google Search) - C:\Users\Lilia220982\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0

CHR Extension: (suroFu Anido  keep) - C:\Users\Lilia220982\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpnnjfdapplpkcnkigmdgpomneibffon\2.19

CHR Extension: (SiteAdvisor) - C:\Users\Lilia220982\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.6.4.1291_0

CHR Extension: (YoutubeAdblocker) - C:\Users\Lilia220982\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjfkoommoonfneipcnmldapcepaglcpe\1.0

CHR Extension: (Google Wallet) - C:\Users\Lilia220982\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0

CHR Extension: (MySearchDial __MSG_newtab__) - C:\Users\Lilia220982\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.4.1.1_0

CHR Extension: (Gmail) - C:\Users\Lilia220982\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1

CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx
 

==================== Services (Whitelisted) =================
 

S4 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [227456 2013-01-28] (Qualcomm Atheros Commnucations)

R2 ETDService; C:\Program Files\Elantech\ETDService.exe [100752 2012-12-07] (ELAN Microelectronics Corp.)

R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)

R2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178048 2013-11-28] (McAfee, Inc.)

R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 McNaiAnn; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [602944 2013-08-02] (McAfee, Inc.)

R2 mcpltsvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 McProxy; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1025232 2013-11-26] (McAfee, Inc.)

R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219272 2013-11-04] (McAfee, Inc.)

R2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-11-04] (McAfee, Inc.)

R2 MOBKbackup; C:\Program Files (x86)\McAfee Online Backup\MOBKbackup.exe [231224 2010-04-13] (McAfee, Inc.)

R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [93296 2013-08-15] (Dritek System INC.)

S4 SProtection; C:\Program Files (x86)\Common Files\Umbrella\umbrella.exe [2905408 2013-11-21] (Iminent)

R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2099512 2013-10-30] (TuneUp Software)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
 

==================== Drivers (Whitelisted) ====================
 

S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-01-28] (Qualcomm Atheros)

S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)

R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-11-04] (McAfee, Inc.)

S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)

R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179792 2013-11-04] (McAfee, Inc.)

R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311120 2013-11-04] (McAfee, Inc.)

S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69344 2013-11-04] (McAfee, Inc.)

R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [519576 2013-11-04] (McAfee, Inc.)

R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [782360 2013-11-04] (McAfee, Inc.)

R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [411944 2013-11-26] (McAfee, Inc.)

S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96112 2013-11-26] (McAfee, Inc.)

R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [343696 2013-11-04] (McAfee, Inc.)

R1 MOBKFilter; C:\Windows\System32\DRIVERS\MOBK.sys [66040 2010-04-13] (Mozy, Inc.)

R3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2013-08-15] (Dritek System Inc.)

R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-09-18] (TuneUp Software)
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-12-15 22:05 - 2013-12-15 22:06 - 00019577 _____ C:\Users\Lilia220982\Downloads\FRST.txt

2013-12-15 22:05 - 2013-12-15 22:05 - 00000000 ____D C:\FRST

2013-12-15 22:03 - 2013-12-15 22:04 - 01927796 _____ (Farbar) C:\Users\Lilia220982\Downloads\FRST64.exe

2013-12-15 22:01 - 2013-12-15 22:01 - 00351124 _____ C:\Users\Lilia220982\AppData\Local\mysearchdial-speeddial.crx

2013-12-15 22:01 - 2013-12-15 22:01 - 00002656 _____ C:\Windows\System32\Tasks\MySearchDial

2013-12-15 22:01 - 2013-12-15 22:01 - 00000322 _____ C:\Windows\Tasks\MySearchDial.job

2013-12-15 22:01 - 2013-12-15 22:01 - 00000000 ____D C:\Users\Lilia220982\Mysearchdial

2013-12-15 22:01 - 2013-12-15 22:01 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\mysearchdial

2013-12-15 22:00 - 2013-12-15 22:00 - 00000963 _____ C:\Users\UpdatusUser\Desktop\MiPony.lnk

2013-12-15 22:00 - 2013-12-15 22:00 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MiPony

2013-12-15 22:00 - 2013-12-15 22:00 - 00000000 ____D C:\Program Files (x86)\MiPony

2013-12-15 21:57 - 2013-12-15 21:57 - 00673080 _____ (                                                            ) C:\Users\Lilia220982\Downloads\DownloadAcceleratorSetup.exe

2013-12-14 08:36 - 2013-12-14 08:36 - 05087072 _____ C:\Windows\system32\FNTCACHE.DAT

2013-12-13 23:38 - 2013-12-13 23:38 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\EZDownloader

2013-12-13 23:25 - 2013-12-14 10:00 - 00854016 ___SH C:\Users\Lilia220982\Documents\Thumbs.db

2013-12-13 10:07 - 2013-10-25 07:19 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-12-13 10:07 - 2013-10-25 07:19 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-12-13 10:07 - 2013-10-25 07:19 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll

2013-12-13 10:07 - 2013-10-25 07:19 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-12-13 10:07 - 2013-10-25 07:18 - 19271168 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-12-13 10:07 - 2013-10-25 07:18 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-12-13 10:07 - 2013-10-25 07:17 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-12-13 10:07 - 2013-10-25 07:17 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-12-13 10:07 - 2013-10-25 07:17 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-12-13 10:07 - 2013-10-25 07:17 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-12-13 10:07 - 2013-10-25 05:45 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-12-13 10:07 - 2013-10-25 05:44 - 14356992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-12-13 10:07 - 2013-10-25 05:44 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-12-13 10:07 - 2013-10-25 05:43 - 13761536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-12-13 10:07 - 2013-10-25 05:43 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-12-13 10:07 - 2013-10-25 05:43 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-12-13 10:07 - 2013-10-25 05:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-12-13 10:07 - 2013-10-25 05:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-12-13 10:00 - 2013-11-23 07:43 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2013-12-13 10:00 - 2013-11-23 06:05 - 00368640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2013-12-13 10:00 - 2013-11-07 00:18 - 04036608 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-12-13 10:00 - 2013-10-19 06:45 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll

2013-12-13 10:00 - 2013-10-19 05:04 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll

2013-12-13 10:00 - 2013-10-10 10:32 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe

2013-12-13 10:00 - 2013-10-10 10:30 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrobj.dll

2013-12-13 10:00 - 2013-10-10 10:30 - 00156160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll

2013-12-13 10:00 - 2013-10-10 10:24 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx

2013-12-13 10:00 - 2013-10-10 10:23 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe

2013-12-13 10:00 - 2013-10-10 10:22 - 00222720 _____ (Microsoft Corporation) C:\Windows\system32\scrobj.dll

2013-12-13 10:00 - 2013-10-10 10:22 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll

2013-12-13 10:00 - 2013-10-09 02:33 - 00059416 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2013-12-13 10:00 - 2013-10-08 23:30 - 00628736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2013-12-13 10:00 - 2013-10-08 23:30 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2013-12-13 10:00 - 2013-10-08 23:30 - 00084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2013-12-13 10:00 - 2013-10-08 23:30 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2013-12-13 10:00 - 2013-10-08 23:28 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2013-12-13 10:00 - 2013-10-08 23:27 - 03279872 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2013-12-13 10:00 - 2013-10-08 23:27 - 01622016 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2013-12-13 10:00 - 2013-10-08 23:27 - 00773120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2013-12-13 10:00 - 2013-10-08 23:27 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll

2013-12-13 10:00 - 2013-10-08 23:27 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll

2013-12-13 10:00 - 2013-10-08 23:27 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2013-12-13 10:00 - 2013-10-08 23:27 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2013-12-13 10:00 - 2013-10-05 07:10 - 00285016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys

2013-12-13 10:00 - 2013-10-03 23:09 - 00385528 _____ C:\Windows\system32\ApnDatabase.xml

2013-12-13 10:00 - 2013-10-02 03:50 - 00447320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS

2013-12-13 10:00 - 2013-09-28 06:48 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2013-12-13 10:00 - 2013-09-28 04:58 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

2013-12-13 10:00 - 2013-09-19 08:32 - 01455448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2013-12-13 10:00 - 2013-08-30 06:19 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll

2013-12-13 10:00 - 2013-08-30 06:18 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll

2013-12-13 10:00 - 2013-08-30 00:48 - 00488960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll

2013-12-13 10:00 - 2013-08-30 00:47 - 00302080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll

2013-12-13 09:59 - 2013-11-01 06:38 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll

2013-12-13 09:59 - 2013-11-01 04:49 - 00273408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll

2013-12-13 09:59 - 2013-09-28 04:35 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

2013-12-11 12:31 - 2013-12-11 00:01 - 00006733 _____ C:\Users\Lilia220982\Documents\DSC_7642.xmp

2013-12-11 12:31 - 2013-12-11 00:01 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7671.xmp

2013-12-11 12:31 - 2013-12-11 00:01 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7656.xmp

2013-12-11 12:31 - 2013-12-11 00:01 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7653.xmp

2013-12-11 12:31 - 2013-12-11 00:01 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7650.xmp

2013-12-11 12:31 - 2013-12-11 00:01 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7649.xmp

2013-12-11 12:31 - 2013-11-24 16:03 - 20918831 _____ C:\Users\Lilia220982\Documents\DSC_7675.NEF

2013-12-11 12:31 - 2013-11-24 16:03 - 20797938 _____ C:\Users\Lilia220982\Documents\DSC_7676.NEF

2013-12-11 12:31 - 2013-11-24 16:02 - 21243562 _____ C:\Users\Lilia220982\Documents\DSC_7673.NEF

2013-12-11 12:31 - 2013-11-24 16:02 - 21050357 _____ C:\Users\Lilia220982\Documents\DSC_7674.NEF

2013-12-11 12:31 - 2013-11-24 16:02 - 20894698 _____ C:\Users\Lilia220982\Documents\DSC_7669.NEF

2013-12-11 12:31 - 2013-11-24 16:02 - 20877156 _____ C:\Users\Lilia220982\Documents\DSC_7667.NEF

2013-12-11 12:31 - 2013-11-24 16:02 - 20808617 _____ C:\Users\Lilia220982\Documents\DSC_7668.NEF

2013-12-11 12:31 - 2013-11-24 16:02 - 20734360 _____ C:\Users\Lilia220982\Documents\DSC_7670.NEF

2013-12-11 12:31 - 2013-11-24 16:02 - 20544495 _____ C:\Users\Lilia220982\Documents\DSC_7671.NEF

2013-12-11 12:31 - 2013-11-24 16:02 - 18966280 _____ C:\Users\Lilia220982\Documents\DSC_7672.NEF

2013-12-11 12:31 - 2013-11-24 16:01 - 21415320 _____ C:\Users\Lilia220982\Documents\DSC_7664.NEF

2013-12-11 12:31 - 2013-11-24 16:01 - 21395737 _____ C:\Users\Lilia220982\Documents\DSC_7663.NEF

2013-12-11 12:31 - 2013-11-24 16:01 - 21332472 _____ C:\Users\Lilia220982\Documents\DSC_7662.NEF

2013-12-11 12:31 - 2013-11-24 16:01 - 21319346 _____ C:\Users\Lilia220982\Documents\DSC_7660.NEF

2013-12-11 12:31 - 2013-11-24 16:01 - 21308066 _____ C:\Users\Lilia220982\Documents\DSC_7665.NEF

2013-12-11 12:31 - 2013-11-24 16:01 - 21305142 _____ C:\Users\Lilia220982\Documents\DSC_7666.NEF

2013-12-11 12:31 - 2013-11-24 16:01 - 21203240 _____ C:\Users\Lilia220982\Documents\DSC_7661.NEF

2013-12-11 12:31 - 2013-11-24 16:00 - 22575164 _____ C:\Users\Lilia220982\Documents\DSC_7658.NEF

2013-12-11 12:31 - 2013-11-24 16:00 - 22150831 _____ C:\Users\Lilia220982\Documents\DSC_7657.NEF

2013-12-11 12:31 - 2013-11-24 16:00 - 21688063 _____ C:\Users\Lilia220982\Documents\DSC_7659.NEF

2013-12-11 12:31 - 2013-11-24 16:00 - 20757841 _____ C:\Users\Lilia220982\Documents\DSC_7655.NEF

2013-12-11 12:31 - 2013-11-24 16:00 - 20613570 _____ C:\Users\Lilia220982\Documents\DSC_7656.NEF

2013-12-11 12:31 - 2013-11-24 15:59 - 21345798 _____ C:\Users\Lilia220982\Documents\DSC_7649.NEF

2013-12-11 12:31 - 2013-11-24 15:59 - 21255932 _____ C:\Users\Lilia220982\Documents\DSC_7654.NEF

2013-12-11 12:31 - 2013-11-24 15:59 - 21190900 _____ C:\Users\Lilia220982\Documents\DSC_7648.NEF

2013-12-11 12:31 - 2013-11-24 15:59 - 21138980 _____ C:\Users\Lilia220982\Documents\DSC_7650.NEF

2013-12-11 12:31 - 2013-11-24 15:59 - 21128003 _____ C:\Users\Lilia220982\Documents\DSC_7653.NEF

2013-12-11 12:31 - 2013-11-24 15:59 - 21031230 _____ C:\Users\Lilia220982\Documents\DSC_7652.NEF

2013-12-11 12:31 - 2013-11-24 15:59 - 20999587 _____ C:\Users\Lilia220982\Documents\DSC_7651.NEF

2013-12-11 12:31 - 2013-11-24 15:59 - 20574091 _____ C:\Users\Lilia220982\Documents\DSC_7646.NEF

2013-12-11 12:31 - 2013-11-24 15:59 - 20544547 _____ C:\Users\Lilia220982\Documents\DSC_7647.NEF

2013-12-11 12:31 - 2013-11-24 15:54 - 21269278 _____ C:\Users\Lilia220982\Documents\DSC_7640.NEF

2013-12-11 12:31 - 2013-11-24 15:54 - 21198537 _____ C:\Users\Lilia220982\Documents\DSC_7642.NEF

2013-12-11 12:31 - 2013-11-24 15:54 - 21110996 _____ C:\Users\Lilia220982\Documents\DSC_7641.NEF

2013-12-11 12:31 - 2013-11-24 15:54 - 21049193 _____ C:\Users\Lilia220982\Documents\DSC_7643.NEF

2013-12-11 12:31 - 2013-11-24 15:54 - 21009068 _____ C:\Users\Lilia220982\Documents\DSC_7644.NEF

2013-12-11 12:31 - 2013-11-24 15:54 - 20864095 _____ C:\Users\Lilia220982\Documents\DSC_7645.NEF

2013-12-11 12:30 - 2013-12-10 23:41 - 00006733 _____ C:\Users\Lilia220982\Documents\DSC_7608.xmp

2013-12-11 12:30 - 2013-12-10 23:41 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7631.xmp

2013-12-11 12:30 - 2013-12-10 23:41 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7630.xmp

2013-12-11 12:30 - 2013-12-10 23:41 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7624.xmp

2013-12-11 12:30 - 2013-12-10 23:41 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7621.xmp

2013-12-11 12:30 - 2013-12-10 23:41 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7618.xmp

2013-12-11 12:30 - 2013-12-10 23:41 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7610.xmp

2013-12-11 12:30 - 2013-12-10 23:41 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7609.xmp

2013-12-11 12:30 - 2013-12-10 23:21 - 00006734 _____ C:\Users\Lilia220982\Documents\DSC_7591.xmp

2013-12-11 12:30 - 2013-12-10 23:21 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7592.xmp

2013-12-11 12:30 - 2013-12-10 23:21 - 00006684 _____ C:\Users\Lilia220982\Documents\DSC_7598.xmp

2013-12-11 12:30 - 2013-12-10 23:05 - 00006733 _____ C:\Users\Lilia220982\Documents\DSC_7561.xmp

2013-12-11 12:30 - 2013-12-10 23:05 - 00006691 _____ C:\Users\Lilia220982\Documents\DSC_7564.xmp

2013-12-11 12:30 - 2013-12-10 23:05 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7577.xmp

2013-12-11 12:30 - 2013-12-10 23:05 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7573.xmp

2013-12-11 12:30 - 2013-12-10 23:05 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7567.xmp

2013-12-11 12:30 - 2013-12-10 22:53 - 00006691 _____ C:\Users\Lilia220982\Documents\DSC_7558.xmp

2013-12-11 12:30 - 2013-11-24 15:54 - 21220707 _____ C:\Users\Lilia220982\Documents\DSC_7639.NEF

2013-12-11 12:30 - 2013-11-24 15:53 - 21446364 _____ C:\Users\Lilia220982\Documents\DSC_7634.NEF

2013-12-11 12:30 - 2013-11-24 15:53 - 21317836 _____ C:\Users\Lilia220982\Documents\DSC_7635.NEF

2013-12-11 12:30 - 2013-11-24 15:53 - 21312189 _____ C:\Users\Lilia220982\Documents\DSC_7636.NEF

2013-12-11 12:30 - 2013-11-24 15:53 - 21285187 _____ C:\Users\Lilia220982\Documents\DSC_7637.NEF

2013-12-11 12:30 - 2013-11-24 15:53 - 21195712 _____ C:\Users\Lilia220982\Documents\DSC_7638.NEF

2013-12-11 12:30 - 2013-11-24 15:52 - 21304101 _____ C:\Users\Lilia220982\Documents\DSC_7633.NEF

2013-12-11 12:30 - 2013-11-24 15:50 - 21467157 _____ C:\Users\Lilia220982\Documents\DSC_7625.NEF

2013-12-11 12:30 - 2013-11-24 15:50 - 21447827 _____ C:\Users\Lilia220982\Documents\DSC_7626.NEF

2013-12-11 12:30 - 2013-11-24 15:50 - 21400375 _____ C:\Users\Lilia220982\Documents\DSC_7627.NEF

2013-12-11 12:30 - 2013-11-24 15:50 - 21367779 _____ C:\Users\Lilia220982\Documents\DSC_7630.NEF

2013-12-11 12:30 - 2013-11-24 15:50 - 21314863 _____ C:\Users\Lilia220982\Documents\DSC_7628.NEF

2013-12-11 12:30 - 2013-11-24 15:50 - 21300118 _____ C:\Users\Lilia220982\Documents\DSC_7629.NEF

2013-12-11 12:30 - 2013-11-24 15:50 - 20352392 _____ C:\Users\Lilia220982\Documents\DSC_7632.NEF

2013-12-11 12:30 - 2013-11-24 15:50 - 20179086 _____ C:\Users\Lilia220982\Documents\DSC_7631.NEF

2013-12-11 12:30 - 2013-11-24 15:49 - 22735575 _____ C:\Users\Lilia220982\Documents\DSC_7620.NEF

2013-12-11 12:30 - 2013-11-24 15:49 - 21372700 _____ C:\Users\Lilia220982\Documents\DSC_7624.NEF

2013-12-11 12:30 - 2013-11-24 15:49 - 21367703 _____ C:\Users\Lilia220982\Documents\DSC_7621.NEF

2013-12-11 12:30 - 2013-11-24 15:49 - 21292874 _____ C:\Users\Lilia220982\Documents\DSC_7622.NEF

2013-12-11 12:30 - 2013-11-24 15:49 - 21149254 _____ C:\Users\Lilia220982\Documents\DSC_7623.NEF

2013-12-11 12:30 - 2013-11-24 15:48 - 22669157 _____ C:\Users\Lilia220982\Documents\DSC_7619.NEF

2013-12-11 12:30 - 2013-11-24 15:48 - 21809299 _____ C:\Users\Lilia220982\Documents\DSC_7615.NEF

2013-12-11 12:30 - 2013-11-24 15:48 - 21736955 _____ C:\Users\Lilia220982\Documents\DSC_7616.NEF

2013-12-11 12:30 - 2013-11-24 15:48 - 21695324 _____ C:\Users\Lilia220982\Documents\DSC_7614.NEF

2013-12-11 12:30 - 2013-11-24 15:48 - 21510820 _____ C:\Users\Lilia220982\Documents\DSC_7617.NEF

2013-12-11 12:30 - 2013-11-24 15:48 - 21510215 _____ C:\Users\Lilia220982\Documents\DSC_7618.NEF

2013-12-11 12:30 - 2013-11-24 15:46 - 22423892 _____ C:\Users\Lilia220982\Documents\DSC_7610.NEF

2013-12-11 12:30 - 2013-11-24 15:46 - 22409445 _____ C:\Users\Lilia220982\Documents\DSC_7612.NEF

2013-12-11 12:30 - 2013-11-24 15:46 - 22305286 _____ C:\Users\Lilia220982\Documents\DSC_7613.NEF

2013-12-11 12:30 - 2013-11-24 15:46 - 22270994 _____ C:\Users\Lilia220982\Documents\DSC_7611.NEF

2013-12-11 12:30 - 2013-11-24 15:45 - 22580974 _____ C:\Users\Lilia220982\Documents\DSC_7606.NEF

2013-12-11 12:30 - 2013-11-24 15:45 - 22460928 _____ C:\Users\Lilia220982\Documents\DSC_7607.NEF

2013-12-11 12:30 - 2013-11-24 15:45 - 22441655 _____ C:\Users\Lilia220982\Documents\DSC_7603.NEF

2013-12-11 12:30 - 2013-11-24 15:45 - 22328521 _____ C:\Users\Lilia220982\Documents\DSC_7609.NEF

2013-12-11 12:30 - 2013-11-24 15:45 - 22309339 _____ C:\Users\Lilia220982\Documents\DSC_7608.NEF

2013-12-11 12:30 - 2013-11-24 15:45 - 22058826 _____ C:\Users\Lilia220982\Documents\DSC_7604.NEF

2013-12-11 12:30 - 2013-11-24 15:45 - 21931094 _____ C:\Users\Lilia220982\Documents\DSC_7605.NEF

2013-12-11 12:30 - 2013-11-24 15:45 - 19753720 _____ C:\Users\Lilia220982\Documents\DSC_7601.NEF

2013-12-11 12:30 - 2013-11-24 15:45 - 19554852 _____ C:\Users\Lilia220982\Documents\DSC_7602.NEF

2013-12-11 12:30 - 2013-11-24 15:44 - 23499442 _____ C:\Users\Lilia220982\Documents\DSC_7596.NEF

2013-12-11 12:30 - 2013-11-24 15:44 - 23355628 _____ C:\Users\Lilia220982\Documents\DSC_7597.NEF

2013-12-11 12:30 - 2013-11-24 15:44 - 21924766 _____ C:\Users\Lilia220982\Documents\DSC_7600.NEF

2013-12-11 12:30 - 2013-11-24 15:44 - 21894421 _____ C:\Users\Lilia220982\Documents\DSC_7598.NEF

2013-12-11 12:30 - 2013-11-24 15:44 - 21807948 _____ C:\Users\Lilia220982\Documents\DSC_7599.NEF

2013-12-11 12:30 - 2013-11-24 15:43 - 22832312 _____ C:\Users\Lilia220982\Documents\DSC_7595.NEF

2013-12-11 12:30 - 2013-11-24 15:43 - 22312310 _____ C:\Users\Lilia220982\Documents\DSC_7594.NEF

2013-12-11 12:30 - 2013-11-24 15:43 - 22205342 _____ C:\Users\Lilia220982\Documents\DSC_7593.NEF

2013-12-11 12:30 - 2013-11-24 15:43 - 22170342 _____ C:\Users\Lilia220982\Documents\DSC_7592.NEF

2013-12-11 12:30 - 2013-11-24 15:43 - 21733799 _____ C:\Users\Lilia220982\Documents\DSC_7589.NEF

2013-12-11 12:30 - 2013-11-24 15:43 - 21538509 _____ C:\Users\Lilia220982\Documents\DSC_7590.NEF

2013-12-11 12:30 - 2013-11-24 15:43 - 21417136 _____ C:\Users\Lilia220982\Documents\DSC_7586.NEF

2013-12-11 12:30 - 2013-11-24 15:43 - 21381225 _____ C:\Users\Lilia220982\Documents\DSC_7591.NEF

2013-12-11 12:30 - 2013-11-24 15:43 - 21277249 _____ C:\Users\Lilia220982\Documents\DSC_7587.NEF

2013-12-11 12:30 - 2013-11-24 15:43 - 21217855 _____ C:\Users\Lilia220982\Documents\DSC_7588.NEF

2013-12-11 12:30 - 2013-11-24 15:42 - 21538864 _____ C:\Users\Lilia220982\Documents\DSC_7585.NEF

2013-12-11 12:30 - 2013-11-24 15:42 - 21531516 _____ C:\Users\Lilia220982\Documents\DSC_7583.NEF

2013-12-11 12:30 - 2013-11-24 15:42 - 21416426 _____ C:\Users\Lilia220982\Documents\DSC_7584.NEF

2013-12-11 12:30 - 2013-11-24 15:41 - 21795644 _____ C:\Users\Lilia220982\Documents\DSC_7582.NEF

2013-12-11 12:30 - 2013-11-24 15:41 - 21746628 _____ C:\Users\Lilia220982\Documents\DSC_7581.NEF

2013-12-11 12:30 - 2013-11-24 15:41 - 21140383 _____ C:\Users\Lilia220982\Documents\DSC_7577.NEF

2013-12-11 12:30 - 2013-11-24 15:41 - 21135945 _____ C:\Users\Lilia220982\Documents\DSC_7576.NEF

2013-12-11 12:30 - 2013-11-24 15:41 - 21132791 _____ C:\Users\Lilia220982\Documents\DSC_7579.NEF

2013-12-11 12:30 - 2013-11-24 15:41 - 21069071 _____ C:\Users\Lilia220982\Documents\DSC_7578.NEF

2013-12-11 12:30 - 2013-11-24 15:41 - 21054004 _____ C:\Users\Lilia220982\Documents\DSC_7580.NEF

2013-12-11 12:30 - 2013-11-24 15:40 - 21711527 _____ C:\Users\Lilia220982\Documents\DSC_7575.NEF

2013-12-11 12:30 - 2013-11-24 15:40 - 21556634 _____ C:\Users\Lilia220982\Documents\DSC_7573.NEF

2013-12-11 12:30 - 2013-11-24 15:40 - 21536599 _____ C:\Users\Lilia220982\Documents\DSC_7572.NEF

2013-12-11 12:30 - 2013-11-24 15:40 - 21366070 _____ C:\Users\Lilia220982\Documents\DSC_7574.NEF

2013-12-11 12:30 - 2013-11-24 15:39 - 21401438 _____ C:\Users\Lilia220982\Documents\DSC_7570.NEF

2013-12-11 12:30 - 2013-11-24 15:39 - 21312030 _____ C:\Users\Lilia220982\Documents\DSC_7571.NEF

2013-12-11 12:30 - 2013-11-24 15:38 - 21901458 _____ C:\Users\Lilia220982\Documents\DSC_7563.NEF

2013-12-11 12:30 - 2013-11-24 15:38 - 21899805 _____ C:\Users\Lilia220982\Documents\DSC_7560.NEF

2013-12-11 12:30 - 2013-11-24 15:38 - 21843853 _____ C:\Users\Lilia220982\Documents\DSC_7561.NEF

2013-12-11 12:30 - 2013-11-24 15:38 - 21650563 _____ C:\Users\Lilia220982\Documents\DSC_7562.NEF

2013-12-11 12:30 - 2013-11-24 15:38 - 21615132 _____ C:\Users\Lilia220982\Documents\DSC_7568.NEF

2013-12-11 12:30 - 2013-11-24 15:38 - 21464579 _____ C:\Users\Lilia220982\Documents\DSC_7569.NEF

2013-12-11 12:30 - 2013-11-24 15:38 - 21375434 _____ C:\Users\Lilia220982\Documents\DSC_7567.NEF

2013-12-11 12:30 - 2013-11-24 15:38 - 21357826 _____ C:\Users\Lilia220982\Documents\DSC_7564.NEF

2013-12-11 12:30 - 2013-11-24 15:38 - 21345732 _____ C:\Users\Lilia220982\Documents\DSC_7566.NEF

2013-12-11 12:30 - 2013-11-24 15:38 - 21320653 _____ C:\Users\Lilia220982\Documents\DSC_7565.NEF

2013-12-11 12:30 - 2013-11-24 15:37 - 22059051 _____ C:\Users\Lilia220982\Documents\DSC_7558.NEF

2013-12-11 12:30 - 2013-11-24 15:37 - 22035023 _____ C:\Users\Lilia220982\Documents\DSC_7559.NEF

2013-12-11 12:29 - 2013-12-10 22:53 - 00006731 _____ C:\Users\Lilia220982\Documents\DSC_7546.xmp

2013-12-11 12:29 - 2013-12-10 22:53 - 00006688 _____ C:\Users\Lilia220982\Documents\DSC_7553.xmp

2013-12-11 12:29 - 2013-12-10 22:33 - 00006732 _____ C:\Users\Lilia220982\Documents\DSC_7527.xmp

2013-12-11 12:29 - 2013-12-10 22:33 - 00006689 _____ C:\Users\Lilia220982\Documents\DSC_7532.xmp

2013-12-11 12:29 - 2013-12-10 22:33 - 00006689 _____ C:\Users\Lilia220982\Documents\DSC_7529.xmp

2013-12-11 12:29 - 2013-12-10 22:33 - 00006688 _____ C:\Users\Lilia220982\Documents\DSC_7545.xmp

2013-12-11 12:29 - 2013-12-10 22:19 - 00006724 _____ C:\Users\Lilia220982\Documents\DSC_7492.xmp

2013-12-11 12:29 - 2013-12-10 22:19 - 00006686 _____ C:\Users\Lilia220982\Documents\DSC_7510.xmp

2013-12-11 12:29 - 2013-12-10 22:19 - 00006686 _____ C:\Users\Lilia220982\Documents\DSC_7504.xmp

2013-12-11 12:29 - 2013-12-10 22:19 - 00006686 _____ C:\Users\Lilia220982\Documents\DSC_7499.xmp

2013-12-11 12:29 - 2013-12-10 22:19 - 00006681 _____ C:\Users\Lilia220982\Documents\DSC_7493.xmp

2013-12-11 12:29 - 2013-12-10 22:09 - 00006733 _____ C:\Users\Lilia220982\Documents\DSC_7483.xmp

2013-12-11 12:29 - 2013-12-10 22:09 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7486.xmp

2013-12-11 12:29 - 2013-12-10 21:48 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7479.xmp

2013-12-11 12:29 - 2013-11-24 15:37 - 21989279 _____ C:\Users\Lilia220982\Documents\DSC_7557.NEF

2013-12-11 12:29 - 2013-11-24 15:36 - 22880515 _____ C:\Users\Lilia220982\Documents\DSC_7549.NEF

2013-12-11 12:29 - 2013-11-24 15:36 - 22758262 _____ C:\Users\Lilia220982\Documents\DSC_7551.NEF

2013-12-11 12:29 - 2013-11-24 15:36 - 22715616 _____ C:\Users\Lilia220982\Documents\DSC_7550.NEF

2013-12-11 12:29 - 2013-11-24 15:36 - 22632203 _____ C:\Users\Lilia220982\Documents\DSC_7552.NEF

2013-12-11 12:29 - 2013-11-24 15:36 - 22524968 _____ C:\Users\Lilia220982\Documents\DSC_7553.NEF

2013-12-11 12:29 - 2013-11-24 15:36 - 22192346 _____ C:\Users\Lilia220982\Documents\DSC_7548.NEF

2013-12-11 12:29 - 2013-11-24 15:36 - 21784584 _____ C:\Users\Lilia220982\Documents\DSC_7554.NEF

2013-12-11 12:29 - 2013-11-24 15:36 - 21698619 _____ C:\Users\Lilia220982\Documents\DSC_7556.NEF

2013-12-11 12:29 - 2013-11-24 15:36 - 21638845 _____ C:\Users\Lilia220982\Documents\DSC_7555.NEF

2013-12-11 12:29 - 2013-11-24 15:35 - 21968658 _____ C:\Users\Lilia220982\Documents\DSC_7547.NEF

2013-12-11 12:29 - 2013-11-24 15:35 - 21903523 _____ C:\Users\Lilia220982\Documents\DSC_7546.NEF

2013-12-11 12:29 - 2013-11-24 15:34 - 22340933 _____ C:\Users\Lilia220982\Documents\DSC_7541.NEF

2013-12-11 12:29 - 2013-11-24 15:34 - 22322387 _____ C:\Users\Lilia220982\Documents\DSC_7542.NEF

2013-12-11 12:29 - 2013-11-24 15:34 - 22290506 _____ C:\Users\Lilia220982\Documents\DSC_7539.NEF

2013-12-11 12:29 - 2013-11-24 15:34 - 22215463 _____ C:\Users\Lilia220982\Documents\DSC_7540.NEF

2013-12-11 12:29 - 2013-11-24 15:34 - 21633867 _____ C:\Users\Lilia220982\Documents\DSC_7543.NEF

2013-12-11 12:29 - 2013-11-24 15:34 - 21569173 _____ C:\Users\Lilia220982\Documents\DSC_7544.NEF

2013-12-11 12:29 - 2013-11-24 15:34 - 21531044 _____ C:\Users\Lilia220982\Documents\DSC_7545.NEF

2013-12-11 12:29 - 2013-11-24 15:33 - 23068345 _____ C:\Users\Lilia220982\Documents\DSC_7537.NEF

2013-12-11 12:29 - 2013-11-24 15:33 - 22862777 _____ C:\Users\Lilia220982\Documents\DSC_7538.NEF

2013-12-11 12:29 - 2013-11-24 15:33 - 22286964 _____ C:\Users\Lilia220982\Documents\DSC_7536.NEF

2013-12-11 12:29 - 2013-11-24 15:32 - 22014147 _____ C:\Users\Lilia220982\Documents\DSC_7529.NEF

2013-12-11 12:29 - 2013-11-24 15:32 - 21995812 _____ C:\Users\Lilia220982\Documents\DSC_7530.NEF

2013-12-11 12:29 - 2013-11-24 15:32 - 21730264 _____ C:\Users\Lilia220982\Documents\DSC_7531.NEF

2013-12-11 12:29 - 2013-11-24 15:32 - 21623299 _____ C:\Users\Lilia220982\Documents\DSC_7532.NEF

2013-12-11 12:29 - 2013-11-24 15:32 - 21535044 _____ C:\Users\Lilia220982\Documents\DSC_7533.NEF

2013-12-11 12:29 - 2013-11-24 15:32 - 21482223 _____ C:\Users\Lilia220982\Documents\DSC_7535.NEF

2013-12-11 12:29 - 2013-11-24 15:32 - 21416162 _____ C:\Users\Lilia220982\Documents\DSC_7534.NEF

2013-12-11 12:29 - 2013-11-24 15:30 - 22542782 _____ C:\Users\Lilia220982\Documents\DSC_7523.NEF

2013-12-11 12:29 - 2013-11-24 15:30 - 21836084 _____ C:\Users\Lilia220982\Documents\DSC_7526.NEF

2013-12-11 12:29 - 2013-11-24 15:30 - 21802908 _____ C:\Users\Lilia220982\Documents\DSC_7527.NEF

2013-12-11 12:29 - 2013-11-24 15:30 - 21784925 _____ C:\Users\Lilia220982\Documents\DSC_7525.NEF

2013-12-11 12:29 - 2013-11-24 15:30 - 21678820 _____ C:\Users\Lilia220982\Documents\DSC_7528.NEF

2013-12-11 12:29 - 2013-11-24 15:30 - 21576176 _____ C:\Users\Lilia220982\Documents\DSC_7524.NEF

2013-12-11 12:29 - 2013-11-24 15:29 - 22875225 _____ C:\Users\Lilia220982\Documents\DSC_7521.NEF

2013-12-11 12:29 - 2013-11-24 15:29 - 21705374 _____ C:\Users\Lilia220982\Documents\DSC_7520.NEF

2013-12-11 12:29 - 2013-11-24 15:29 - 21310183 _____ C:\Users\Lilia220982\Documents\DSC_7522.NEF

2013-12-11 12:29 - 2013-11-24 15:20 - 21336959 _____ C:\Users\Lilia220982\Documents\DSC_7505.NEF

2013-12-11 12:29 - 2013-11-24 15:20 - 21295394 _____ C:\Users\Lilia220982\Documents\DSC_7519.NEF

2013-12-11 12:29 - 2013-11-24 15:20 - 21244348 _____ C:\Users\Lilia220982\Documents\DSC_7517.NEF

2013-12-11 12:29 - 2013-11-24 15:20 - 21234551 _____ C:\Users\Lilia220982\Documents\DSC_7516.NEF

2013-12-11 12:29 - 2013-11-24 15:20 - 21204727 _____ C:\Users\Lilia220982\Documents\DSC_7515.NEF

2013-12-11 12:29 - 2013-11-24 15:20 - 21195952 _____ C:\Users\Lilia220982\Documents\DSC_7506.NEF

2013-12-11 12:29 - 2013-11-24 15:20 - 21182283 _____ C:\Users\Lilia220982\Documents\DSC_7508.NEF

2013-12-11 12:29 - 2013-11-24 15:20 - 21148230 _____ C:\Users\Lilia220982\Documents\DSC_7507.NEF

2013-12-11 12:29 - 2013-11-24 15:20 - 21101848 _____ C:\Users\Lilia220982\Documents\DSC_7510.NEF

2013-12-11 12:29 - 2013-11-24 15:20 - 21094067 _____ C:\Users\Lilia220982\Documents\DSC_7511.NEF

2013-12-11 12:29 - 2013-11-24 15:20 - 21081049 _____ C:\Users\Lilia220982\Documents\DSC_7513.NEF

2013-12-11 12:29 - 2013-11-24 15:20 - 21019579 _____ C:\Users\Lilia220982\Documents\DSC_7509.NEF

2013-12-11 12:29 - 2013-11-24 15:20 - 20590326 _____ C:\Users\Lilia220982\Documents\DSC_7514.NEF

2013-12-11 12:29 - 2013-11-24 15:20 - 20560093 _____ C:\Users\Lilia220982\Documents\DSC_7512.NEF

2013-12-11 12:29 - 2013-11-24 15:20 - 20481702 _____ C:\Users\Lilia220982\Documents\DSC_7518.NEF

2013-12-11 12:29 - 2013-11-24 15:19 - 21416956 _____ C:\Users\Lilia220982\Documents\DSC_7504.NEF

2013-12-11 12:29 - 2013-11-24 15:19 - 21298396 _____ C:\Users\Lilia220982\Documents\DSC_7503.NEF

2013-12-11 12:29 - 2013-11-24 15:19 - 21223869 _____ C:\Users\Lilia220982\Documents\DSC_7499.NEF

2013-12-11 12:29 - 2013-11-24 15:19 - 21216482 _____ C:\Users\Lilia220982\Documents\DSC_7502.NEF

2013-12-11 12:29 - 2013-11-24 15:19 - 21203128 _____ C:\Users\Lilia220982\Documents\DSC_7495.NEF

2013-12-11 12:29 - 2013-11-24 15:19 - 21173440 _____ C:\Users\Lilia220982\Documents\DSC_7498.NEF

2013-12-11 12:29 - 2013-11-24 15:19 - 21150786 _____ C:\Users\Lilia220982\Documents\DSC_7500.NEF

2013-12-11 12:29 - 2013-11-24 15:19 - 21131788 _____ C:\Users\Lilia220982\Documents\DSC_7496.NEF

2013-12-11 12:29 - 2013-11-24 15:19 - 21096829 _____ C:\Users\Lilia220982\Documents\DSC_7497.NEF

2013-12-11 12:29 - 2013-11-24 15:19 - 20051811 _____ C:\Users\Lilia220982\Documents\DSC_7501.NEF

2013-12-11 12:29 - 2013-11-24 15:18 - 23792543 _____ C:\Users\Lilia220982\Documents\DSC_7493.NEF

2013-12-11 12:29 - 2013-11-24 15:18 - 23585727 _____ C:\Users\Lilia220982\Documents\DSC_7494.NEF

2013-12-11 12:29 - 2013-11-24 15:18 - 22799251 _____ C:\Users\Lilia220982\Documents\DSC_7490.NEF

2013-12-11 12:29 - 2013-11-24 15:18 - 22316516 _____ C:\Users\Lilia220982\Documents\DSC_7491.NEF

2013-12-11 12:29 - 2013-11-24 15:18 - 22121511 _____ C:\Users\Lilia220982\Documents\DSC_7492.NEF

2013-12-11 12:29 - 2013-11-24 15:17 - 24655178 _____ C:\Users\Lilia220982\Documents\DSC_7488.NEF

2013-12-11 12:29 - 2013-11-24 15:17 - 24348872 _____ C:\Users\Lilia220982\Documents\DSC_7487.NEF

2013-12-11 12:29 - 2013-11-24 15:17 - 24318736 _____ C:\Users\Lilia220982\Documents\DSC_7489.NEF

2013-12-11 12:29 - 2013-11-24 15:16 - 22787841 _____ C:\Users\Lilia220982\Documents\DSC_7484.NEF

2013-12-11 12:29 - 2013-11-24 15:16 - 22730035 _____ C:\Users\Lilia220982\Documents\DSC_7483.NEF

2013-12-11 12:29 - 2013-11-24 15:16 - 22463728 _____ C:\Users\Lilia220982\Documents\DSC_7486.NEF

2013-12-11 12:29 - 2013-11-24 15:16 - 22446440 _____ C:\Users\Lilia220982\Documents\DSC_7485.NEF

2013-12-11 12:29 - 2013-11-24 15:16 - 22269561 _____ C:\Users\Lilia220982\Documents\DSC_7482.NEF

2013-12-11 12:29 - 2013-11-24 15:15 - 21346132 _____ C:\Users\Lilia220982\Documents\DSC_7474.NEF

2013-12-11 12:29 - 2013-11-24 15:15 - 21324079 _____ C:\Users\Lilia220982\Documents\DSC_7475.NEF

2013-12-11 12:29 - 2013-11-24 15:15 - 21197060 _____ C:\Users\Lilia220982\Documents\DSC_7476.NEF

2013-12-11 12:29 - 2013-11-24 15:15 - 21163712 _____ C:\Users\Lilia220982\Documents\DSC_7477.NEF

2013-12-11 12:29 - 2013-11-24 15:15 - 21087744 _____ C:\Users\Lilia220982\Documents\DSC_7478.NEF

2013-12-11 12:29 - 2013-11-24 15:15 - 21048674 _____ C:\Users\Lilia220982\Documents\DSC_7481.NEF

2013-12-11 12:29 - 2013-11-24 15:15 - 21047430 _____ C:\Users\Lilia220982\Documents\DSC_7479.NEF

2013-12-11 12:29 - 2013-11-24 15:15 - 20999969 _____ C:\Users\Lilia220982\Documents\DSC_7480.NEF

2013-12-11 12:28 - 2013-12-10 21:48 - 00006733 _____ C:\Users\Lilia220982\Documents\DSC_7462.xmp

2013-12-11 12:28 - 2013-12-10 21:48 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7472.xmp

2013-12-11 12:28 - 2013-12-10 21:34 - 00006826 _____ C:\Users\Lilia220982\Documents\DSC_7423.xmp

2013-12-11 12:28 - 2013-12-10 21:34 - 00006733 _____ C:\Users\Lilia220982\Documents\DSC_7439.xmp

2013-12-11 12:28 - 2013-12-10 21:34 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7451.xmp

2013-12-11 12:28 - 2013-12-10 21:04 - 00006733 _____ C:\Users\Lilia220982\Documents\DSC_7402.xmp

2013-12-11 12:28 - 2013-12-10 21:04 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7413.xmp

2013-12-11 12:28 - 2013-12-10 21:04 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7403.xmp

2013-12-11 12:28 - 2013-12-10 20:54 - 00006733 _____ C:\Users\Lilia220982\Documents\DSC_7385.xmp

2013-12-11 12:28 - 2013-12-10 20:54 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7389.xmp

2013-12-11 12:28 - 2013-12-10 20:23 - 00006741 _____ C:\Users\Lilia220982\Documents\DSC_7421.xmp

2013-12-11 12:28 - 2013-12-10 20:23 - 00006741 _____ C:\Users\Lilia220982\Documents\DSC_7420.xmp

2013-12-11 12:28 - 2013-12-10 20:23 - 00006740 _____ C:\Users\Lilia220982\Documents\DSC_7422.xmp

2013-12-11 12:28 - 2013-11-24 15:14 - 21497843 _____ C:\Users\Lilia220982\Documents\DSC_7471.NEF

2013-12-11 12:28 - 2013-11-24 15:14 - 21460021 _____ C:\Users\Lilia220982\Documents\DSC_7463.NEF

2013-12-11 12:28 - 2013-11-24 15:14 - 21446671 _____ C:\Users\Lilia220982\Documents\DSC_7464.NEF

2013-12-11 12:28 - 2013-11-24 15:14 - 21394027 _____ C:\Users\Lilia220982\Documents\DSC_7465.NEF

2013-12-11 12:28 - 2013-11-24 15:14 - 21340966 _____ C:\Users\Lilia220982\Documents\DSC_7469.NEF

2013-12-11 12:28 - 2013-11-24 15:14 - 21323368 _____ C:\Users\Lilia220982\Documents\DSC_7470.NEF

2013-12-11 12:28 - 2013-11-24 15:14 - 21143505 _____ C:\Users\Lilia220982\Documents\DSC_7466.NEF

2013-12-11 12:28 - 2013-11-24 15:14 - 21131960 _____ C:\Users\Lilia220982\Documents\DSC_7472.NEF

2013-12-11 12:28 - 2013-11-24 15:14 - 21117300 _____ C:\Users\Lilia220982\Documents\DSC_7473.NEF

2013-12-11 12:28 - 2013-11-24 15:14 - 21067892 _____ C:\Users\Lilia220982\Documents\DSC_7468.NEF

2013-12-11 12:28 - 2013-11-24 15:14 - 20654662 _____ C:\Users\Lilia220982\Documents\DSC_7467.NEF

2013-12-11 12:28 - 2013-11-24 15:13 - 21777542 _____ C:\Users\Lilia220982\Documents\DSC_7461.NEF

2013-12-11 12:28 - 2013-11-24 15:13 - 21631454 _____ C:\Users\Lilia220982\Documents\DSC_7454.NEF

2013-12-11 12:28 - 2013-11-24 15:13 - 21562143 _____ C:\Users\Lilia220982\Documents\DSC_7462.NEF

2013-12-11 12:28 - 2013-11-24 15:13 - 21379767 _____ C:\Users\Lilia220982\Documents\DSC_7458.NEF

2013-12-11 12:28 - 2013-11-24 15:13 - 21312073 _____ C:\Users\Lilia220982\Documents\DSC_7460.NEF

2013-12-11 12:28 - 2013-11-24 15:13 - 21288746 _____ C:\Users\Lilia220982\Documents\DSC_7455.NEF

2013-12-11 12:28 - 2013-11-24 15:13 - 21228059 _____ C:\Users\Lilia220982\Documents\DSC_7457.NEF

2013-12-11 12:28 - 2013-11-24 15:13 - 21088834 _____ C:\Users\Lilia220982\Documents\DSC_7453.NEF

2013-12-11 12:28 - 2013-11-24 15:13 - 21077963 _____ C:\Users\Lilia220982\Documents\DSC_7456.NEF

2013-12-11 12:28 - 2013-11-24 15:13 - 20962085 _____ C:\Users\Lilia220982\Documents\DSC_7459.NEF

2013-12-11 12:28 - 2013-11-24 15:12 - 20733992 _____ C:\Users\Lilia220982\Documents\DSC_7448.NEF

2013-12-11 12:28 - 2013-11-24 15:12 - 20728945 _____ C:\Users\Lilia220982\Documents\DSC_7447.NEF

2013-12-11 12:28 - 2013-11-24 15:12 - 20655395 _____ C:\Users\Lilia220982\Documents\DSC_7452.NEF

2013-12-11 12:28 - 2013-11-24 15:12 - 20612182 _____ C:\Users\Lilia220982\Documents\DSC_7449.NEF

2013-12-11 12:28 - 2013-11-24 15:12 - 20590216 _____ C:\Users\Lilia220982\Documents\DSC_7446.NEF

2013-12-11 12:28 - 2013-11-24 15:12 - 20589777 _____ C:\Users\Lilia220982\Documents\DSC_7450.NEF

2013-12-11 12:28 - 2013-11-24 15:12 - 20554434 _____ C:\Users\Lilia220982\Documents\DSC_7445.NEF

2013-12-11 12:28 - 2013-11-24 15:12 - 20541110 _____ C:\Users\Lilia220982\Documents\DSC_7451.NEF

2013-12-11 12:28 - 2013-11-24 15:11 - 21183172 _____ C:\Users\Lilia220982\Documents\DSC_7433.NEF

2013-12-11 12:28 - 2013-11-24 15:11 - 21179096 _____ C:\Users\Lilia220982\Documents\DSC_7432.NEF

2013-12-11 12:28 - 2013-11-24 15:11 - 21039180 _____ C:\Users\Lilia220982\Documents\DSC_7431.NEF

2013-12-11 12:28 - 2013-11-24 15:11 - 21009433 _____ C:\Users\Lilia220982\Documents\DSC_7434.NEF

2013-12-11 12:28 - 2013-11-24 15:11 - 20998969 _____ C:\Users\Lilia220982\Documents\DSC_7430.NEF

2013-12-11 12:28 - 2013-11-24 15:11 - 20974387 _____ C:\Users\Lilia220982\Documents\DSC_7441.NEF

2013-12-11 12:28 - 2013-11-24 15:11 - 20970241 _____ C:\Users\Lilia220982\Documents\DSC_7439.NEF

2013-12-11 12:28 - 2013-11-24 15:11 - 20966724 _____ C:\Users\Lilia220982\Documents\DSC_7438.NEF

2013-12-11 12:28 - 2013-11-24 15:11 - 20663089 _____ C:\Users\Lilia220982\Documents\DSC_7444.NEF

2013-12-11 12:28 - 2013-11-24 15:11 - 20644040 _____ C:\Users\Lilia220982\Documents\DSC_7440.NEF

2013-12-11 12:28 - 2013-11-24 15:11 - 20642688 _____ C:\Users\Lilia220982\Documents\DSC_7437.NEF

2013-12-11 12:28 - 2013-11-24 15:11 - 20616258 _____ C:\Users\Lilia220982\Documents\DSC_7435.NEF

2013-12-11 12:28 - 2013-11-24 15:11 - 20606319 _____ C:\Users\Lilia220982\Documents\DSC_7436.NEF

2013-12-11 12:28 - 2013-11-24 15:11 - 20538784 _____ C:\Users\Lilia220982\Documents\DSC_7442.NEF

2013-12-11 12:28 - 2013-11-24 15:11 - 20501957 _____ C:\Users\Lilia220982\Documents\DSC_7443.NEF

2013-12-11 12:28 - 2013-11-24 15:10 - 20854905 _____ C:\Users\Lilia220982\Documents\DSC_7419.NEF

2013-12-11 12:28 - 2013-11-24 15:10 - 20847637 _____ C:\Users\Lilia220982\Documents\DSC_7422.NEF

2013-12-11 12:28 - 2013-11-24 15:10 - 20780747 _____ C:\Users\Lilia220982\Documents\DSC_7425.NEF

2013-12-11 12:28 - 2013-11-24 15:10 - 20754471 _____ C:\Users\Lilia220982\Documents\DSC_7421.NEF

2013-12-11 12:28 - 2013-11-24 15:10 - 20739595 _____ C:\Users\Lilia220982\Documents\DSC_7420.NEF

2013-12-11 12:28 - 2013-11-24 15:10 - 20718686 _____ C:\Users\Lilia220982\Documents\DSC_7418.NEF

2013-12-11 12:28 - 2013-11-24 15:10 - 20717016 _____ C:\Users\Lilia220982\Documents\DSC_7429.NEF

2013-12-11 12:28 - 2013-11-24 15:10 - 20652934 _____ C:\Users\Lilia220982\Documents\DSC_7426.NEF

2013-12-11 12:28 - 2013-11-24 15:10 - 20633222 _____ C:\Users\Lilia220982\Documents\DSC_7428.NEF

2013-12-11 12:28 - 2013-11-24 15:10 - 20317174 _____ C:\Users\Lilia220982\Documents\DSC_7424.NEF

2013-12-11 12:28 - 2013-11-24 15:10 - 20292224 _____ C:\Users\Lilia220982\Documents\DSC_7423.NEF

2013-12-11 12:28 - 2013-11-24 15:10 - 20065019 _____ C:\Users\Lilia220982\Documents\DSC_7427.NEF

2013-12-11 12:28 - 2013-11-24 15:09 - 21045333 _____ C:\Users\Lilia220982\Documents\DSC_7414.NEF

2013-12-11 12:28 - 2013-11-24 15:09 - 21036424 _____ C:\Users\Lilia220982\Documents\DSC_7412.NEF

2013-12-11 12:28 - 2013-11-24 15:09 - 21017918 _____ C:\Users\Lilia220982\Documents\DSC_7411.NEF

2013-12-11 12:28 - 2013-11-24 15:09 - 20992504 _____ C:\Users\Lilia220982\Documents\DSC_7413.NEF

2013-12-11 12:28 - 2013-11-24 15:09 - 20721724 _____ C:\Users\Lilia220982\Documents\DSC_7417.NEF

2013-12-11 12:28 - 2013-11-24 15:09 - 20708609 _____ C:\Users\Lilia220982\Documents\DSC_7416.NEF

2013-12-11 12:28 - 2013-11-24 15:09 - 20095742 _____ C:\Users\Lilia220982\Documents\DSC_7415.NEF

2013-12-11 12:28 - 2013-11-24 15:08 - 21185091 _____ C:\Users\Lilia220982\Documents\DSC_7404.NEF

2013-12-11 12:28 - 2013-11-24 15:08 - 21175515 _____ C:\Users\Lilia220982\Documents\DSC_7405.NEF

2013-12-11 12:28 - 2013-11-24 15:08 - 21096162 _____ C:\Users\Lilia220982\Documents\DSC_7407.NEF

2013-12-11 12:28 - 2013-11-24 15:08 - 21007209 _____ C:\Users\Lilia220982\Documents\DSC_7406.NEF

2013-12-11 12:28 - 2013-11-24 15:08 - 20987079 _____ C:\Users\Lilia220982\Documents\DSC_7409.NEF

2013-12-11 12:28 - 2013-11-24 15:08 - 20919609 _____ C:\Users\Lilia220982\Documents\DSC_7410.NEF

2013-12-11 12:28 - 2013-11-24 15:08 - 20178642 _____ C:\Users\Lilia220982\Documents\DSC_7408.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 21734254 _____ C:\Users\Lilia220982\Documents\DSC_7398.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 21722919 _____ C:\Users\Lilia220982\Documents\DSC_7401.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 21706159 _____ C:\Users\Lilia220982\Documents\DSC_7387.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 21702838 _____ C:\Users\Lilia220982\Documents\DSC_7403.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 21408493 _____ C:\Users\Lilia220982\Documents\DSC_7399.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 21399885 _____ C:\Users\Lilia220982\Documents\DSC_7397.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 20651089 _____ C:\Users\Lilia220982\Documents\DSC_7400.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 20608418 _____ C:\Users\Lilia220982\Documents\DSC_7393.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 20597335 _____ C:\Users\Lilia220982\Documents\DSC_7396.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 20584347 _____ C:\Users\Lilia220982\Documents\DSC_7392.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 20529511 _____ C:\Users\Lilia220982\Documents\DSC_7402.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 20524161 _____ C:\Users\Lilia220982\Documents\DSC_7391.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 20504204 _____ C:\Users\Lilia220982\Documents\DSC_7390.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 20502823 _____ C:\Users\Lilia220982\Documents\DSC_7385.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 20461452 _____ C:\Users\Lilia220982\Documents\DSC_7384.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 20458696 _____ C:\Users\Lilia220982\Documents\DSC_7386.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 20418163 _____ C:\Users\Lilia220982\Documents\DSC_7394.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 20361442 _____ C:\Users\Lilia220982\Documents\DSC_7395.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 20361317 _____ C:\Users\Lilia220982\Documents\DSC_7389.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 20324331 _____ C:\Users\Lilia220982\Documents\DSC_7388.NEF

2013-12-11 12:27 - 2013-11-24 15:04 - 20496084 _____ C:\Users\Lilia220982\Documents\DSC_7380.NEF

2013-12-11 12:27 - 2013-11-24 15:04 - 20461415 _____ C:\Users\Lilia220982\Documents\DSC_7383.NEF

2013-12-11 12:27 - 2013-11-24 15:04 - 20429075 _____ C:\Users\Lilia220982\Documents\DSC_7381.NEF

2013-12-11 12:27 - 2013-11-24 15:04 - 20370069 _____ C:\Users\Lilia220982\Documents\DSC_7382.NEF

2013-12-11 12:27 - 2013-11-24 15:03 - 21209584 _____ C:\Users\Lilia220982\Documents\DSC_7375.NEF

2013-12-11 12:27 - 2013-11-24 15:03 - 20919598 _____ C:\Users\Lilia220982\Documents\DSC_7377.NEF

2013-12-11 12:27 - 2013-11-24 15:03 - 20858560 _____ C:\Users\Lilia220982\Documents\DSC_7374.NEF

2013-12-11 12:27 - 2013-11-24 15:03 - 20747658 _____ C:\Users\Lilia220982\Documents\DSC_7373.NEF

2013-12-11 12:27 - 2013-11-24 15:03 - 20699349 _____ C:\Users\Lilia220982\Documents\DSC_7372.NEF

2013-12-11 12:27 - 2013-11-24 15:03 - 20646783 _____ C:\Users\Lilia220982\Documents\DSC_7371.NEF

2013-12-11 12:27 - 2013-11-24 15:03 - 20490057 _____ C:\Users\Lilia220982\Documents\DSC_7376.NEF

2013-12-11 12:27 - 2013-11-24 15:03 - 20005728 _____ C:\Users\Lilia220982\Documents\DSC_7379.NEF

2013-12-11 12:27 - 2013-11-24 15:03 - 19991129 _____ C:\Users\Lilia220982\Documents\DSC_7378.NEF

2013-12-04 19:48 - 2013-12-04 19:48 - 00000000 ____D C:\ProgramData\YoutubeAdblocker

2013-12-04 19:48 - 2013-12-04 19:48 - 00000000 ____D C:\Program Files (x86)\YoutubeAdblocker

2013-12-04 19:47 - 2013-12-04 19:48 - 00000000 ____D C:\ProgramData\a241d15d344a9c13

2013-12-04 19:47 - 2013-12-04 19:47 - 00000000 ____D C:\ProgramData\suerF aNNd Keep

2013-12-04 19:47 - 2013-12-04 19:47 - 00000000 ____D C:\Program Files (x86)\suerF aNNd Keep

2013-12-04 19:35 - 2013-12-04 19:35 - 00000000 ____D C:\Program Files\Alien Skin

2013-12-04 01:45 - 2013-12-04 01:45 - 00000000 ____D C:\Windows\SysWOW64\64

2013-12-04 01:45 - 2013-12-04 01:45 - 00000000 ____D C:\Windows\SysWOW64\32

2013-12-04 01:45 - 2013-12-04 01:45 - 00000000 ____D C:\Windows\system32\64

2013-12-04 01:45 - 2013-12-04 01:45 - 00000000 ____D C:\Windows\system32\32

2013-12-04 01:00 - 2013-12-04 01:01 - 00000000 ____D C:\Users\Lilia220982\Downloads\AlienSkin Software

2013-12-04 00:59 - 2013-12-04 00:59 - 00061405 _____ C:\Users\Lilia220982\Downloads\[rutracker.org].t3969653 (2).torrent

2013-12-04 00:55 - 2013-12-04 00:56 - 00061405 _____ C:\Users\Lilia220982\Downloads\[rutracker.org].t3969653 (1).torrent

2013-12-03 20:00 - 2013-12-03 20:09 - 103935608 _____ (Alien Skin Software, LLC) C:\Users\Lilia220982\Downloads\exposure-5.0.0.703.exe

2013-12-03 19:55 - 2013-12-03 19:55 - 00000023 _____ C:\Users\Lilia220982\Downloads\Pass for Alien Skin Exposure 5.txt

2013-12-03 19:04 - 2013-12-03 19:04 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\WinRAR

2013-12-03 19:04 - 2013-12-03 19:04 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

2013-12-03 19:04 - 2013-12-03 19:04 - 00000000 ____D C:\Program Files\WinRAR

2013-12-03 19:04 - 2013-10-17 01:55 - 00000509 _____ C:\Users\Lilia220982\Desktop\First Read Me , Password here !!.txt

2013-12-03 19:03 - 2013-12-03 19:04 - 01814608 _____ C:\Users\Lilia220982\Downloads\wrar501ar.exe

2013-12-03 19:03 - 2013-12-03 19:03 - 02074056 _____ C:\Users\Lilia220982\Downloads\winrar-x64-500d.exe

2013-12-03 18:41 - 2013-12-03 18:51 - 00001049 _____ C:\Users\Lilia220982\Desktop\Free Zip Opener.lnk

2013-12-03 18:41 - 2013-12-03 18:51 - 00000000 ____D C:\Program Files (x86)\Free Zip Opener

2013-12-03 18:41 - 2013-12-03 18:41 - 00000000 ____D C:\Users\UpdatusUser\AppData\Local\Free Zip Opener

2013-12-03 18:41 - 2013-12-03 18:41 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Zip Opener

2013-12-03 18:41 - 2013-12-03 18:41 - 00000000 ____D C:\Users\Lilia220982\AppData\Local\Free Zip Opener

2013-12-03 18:40 - 2013-12-03 18:41 - 02057080 _____ C:\Users\Lilia220982\Downloads\FreeZipOpener_Install.exe

2013-12-03 16:37 - 2013-12-04 19:35 - 00001073 _____ C:\Users\Lilia220982\Desktop\Exposure 5.lnk

2013-11-27 22:54 - 2013-11-27 22:54 - 00000000 ____D C:\ProgramData\QuickSet

2013-11-27 22:51 - 2013-12-04 19:46 - 00000000 ____D C:\ProgramData\InstallMate

2013-11-26 22:07 - 2013-11-26 22:07 - 00411944 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\mfencbdc.sys

2013-11-26 22:07 - 2013-11-26 22:07 - 00096112 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\mfencrk.sys

2013-11-26 22:07 - 2013-11-26 22:07 - 00010856 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\mfeclnrk.sys

2013-11-19 18:43 - 2013-11-19 18:43 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1

2013-11-17 22:13 - 2013-12-04 00:00 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\Alien Skin

2013-11-17 22:13 - 2013-12-03 23:26 - 00000000 ____D C:\Users\Lilia220982\AppData\Local\Alien Skin

2013-11-17 22:13 - 2013-11-17 22:13 - 00000000 ____D C:\Users\Lilia220982\.AS

2013-11-17 22:11 - 2013-11-17 22:11 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Alien Skin Software

2013-11-17 22:10 - 2013-12-03 23:27 - 00000000 ____D C:\ProgramData\Alien Skin

2013-11-17 22:10 - 2013-12-03 23:25 - 00000000 ____D C:\Program Files (x86)\Alien Skin
 

==================== One Month Modified Files and Folders =======
 

2013-12-15 22:06 - 2013-12-15 22:05 - 00019577 _____ C:\Users\Lilia220982\Downloads\FRST.txt

2013-12-15 22:05 - 2013-12-15 22:05 - 00000000 ____D C:\FRST

2013-12-15 22:04 - 2013-12-15 22:03 - 01927796 _____ (Farbar) C:\Users\Lilia220982\Downloads\FRST64.exe

2013-12-15 22:04 - 2013-11-11 17:15 - 00443392 ___SH C:\Users\Lilia220982\Downloads\Thumbs.db

2013-12-15 22:01 - 2013-12-15 22:01 - 00351124 _____ C:\Users\Lilia220982\AppData\Local\mysearchdial-speeddial.crx

2013-12-15 22:01 - 2013-12-15 22:01 - 00002656 _____ C:\Windows\System32\Tasks\MySearchDial

2013-12-15 22:01 - 2013-12-15 22:01 - 00000322 _____ C:\Windows\Tasks\MySearchDial.job

2013-12-15 22:01 - 2013-12-15 22:01 - 00000000 ____D C:\Users\Lilia220982\Mysearchdial

2013-12-15 22:01 - 2013-12-15 22:01 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\mysearchdial

2013-12-15 22:01 - 2013-10-29 18:07 - 00000000 ____D C:\Users\Lilia220982

2013-12-15 22:00 - 2013-12-15 22:00 - 00000963 _____ C:\Users\UpdatusUser\Desktop\MiPony.lnk

2013-12-15 22:00 - 2013-12-15 22:00 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MiPony

2013-12-15 22:00 - 2013-12-15 22:00 - 00000000 ____D C:\Program Files (x86)\MiPony

2013-12-15 21:58 - 2013-10-29 18:25 - 00000000 ____D C:\Users\Lilia220982\AppData\Local\CrashDumps

2013-12-15 21:57 - 2013-12-15 21:57 - 00673080 _____ (                                                            ) C:\Users\Lilia220982\Downloads\DownloadAcceleratorSetup.exe

2013-12-15 21:37 - 2013-11-05 12:19 - 00001132 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-12-15 21:00 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\sru

2013-12-15 19:37 - 2013-11-05 12:19 - 00001128 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-12-15 19:32 - 2012-07-26 08:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-12-15 19:19 - 2013-10-29 22:55 - 00000000 ____D C:\Program Files (x86)\McAfee

2013-12-15 19:19 - 2013-04-18 03:46 - 00154374 _____ C:\Windows\PFRO.log

2013-12-15 14:20 - 2013-10-29 18:25 - 00000000 ____D C:\Users\Lilia220982\AppData\Local\Adobe

2013-12-14 22:20 - 2013-04-18 05:36 - 00000000 ____D C:\Program Files\Common Files\mcafee

2013-12-14 10:00 - 2013-12-13 23:25 - 00854016 ___SH C:\Users\Lilia220982\Documents\Thumbs.db

2013-12-14 09:52 - 2013-08-15 20:36 - 00753134 _____ C:\Windows\system32\perfh007.dat

2013-12-14 09:52 - 2013-08-15 20:36 - 00155826 _____ C:\Windows\system32\perfc007.dat

2013-12-14 09:52 - 2012-07-26 08:28 - 01745416 _____ C:\Windows\system32\PerfStringBackup.INI

2013-12-14 09:51 - 2012-07-26 08:21 - 00030042 _____ C:\Windows\setupact.log

2013-12-14 09:13 - 2013-10-29 18:15 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1065350271-2814899295-3722501385-1002

2013-12-14 08:36 - 2013-12-14 08:36 - 05087072 _____ C:\Windows\system32\FNTCACHE.DAT

2013-12-14 08:34 - 2013-08-15 10:58 - 01632366 _____ C:\Windows\WindowsUpdate.log

2013-12-13 23:41 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\NDF

2013-12-13 23:38 - 2013-12-13 23:38 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\EZDownloader

2013-12-13 18:43 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\rescache

2013-12-13 18:08 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\SecureBootUpdates

2013-12-13 10:18 - 2013-10-29 20:04 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-12-13 10:16 - 2012-07-26 06:38 - 00000000 ____D C:\Windows\system32\oobe

2013-12-13 10:09 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\AUInstallAgent

2013-12-13 00:17 - 2012-07-26 06:26 - 00262144 ___SH C:\Windows\system32\config\ELAM

2013-12-11 00:01 - 2013-12-11 12:31 - 00006733 _____ C:\Users\Lilia220982\Documents\DSC_7642.xmp

2013-12-11 00:01 - 2013-12-11 12:31 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7671.xmp

2013-12-11 00:01 - 2013-12-11 12:31 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7656.xmp

2013-12-11 00:01 - 2013-12-11 12:31 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7653.xmp

2013-12-11 00:01 - 2013-12-11 12:31 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7650.xmp

2013-12-11 00:01 - 2013-12-11 12:31 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7649.xmp

2013-12-10 23:41 - 2013-12-11 12:30 - 00006733 _____ C:\Users\Lilia220982\Documents\DSC_7608.xmp

2013-12-10 23:41 - 2013-12-11 12:30 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7631.xmp

2013-12-10 23:41 - 2013-12-11 12:30 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7630.xmp

2013-12-10 23:41 - 2013-12-11 12:30 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7624.xmp

2013-12-10 23:41 - 2013-12-11 12:30 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7621.xmp

2013-12-10 23:41 - 2013-12-11 12:30 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7618.xmp

2013-12-10 23:41 - 2013-12-11 12:30 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7610.xmp

2013-12-10 23:41 - 2013-12-11 12:30 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7609.xmp

2013-12-10 23:21 - 2013-12-11 12:30 - 00006734 _____ C:\Users\Lilia220982\Documents\DSC_7591.xmp

2013-12-10 23:21 - 2013-12-11 12:30 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7592.xmp

2013-12-10 23:21 - 2013-12-11 12:30 - 00006684 _____ C:\Users\Lilia220982\Documents\DSC_7598.xmp

2013-12-10 23:05 - 2013-12-11 12:30 - 00006733 _____ C:\Users\Lilia220982\Documents\DSC_7561.xmp

2013-12-10 23:05 - 2013-12-11 12:30 - 00006691 _____ C:\Users\Lilia220982\Documents\DSC_7564.xmp

2013-12-10 23:05 - 2013-12-11 12:30 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7577.xmp

2013-12-10 23:05 - 2013-12-11 12:30 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7573.xmp

2013-12-10 23:05 - 2013-12-11 12:30 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7567.xmp

2013-12-10 22:53 - 2013-12-11 12:30 - 00006691 _____ C:\Users\Lilia220982\Documents\DSC_7558.xmp

2013-12-10 22:53 - 2013-12-11 12:29 - 00006731 _____ C:\Users\Lilia220982\Documents\DSC_7546.xmp

2013-12-10 22:53 - 2013-12-11 12:29 - 00006688 _____ C:\Users\Lilia220982\Documents\DSC_7553.xmp

2013-12-10 22:33 - 2013-12-11 12:29 - 00006732 _____ C:\Users\Lilia220982\Documents\DSC_7527.xmp

2013-12-10 22:33 - 2013-12-11 12:29 - 00006689 _____ C:\Users\Lilia220982\Documents\DSC_7532.xmp

2013-12-10 22:33 - 2013-12-11 12:29 - 00006689 _____ C:\Users\Lilia220982\Documents\DSC_7529.xmp

2013-12-10 22:33 - 2013-12-11 12:29 - 00006688 _____ C:\Users\Lilia220982\Documents\DSC_7545.xmp

2013-12-10 22:19 - 2013-12-11 12:29 - 00006724 _____ C:\Users\Lilia220982\Documents\DSC_7492.xmp

2013-12-10 22:19 - 2013-12-11 12:29 - 00006686 _____ C:\Users\Lilia220982\Documents\DSC_7510.xmp

2013-12-10 22:19 - 2013-12-11 12:29 - 00006686 _____ C:\Users\Lilia220982\Documents\DSC_7504.xmp

2013-12-10 22:19 - 2013-12-11 12:29 - 00006686 _____ C:\Users\Lilia220982\Documents\DSC_7499.xmp

2013-12-10 22:19 - 2013-12-11 12:29 - 00006681 _____ C:\Users\Lilia220982\Documents\DSC_7493.xmp

2013-12-10 22:09 - 2013-12-11 12:29 - 00006733 _____ C:\Users\Lilia220982\Documents\DSC_7483.xmp

2013-12-10 22:09 - 2013-12-11 12:29 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7486.xmp

2013-12-10 21:48 - 2013-12-11 12:29 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7479.xmp

2013-12-10 21:48 - 2013-12-11 12:28 - 00006733 _____ C:\Users\Lilia220982\Documents\DSC_7462.xmp

2013-12-10 21:48 - 2013-12-11 12:28 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7472.xmp

2013-12-10 21:34 - 2013-12-11 12:28 - 00006826 _____ C:\Users\Lilia220982\Documents\DSC_7423.xmp

2013-12-10 21:34 - 2013-12-11 12:28 - 00006733 _____ C:\Users\Lilia220982\Documents\DSC_7439.xmp

2013-12-10 21:34 - 2013-12-11 12:28 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7451.xmp

2013-12-10 21:04 - 2013-12-11 12:28 - 00006733 _____ C:\Users\Lilia220982\Documents\DSC_7402.xmp

2013-12-10 21:04 - 2013-12-11 12:28 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7413.xmp

2013-12-10 21:04 - 2013-12-11 12:28 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7403.xmp

2013-12-10 20:54 - 2013-12-11 12:28 - 00006733 _____ C:\Users\Lilia220982\Documents\DSC_7385.xmp

2013-12-10 20:54 - 2013-12-11 12:28 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7389.xmp

2013-12-10 20:23 - 2013-12-11 12:28 - 00006741 _____ C:\Users\Lilia220982\Documents\DSC_7421.xmp

2013-12-10 20:23 - 2013-12-11 12:28 - 00006741 _____ C:\Users\Lilia220982\Documents\DSC_7420.xmp

2013-12-10 20:23 - 2013-12-11 12:28 - 00006740 _____ C:\Users\Lilia220982\Documents\DSC_7422.xmp

2013-12-09 13:34 - 2012-07-26 06:26 - 00262144 ___SH C:\Windows\system32\config\BBI

2013-12-06 23:17 - 2012-07-26 09:12 - 00000000 ___HD C:\Windows\ELAMBKUP

2013-12-06 19:32 - 2013-11-05 12:19 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2013-12-06 19:32 - 2013-11-05 12:19 - 00003868 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2013-12-05 10:34 - 2013-11-05 12:26 - 00002139 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2013-12-04 19:48 - 2013-12-04 19:48 - 00000000 ____D C:\ProgramData\YoutubeAdblocker

2013-12-04 19:48 - 2013-12-04 19:48 - 00000000 ____D C:\Program Files (x86)\YoutubeAdblocker

2013-12-04 19:48 - 2013-12-04 19:47 - 00000000 ____D C:\ProgramData\a241d15d344a9c13

2013-12-04 19:47 - 2013-12-04 19:47 - 00000000 ____D C:\ProgramData\suerF aNNd Keep

2013-12-04 19:47 - 2013-12-04 19:47 - 00000000 ____D C:\Program Files (x86)\suerF aNNd Keep

2013-12-04 19:46 - 2013-11-27 22:51 - 00000000 ____D C:\ProgramData\InstallMate

2013-12-04 19:35 - 2013-12-04 19:35 - 00000000 ____D C:\Program Files\Alien Skin

2013-12-04 19:35 - 2013-12-03 16:37 - 00001073 _____ C:\Users\Lilia220982\Desktop\Exposure 5.lnk

2013-12-04 01:53 - 2013-11-13 21:23 - 00694240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-12-04 01:53 - 2013-11-13 21:23 - 00078304 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-12-04 01:50 - 2013-10-30 17:06 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\uTorrent

2013-12-04 01:45 - 2013-12-04 01:45 - 00000000 ____D C:\Windows\SysWOW64\64

2013-12-04 01:45 - 2013-12-04 01:45 - 00000000 ____D C:\Windows\SysWOW64\32

2013-12-04 01:45 - 2013-12-04 01:45 - 00000000 ____D C:\Windows\system32\64

2013-12-04 01:45 - 2013-12-04 01:45 - 00000000 ____D C:\Windows\system32\32

2013-12-04 01:42 - 2013-10-29 16:58 - 00000000 ____D C:\Program Files\Adobe

2013-12-04 01:01 - 2013-12-04 01:00 - 00000000 ____D C:\Users\Lilia220982\Downloads\AlienSkin Software

2013-12-04 00:59 - 2013-12-04 00:59 - 00061405 _____ C:\Users\Lilia220982\Downloads\[rutracker.org].t3969653 (2).torrent

2013-12-04 00:56 - 2013-12-04 00:55 - 00061405 _____ C:\Users\Lilia220982\Downloads\[rutracker.org].t3969653 (1).torrent

2013-12-04 00:00 - 2013-11-17 22:13 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\Alien Skin

2013-12-03 23:27 - 2013-11-17 22:10 - 00000000 ____D C:\ProgramData\Alien Skin

2013-12-03 23:26 - 2013-11-17 22:13 - 00000000 ____D C:\Users\Lilia220982\AppData\Local\Alien Skin

2013-12-03 23:25 - 2013-11-17 22:10 - 00000000 ____D C:\Program Files (x86)\Alien Skin

2013-12-03 21:20 - 2013-10-30 23:08 - 00061405 _____ C:\Users\Lilia220982\Downloads\[rutracker.org].t3969653.torrent

2013-12-03 20:09 - 2013-12-03 20:00 - 103935608 _____ (Alien Skin Software, LLC) C:\Users\Lilia220982\Downloads\exposure-5.0.0.703.exe

2013-12-03 19:55 - 2013-12-03 19:55 - 00000023 _____ C:\Users\Lilia220982\Downloads\Pass for Alien Skin Exposure 5.txt

2013-12-03 19:04 - 2013-12-03 19:04 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\WinRAR

2013-12-03 19:04 - 2013-12-03 19:04 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

2013-12-03 19:04 - 2013-12-03 19:04 - 00000000 ____D C:\Program Files\WinRAR

2013-12-03 19:04 - 2013-12-03 19:03 - 01814608 _____ C:\Users\Lilia220982\Downloads\wrar501ar.exe

2013-12-03 19:03 - 2013-12-03 19:03 - 02074056 _____ C:\Users\Lilia220982\Downloads\winrar-x64-500d.exe

2013-12-03 18:51 - 2013-12-03 18:41 - 00001049 _____ C:\Users\Lilia220982\Desktop\Free Zip Opener.lnk

2013-12-03 18:51 - 2013-12-03 18:41 - 00000000 ____D C:\Program Files (x86)\Free Zip Opener

2013-12-03 18:41 - 2013-12-03 18:41 - 00000000 ____D C:\Users\UpdatusUser\AppData\Local\Free Zip Opener

2013-12-03 18:41 - 2013-12-03 18:41 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Zip Opener

2013-12-03 18:41 - 2013-12-03 18:41 - 00000000 ____D C:\Users\Lilia220982\AppData\Local\Free Zip Opener

2013-12-03 18:41 - 2013-12-03 18:40 - 02057080 _____ C:\Users\Lilia220982\Downloads\FreeZipOpener_Install.exe

2013-12-03 16:10 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\Resources

2013-11-27 22:54 - 2013-11-27 22:54 - 00000000 ____D C:\ProgramData\QuickSet

2013-11-26 22:07 - 2013-11-26 22:07 - 00411944 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\mfencbdc.sys

2013-11-26 22:07 - 2013-11-26 22:07 - 00096112 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\mfencrk.sys

2013-11-26 22:07 - 2013-11-26 22:07 - 00010856 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\mfeclnrk.sys

2013-11-24 16:03 - 2013-12-11 12:31 - 20918831 _____ C:\Users\Lilia220982\Documents\DSC_7675.NEF

2013-11-24 16:03 - 2013-12-11 12:31 - 20797938 _____ C:\Users\Lilia220982\Documents\DSC_7676.NEF

2013-11-24 16:02 - 2013-12-11 12:31 - 21243562 _____ C:\Users\Lilia220982\Documents\DSC_7673.NEF

2013-11-24 16:02 - 2013-12-11 12:31 - 21050357 _____ C:\Users\Lilia220982\Documents\DSC_7674.NEF

2013-11-24 16:02 - 2013-12-11 12:31 - 20894698 _____ C:\Users\Lilia220982\Documents\DSC_7669.NEF

2013-11-24 16:02 - 2013-12-11 12:31 - 20877156 _____ C:\Users\Lilia220982\Documents\DSC_7667.NEF

2013-11-24 16:02 - 2013-12-11 12:31 - 20808617 _____ C:\Users\Lilia220982\Documents\DSC_7668.NEF

2013-11-24 16:02 - 2013-12-11 12:31 - 20734360 _____ C:\Users\Lilia220982\Documents\DSC_7670.NEF

2013-11-24 16:02 - 2013-12-11 12:31 - 20544495 _____ C:\Users\Lilia220982\Documents\DSC_7671.NEF

2013-11-24 16:02 - 2013-12-11 12:31 - 18966280 _____ C:\Users\Lilia220982\Documents\DSC_7672.NEF

2013-11-24 16:01 - 2013-12-11 12:31 - 21415320 _____ C:\Users\Lilia220982\Documents\DSC_7664.NEF

2013-11-24 16:01 - 2013-12-11 12:31 - 21395737 _____ C:\Users\Lilia220982\Documents\DSC_7663.NEF

2013-11-24 16:01 - 2013-12-11 12:31 - 21332472 _____ C:\Users\Lilia220982\Documents\DSC_7662.NEF

2013-11-24 16:01 - 2013-12-11 12:31 - 21319346 _____ C:\Users\Lilia220982\Documents\DSC_7660.NEF

2013-11-24 16:01 - 2013-12-11 12:31 - 21308066 _____ C:\Users\Lilia220982\Documents\DSC_7665.NEF

2013-11-24 16:01 - 2013-12-11 12:31 - 21305142 _____ C:\Users\Lilia220982\Documents\DSC_7666.NEF

2013-11-24 16:01 - 2013-12-11 12:31 - 21203240 _____ C:\Users\Lilia220982\Documents\DSC_7661.NEF

2013-11-24 16:00 - 2013-12-11 12:31 - 22575164 _____ C:\Users\Lilia220982\Documents\DSC_7658.NEF

2013-11-24 16:00 - 2013-12-11 12:31 - 22150831 _____ C:\Users\Lilia220982\Documents\DSC_7657.NEF

2013-11-24 16:00 - 2013-12-11 12:31 - 21688063 _____ C:\Users\Lilia220982\Documents\DSC_7659.NEF

2013-11-24 16:00 - 2013-12-11 12:31 - 20757841 _____ C:\Users\Lilia220982\Documents\DSC_7655.NEF

2013-11-24 16:00 - 2013-12-11 12:31 - 20613570 _____ C:\Users\Lilia220982\Documents\DSC_7656.NEF

2013-11-24 15:59 - 2013-12-11 12:31 - 21345798 _____ C:\Users\Lilia220982\Documents\DSC_7649.NEF

2013-11-24 15:59 - 2013-12-11 12:31 - 21255932 _____ C:\Users\Lilia220982\Documents\DSC_7654.NEF

2013-11-24 15:59 - 2013-12-11 12:31 - 21190900 _____ C:\Users\Lilia220982\Documents\DSC_7648.NEF

2013-11-24 15:59 - 2013-12-11 12:31 - 21138980 _____ C:\Users\Lilia220982\Documents\DSC_7650.NEF

2013-11-24 15:59 - 2013-12-11 12:31 - 21128003 _____ C:\Users\Lilia220982\Documents\DSC_7653.NEF

2013-11-24 15:59 - 2013-12-11 12:31 - 21031230 _____ C:\Users\Lilia220982\Documents\DSC_7652.NEF

2013-11-24 15:59 - 2013-12-11 12:31 - 20999587 _____ C:\Users\Lilia220982\Documents\DSC_7651.NEF

2013-11-24 15:59 - 2013-12-11 12:31 - 20574091 _____ C:\Users\Lilia220982\Documents\DSC_7646.NEF

2013-11-24 15:59 - 2013-12-11 12:31 - 20544547 _____ C:\Users\Lilia220982\Documents\DSC_7647.NEF

2013-11-24 15:54 - 2013-12-11 12:31 - 21269278 _____ C:\Users\Lilia220982\Documents\DSC_7640.NEF

2013-11-24 15:54 - 2013-12-11 12:31 - 21198537 _____ C:\Users\Lilia220982\Documents\DSC_7642.NEF

2013-11-24 15:54 - 2013-12-11 12:31 - 21110996 _____ C:\Users\Lilia220982\Documents\DSC_7641.NEF

2013-11-24 15:54 - 2013-12-11 12:31 - 21049193 _____ C:\Users\Lilia220982\Documents\DSC_7643.NEF

2013-11-24 15:54 - 2013-12-11 12:31 - 21009068 _____ C:\Users\Lilia220982\Documents\DSC_7644.NEF

2013-11-24 15:54 - 2013-12-11 12:31 - 20864095 _____ C:\Users\Lilia220982\Documents\DSC_7645.NEF

2013-11-24 15:54 - 2013-12-11 12:30 - 21220707 _____ C:\Users\Lilia220982\Documents\DSC_7639.NEF

2013-11-24 15:53 - 2013-12-11 12:30 - 21446364 _____ C:\Users\Lilia220982\Documents\DSC_7634.NEF

2013-11-24 15:53 - 2013-12-11 12:30 - 21317836 _____ C:\Users\Lilia220982\Documents\DSC_7635.NEF

2013-11-24 15:53 - 2013-12-11 12:30 - 21312189 _____ C:\Users\Lilia220982\Documents\DSC_7636.NEF

2013-11-24 15:53 - 2013-12-11 12:30 - 21285187 _____ C:\Users\Lilia220982\Documents\DSC_7637.NEF

2013-11-24 15:53 - 2013-12-11 12:30 - 21195712 _____ C:\Users\Lilia220982\Documents\DSC_7638.NEF

2013-11-24 15:52 - 2013-12-11 12:30 - 21304101 _____ C:\Users\Lilia220982\Documents\DSC_7633.NEF

2013-11-24 15:50 - 2013-12-11 12:30 - 21467157 _____ C:\Users\Lilia220982\Documents\DSC_7625.NEF

2013-11-24 15:50 - 2013-12-11 12:30 - 21447827 _____ C:\Users\Lilia220982\Documents\DSC_7626.NEF

2013-11-24 15:50 - 2013-12-11 12:30 - 21400375 _____ C:\Users\Lilia220982\Documents\DSC_7627.NEF

2013-11-24 15:50 - 2013-12-11 12:30 - 21367779 _____ C:\Users\Lilia220982\Documents\DSC_7630.NEF

2013-11-24 15:50 - 2013-12-11 12:30 - 21314863 _____ C:\Users\Lilia220982\Documents\DSC_7628.NEF

2013-11-24 15:50 - 2013-12-11 12:30 - 21300118 _____ C:\Users\Lilia220982\Documents\DSC_7629.NEF

2013-11-24 15:50 - 2013-12-11 12:30 - 20352392 _____ C:\Users\Lilia220982\Documents\DSC_7632.NEF

2013-11-24 15:50 - 2013-12-11 12:30 - 20179086 _____ C:\Users\Lilia220982\Documents\DSC_7631.NEF

2013-11-24 15:49 - 2013-12-11 12:30 - 22735575 _____ C:\Users\Lilia220982\Documents\DSC_7620.NEF

2013-11-24 15:49 - 2013-12-11 12:30 - 21372700 _____ C:\Users\Lilia220982\Documents\DSC_7624.NEF

2013-11-24 15:49 - 2013-12-11 12:30 - 21367703 _____ C:\Users\Lilia220982\Documents\DSC_7621.NEF

2013-11-24 15:49 - 2013-12-11 12:30 - 21292874 _____ C:\Users\Lilia220982\Documents\DSC_7622.NEF

2013-11-24 15:49 - 2013-12-11 12:30 - 21149254 _____ C:\Users\Lilia220982\Documents\DSC_7623.NEF

2013-11-24 15:48 - 2013-12-11 12:30 - 22669157 _____ C:\Users\Lilia220982\Documents\DSC_7619.NEF

2013-11-24 15:48 - 2013-12-11 12:30 - 21809299 _____ C:\Users\Lilia220982\Documents\DSC_7615.NEF

2013-11-24 15:48 - 2013-12-11 12:30 - 21736955 _____ C:\Users\Lilia220982\Documents\DSC_7616.NEF

2013-11-24 15:48 - 2013-12-11 12:30 - 21695324 _____ C:\Users\Lilia220982\Documents\DSC_7614.NEF

2013-11-24 15:48 - 2013-12-11 12:30 - 21510820 _____ C:\Users\Lilia220982\Documents\DSC_7617.NEF

2013-11-24 15:48 - 2013-12-11 12:30 - 21510215 _____ C:\Users\Lilia220982\Documents\DSC_7618.NEF

2013-11-24 15:46 - 2013-12-11 12:30 - 22423892 _____ C:\Users\Lilia220982\Documents\DSC_7610.NEF

2013-11-24 15:46 - 2013-12-11 12:30 - 22409445 _____ C:\Users\Lilia220982\Documents\DSC_7612.NEF

2013-11-24 15:46 - 2013-12-11 12:30 - 22305286 _____ C:\Users\Lilia220982\Documents\DSC_7613.NEF

2013-11-24 15:46 - 2013-12-11 12:30 - 22270994 _____ C:\Users\Lilia220982\Documents\DSC_7611.NEF

2013-11-24 15:45 - 2013-12-11 12:30 - 22580974 _____ C:\Users\Lilia220982\Documents\DSC_7606.NEF

2013-11-24 15:45 - 2013-12-11 12:30 - 22460928 _____ C:\Users\Lilia220982\Documents\DSC_7607.NEF

2013-11-24 15:45 - 2013-12-11 12:30 - 22441655 _____ C:\Users\Lilia220982\Documents\DSC_7603.NEF

2013-11-24 15:45 - 2013-12-11 12:30 - 22328521 _____ C:\Users\Lilia220982\Documents\DSC_7609.NEF

2013-11-24 15:45 - 2013-12-11 12:30 - 22309339 _____ C:\Users\Lilia220982\Documents\DSC_7608.NEF

2013-11-24 15:45 - 2013-12-11 12:30 - 22058826 _____ C:\Users\Lilia220982\Documents\DSC_7604.NEF

2013-11-24 15:45 - 2013-12-11 12:30 - 21931094 _____ C:\Users\Lilia220982\Documents\DSC_7605.NEF

2013-11-24 15:45 - 2013-12-11 12:30 - 19753720 _____ C:\Users\Lilia220982\Documents\DSC_7601.NEF

2013-11-24 15:45 - 2013-12-11 12:30 - 19554852 _____ C:\Users\Lilia220982\Documents\DSC_7602.NEF

2013-11-24 15:44 - 2013-12-11 12:30 - 23499442 _____ C:\Users\Lilia220982\Documents\DSC_7596.NEF

2013-11-24 15:44 - 2013-12-11 12:30 - 23355628 _____ C:\Users\Lilia220982\Documents\DSC_7597.NEF

2013-11-24 15:44 - 2013-12-11 12:30 - 21924766 _____ C:\Users\Lilia220982\Documents\DSC_7600.NEF

2013-11-24 15:44 - 2013-12-11 12:30 - 21894421 _____ C:\Users\Lilia220982\Documents\DSC_7598.NEF

2013-11-24 15:44 - 2013-12-11 12:30 - 21807948 _____ C:\Users\Lilia220982\Documents\DSC_7599.NEF

2013-11-24 15:43 - 2013-12-11 12:30 - 22832312 _____ C:\Users\Lilia220982\Documents\DSC_7595.NEF

2013-11-24 15:43 - 2013-12-11 12:30 - 22312310 _____ C:\Users\Lilia220982\Documents\DSC_7594.NEF

2013-11-24 15:43 - 2013-12-11 12:30 - 22205342 _____ C:\Users\Lilia220982\Documents\DSC_7593.NEF

2013-11-24 15:43 - 2013-12-11 12:30 - 22170342 _____ C:\Users\Lilia220982\Documents\DSC_7592.NEF

2013-11-24 15:43 - 2013-12-11 12:30 - 21733799 _____ C:\Users\Lilia220982\Documents\DSC_7589.NEF

2013-11-24 15:43 - 2013-12-11 12:30 - 21538509 _____ C:\Users\Lilia220982\Documents\DSC_7590.NEF

2013-11-24 15:43 - 2013-12-11 12:30 - 21417136 _____ C:\Users\Lilia220982\Documents\DSC_7586.NEF

2013-11-24 15:43 - 2013-12-11 12:30 - 21381225 _____ C:\Users\Lilia220982\Documents\DSC_7591.NEF

2013-11-24 15:43 - 2013-12-11 12:30 - 21277249 _____ C:\Users\Lilia220982\Documents\DSC_7587.NEF

2013-11-24 15:43 - 2013-12-11 12:30 - 21217855 _____ C:\Users\Lilia220982\Documents\DSC_7588.NEF

2013-11-24 15:42 - 2013-12-11 12:30 - 21538864 _____ C:\Users\Lilia220982\Documents\DSC_7585.NEF

2013-11-24 15:42 - 2013-12-11 12:30 - 21531516 _____ C:\Users\Lilia220982\Documents\DSC_7583.NEF

2013-11-24 15:42 - 2013-12-11 12:30 - 21416426 _____ C:\Users\Lilia220982\Documents\DSC_7584.NEF

2013-11-24 15:41 - 2013-12-11 12:30 - 21795644 _____ C:\Users\Lilia220982\Documents\DSC_7582.NEF

2013-11-24 15:41 - 2013-12-11 12:30 - 21746628 _____ C:\Users\Lilia220982\Documents\DSC_7581.NEF

2013-11-24 15:41 - 2013-12-11 12:30 - 21140383 _____ C:\Users\Lilia220982\Documents\DSC_7577.NEF

2013-11-24 15:41 - 2013-12-11 12:30 - 21135945 _____ C:\Users\Lilia220982\Documents\DSC_7576.NEF

2013-11-24 15:41 - 2013-12-11 12:30 - 21132791 _____ C:\Users\Lilia220982\Documents\DSC_7579.NEF

2013-11-24 15:41 - 2013-12-11 12:30 - 21069071 _____ C:\Users\Lilia220982\Documents\DSC_7578.NEF

2013-11-24 15:41 - 2013-12-11 12:30 - 21054004 _____ C:\Users\Lilia220982\Documents\DSC_7580.NEF

2013-11-24 15:40 - 2013-12-11 12:30 - 21711527 _____ C:\Users\Lilia220982\Documents\DSC_7575.NEF

2013-11-24 15:40 - 2013-12-11 12:30 - 21556634 _____ C:\Users\Lilia220982\Documents\DSC_7573.NEF

2013-11-24 15:40 - 2013-12-11 12:30 - 21536599 _____ C:\Users\Lilia220982\Documents\DSC_7572.NEF

2013-11-24 15:40 - 2013-12-11 12:30 - 21366070 _____ C:\Users\Lilia220982\Documents\DSC_7574.NEF

2013-11-24 15:39 - 2013-12-11 12:30 - 21401438 _____ C:\Users\Lilia220982\Documents\DSC_7570.NEF

2013-11-24 15:39 - 2013-12-11 12:30 - 21312030 _____ C:\Users\Lilia220982\Documents\DSC_7571.NEF

2013-11-24 15:38 - 2013-12-11 12:30 - 21901458 _____ C:\Users\Lilia220982\Documents\DSC_7563.NEF

2013-11-24 15:38 - 2013-12-11 12:30 - 21899805 _____ C:\Users\Lilia220982\Documents\DSC_7560.NEF

2013-11-24 15:38 - 2013-12-11 12:30 - 21843853 _____ C:\Users\Lilia220982\Documents\DSC_7561.NEF

2013-11-24 15:38 - 2013-12-11 12:30 - 21650563 _____ C:\Users\Lilia220982\Documents\DSC_7562.NEF

2013-11-24 15:38 - 2013-12-11 12:30 - 21615132 _____ C:\Users\Lilia220982\Documents\DSC_7568.NEF

2013-11-24 15:38 - 2013-12-11 12:30 - 21464579 _____ C:\Users\Lilia220982\Documents\DSC_7569.NEF

2013-11-24 15:38 - 2013-12-11 12:30 - 21375434 _____ C:\Users\Lilia220982\Documents\DSC_7567.NEF

2013-11-24 15:38 - 2013-12-11 12:30 - 21357826 _____ C:\Users\Lilia220982\Documents\DSC_7564.NEF

2013-11-24 15:38 - 2013-12-11 12:30 - 21345732 _____ C:\Users\Lilia220982\Documents\DSC_7566.NEF

2013-11-24 15:38 - 2013-12-11 12:30 - 21320653 _____ C:\Users\Lilia220982\Documents\DSC_7565.NEF

2013-11-24 15:37 - 2013-12-11 12:30 - 22059051 _____ C:\Users\Lilia220982\Documents\DSC_7558.NEF

2013-11-24 15:37 - 2013-12-11 12:30 - 22035023 _____ C:\Users\Lilia220982\Documents\DSC_7559.NEF

2013-11-24 15:37 - 2013-12-11 12:29 - 21989279 _____ C:\Users\Lilia220982\Documents\DSC_7557.NEF

2013-11-24 15:36 - 2013-12-11 12:29 - 22880515 _____ C:\Users\Lilia220982\Documents\DSC_7549.NEF

2013-11-24 15:36 - 2013-12-11 12:29 - 22758262 _____ C:\Users\Lilia220982\Documents\DSC_7551.NEF

2013-11-24 15:36 - 2013-12-11 12:29 - 22715616 _____ C:\Users\Lilia220982\Documents\DSC_7550.NEF

2013-11-24 15:36 - 2013-12-11 12:29 - 22632203 _____ C:\Users\Lilia220982\Documents\DSC_7552.NEF

2013-11-24 15:36 - 2013-12-11 12:29 - 22524968 _____ C:\Users\Lilia220982\Documents\DSC_7553.NEF

2013-11-24 15:36 - 2013-12-11 12:29 - 22192346 _____ C:\Users\Lilia220982\Documents\DSC_7548.NEF

2013-11-24 15:36 - 2013-12-11 12:29 - 21784584 _____ C:\Users\Lilia220982\Documents\DSC_7554.NEF

2013-11-24 15:36 - 2013-12-11 12:29 - 21698619 _____ C:\Users\Lilia220982\Documents\DSC_7556.NEF

2013-11-24 15:36 - 2013-12-11 12:29 - 21638845 _____ C:\Users\Lilia220982\Documents\DSC_7555.NEF

2013-11-24 15:35 - 2013-12-11 12:29 - 21968658 _____ C:\Users\Lilia220982\Documents\DSC_7547.NEF

2013-11-24 15:35 - 2013-12-11 12:29 - 21903523 _____ C:\Users\Lilia220982\Documents\DSC_7546.NEF

2013-11-24 15:34 - 2013-12-11 12:29 - 22340933 _____ C:\Users\Lilia220982\Documents\DSC_7541.NEF

2013-11-24 15:34 - 2013-12-11 12:29 - 22322387 _____ C:\Users\Lilia220982\Documents\DSC_7542.NEF

2013-11-24 15:34 - 2013-12-11 12:29 - 22290506 _____ C:\Users\Lilia220982\Documents\DSC_7539.NEF

2013-11-24 15:34 - 2013-12-11 12:29 - 22215463 _____ C:\Users\Lilia220982\Documents\DSC_7540.NEF

2013-11-24 15:34 - 2013-12-11 12:29 - 21633867 _____ C:\Users\Lilia220982\Documents\DSC_7543.NEF

2013-11-24 15:34 - 2013-12-11 12:29 - 21569173 _____ C:\Users\Lilia220982\Documents\DSC_7544.NEF

2013-11-24 15:34 - 2013-12-11 12:29 - 21531044 _____ C:\Users\Lilia220982\Documents\DSC_7545.NEF

2013-11-24 15:33 - 2013-12-11 12:29 - 23068345 _____ C:\Users\Lilia220982\Documents\DSC_7537.NEF

2013-11-24 15:33 - 2013-12-11 12:29 - 22862777 _____ C:\Users\Lilia220982\Documents\DSC_7538.NEF

2013-11-24 15:33 - 2013-12-11 12:29 - 22286964 _____ C:\Users\Lilia220982\Documents\DSC_7536.NEF

2013-11-24 15:32 - 2013-12-11 12:29 - 22014147 _____ C:\Users\Lilia220982\Documents\DSC_7529.NEF

2013-11-24 15:32 - 2013-12-11 12:29 - 21995812 _____ C:\Users\Lilia220982\Documents\DSC_7530.NEF

2013-11-24 15:32 - 2013-12-11 12:29 - 21730264 _____ C:\Users\Lilia220982\Documents\DSC_7531.NEF

2013-11-24 15:32 - 2013-12-11 12:29 - 21623299 _____ C:\Users\Lilia220982\Documents\DSC_7532.NEF

2013-11-24 15:32 - 2013-12-11 12:29 - 21535044 _____ C:\Users\Lilia220982\Documents\DSC_7533.NEF

2013-11-24 15:32 - 2013-12-11 12:29 - 21482223 _____ C:\Users\Lilia220982\Documents\DSC_7535.NEF

2013-11-24 15:32 - 2013-12-11 12:29 - 21416162 _____ C:\Users\Lilia220982\Documents\DSC_7534.NEF

2013-11-24 15:30 - 2013-12-11 12:29 - 22542782 _____ C:\Users\Lilia220982\Documents\DSC_7523.NEF

2013-11-24 15:30 - 2013-12-11 12:29 - 21836084 _____ C:\Users\Lilia220982\Documents\DSC_7526.NEF

2013-11-24 15:30 - 2013-12-11 12:29 - 21802908 _____ C:\Users\Lilia220982\Documents\DSC_7527.NEF

2013-11-24 15:30 - 2013-12-11 12:29 - 21784925 _____ C:\Users\Lilia220982\Documents\DSC_7525.NEF

2013-11-24 15:30 - 2013-12-11 12:29 - 21678820 _____ C:\Users\Lilia220982\Documents\DSC_7528.NEF

2013-11-24 15:30 - 2013-12-11 12:29 - 21576176 _____ C:\Users\Lilia220982\Documents\DSC_7524.NEF

2013-11-24 15:29 - 2013-12-11 12:29 - 22875225 _____ C:\Users\Lilia220982\Documents\DSC_7521.NEF

2013-11-24 15:29 - 2013-12-11 12:29 - 21705374 _____ C:\Users\Lilia220982\Documents\DSC_7520.NEF

2013-11-24 15:29 - 2013-12-11 12:29 - 21310183 _____ C:\Users\Lilia220982\Documents\DSC_7522.NEF

2013-11-24 15:20 - 2013-12-11 12:29 - 21336959 _____ C:\Users\Lilia220982\Documents\DSC_7505.NEF

2013-11-24 15:20 - 2013-12-11 12:29 - 21295394 _____ C:\Users\Lilia220982\Documents\DSC_7519.NEF

2013-11-24 15:20 - 2013-12-11 12:29 - 21244348 _____ C:\Users\Lilia220982\Documents\DSC_7517.NEF

2013-11-24 15:20 - 2013-12-11 12:29 - 21234551 _____ C:\Users\Lilia220982\Documents\DSC_7516.NEF

2013-11-24 15:20 - 2013-12-11 12:29 - 21204727 _____ C:\Users\Lilia220982\Documents\DSC_7515.NEF

2013-11-24 15:20 - 2013-12-11 12:29 - 21195952 _____ C:\Users\Lilia220982\Documents\DSC_7506.NEF

2013-11-24 15:20 - 2013-12-11 12:29 - 21182283 _____ C:\Users\Lilia220982\Documents\DSC_7508.NEF

2013-11-24 15:20 - 2013-12-11 12:29 - 21148230 _____ C:\Users\Lilia220982\Documents\DSC_7507.NEF

2013-11-24 15:20 - 2013-12-11 12:29 - 21101848 _____ C:\Users\Lilia220982\Documents\DSC_7510.NEF

2013-11-24 15:20 - 2013-12-11 12:29 - 21094067 _____ C:\Users\Lilia220982\Documents\DSC_7511.NEF

2013-11-24 15:20 - 2013-12-11 12:29 - 21081049 _____ C:\Users\Lilia220982\Documents\DSC_7513.NEF

2013-11-24 15:20 - 2013-12-11 12:29 - 21019579 _____ C:\Users\Lilia220982\Documents\DSC_7509.NEF

2013-11-24 15:20 - 2013-12-11 12:29 - 20590326 _____ C:\Users\Lilia220982\Documents\DSC_7514.NEF

2013-11-24 15:20 - 2013-12-11 12:29 - 20560093 _____ C:\Users\Lilia220982\Documents\DSC_7512.NEF

2013-11-24 15:20 - 2013-12-11 12:29 - 20481702 _____ C:\Users\Lilia220982\Documents\DSC_7518.NEF

2013-11-24 15:19 - 2013-12-11 12:29 - 21416956 _____ C:\Users\Lilia220982\Documents\DSC_7504.NEF

2013-11-24 15:19 - 2013-12-11 12:29 - 21298396 _____ C:\Users\Lilia220982\Documents\DSC_7503.NEF

2013-11-24 15:19 - 2013-12-11 12:29 - 21223869 _____ C:\Users\Lilia220982\Documents\DSC_7499.NEF

2013-11-24 15:19 - 2013-12-11 12:29 - 21216482 _____ C:\Users\Lilia220982\Documents\DSC_7502.NEF

2013-11-24 15:19 - 2013-12-11 12:29 - 21203128 _____ C:\Users\Lilia220982\Documents\DSC_7495.NEF

2013-11-24 15:19 - 2013-12-11 12:29 - 21173440 _____ C:\Users\Lilia220982\Documents\DSC_7498.NEF

2013-11-24 15:19 - 2013-12-11 12:29 - 21150786 _____ C:\Users\Lilia220982\Documents\DSC_7500.NEF

2013-11-24 15:19 - 2013-12-11 12:29 - 21131788 _____ C:\Users\Lilia220982\Documents\DSC_7496.NEF

2013-11-24 15:19 - 2013-12-11 12:29 - 21096829 _____ C:\Users\Lilia220982\Documents\DSC_7497.NEF

2013-11-24 15:19 - 2013-12-11 12:29 - 20051811 _____ C:\Users\Lilia220982\Documents\DSC_7501.NEF

2013-11-24 15:18 - 2013-12-11 12:29 - 23792543 _____ C:\Users\Lilia220982\Documents\DSC_7493.NEF

2013-11-24 15:18 - 2013-12-11 12:29 - 23585727 _____ C:\Users\Lilia220982\Documents\DSC_7494.NEF

2013-11-24 15:18 - 2013-12-11 12:29 - 22799251 _____ C:\Users\Lilia220982\Documents\DSC_7490.NEF

2013-11-24 15:18 - 2013-12-11 12:29 - 22316516 _____ C:\Users\Lilia220982\Documents\DSC_7491.NEF

2013-11-24 15:18 - 2013-12-11 12:29 - 22121511 _____ C:\Users\Lilia220982\Documents\DSC_7492.NEF

2013-11-24 15:17 - 2013-12-11 12:29 - 24655178 _____ C:\Users\Lilia220982\Documents\DSC_7488.NEF

2013-11-24 15:17 - 2013-12-11 12:29 - 24348872 _____ C:\Users\Lilia220982\Documents\DSC_7487.NEF

2013-11-24 15:17 - 2013-12-11 12:29 - 24318736 _____ C:\Users\Lilia220982\Documents\DSC_7489.NEF

2013-11-24 15:16 - 2013-12-11 12:29 - 22787841 _____ C:\Users\Lilia220982\Documents\DSC_7484.NEF

2013-11-24 15:16 - 2013-12-11 12:29 - 22730035 _____ C:\Users\Lilia220982\Documents\DSC_7483.NEF

2013-11-24 15:16 - 2013-12-11 12:29 - 22463728 _____ C:\Users\Lilia220982\Documents\DSC_7486.NEF

2013-11-24 15:16 - 2013-12-11 12:29 - 22446440 _____ C:\Users\Lilia220982\Documents\DSC_7485.NEF

2013-11-24 15:16 - 2013-12-11 12:29 - 22269561 _____ C:\Users\Lilia220982\Documents\DSC_7482.NEF

2013-11-24 15:15 - 2013-12-11 12:29 - 21346132 _____ C:\Users\Lilia220982\Documents\DSC_7474.NEF

2013-11-24 15:15 - 2013-12-11 12:29 - 21324079 _____ C:\Users\Lilia220982\Documents\DSC_7475.NEF

2013-11-24 15:15 - 2013-12-11 12:29 - 21197060 _____ C:\Users\Lilia220982\Documents\DSC_7476.NEF

2013-11-24 15:15 - 2013-12-11 12:29 - 21163712 _____ C:\Users\Lilia220982\Documents\DSC_7477.NEF

2013-11-24 15:15 - 2013-12-11 12:29 - 21087744 _____ C:\Users\Lilia220982\Documents\DSC_7478.NEF

2013-11-24 15:15 - 2013-12-11 12:29 - 21048674 _____ C:\Users\Lilia220982\Documents\DSC_7481.NEF

2013-11-24 15:15 - 2013-12-11 12:29 - 21047430 _____ C:\Users\Lilia220982\Documents\DSC_7479.NEF

2013-11-24 15:15 - 2013-12-11 12:29 - 20999969 _____ C:\Users\Lilia220982\Documents\DSC_7480.NEF

2013-11-24 15:14 - 2013-12-11 12:28 - 21497843 _____ C:\Users\Lilia220982\Documents\DSC_7471.NEF

2013-11-24 15:14 - 2013-12-11 12:28 - 21460021 _____ C:\Users\Lilia220982\Documents\DSC_7463.NEF

2013-11-24 15:14 - 2013-12-11 12:28 - 21446671 _____ C:\Users\Lilia220982\Documents\DSC_7464.NEF

2013-11-24 15:14 - 2013-12-11 12:28 - 21394027 _____ C:\Users\Lilia220982\Documents\DSC_7465.NEF

2013-11-24 15:14 - 2013-12-11 12:28 - 21340966 _____ C:\Users\Lilia220982\Documents\DSC_7469.NEF

2013-11-24 15:14 - 2013-12-11 12:28 - 21323368 _____ C:\Users\Lilia220982\Documents\DSC_7470.NEF

2013-11-24 15:14 - 2013-12-11 12:28 - 21143505 _____ C:\Users\Lilia220982\Documents\DSC_7466.NEF

2013-11-24 15:14 - 2013-12-11 12:28 - 21131960 _____ C:\Users\Lilia220982\Documents\DSC_7472.NEF

2013-11-24 15:14 - 2013-12-11 12:28 - 21117300 _____ C:\Users\Lilia220982\Documents\DSC_7473.NEF

2013-11-24 15:14 - 2013-12-11 12:28 - 21067892 _____ C:\Users\Lilia220982\Documents\DSC_7468.NEF

2013-11-24 15:14 - 2013-12-11 12:28 - 20654662 _____ C:\Users\Lilia220982\Documents\DSC_7467.NEF

2013-11-24 15:13 - 2013-12-11 12:28 - 21777542 _____ C:\Users\Lilia220982\Documents\DSC_7461.NEF

2013-11-24 15:13 - 2013-12-11 12:28 - 21631454 _____ C:\Users\Lilia220982\Documents\DSC_7454.NEF

2013-11-24 15:13 - 2013-12-11 12:28 - 21562143 _____ C:\Users\Lilia220982\Documents\DSC_7462.NEF

2013-11-24 15:13 - 2013-12-11 12:28 - 21379767 _____ C:\Users\Lilia220982\Documents\DSC_7458.NEF

2013-11-24 15:13 - 2013-12-11 12:28 - 21312073 _____ C:\Users\Lilia220982\Documents\DSC_7460.NEF

2013-11-24 15:13 - 2013-12-11 12:28 - 21288746 _____ C:\Users\Lilia220982\Documents\DSC_7455.NEF

2013-11-24 15:13 - 2013-12-11 12:28 - 21228059 _____ C:\Users\Lilia220982\Documents\DSC_7457.NEF

2013-11-24 15:13 - 2013-12-11 12:28 - 21088834 _____ C:\Users\Lilia220982\Documents\DSC_7453.NEF

2013-11-24 15:13 - 2013-12-11 12:28 - 21077963 _____ C:\Users\Lilia220982\Documents\DSC_7456.NEF

2013-11-24 15:13 - 2013-12-11 12:28 - 20962085 _____ C:\Users\Lilia220982\Documents\DSC_7459.NEF

2013-11-24 15:12 - 2013-12-11 12:28 - 20733992 _____ C:\Users\Lilia220982\Documents\DSC_7448.NEF

2013-11-24 15:12 - 2013-12-11 12:28 - 20728945 _____ C:\Users\Lilia220982\Documents\DSC_7447.NEF

2013-11-24 15:12 - 2013-12-11 12:28 - 20655395 _____ C:\Users\Lilia220982\Documents\DSC_7452.NEF

2013-11-24 15:12 - 2013-12-11 12:28 - 20612182 _____ C:\Users\Lilia220982\Documents\DSC_7449.NEF

2013-11-24 15:12 - 2013-12-11 12:28 - 20590216 _____ C:\Users\Lilia220982\Documents\DSC_7446.NEF

2013-11-24 15:12 - 2013-12-11 12:28 - 20589777 _____ C:\Users\Lilia220982\Documents\DSC_7450.NEF

2013-11-24 15:12 - 2013-12-11 12:28 - 20554434 _____ C:\Users\Lilia220982\Documents\DSC_7445.NEF

2013-11-24 15:12 - 2013-12-11 12:28 - 20541110 _____ C:\Users\Lilia220982\Documents\DSC_7451.NEF

2013-11-24 15:11 - 2013-12-11 12:28 - 21183172 _____ C:\Users\Lilia220982\Documents\DSC_7433.NEF

2013-11-24 15:11 - 2013-12-11 12:28 - 21179096 _____ C:\Users\Lilia220982\Documents\DSC_7432.NEF

2013-11-24 15:11 - 2013-12-11 12:28 - 21039180 _____ C:\Users\Lilia220982\Documents\DSC_7431.NEF

2013-11-24 15:11 - 2013-12-11 12:28 - 21009433 _____ C:\Users\Lilia220982\Documents\DSC_7434.NEF

2013-11-24 15:11 - 2013-12-11 12:28 - 20998969 _____ C:\Users\Lilia220982\Documents\DSC_7430.NEF

2013-11-24 15:11 - 2013-12-11 12:28 - 20974387 _____ C:\Users\Lilia220982\Documents\DSC_7441.NEF

2013-11-24 15:11 - 2013-12-11 12:28 - 20970241 _____ C:\Users\Lilia220982\Documents\DSC_7439.NEF

2013-11-24 15:11 - 2013-12-11 12:28 - 20966724 _____ C:\Users\Lilia220982\Documents\DSC_7438.NEF

2013-11-24 15:11 - 2013-12-11 12:28 - 20663089 _____ C:\Users\Lilia220982\Documents\DSC_7444.NEF

2013-11-24 15:11 - 2013-12-11 12:28 - 20644040 _____ C:\Users\Lilia220982\Documents\DSC_7440.NEF

2013-11-24 15:11 - 2013-12-11 12:28 - 20642688 _____ C:\Users\Lilia220982\Documents\DSC_7437.NEF

2013-11-24 15:11 - 2013-12-11 12:28 - 20616258 _____ C:\Users\Lilia220982\Documents\DSC_7435.NEF

2013-11-24 15:11 - 2013-12-11 12:28 - 20606319 _____ C:\Users\Lilia220982\Documents\DSC_7436.NEF

2013-11-24 15:11 - 2013-12-11 12:28 - 20538784 _____ C:\Users\Lilia220982\Documents\DSC_7442.NEF

2013-11-24 15:11 - 2013-12-11 12:28 - 20501957 _____ C:\Users\Lilia220982\Documents\DSC_7443.NEF

2013-11-24 15:10 - 2013-12-11 12:28 - 20854905 _____ C:\Users\Lilia220982\Documents\DSC_7419.NEF

2013-11-24 15:10 - 2013-12-11 12:28 - 20847637 _____ C:\Users\Lilia220982\Documents\DSC_7422.NEF

2013-11-24 15:10 - 2013-12-11 12:28 - 20780747 _____ C:\Users\Lilia220982\Documents\DSC_7425.NEF

2013-11-24 15:10 - 2013-12-11 12:28 - 20754471 _____ C:\Users\Lilia220982\Documents\DSC_7421.NEF

2013-11-24 15:10 - 2013-12-11 12:28 - 20739595 _____ C:\Users\Lilia220982\Documents\DSC_7420.NEF

2013-11-24 15:10 - 2013-12-11 12:28 - 20718686 _____ C:\Users\Lilia220982\Documents\DSC_7418.NEF

2013-11-24 15:10 - 2013-12-11 12:28 - 20717016 _____ C:\Users\Lilia220982\Documents\DSC_7429.NEF

2013-11-24 15:10 - 2013-12-11 12:28 - 20652934 _____ C:\Users\Lilia220982\Documents\DSC_7426.NEF

2013-11-24 15:10 - 2013-12-11 12:28 - 20633222 _____ C:\Users\Lilia220982\Documents\DSC_7428.NEF

2013-11-24 15:10 - 2013-12-11 12:28 - 20317174 _____ C:\Users\Lilia220982\Documents\DSC_7424.NEF

2013-11-24 15:10 - 2013-12-11 12:28 - 20292224 _____ C:\Users\Lilia220982\Documents\DSC_7423.NEF

2013-11-24 15:10 - 2013-12-11 12:28 - 20065019 _____ C:\Users\Lilia220982\Documents\DSC_7427.NEF

2013-11-24 15:09 - 2013-12-11 12:28 - 21045333 _____ C:\Users\Lilia220982\Documents\DSC_7414.NEF

2013-11-24 15:09 - 2013-12-11 12:28 - 21036424 _____ C:\Users\Lilia220982\Documents\DSC_7412.NEF

2013-11-24 15:09 - 2013-12-11 12:28 - 21017918 _____ C:\Users\Lilia220982\Documents\DSC_7411.NEF

2013-11-24 15:09 - 2013-12-11 12:28 - 20992504 _____ C:\Users\Lilia220982\Documents\DSC_7413.NEF

2013-11-24 15:09 - 2013-12-11 12:28 - 20721724 _____ C:\Users\Lilia220982\Documents\DSC_7417.NEF

2013-11-24 15:09 - 2013-12-11 12:28 - 20708609 _____ C:\Users\Lilia220982\Documents\DSC_7416.NEF

2013-11-24 15:09 - 2013-12-11 12:28 - 20095742 _____ C:\Users\Lilia220982\Documents\DSC_7415.NEF

2013-11-24 15:08 - 2013-12-11 12:28 - 21185091 _____ C:\Users\Lilia220982\Documents\DSC_7404.NEF

2013-11-24 15:08 - 2013-12-11 12:28 - 21175515 _____ C:\Users\Lilia220982\Documents\DSC_7405.NEF

2013-11-24 15:08 - 2013-12-11 12:28 - 21096162 _____ C:\Users\Lilia220982\Documents\DSC_7407.NEF

2013-11-24 15:08 - 2013-12-11 12:28 - 21007209 _____ C:\Users\Lilia220982\Documents\DSC_7406.NEF

2013-11-24 15:08 - 2013-12-11 12:28 - 20987079 _____ C:\Users\Lilia220982\Documents\DSC_7409.NEF

2013-11-24 15:08 - 2013-12-11 12:28 - 20919609 _____ C:\Users\Lilia220982\Documents\DSC_7410.NEF

2013-11-24 15:08 - 2013-12-11 12:28 - 20178642 _____ C:\Users\Lilia220982\Documents\DSC_7408.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 21734254 _____ C:\Users\Lilia220982\Documents\DSC_7398.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 21722919 _____ C:\Users\Lilia220982\Documents\DSC_7401.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 21706159 _____ C:\Users\Lilia220982\Documents\DSC_7387.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 21702838 _____ C:\Users\Lilia220982\Documents\DSC_7403.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 21408493 _____ C:\Users\Lilia220982\Documents\DSC_7399.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 21399885 _____ C:\Users\Lilia220982\Documents\DSC_7397.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 20651089 _____ C:\Users\Lilia220982\Documents\DSC_7400.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 20608418 _____ C:\Users\Lilia220982\Documents\DSC_7393.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 20597335 _____ C:\Users\Lilia220982\Documents\DSC_7396.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 20584347 _____ C:\Users\Lilia220982\Documents\DSC_7392.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 20529511 _____ C:\Users\Lilia220982\Documents\DSC_7402.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 20524161 _____ C:\Users\Lilia220982\Documents\DSC_7391.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 20504204 _____ C:\Users\Lilia220982\Documents\DSC_7390.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 20502823 _____ C:\Users\Lilia220982\Documents\DSC_7385.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 20461452 _____ C:\Users\Lilia220982\Documents\DSC_7384.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 20458696 _____ C:\Users\Lilia220982\Documents\DSC_7386.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 20418163 _____ C:\Users\Lilia220982\Documents\DSC_7394.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 20361442 _____ C:\Users\Lilia220982\Documents\DSC_7395.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 20361317 _____ C:\Users\Lilia220982\Documents\DSC_7389.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 20324331 _____ C:\Users\Lilia220982\Documents\DSC_7388.NEF

2013-11-24 15:04 - 2013-12-11 12:27 - 20496084 _____ C:\Users\Lilia220982\Documents\DSC_7380.NEF

2013-11-24 15:04 - 2013-12-11 12:27 - 20461415 _____ C:\Users\Lilia220982\Documents\DSC_7383.NEF

2013-11-24 15:04 - 2013-12-11 12:27 - 20429075 _____ C:\Users\Lilia220982\Documents\DSC_7381.NEF

2013-11-24 15:04 - 2013-12-11 12:27 - 20370069 _____ C:\Users\Lilia220982\Documents\DSC_7382.NEF

2013-11-24 15:03 - 2013-12-11 12:27 - 21209584 _____ C:\Users\Lilia220982\Documents\DSC_7375.NEF

2013-11-24 15:03 - 2013-12-11 12:27 - 20919598 _____ C:\Users\Lilia220982\Documents\DSC_7377.NEF

2013-11-24 15:03 - 2013-12-11 12:27 - 20858560 _____ C:\Users\Lilia220982\Documents\DSC_7374.NEF

2013-11-24 15:03 - 2013-12-11 12:27 - 20747658 _____ C:\Users\Lilia220982\Documents\DSC_7373.NEF

2013-11-24 15:03 - 2013-12-11 12:27 - 20699349 _____ C:\Users\Lilia220982\Documents\DSC_7372.NEF

2013-11-24 15:03 - 2013-12-11 12:27 - 20646783 _____ C:\Users\Lilia220982\Documents\DSC_7371.NEF

2013-11-24 15:03 - 2013-12-11 12:27 - 20490057 _____ C:\Users\Lilia220982\Documents\DSC_7376.NEF

2013-11-24 15:03 - 2013-12-11 12:27 - 20005728 _____ C:\Users\Lilia220982\Documents\DSC_7379.NEF

2013-11-24 15:03 - 2013-12-11 12:27 - 19991129 _____ C:\Users\Lilia220982\Documents\DSC_7378.NEF

2013-11-23 07:43 - 2013-12-13 10:00 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2013-11-23 06:05 - 2013-12-13 10:00 - 00368640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2013-11-22 17:29 - 2013-10-30 17:07 - 00000858 _____ C:\Users\Lilia220982\Desktop\µTorrent.lnk

2013-11-22 17:29 - 2013-10-30 17:07 - 00000838 _____ C:\Users\Lilia220982\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk

2013-11-22 17:29 - 2013-10-30 17:07 - 00000000 ____D C:\Program Files (x86)\uTorrent

2013-11-21 14:30 - 2013-10-29 22:10 - 00000000 ____D C:\Program Files (x86)\Iminent

2013-11-19 18:43 - 2013-11-19 18:43 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1

2013-11-19 18:43 - 2013-10-29 18:09 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\Adobe

2013-11-17 22:13 - 2013-11-17 22:13 - 00000000 ____D C:\Users\Lilia220982\.AS

2013-11-17 22:11 - 2013-11-17 22:11 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Alien Skin Software
 

Some content of TEMP:

====================

C:\Users\Lilia220982\AppData\Local\Temp\135.65761418153417_Update.exe

C:\Users\Lilia220982\AppData\Local\Temp\ICReinstall_DownloadAcceleratorSetup.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-12-08 12:38
 

==================== End Of Log ============================

--- --- ---

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-12-2013

Ran by Lilia220982 at 2013-12-15 22:06:55

Running from C:\Users\Lilia220982\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {ADA629C7-7F48-5689-624A-3B76997E0892}

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {16C7C823-5972-5907-58FA-0004E2F9422F}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: McAfee Firewall (Enabled) {959DA8E2-3527-57D1-4915-924367AD4FE9}
 

==================== Installed Programs ======================
 

 clear.fi SDK - Video 2 (x32 Version: 2.1.2606)

 clear.fi SDK- Movie 2 (x32 Version: 2.1.2606)

µTorrent (HKCU Version: 3.3.2.30303)

Adobe Bridge CC (64 Bit) (x32 Version: 6.0)

Adobe Photoshop CC (x32 Version: 14.0)

Alien Skin Exposure 3

Alien Skin Exposure 5

clear.fi Media (x32 Version: 2.02.2012)

clear.fi Photo (x32 Version: 2.02.2016)

CyberLink MediaEspresso 6.5 (x32 Version: 6.5.3729_45993)

Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)

Dolby Home Theater v4 (x32 Version: 7.2.8000.17)

EPSON WF-2510 Series Printer Uninstall

ETDWare PS/2-X64 11.6.17.002_WHQL (Version: 11.6.17.002)

Free Zip Opener (x32 Version: 1.0)

GIMP 2.8.6 (Version: 2.8.6)

Google Chrome (x32 Version: 31.0.1650.63)

Google Update Helper (x32 Version: 1.3.22.3)

Iminent (x32 Version: 6.42.32.0) <==== ATTENTION

Intel(R) Management Engine Components (x32 Version: 8.1.0.1252)

Intel(R) Processor Graphics (x32 Version: 9.17.10.2867)

Intel(R) Rapid Storage Technology (x32 Version: 11.5.4.1001)

Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 2.0.0.37149)

Intel® Trusted Connect Service Client (Version: 1.24.388.1)

Launch Manager (x32 Version: 7.0.10)

McAfee Internet Security (x32 Version: 12.8.903)

McAfee Online Backup (Version: 1.16.4.0)

McAfee Online Backup (x32)

Microsoft Office 2010 Service Pack 1 (SP1) (x32)

Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)

Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Professional Plus 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000)

Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (x32 Version: 11.0.51106.1)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (x32 Version: 11.0.51106.1)

Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.51106 (Version: 11.0.51106)

Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.51106 (Version: 11.0.51106)

Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 (x32 Version: 11.0.51106)

Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 (x32 Version: 11.0.51106)

Microsoft Visual Studio 2005 Tools for Office Runtime (x32 Version: 8.0.60940.0)

MiPony 2.0.2 (x32 Version: 2.0.2)

Mysearchdial (HKCU) <==== ATTENTION

Nik Collection (x32 Version: 1.1.0.7)

NVIDIA Grafiktreiber 311.30 (Version: 311.30)

NVIDIA Install Application (Version: 2.1002.109.706)

NVIDIA Optimus 1.11.3 (Version: 1.11.3)

NVIDIA PhysX (x32 Version: 9.12.1031)

NVIDIA PhysX-Systemsoftware 9.12.1031 (Version: 9.12.1031)

NVIDIA Systemsteuerung 311.30 (Version: 311.30)

NVIDIA Update 1.11.3 (Version: 1.11.3)

NVIDIA Update Components (Version: 1.11.3)

Office Addin (x32 Version: 2.02.2008)

PDF Settings CC (x32 Version: 12.0)

Plus-HD-3.8 (x32 Version: 1.27.153.11) <==== ATTENTION

Qualcomm Atheros Bluetooth Suite (64) (Version: 8.0.0.220)

Qualcomm Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 2.1.0.7)

Qualcomm Atheros WLAN and Bluetooth Client Installation Program (x32 Version: 11.41)

Realtek High Definition Audio Driver (x32 Version: 6.0.1.6833)

Realtek PCIE Card Reader (x32 Version: 6.2.8400.28124)

Shared C Run-time for x64 (Version: 10.0.0)

Spotify (x32 Version: 0.8.4.99.ga249b5f1)

suerF aNNd Keep (x32 Version: 3.1.0.1818)

TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.169)

TuneUp Utilities 2014 (x32 Version: 14.0.1000.169)

Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32)

Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2553065) (x32)

Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2566458) (x32)

Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (x32)

Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32)

Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32)

Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32)

Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32)

Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32)

Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32)

Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32)

Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (x32)

VIS (x32)

Visual Studio 2005 Tools for Office Second Edition Runtime (x32)

Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729)

Visual Studio Tools for the Office system 3.0 Runtime (x32)

Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (x32 Version: 1)

Web Optimizer (x32)

WinRAR 5.00 (64-Bit) (Version: 5.00.0)

YoutubeAdblocker (x32 Version: 1.3.0.1788) <==== ATTENTION
 

==================== Restore Points  =========================
 

30-11-2013 15:58:39 Geplanter Prüfpunkt

09-12-2013 11:39:24 Geplanter Prüfpunkt

13-12-2013 09:12:18 Windows Update
 

==================== Hosts content: ==========================
 

2012-07-26 06:26 - 2012-07-26 06:26 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {0716321E-5459-4861-907C-84ECE32F55D6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-05] (Google Inc.)

Task: {115A30F5-9629-4E2E-993E-F2EF77734558} - System32\Tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange => Rundll32.exe bfe.dll,BfeOnServiceStartTypeChange

Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask

Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList

Task: {29B79A01-B6FD-41E5-9F04-D250B3A44DFE} - System32\Tasks\Dolby Selector => C:\Dolby PCEE4\pcee4.exe [2012-08-31] (Dolby Laboratories Inc.)

Task: {307D8C75-FDA3-49D3-AA9F-DB79F405FB59} - System32\Tasks\Microsoft\Windows\Autochk\Proxy => Rundll32.exe /d acproxy.dll,PerformAutochkOperations

Task: {35AB068A-60B1-4F7F-848C-7E37C6E048BD} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [2013-02-08] (CyberLink)

Task: {67229DF8-B971-4F31-933D-0FD466D45DE1} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe aepdu.dll,AePduRunUpdate

Task: {6D3C85F0-7359-41A9-A8CD-029EC119B60D} - System32\Tasks\MySearchDial => C:\Users\Lilia220982\AppData\Roaming\mysearchdial\UpdateProc\UpdateTask.exe [2013-04-12] () <==== ATTENTION

Task: {90B24816-E9A3-44CA-878E-0610A5AE7B60} - System32\Tasks\Plus-HD-3.8-codedownloader => C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-codedownloader.exe [2013-10-29] (Plus HD) <==== ATTENTION

Task: {9DB7C992-BD47-4FD9-A18A-836A59E75AC7} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe [2013-10-30] (TuneUp Software)

Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing

Task: {B0AA1AAA-C3BD-4976-A002-4BC112DB99A2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-05] (Google Inc.)

Task: {BC0E9914-4508-4A99-9DC9-6EE6AAFA5A13} - System32\Tasks\Plus-HD-3.8-enabler => C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-enabler.exe [2013-10-29] (Plus HD) <==== ATTENTION

Task: {BCF1A6D8-5D0B-4F9E-9C46-C3F5E183EED5} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\System32\NotificationUI.exe [2013-08-16] (Microsoft Corporation)

Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState

Task: {E6D36D8E-12B4-49C4-932E-40AD43E88F5D} - System32\Tasks\Plus-HD-3.8-updater => C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-updater.exe [2013-10-29] (Plus HD) <==== ATTENTION

Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask

Task: {EC2ED00F-57E6-410B-B464-35092EF816C3} - System32\Tasks\AdobeAAMUpdater-1.0-Lilia-Lilia220982 => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [2013-09-25] (Adobe Systems Incorporated)

Task: {F64ED41B-18B4-4F36-959D-0F00EC7E1136} - System32\Tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector => Rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\MySearchDial.job => C:\Users\LILIA2~1\AppData\Roaming\MYSEAR~1\UPDATE~1\UPDATE~1.EXE

Task: C:\Windows\Tasks\Plus-HD-3.8-codedownloader.job => C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-codedownloader.exe <==== ATTENTION

Task: C:\Windows\Tasks\Plus-HD-3.8-enabler.job => C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-enabler.exe <==== ATTENTION

Task: C:\Windows\Tasks\Plus-HD-3.8-updater.job => C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-updater.exe <==== ATTENTION
 

==================== Loaded Modules (whitelisted) =============
 

2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF

2013-04-18 04:05 - 2013-01-02 07:55 - 00175008 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4406.1205_x64__8wekyb3d8bbwe\ModernShared\ErrorReporting\ErrorReporting.dll

2013-01-28 13:45 - 2013-01-28 13:45 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll

2013-01-28 13:42 - 2013-01-28 13:42 - 00084992 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll

2013-04-18 04:39 - 2012-10-23 04:37 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll

2013-08-15 11:00 - 2012-06-25 03:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll

2013-08-15 11:30 - 2013-02-20 21:58 - 00089672 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\Clearfishellext.dll

2013-12-05 10:33 - 2013-12-04 03:47 - 00702416 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libglesv2.dll

2013-12-05 10:33 - 2013-12-04 03:47 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libegl.dll

2013-12-05 10:33 - 2013-12-04 03:48 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll

2013-12-05 10:33 - 2013-12-04 03:48 - 00399312 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll

2013-12-05 10:33 - 2013-12-04 03:47 - 01619408 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll

2013-12-05 10:33 - 2013-12-04 03:48 - 13586896 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll
 

==================== Alternate Data Streams (whitelisted) =========
 
 

==================== Safe Mode (whitelisted) ===================
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"
 

==================== Faulty Device Manager Devices =============
 

Name: Bluetooth USB Module

Description: Bluetooth USB Module

Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}

Manufacturer: Qualcomm Atheros Communications

Service: BTHUSB

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (12/15/2013 10:00:17 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.

Das erforderliche "name"-Attribut fehlt im assemblyIdentity-Element.
 

Error: (12/15/2013 10:00:17 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.

Das erforderliche "name"-Attribut fehlt im assemblyIdentity-Element.
 

Error: (12/15/2013 09:58:43 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: DownloadAcceleratorSetup.exe, Version: 0.0.0.0, Zeitstempel: 0x2a425e19

Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000

Ausnahmecode: 0xc000041d

Fehleroffset: 0x01d552a6

ID des fehlerhaften Prozesses: 0x16dc

Startzeit der fehlerhaften Anwendung: 0xDownloadAcceleratorSetup.exe0

Pfad der fehlerhaften Anwendung: DownloadAcceleratorSetup.exe1

Pfad des fehlerhaften Moduls: DownloadAcceleratorSetup.exe2

Berichtskennung: DownloadAcceleratorSetup.exe3

Vollständiger Name des fehlerhaften Pakets: DownloadAcceleratorSetup.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: DownloadAcceleratorSetup.exe5
 

Error: (12/15/2013 09:58:36 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: DownloadAcceleratorSetup.exe, Version: 0.0.0.0, Zeitstempel: 0x2a425e19

Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000

Ausnahmecode: 0xc0000005

Fehleroffset: 0x01d552a6

ID des fehlerhaften Prozesses: 0x16dc

Startzeit der fehlerhaften Anwendung: 0xDownloadAcceleratorSetup.exe0

Pfad der fehlerhaften Anwendung: DownloadAcceleratorSetup.exe1

Pfad des fehlerhaften Moduls: DownloadAcceleratorSetup.exe2

Berichtskennung: DownloadAcceleratorSetup.exe3

Vollständiger Name des fehlerhaften Pakets: DownloadAcceleratorSetup.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: DownloadAcceleratorSetup.exe5
 

Error: (12/15/2013 07:35:00 PM) (Source: VSS) (User: )

Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert

.

Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
 
 

Vorgang:

   Generatordaten werden gesammelt
 

Kontext:

   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}

   Generatorname: System Writer

   Generatorinstanz-ID: {7935905f-3eb1-4136-bb93-7bc97509d6aa}
 

Error: (12/15/2013 07:21:51 PM) (Source: VSS) (User: )

Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert

.

Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
 
 

Vorgang:

   Generatordaten werden gesammelt
 

Kontext:

   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}

   Generatorname: System Writer

   Generatorinstanz-ID: {de43d658-c67f-4149-81a2-f9e3c6729f35}
 

Error: (12/14/2013 08:39:27 AM) (Source: VSS) (User: )

Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert

.

Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
 
 

Vorgang:

   Generatordaten werden gesammelt
 

Kontext:

   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}

   Generatorname: System Writer

   Generatorinstanz-ID: {a5669899-e6b3-4698-8e2b-4e7d2bf39bac}
 

Error: (12/13/2013 11:45:29 PM) (Source: Application Hang) (User: )

Description: Programm SystemSettings.exe, Version 6.2.9200.16420 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 17e8
 

Startzeit: 01cef854fb97bca9
 

Endzeit: 16
 

Anwendungspfad: C:\Windows\ImmersiveControlPanel\SystemSettings.exe
 

Berichts-ID: 42c90df8-6448-11e3-be7f-54bef71b4881
 

Vollständiger Name des fehlerhaften Pakets: windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy
 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: microsoft.windows.immersivecontrolpanel
 

Error: (12/13/2013 11:44:28 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 10.0.9200.16537, Zeitstempel: 0x512347f7

Name des fehlerhaften Moduls: OXfYcs.dll, Version: 1.1.0.0, Zeitstempel: 0x52919e86

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0001a800

ID des fehlerhaften Prozesses: 0x91c

Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0

Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1

Pfad des fehlerhaften Moduls: IEXPLORE.EXE2

Berichtskennung: IEXPLORE.EXE3

Vollständiger Name des fehlerhaften Pakets: IEXPLORE.EXE4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: IEXPLORE.EXE5
 

Error: (12/13/2013 11:38:42 PM) (Source: Application Hang) (User: )

Description: Programm WWAHost.exe, Version 6.2.9200.16420 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 112c
 

Startzeit: 01cef853f12d7d48
 

Endzeit: 4294967295
 

Anwendungspfad: C:\Windows\System32\WWAHost.exe
 

Berichts-ID: 5102fde4-6447-11e3-be7f-54bef71b4881
 

Vollständiger Name des fehlerhaften Pakets: winstore_1.0.0.0_neutral_neutral_cw5n1h2txyewy
 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Windows.Store
 
 

System errors:

=============

Error: (12/15/2013 07:40:28 PM) (Source: DCOM) (User: NT-AUTORITÄT)

Description: {211EBA3A-EA5A-496B-A021-5C6BEB365E4C}
 

Error: (12/15/2013 07:32:36 PM) (Source: EventLog) (User: )

Description: Das System wurde zuvor am ‎15.‎12.‎2013 um 19:20:35 unerwartet heruntergefahren.
 

Error: (12/15/2013 07:19:25 PM) (Source: EventLog) (User: )

Description: Das System wurde zuvor am ‎15.‎12.‎2013 um 18:55:51 unerwartet heruntergefahren.
 

Error: (12/14/2013 10:20:22 PM) (Source: DCOM) (User: Lilia)

Description: {209500FC-6B45-4693-8871-6296C4843751}
 

Error: (12/14/2013 00:52:46 PM) (Source: DCOM) (User: NT-AUTORITÄT)

Description: {209500FC-6B45-4693-8871-6296C4843751}
 

Error: (12/14/2013 08:36:22 AM) (Source: EventLog) (User: )

Description: Das System wurde zuvor am ‎14.‎12.‎2013 um 00:09:08 unerwartet heruntergefahren.
 

Error: (12/14/2013 08:33:12 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "McAfee Anti-Spam Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (12/14/2013 08:00:39 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "McAfee Anti-Spam Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (12/14/2013 00:12:55 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "McAfee Anti-Spam Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (12/13/2013 11:58:32 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "McAfee Anti-Spam Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 
 

Microsoft Office Sessions:

=========================

Error: (12/15/2013 10:00:17 PM) (Source: SideBySide)(User: )

Description: assemblyIdentitynameC:\Users\Lilia220982\AppData\Local\Temp\135.65761418153417_Update.exeC:\Users\Lilia220982\AppData\Local\Temp\135.65761418153417_Update.exe3
 

Error: (12/15/2013 10:00:17 PM) (Source: SideBySide)(User: )

Description: assemblyIdentitynameC:\Users\LILIA2~1\AppData\Local\Temp\135.65761418153417_Update.exeC:\Users\LILIA2~1\AppData\Local\Temp\135.65761418153417_Update.exe3
 

Error: (12/15/2013 09:58:43 PM) (Source: Application Error)(User: )

Description: DownloadAcceleratorSetup.exe0.0.0.02a425e19unknown0.0.0.000000000c000041d01d552a616dc01cef9d867d6456fC:\Users\Lilia220982\Downloads\DownloadAcceleratorSetup.exeunknownadd81211-65cb-11e3-be82-54bef71b4881
 

Error: (12/15/2013 09:58:36 PM) (Source: Application Error)(User: )

Description: DownloadAcceleratorSetup.exe0.0.0.02a425e19unknown0.0.0.000000000c000000501d552a616dc01cef9d867d6456fC:\Users\Lilia220982\Downloads\DownloadAcceleratorSetup.exeunknownaa2724a5-65cb-11e3-be82-54bef71b4881
 

Error: (12/15/2013 07:35:00 PM) (Source: VSS)(User: )

Description: 0x80070005, Zugriff verweigert
 
 

Vorgang:

   Generatordaten werden gesammelt
 

Kontext:

   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}

   Generatorname: System Writer

   Generatorinstanz-ID: {7935905f-3eb1-4136-bb93-7bc97509d6aa}
 

Error: (12/15/2013 07:21:51 PM) (Source: VSS)(User: )

Description: 0x80070005, Zugriff verweigert
 
 

Vorgang:

   Generatordaten werden gesammelt
 

Kontext:

   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}

   Generatorname: System Writer

   Generatorinstanz-ID: {de43d658-c67f-4149-81a2-f9e3c6729f35}
 

Error: (12/14/2013 08:39:27 AM) (Source: VSS)(User: )

Description: 0x80070005, Zugriff verweigert
 
 

Vorgang:

   Generatordaten werden gesammelt
 

Kontext:

   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}

   Generatorname: System Writer

   Generatorinstanz-ID: {a5669899-e6b3-4698-8e2b-4e7d2bf39bac}
 

Error: (12/13/2013 11:45:29 PM) (Source: Application Hang)(User: )

Description: SystemSettings.exe6.2.9200.1642017e801cef854fb97bca916C:\Windows\ImmersiveControlPanel\SystemSettings.exe42c90df8-6448-11e3-be7f-54bef71b4881windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewymicrosoft.windows.immersivecontrolpanel
 

Error: (12/13/2013 11:44:28 PM) (Source: Application Error)(User: )

Description: IEXPLORE.EXE10.0.9200.16537512347f7OXfYcs.dll1.1.0.052919e86c00000050001a80091c01cef854e1350248C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Program Files (x86)\YoutubeAdblocker\OXfYcs.dll1f481491-6448-11e3-be7f-54bef71b4881
 

Error: (12/13/2013 11:38:42 PM) (Source: Application Hang)(User: )

Description: WWAHost.exe6.2.9200.16420112c01cef853f12d7d484294967295C:\Windows\System32\WWAHost.exe5102fde4-6447-11e3-be7f-54bef71b4881winstore_1.0.0.0_neutral_neutral_cw5n1h2txyewyWindows.Store
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 30%

Total physical RAM: 8010.27 MB

Available physical RAM: 5544.13 MB

Total Pagefile: 16202.27 MB

Available Pagefile: 13255.88 MB

Total Virtual: 8192 MB

Available Virtual: 8191.77 MB
 

==================== Drives ================================
 

Drive c: (Acer) (Fixed) (Total:913.7 GB) (Free:758.87 GB) NTFS

Drive e: () (Removable) (Total:15.02 GB) (Free:2.88 GB) FAT32

Drive f: () (Removable) (Total:7.45 GB) (Free:5.33 GB) FAT32
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (Size: 932 GB) (Disk ID: 7DF3C8B3)
 

Partition: GPT Partition Type

========================================================

Disk: 1 (Size: 15 GB) (Disk ID: 00000000)

Partition 1: (Not Active) - (Size=15 GB) - (Type=0C)
 

========================================================

Disk: 2 (Size: 7 GB) (Disk ID: 00000000)

Partition 1: (Not Active) - (Size=7 GB) - (Type=0B)
 

==================== End Of Log ============================

Was ist mit den Logs deines Virenscanners?

ich habe keine logs von virenscanner

hatte nur eine meldung von mc afee das viren drauf sind...die hab ich isoliert und fertig

aber diese meldung von mc afee kommt in letzter zeit immer wieder

Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Malwarebytes Anti-Rootkit BETA 1.07.0.1008
Malwarebytes : Free anti-malware download

Database version: v2013.12.15.06

Windows 8 x64 NTFS
Internet Explorer 10.0.9200.16750
Lilia220982 :: LILIA [limited]

15.12.2013 22:37:47
mbar-log-2013-12-15 (22-37-47).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 251118
Time elapsed: 42 minute(s), 17 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

Zitat:

Lilia220982 :: LILIA [limited]

Hattest du keine Adminrechte? :wtf:

was heißt das? hab tune up utilities auf meinem pc installiert. da wird ein Problem angezeigt:Administrative Freigaben aktiviert

adminrechte für was?

bin nicht grad ein Pc Ass

Starte MBAR nochmal, aber per Rechtsklick => als Administrator ausführen

habs gemacht...stand wieder no Malware required

Malwarebytes Anti-Rootkit BETA 1.07.0.1008
Malwarebytes : Free anti-malware download

Database version: v2013.12.15.07

Windows 8 x64 NTFS
Internet Explorer 10.0.9200.16750
Lilia220982 :: LILIA [administrator]

16.12.2013 00:44:54
mbar-log-2013-12-16 (00-44-54).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 251222
Time elapsed: 36 minute(s), 56 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

Jetzt steht es da richtig

Adware/Junkware/Toolbars entfernen

1. Schritt: adwCleaner

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

AdwCleaner Logfile:

Code:

# AdwCleaner v3.015 - Bericht erstellt am 16/12/2013 um 12:11:03

# Updated 10/12/2013 von Xplode

# Betriebssystem : Windows 8  (64 bits)

# Benutzername : Lilia220982 - LILIA

# Gestartet von : C:\Users\Lilia220982\Downloads\adwcleaner.exe

# Option : Löschen
 

***** [ Dienste ] *****
 

[#] Dienst Gelöscht : SProtection
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\ProgramData\boost_interprocess

Ordner Gelöscht : C:\ProgramData\Iminent

Ordner Gelöscht : C:\ProgramData\QuickSet

Ordner Gelöscht : C:\ProgramData\YoutubeAdblocker

Ordner Gelöscht : C:\ProgramData\suerF aNNd Keep

Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Iminent

Ordner Gelöscht : C:\Program Files (x86)\Iminent

Ordner Gelöscht : C:\Program Files (x86)\Web Optimizer

Ordner Gelöscht : C:\Program Files (x86)\YoutubeAdblocker

Ordner Gelöscht : C:\Program Files (x86)\Plus-HD-3.8

Ordner Gelöscht : C:\Program Files (x86)\suerF aNNd Keep

Ordner Gelöscht : C:\Program Files (x86)\Common Files\Umbrella

Ordner Gelöscht : C:\Users\LILIA2~1\AppData\Local\Temp\Iminent

Ordner Gelöscht : C:\Users\Lilia220982\Mysearchdial

Ordner Gelöscht : C:\Users\Lilia220982\AppData\Local\DownloadGuide

Ordner Gelöscht : C:\Users\Lilia220982\AppData\LocalLow\GutscheinCodes

Ordner Gelöscht : C:\Users\Lilia220982\AppData\Roaming\EZDownloader

Ordner Gelöscht : C:\Users\Lilia220982\AppData\Roaming\Iminent

Ordner Gelöscht : C:\Users\Lilia220982\AppData\Roaming\Mysearchdial

Ordner Gelöscht : C:\Users\Lilia220982\AppData\Roaming\Windows Net Data

Ordner Gelöscht : C:\Users\Lilia220982\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff

Datei Gelöscht : C:\END

Datei Gelöscht : C:\Users\Lilia220982\AppData\Local\mysearchdial-speeddial.crx

Datei Gelöscht : C:\Users\Lilia220982\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pflphaooapbgpeakohlggbpidpppgdff_0.localstorage

Datei Gelöscht : C:\Users\Lilia220982\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_sb.scorecardresearch.com_0.localstorage

Datei Gelöscht : C:\Users\Lilia220982\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_sb.scorecardresearch.com_0.localstorage-journal

Datei Gelöscht : C:\Windows\Tasks\MySearchDial.job

Datei Gelöscht : C:\Windows\System32\Tasks\MySearchDial

Datei Gelöscht : C:\Windows\Tasks\Plus-HD-3.8-codedownloader.job

Datei Gelöscht : C:\Windows\System32\Tasks\Plus-HD-3.8-codedownloader

Datei Gelöscht : C:\Windows\Tasks\Plus-HD-3.8-enabler.job

Datei Gelöscht : C:\Windows\System32\Tasks\Plus-HD-3.8-enabler

Datei Gelöscht : C:\Windows\Tasks\Plus-HD-3.8-updater.job

Datei Gelöscht : C:\Windows\System32\Tasks\Plus-HD-3.8-updater
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKCU\Software\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\GutscheinCodes.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\Iminent.WebBooster.InternetExplorer.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\GutscheinCodes.GutscheinCodesBHO

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\GutscheinCodes.GutscheinCodesBHO.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.DownloadArgs

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.LinkToPromoteArgs

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.RawDataArgs

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.TinyUrlArgs

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.ViralLinkArgs

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.ClientCallback

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.ContractBase

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.AddToUserContentCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.CheckLoginStatusCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.CleanCacheCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GameOverCallback

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetCreditCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetInstallationContextCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetLoginStatusCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetLoginStatusResult

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetVariableCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetVariableResult

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.InstallationContextResult

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LoadContentCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LoadContentCommandResult

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LoginCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LoginStatusChangedCallback

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LogoutCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.MergeIdentityCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.MyAccountCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.PlayContentCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.PostContentCallback

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.RecycleViewsCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.SetVariableCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.ShowBrowserWindowCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.ShowControlCenterCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.ShowPluginWindowCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.TestContentCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.UserContentChangedCallback

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.VariableChangedCallback

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.WarmUpCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.WelcomeCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.ServerCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.ServerResult

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.LightContent

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.LightUri

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.MediatorServiceProxy

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IminentWebBooster.BrowserHelperObject

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IminentWebBooster.BrowserHelperObject.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IminentWebBooster.ScriptExtender

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IminentWebBooster.ScriptExtender.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Iminent]

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [IminentMessenger]

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0039030.BHO

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0039030.BHO.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0039030.Sandbox

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0039030.Sandbox.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{01994268-3C10-4044-A1EA-7A9C1B739A11}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{59279625-EFF0-4F55-98F0-51EDDD800DD9}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{01A602A0-D0B9-445B-8081-719E4177C4A7}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02C9C7B0-C7C8-4AAC-A9E4-55295BF60F8F}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{0398B101-6DA7-473F-A290-17D2FBC88CC0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{0CC36196-8589-4B80-A771-D659411D7F90}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{143D96F9-EB64-48B3-B192-91C2C41A1F43}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{14F7D91F-F669-45C9-9F42-BACBFDB86EAD}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{187A6488-6E71-4A2A-B118-7BEFBFE58257}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2D065204-A024-4C39-8A38-EE7078EC7ACF}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{30F5476C-677B-4DB0-B397-51F5BFD86840}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3223F2FB-D9B9-45FC-9D66-CD717FFA4EE5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{351798B1-C1D2-45AB-92B4-4D6C2D6AB5AF}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3AEA1BEF-6195-46F4-ACA2-0ED14F7EFA1B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3D7F9AC3-BAC3-4E51-81D7-D121D79E550A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4498C5E9-93C6-4142-B6BE-F0C6DC48B77A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{479BF2D6-E362-4A99-B1AB-BC764D7B97AE}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{492A108F-51D0-4BD8-899D-AD4AB2893064}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4B6D6E60-FBD2-4E79-BF4B-886BC98F1797}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5C176BA0-6FC0-4EBD-8ACF-24AC592506B6}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{60893E02-2E5B-43F9-A93A-BAD60C2DF6EF}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6D39931F-451E-4BDD-BAF4-37FB96DBBA5D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{76C684D2-C35D-4284-976A-D862F53ADB81}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{796D822A-C3F9-4A97-BAAB-42FE7628EA63}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{79EF3691-EC1A-4705-A01A-D2E36EC11758}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{82F41418-8E64-47EB-A7F1-4702A974D289}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{85D920CE-63A7-46DC-8992-41D1D2E07FAD}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{895ED5E8-ABB4-40C3-A0CA-2571964268E2}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{8AAC123A-1959-4A45-BFC5-E2D50783098A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A07956CD-81F8-4A03-B524-5D87E690DC83}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B5E3B26B-6E5C-4865-A63D-58D04B10E245}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B84D2DC5-42B2-4E5E-BF61-7B48152FF8EF}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B89D5309-0367-4494-A92F-3D4C94F88307}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C014EBF8-8854-448B-B5A4-557C4090EDCE}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C31191DB-2F64-464C-B97C-6AC81ACB7AAC}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C342C7A7-F622-4EF3-8B7F-ABB9FBE73F14}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C4765B07-BC2F-477B-925C-B2BF24887823}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C875C0A1-09E3-48D5-9F8E-BD337796FD14}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CD126DA6-FF5B-4181-AC13-54A62240D2FA}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DD438708-AAB4-422D-A322-B619589F5680}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E812AE43-7799-4E67-8CF8-4104297A2D16}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F0BAAEC7-9AE0-49FF-9C4B-86E774FF397F}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F92193FD-2243-4401-9ACC-49FF30885898}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FD21B8A2-910B-45AC-9C10-45E6A8B84984}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311901130}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322902230}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C58D664A-3DBC-4925-AE74-0382007DF113}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355905530}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366906630}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{A9CAF365-EA35-45DA-BD8B-2EFA09D374AC}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{F905535E-9C87-4A3F-8A3E-4E3B54C461C5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344904430}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311901130}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110311901130}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110311901130}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0AF350D9-3916-454B-AC53-0B0B65F41301}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1469ddc6-29a6-4f88-92c7-57dfb27ee8bd}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21025663-595c-4163-be9f-95fc77426885}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2188fb19-3cb9-4901-821f-d8161ee4a029}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{54d72285-6f00-4d85-8ef2-06d6aa19fcf8}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6f2216f7-3be2-4d2b-ba2c-63d90a638984}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C58D664A-3DBC-4925-AE74-0382007DF113}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355905530}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366906630}

Schlüssel Gelöscht : HKCU\Software\Iminent

Schlüssel Gelöscht : HKCU\Software\InstallCore

Schlüssel Gelöscht : HKCU\Software\installedbrowserextensions

Schlüssel Gelöscht : HKCU\Software\mysearchdial

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Plus-HD-3.8

Schlüssel Gelöscht : HKLM\Software\Conduit

Schlüssel Gelöscht : HKLM\Software\Iminent

Schlüssel Gelöscht : HKLM\Software\Umbrella

Schlüssel Gelöscht : HKLM\Software\Plus-HD-3.8

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\mysearchdial

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{973DD1DF-D51D-46BB-B6AC-D56617D133C1}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A35CA8FF-CB7D-8361-1CB9-83219CD11C78}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Plus-HD-3.8
 

***** [ Browser ] *****
 

-\\ Internet Explorer v10.0.9200.16537
 

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
 

-\\ Google Chrome v31.0.1650.63
 

[ Datei : C:\Users\Lilia220982\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 

Gelöscht : homepage

Gelöscht : icon_url

Gelöscht : search_url

Gelöscht : keyword

Gelöscht : urls_to_restore_on_startup
 

*************************
 

AdwCleaner[R0].txt - [26621 octets] - [16/12/2013 12:10:11]

AdwCleaner[S0].txt - [25730 octets] - [16/12/2013 12:11:03]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [25791 octets] ##########

--- --- ---

AdwCleaner Logfile:

Code:

# AdwCleaner v3.015 - Bericht erstellt am 16/12/2013 um 12:11:03

# Updated 10/12/2013 von Xplode

# Betriebssystem : Windows 8  (64 bits)

# Benutzername : Lilia220982 - LILIA

# Gestartet von : C:\Users\Lilia220982\Downloads\adwcleaner.exe

# Option : Löschen
 

***** [ Dienste ] *****
 

[#] Dienst Gelöscht : SProtection
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\ProgramData\boost_interprocess

Ordner Gelöscht : C:\ProgramData\Iminent

Ordner Gelöscht : C:\ProgramData\QuickSet

Ordner Gelöscht : C:\ProgramData\YoutubeAdblocker

Ordner Gelöscht : C:\ProgramData\suerF aNNd Keep

Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Iminent

Ordner Gelöscht : C:\Program Files (x86)\Iminent

Ordner Gelöscht : C:\Program Files (x86)\Web Optimizer

Ordner Gelöscht : C:\Program Files (x86)\YoutubeAdblocker

Ordner Gelöscht : C:\Program Files (x86)\Plus-HD-3.8

Ordner Gelöscht : C:\Program Files (x86)\suerF aNNd Keep

Ordner Gelöscht : C:\Program Files (x86)\Common Files\Umbrella

Ordner Gelöscht : C:\Users\LILIA2~1\AppData\Local\Temp\Iminent

Ordner Gelöscht : C:\Users\Lilia220982\Mysearchdial

Ordner Gelöscht : C:\Users\Lilia220982\AppData\Local\DownloadGuide

Ordner Gelöscht : C:\Users\Lilia220982\AppData\LocalLow\GutscheinCodes

Ordner Gelöscht : C:\Users\Lilia220982\AppData\Roaming\EZDownloader

Ordner Gelöscht : C:\Users\Lilia220982\AppData\Roaming\Iminent

Ordner Gelöscht : C:\Users\Lilia220982\AppData\Roaming\Mysearchdial

Ordner Gelöscht : C:\Users\Lilia220982\AppData\Roaming\Windows Net Data

Ordner Gelöscht : C:\Users\Lilia220982\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff

Datei Gelöscht : C:\END

Datei Gelöscht : C:\Users\Lilia220982\AppData\Local\mysearchdial-speeddial.crx

Datei Gelöscht : C:\Users\Lilia220982\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pflphaooapbgpeakohlggbpidpppgdff_0.localstorage

Datei Gelöscht : C:\Users\Lilia220982\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_sb.scorecardresearch.com_0.localstorage

Datei Gelöscht : C:\Users\Lilia220982\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_sb.scorecardresearch.com_0.localstorage-journal

Datei Gelöscht : C:\Windows\Tasks\MySearchDial.job

Datei Gelöscht : C:\Windows\System32\Tasks\MySearchDial

Datei Gelöscht : C:\Windows\Tasks\Plus-HD-3.8-codedownloader.job

Datei Gelöscht : C:\Windows\System32\Tasks\Plus-HD-3.8-codedownloader

Datei Gelöscht : C:\Windows\Tasks\Plus-HD-3.8-enabler.job

Datei Gelöscht : C:\Windows\System32\Tasks\Plus-HD-3.8-enabler

Datei Gelöscht : C:\Windows\Tasks\Plus-HD-3.8-updater.job

Datei Gelöscht : C:\Windows\System32\Tasks\Plus-HD-3.8-updater
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKCU\Software\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\GutscheinCodes.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\Iminent.WebBooster.InternetExplorer.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\GutscheinCodes.GutscheinCodesBHO

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\GutscheinCodes.GutscheinCodesBHO.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.DownloadArgs

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.LinkToPromoteArgs

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.RawDataArgs

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.TinyUrlArgs

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.ViralLinkArgs

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.ClientCallback

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.ContractBase

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.AddToUserContentCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.CheckLoginStatusCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.CleanCacheCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GameOverCallback

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetCreditCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetInstallationContextCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetLoginStatusCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetLoginStatusResult

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetVariableCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetVariableResult

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.InstallationContextResult

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LoadContentCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LoadContentCommandResult

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LoginCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LoginStatusChangedCallback

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LogoutCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.MergeIdentityCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.MyAccountCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.PlayContentCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.PostContentCallback

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.RecycleViewsCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.SetVariableCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.ShowBrowserWindowCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.ShowControlCenterCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.ShowPluginWindowCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.TestContentCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.UserContentChangedCallback

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.VariableChangedCallback

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.WarmUpCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.WelcomeCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.ServerCommand

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.ServerResult

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.LightContent

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.LightUri

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Mediator.MediatorServiceProxy

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IminentWebBooster.BrowserHelperObject

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IminentWebBooster.BrowserHelperObject.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IminentWebBooster.ScriptExtender

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IminentWebBooster.ScriptExtender.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Iminent]

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [IminentMessenger]

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0039030.BHO

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0039030.BHO.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0039030.Sandbox

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0039030.Sandbox.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{01994268-3C10-4044-A1EA-7A9C1B739A11}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{59279625-EFF0-4F55-98F0-51EDDD800DD9}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{01A602A0-D0B9-445B-8081-719E4177C4A7}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02C9C7B0-C7C8-4AAC-A9E4-55295BF60F8F}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{0398B101-6DA7-473F-A290-17D2FBC88CC0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{0CC36196-8589-4B80-A771-D659411D7F90}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{143D96F9-EB64-48B3-B192-91C2C41A1F43}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{14F7D91F-F669-45C9-9F42-BACBFDB86EAD}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{187A6488-6E71-4A2A-B118-7BEFBFE58257}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2D065204-A024-4C39-8A38-EE7078EC7ACF}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{30F5476C-677B-4DB0-B397-51F5BFD86840}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3223F2FB-D9B9-45FC-9D66-CD717FFA4EE5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{351798B1-C1D2-45AB-92B4-4D6C2D6AB5AF}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3AEA1BEF-6195-46F4-ACA2-0ED14F7EFA1B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3D7F9AC3-BAC3-4E51-81D7-D121D79E550A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4498C5E9-93C6-4142-B6BE-F0C6DC48B77A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{479BF2D6-E362-4A99-B1AB-BC764D7B97AE}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{492A108F-51D0-4BD8-899D-AD4AB2893064}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4B6D6E60-FBD2-4E79-BF4B-886BC98F1797}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5C176BA0-6FC0-4EBD-8ACF-24AC592506B6}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{60893E02-2E5B-43F9-A93A-BAD60C2DF6EF}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6D39931F-451E-4BDD-BAF4-37FB96DBBA5D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{76C684D2-C35D-4284-976A-D862F53ADB81}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{796D822A-C3F9-4A97-BAAB-42FE7628EA63}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{79EF3691-EC1A-4705-A01A-D2E36EC11758}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{82F41418-8E64-47EB-A7F1-4702A974D289}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{85D920CE-63A7-46DC-8992-41D1D2E07FAD}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{895ED5E8-ABB4-40C3-A0CA-2571964268E2}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{8AAC123A-1959-4A45-BFC5-E2D50783098A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A07956CD-81F8-4A03-B524-5D87E690DC83}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B5E3B26B-6E5C-4865-A63D-58D04B10E245}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B84D2DC5-42B2-4E5E-BF61-7B48152FF8EF}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B89D5309-0367-4494-A92F-3D4C94F88307}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C014EBF8-8854-448B-B5A4-557C4090EDCE}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C31191DB-2F64-464C-B97C-6AC81ACB7AAC}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C342C7A7-F622-4EF3-8B7F-ABB9FBE73F14}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C4765B07-BC2F-477B-925C-B2BF24887823}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C875C0A1-09E3-48D5-9F8E-BD337796FD14}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CD126DA6-FF5B-4181-AC13-54A62240D2FA}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DD438708-AAB4-422D-A322-B619589F5680}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E812AE43-7799-4E67-8CF8-4104297A2D16}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F0BAAEC7-9AE0-49FF-9C4B-86E774FF397F}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F92193FD-2243-4401-9ACC-49FF30885898}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FD21B8A2-910B-45AC-9C10-45E6A8B84984}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311901130}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322902230}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C58D664A-3DBC-4925-AE74-0382007DF113}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355905530}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366906630}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{A9CAF365-EA35-45DA-BD8B-2EFA09D374AC}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{F905535E-9C87-4A3F-8A3E-4E3B54C461C5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344904430}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311901130}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110311901130}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110311901130}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0AF350D9-3916-454B-AC53-0B0B65F41301}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1469ddc6-29a6-4f88-92c7-57dfb27ee8bd}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21025663-595c-4163-be9f-95fc77426885}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2188fb19-3cb9-4901-821f-d8161ee4a029}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{54d72285-6f00-4d85-8ef2-06d6aa19fcf8}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6f2216f7-3be2-4d2b-ba2c-63d90a638984}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C58D664A-3DBC-4925-AE74-0382007DF113}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355905530}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366906630}

Schlüssel Gelöscht : HKCU\Software\Iminent

Schlüssel Gelöscht : HKCU\Software\InstallCore

Schlüssel Gelöscht : HKCU\Software\installedbrowserextensions

Schlüssel Gelöscht : HKCU\Software\mysearchdial

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Plus-HD-3.8

Schlüssel Gelöscht : HKLM\Software\Conduit

Schlüssel Gelöscht : HKLM\Software\Iminent

Schlüssel Gelöscht : HKLM\Software\Umbrella

Schlüssel Gelöscht : HKLM\Software\Plus-HD-3.8

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\mysearchdial

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{973DD1DF-D51D-46BB-B6AC-D56617D133C1}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A35CA8FF-CB7D-8361-1CB9-83219CD11C78}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Plus-HD-3.8
 

***** [ Browser ] *****
 

-\\ Internet Explorer v10.0.9200.16537
 

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
 

-\\ Google Chrome v31.0.1650.63
 

[ Datei : C:\Users\Lilia220982\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 

Gelöscht : homepage

Gelöscht : icon_url

Gelöscht : search_url

Gelöscht : keyword

Gelöscht : urls_to_restore_on_startup
 

*************************
 

AdwCleaner[R0].txt - [26621 octets] - [16/12/2013 12:10:11]

AdwCleaner[S0].txt - [25730 octets] - [16/12/2013 12:11:03]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [25791 octets] ##########

--- --- ---

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-12-2013 02

Ran by Lilia220982 (administrator) on LILIA on 16-12-2013 12:28:11

Running from C:\Users\Lilia220982\Downloads

Windows 8 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe

(McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe

(McAfee, Inc.) C:\Windows\System32\mfevtps.exe

(Dritek System INC.) C:\Windows\RfBtnSvc64.exe

(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe

(McAfee, Inc.) C:\Program Files\mcafee\MSC\McAPExe.exe

(McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe

(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe

(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4406.1205_x64__8wekyb3d8bbwe\LiveComm.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe

(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIIXE.EXE

(McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McUICnt.exe

(CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(McAfee, Inc.) C:\Program Files (x86)\McAfee Online Backup\MOBKbackup.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

(McAfee, Inc.) C:\Program Files (x86)\McAfee Online Backup\MOBKbackup.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Thisisu) C:\Users\Lilia220982\Downloads\JRT.exe

(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe

(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Farbar) C:\Users\Lilia220982\Downloads\FRST64 (1).exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()

HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2874256 2012-12-07] (ELAN Microelectronics Corp.)

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13267016 2013-01-29] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1276488 2013-01-18] (Realtek Semiconductor)

HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [472984 2013-09-25] (Adobe Systems Incorporated)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-01-28] ( (Atheros Communications))

HKLM\...\Policies\Explorer: [NoControlPanel] 0

HKCU\...\Run: [EPLTarget\P0000000000000000] - C:\Windows\System32\spool\drivers\x64\3\E_YATIIXE.EXE [283232 2012-10-15] (SEIKO EPSON CORPORATION)

HKLM-x32\...\Run: [mcui_exe] - C:\Program Files\mcafee.com\agent\mcagent.exe [537512 2013-09-24] (McAfee, Inc.)

HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)

HKLM-x32\...\Run: [mcpltui_exe] - C:\Program Files\mcafee.com\agent\mcagent.exe [537512 2013-09-24] (McAfee, Inc.)

HKU\Default\...\RunOnce: [RegAutoPlay] - C:\Program Files (x86)\Acer\clear.fi Media\RegAutoplay.exe [1845832 2013-02-20] (Acer Incorporated)

HKU\Default User\...\RunOnce: [RegAutoPlay] - C:\Program Files (x86)\Acer\clear.fi Media\RegAutoplay.exe [1845832 2013-02-20] (Acer Incorporated)

IFEO\excel.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"

IFEO\groove.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"

IFEO\infopath.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"

IFEO\misc.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"

IFEO\msaccess.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"

IFEO\msoxmled.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"

IFEO\mspub.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"

IFEO\mstore.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"

IFEO\ois.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"

IFEO\onenote.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"

IFEO\outlook.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"

IFEO\powerpnt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"

IFEO\vscontentinstaller.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"

IFEO\vslauncher.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"

IFEO\Winword.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.

SearchScopes: HKLM - DefaultScope {5545386B-4ACE-4EE2-8B8F-69C3BD58F376} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS

SearchScopes: HKLM - {5545386B-4ACE-4EE2-8B8F-69C3BD58F376} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS

SearchScopes: HKLM - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}

SearchScopes: HKLM-x32 - {5545386B-4ACE-4EE2-8B8F-69C3BD58F376} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS

SearchScopes: HKLM-x32 - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}

SearchScopes: HKCU - {5545386B-4ACE-4EE2-8B8F-69C3BD58F376} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus

SearchScopes: HKCU - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}

BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO: YoutubeAdblocker - {73806476-0A4F-ECF2-F30C-E1F4AFB4E4FA} - C:\Program Files (x86)\YoutubeAdblocker\OXfYcs.x64.dll No File

BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)

BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: YoutubeAdblocker - {73806476-0A4F-ECF2-F30C-E1F4AFB4E4FA} - C:\Program Files (x86)\YoutubeAdblocker\OXfYcs.dll No File

BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Web Optimizer - {bbb1d54d-cf70-4a80-bf2f-3bafca0225ce} - C:\Program Files (x86)\Web Optimizer\weboptimizer.dll No File

Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)

Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)

Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)

Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)

Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)

Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)

Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\mcafee\MSC\McSnIePl64.dll (McAfee, Inc.)

Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\MSC\McSnIePl.dll (McAfee, Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 

Chrome: 

=======

CHR HomePage: hxxp://www.google.com

CHR RestoreOnStartup: "hxxp://www.google.com"

CHR DefaultSearchKeyword: mysearchdial.com

CHR DefaultSearchProvider: Mysearchdial

CHR DefaultSearchURL: hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dsites1202&cd=2XzuyEtN2Y1L1QzuyDyE0B0E0FyBtC0ByEzzzztC0D0BtC0CtN0D0Tzu0CyBtCyDtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=583277578&ir=

CHR DefaultNewTabURL: 

CHR Extension: (Google Docs) - C:\Users\Lilia220982\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0

CHR Extension: (Google Drive) - C:\Users\Lilia220982\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0

CHR Extension: (YoutubeBookmark) - C:\Users\Lilia220982\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhnmahipmkmalgebclphdijfbkfcdgkj\1.0

CHR Extension: (YouTube) - C:\Users\Lilia220982\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0

CHR Extension: (Google Search) - C:\Users\Lilia220982\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0

CHR Extension: (suroFu Anido  keep) - C:\Users\Lilia220982\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpnnjfdapplpkcnkigmdgpomneibffon\2.19

CHR Extension: (SiteAdvisor) - C:\Users\Lilia220982\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.6.4.1291_0

CHR Extension: (YoutubeAdblocker) - C:\Users\Lilia220982\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjfkoommoonfneipcnmldapcepaglcpe\1.0

CHR Extension: (Google Wallet) - C:\Users\Lilia220982\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0

CHR Extension: (Gmail) - C:\Users\Lilia220982\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1

CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx
 

==================== Services (Whitelisted) =================
 

S4 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [227456 2013-01-28] (Qualcomm Atheros Commnucations)

R2 ETDService; C:\Program Files\Elantech\ETDService.exe [100752 2012-12-07] (ELAN Microelectronics Corp.)

R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)

R2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178048 2013-11-28] (McAfee, Inc.)

R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 McNaiAnn; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [602944 2013-08-02] (McAfee, Inc.)

R2 mcpltsvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 McProxy; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1025232 2013-11-26] (McAfee, Inc.)

R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219272 2013-11-04] (McAfee, Inc.)

R2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-11-04] (McAfee, Inc.)

R2 MOBKbackup; C:\Program Files (x86)\McAfee Online Backup\MOBKbackup.exe [231224 2010-04-13] (McAfee, Inc.)

R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [93296 2013-08-15] (Dritek System INC.)

R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2099512 2013-10-30] (TuneUp Software)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
 

==================== Drivers (Whitelisted) ====================
 

S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-01-28] (Qualcomm Atheros)

S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)

R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-11-04] (McAfee, Inc.)

S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)

R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179792 2013-11-04] (McAfee, Inc.)

R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311120 2013-11-04] (McAfee, Inc.)

S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69344 2013-11-04] (McAfee, Inc.)

R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [519576 2013-11-04] (McAfee, Inc.)

R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [782360 2013-11-04] (McAfee, Inc.)

R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [411944 2013-11-26] (McAfee, Inc.)

S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96112 2013-11-26] (McAfee, Inc.)

R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [343696 2013-11-04] (McAfee, Inc.)

R1 MOBKFilter; C:\Windows\System32\DRIVERS\MOBK.sys [66040 2010-04-13] (Mozy, Inc.)

R3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2013-08-15] (Dritek System Inc.)

R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-09-18] (TuneUp Software)
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-12-16 12:27 - 2013-12-16 12:27 - 01927940 _____ (Farbar) C:\Users\Lilia220982\Downloads\FRST64 (1).exe

2013-12-16 12:24 - 2013-12-16 12:24 - 00000845 _____ C:\Users\Lilia220982\Desktop\JRT.txt

2013-12-16 12:17 - 2013-12-16 12:17 - 00000000 ____D C:\Windows\ERUNT

2013-12-16 12:16 - 2013-12-16 12:16 - 01034531 _____ (Thisisu) C:\Users\Lilia220982\Downloads\JRT.exe

2013-12-16 12:09 - 2013-12-16 12:11 - 00000000 ____D C:\AdwCleaner

2013-12-16 12:09 - 2013-12-16 12:09 - 01226750 _____ C:\Users\Lilia220982\Downloads\adwcleaner.exe

2013-12-15 22:37 - 2013-12-16 01:22 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2013-12-15 22:37 - 2013-12-16 00:44 - 00117464 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2013-12-15 22:37 - 2013-12-15 22:37 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-12-15 22:35 - 2013-12-16 00:43 - 00089304 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2013-12-15 22:34 - 2013-12-16 01:22 - 00000000 ____D C:\Users\Lilia220982\Desktop\mbar

2013-12-15 22:32 - 2013-12-15 22:34 - 12582688 _____ (Malwarebytes Corp.) C:\Users\Lilia220982\Downloads\mbar-1.07.0.1008.exe

2013-12-15 22:06 - 2013-12-15 22:07 - 00028174 _____ C:\Users\Lilia220982\Downloads\Addition.txt

2013-12-15 22:05 - 2013-12-16 12:28 - 00016784 _____ C:\Users\Lilia220982\Downloads\FRST.txt

2013-12-15 22:05 - 2013-12-15 22:05 - 00000000 ____D C:\FRST

2013-12-15 22:03 - 2013-12-15 22:04 - 01927796 _____ (Farbar) C:\Users\Lilia220982\Downloads\FRST64.exe

2013-12-15 22:00 - 2013-12-15 22:00 - 00000963 _____ C:\Users\UpdatusUser\Desktop\MiPony.lnk

2013-12-15 22:00 - 2013-12-15 22:00 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MiPony

2013-12-15 22:00 - 2013-12-15 22:00 - 00000000 ____D C:\Program Files (x86)\MiPony

2013-12-15 21:57 - 2013-12-15 21:57 - 00673080 _____ (                                                            ) C:\Users\Lilia220982\Downloads\DownloadAcceleratorSetup.exe

2013-12-14 08:36 - 2013-12-14 08:36 - 05087072 _____ C:\Windows\system32\FNTCACHE.DAT

2013-12-13 23:25 - 2013-12-14 10:00 - 00854016 ___SH C:\Users\Lilia220982\Documents\Thumbs.db

2013-12-13 10:07 - 2013-10-25 07:19 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-12-13 10:07 - 2013-10-25 07:19 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-12-13 10:07 - 2013-10-25 07:19 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll

2013-12-13 10:07 - 2013-10-25 07:19 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-12-13 10:07 - 2013-10-25 07:18 - 19271168 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-12-13 10:07 - 2013-10-25 07:18 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-12-13 10:07 - 2013-10-25 07:17 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-12-13 10:07 - 2013-10-25 07:17 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-12-13 10:07 - 2013-10-25 07:17 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-12-13 10:07 - 2013-10-25 07:17 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-12-13 10:07 - 2013-10-25 05:45 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-12-13 10:07 - 2013-10-25 05:44 - 14356992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-12-13 10:07 - 2013-10-25 05:44 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-12-13 10:07 - 2013-10-25 05:43 - 13761536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-12-13 10:07 - 2013-10-25 05:43 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-12-13 10:07 - 2013-10-25 05:43 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-12-13 10:07 - 2013-10-25 05:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-12-13 10:07 - 2013-10-25 05:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-12-13 10:00 - 2013-11-23 07:43 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2013-12-13 10:00 - 2013-11-23 06:05 - 00368640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2013-12-13 10:00 - 2013-11-07 00:18 - 04036608 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-12-13 10:00 - 2013-10-19 06:45 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll

2013-12-13 10:00 - 2013-10-19 05:04 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll

2013-12-13 10:00 - 2013-10-10 10:32 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe

2013-12-13 10:00 - 2013-10-10 10:30 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrobj.dll

2013-12-13 10:00 - 2013-10-10 10:30 - 00156160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll

2013-12-13 10:00 - 2013-10-10 10:24 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx

2013-12-13 10:00 - 2013-10-10 10:23 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe

2013-12-13 10:00 - 2013-10-10 10:22 - 00222720 _____ (Microsoft Corporation) C:\Windows\system32\scrobj.dll

2013-12-13 10:00 - 2013-10-10 10:22 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll

2013-12-13 10:00 - 2013-10-09 02:33 - 00059416 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2013-12-13 10:00 - 2013-10-08 23:30 - 00628736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2013-12-13 10:00 - 2013-10-08 23:30 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2013-12-13 10:00 - 2013-10-08 23:30 - 00084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2013-12-13 10:00 - 2013-10-08 23:30 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2013-12-13 10:00 - 2013-10-08 23:28 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2013-12-13 10:00 - 2013-10-08 23:27 - 03279872 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2013-12-13 10:00 - 2013-10-08 23:27 - 01622016 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2013-12-13 10:00 - 2013-10-08 23:27 - 00773120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2013-12-13 10:00 - 2013-10-08 23:27 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll

2013-12-13 10:00 - 2013-10-08 23:27 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll

2013-12-13 10:00 - 2013-10-08 23:27 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2013-12-13 10:00 - 2013-10-08 23:27 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2013-12-13 10:00 - 2013-10-05 07:10 - 00285016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys

2013-12-13 10:00 - 2013-10-03 23:09 - 00385528 _____ C:\Windows\system32\ApnDatabase.xml

2013-12-13 10:00 - 2013-10-02 03:50 - 00447320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS

2013-12-13 10:00 - 2013-09-28 06:48 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2013-12-13 10:00 - 2013-09-28 04:58 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

2013-12-13 10:00 - 2013-09-19 08:32 - 01455448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2013-12-13 10:00 - 2013-08-30 06:19 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll

2013-12-13 10:00 - 2013-08-30 06:18 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll

2013-12-13 10:00 - 2013-08-30 00:48 - 00488960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll

2013-12-13 10:00 - 2013-08-30 00:47 - 00302080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll

2013-12-13 09:59 - 2013-11-01 06:38 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll

2013-12-13 09:59 - 2013-11-01 04:49 - 00273408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll

2013-12-13 09:59 - 2013-09-28 04:35 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

2013-12-11 12:31 - 2013-12-11 00:01 - 00006733 _____ C:\Users\Lilia220982\Documents\DSC_7642.xmp

2013-12-11 12:31 - 2013-12-11 00:01 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7671.xmp

2013-12-11 12:31 - 2013-12-11 00:01 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7656.xmp

2013-12-11 12:31 - 2013-12-11 00:01 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7653.xmp

2013-12-11 12:31 - 2013-12-11 00:01 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7650.xmp

2013-12-11 12:31 - 2013-12-11 00:01 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7649.xmp

2013-12-11 12:31 - 2013-11-24 16:03 - 20918831 _____ C:\Users\Lilia220982\Documents\DSC_7675.NEF

2013-12-11 12:31 - 2013-11-24 16:03 - 20797938 _____ C:\Users\Lilia220982\Documents\DSC_7676.NEF

2013-12-11 12:31 - 2013-11-24 16:02 - 21243562 _____ C:\Users\Lilia220982\Documents\DSC_7673.NEF

2013-12-11 12:31 - 2013-11-24 16:02 - 21050357 _____ C:\Users\Lilia220982\Documents\DSC_7674.NEF

2013-12-11 12:31 - 2013-11-24 16:02 - 20894698 _____ C:\Users\Lilia220982\Documents\DSC_7669.NEF

2013-12-11 12:31 - 2013-11-24 16:02 - 20877156 _____ C:\Users\Lilia220982\Documents\DSC_7667.NEF

2013-12-11 12:31 - 2013-11-24 16:02 - 20808617 _____ C:\Users\Lilia220982\Documents\DSC_7668.NEF

2013-12-11 12:31 - 2013-11-24 16:02 - 20734360 _____ C:\Users\Lilia220982\Documents\DSC_7670.NEF

2013-12-11 12:31 - 2013-11-24 16:02 - 20544495 _____ C:\Users\Lilia220982\Documents\DSC_7671.NEF

2013-12-11 12:31 - 2013-11-24 16:02 - 18966280 _____ C:\Users\Lilia220982\Documents\DSC_7672.NEF

2013-12-11 12:31 - 2013-11-24 16:01 - 21415320 _____ C:\Users\Lilia220982\Documents\DSC_7664.NEF

2013-12-11 12:31 - 2013-11-24 16:01 - 21395737 _____ C:\Users\Lilia220982\Documents\DSC_7663.NEF

2013-12-11 12:31 - 2013-11-24 16:01 - 21332472 _____ C:\Users\Lilia220982\Documents\DSC_7662.NEF

2013-12-11 12:31 - 2013-11-24 16:01 - 21319346 _____ C:\Users\Lilia220982\Documents\DSC_7660.NEF

2013-12-11 12:31 - 2013-11-24 16:01 - 21308066 _____ C:\Users\Lilia220982\Documents\DSC_7665.NEF

2013-12-11 12:31 - 2013-11-24 16:01 - 21305142 _____ C:\Users\Lilia220982\Documents\DSC_7666.NEF

2013-12-11 12:31 - 2013-11-24 16:01 - 21203240 _____ C:\Users\Lilia220982\Documents\DSC_7661.NEF

2013-12-11 12:31 - 2013-11-24 16:00 - 22575164 _____ C:\Users\Lilia220982\Documents\DSC_7658.NEF

2013-12-11 12:31 - 2013-11-24 16:00 - 22150831 _____ C:\Users\Lilia220982\Documents\DSC_7657.NEF

2013-12-11 12:31 - 2013-11-24 16:00 - 21688063 _____ C:\Users\Lilia220982\Documents\DSC_7659.NEF

2013-12-11 12:31 - 2013-11-24 16:00 - 20757841 _____ C:\Users\Lilia220982\Documents\DSC_7655.NEF

2013-12-11 12:31 - 2013-11-24 16:00 - 20613570 _____ C:\Users\Lilia220982\Documents\DSC_7656.NEF

2013-12-11 12:31 - 2013-11-24 15:59 - 21345798 _____ C:\Users\Lilia220982\Documents\DSC_7649.NEF

2013-12-11 12:31 - 2013-11-24 15:59 - 21255932 _____ C:\Users\Lilia220982\Documents\DSC_7654.NEF

2013-12-11 12:31 - 2013-11-24 15:59 - 21190900 _____ C:\Users\Lilia220982\Documents\DSC_7648.NEF

2013-12-11 12:31 - 2013-11-24 15:59 - 21138980 _____ C:\Users\Lilia220982\Documents\DSC_7650.NEF

2013-12-11 12:31 - 2013-11-24 15:59 - 21128003 _____ C:\Users\Lilia220982\Documents\DSC_7653.NEF

2013-12-11 12:31 - 2013-11-24 15:59 - 21031230 _____ C:\Users\Lilia220982\Documents\DSC_7652.NEF

2013-12-11 12:31 - 2013-11-24 15:59 - 20999587 _____ C:\Users\Lilia220982\Documents\DSC_7651.NEF

2013-12-11 12:31 - 2013-11-24 15:59 - 20574091 _____ C:\Users\Lilia220982\Documents\DSC_7646.NEF

2013-12-11 12:31 - 2013-11-24 15:59 - 20544547 _____ C:\Users\Lilia220982\Documents\DSC_7647.NEF

2013-12-11 12:31 - 2013-11-24 15:54 - 21269278 _____ C:\Users\Lilia220982\Documents\DSC_7640.NEF

2013-12-11 12:31 - 2013-11-24 15:54 - 21198537 _____ C:\Users\Lilia220982\Documents\DSC_7642.NEF

2013-12-11 12:31 - 2013-11-24 15:54 - 21110996 _____ C:\Users\Lilia220982\Documents\DSC_7641.NEF

2013-12-11 12:31 - 2013-11-24 15:54 - 21049193 _____ C:\Users\Lilia220982\Documents\DSC_7643.NEF

2013-12-11 12:31 - 2013-11-24 15:54 - 21009068 _____ C:\Users\Lilia220982\Documents\DSC_7644.NEF

2013-12-11 12:31 - 2013-11-24 15:54 - 20864095 _____ C:\Users\Lilia220982\Documents\DSC_7645.NEF

2013-12-11 12:30 - 2013-12-10 23:41 - 00006733 _____ C:\Users\Lilia220982\Documents\DSC_7608.xmp

2013-12-11 12:30 - 2013-12-10 23:41 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7631.xmp

2013-12-11 12:30 - 2013-12-10 23:41 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7630.xmp

2013-12-11 12:30 - 2013-12-10 23:41 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7624.xmp

2013-12-11 12:30 - 2013-12-10 23:41 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7621.xmp

2013-12-11 12:30 - 2013-12-10 23:41 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7618.xmp

2013-12-11 12:30 - 2013-12-10 23:41 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7610.xmp

2013-12-11 12:30 - 2013-12-10 23:41 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7609.xmp

2013-12-11 12:30 - 2013-12-10 23:21 - 00006734 _____ C:\Users\Lilia220982\Documents\DSC_7591.xmp

2013-12-11 12:30 - 2013-12-10 23:21 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7592.xmp

2013-12-11 12:30 - 2013-12-10 23:21 - 00006684 _____ C:\Users\Lilia220982\Documents\DSC_7598.xmp

2013-12-11 12:30 - 2013-12-10 23:05 - 00006733 _____ C:\Users\Lilia220982\Documents\DSC_7561.xmp

2013-12-11 12:30 - 2013-12-10 23:05 - 00006691 _____ C:\Users\Lilia220982\Documents\DSC_7564.xmp

2013-12-11 12:30 - 2013-12-10 23:05 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7577.xmp

2013-12-11 12:30 - 2013-12-10 23:05 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7573.xmp

2013-12-11 12:30 - 2013-12-10 23:05 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7567.xmp

2013-12-11 12:30 - 2013-12-10 22:53 - 00006691 _____ C:\Users\Lilia220982\Documents\DSC_7558.xmp

2013-12-11 12:30 - 2013-11-24 15:54 - 21220707 _____ C:\Users\Lilia220982\Documents\DSC_7639.NEF

2013-12-11 12:30 - 2013-11-24 15:53 - 21446364 _____ C:\Users\Lilia220982\Documents\DSC_7634.NEF

2013-12-11 12:30 - 2013-11-24 15:53 - 21317836 _____ C:\Users\Lilia220982\Documents\DSC_7635.NEF

2013-12-11 12:30 - 2013-11-24 15:53 - 21312189 _____ C:\Users\Lilia220982\Documents\DSC_7636.NEF

2013-12-11 12:30 - 2013-11-24 15:53 - 21285187 _____ C:\Users\Lilia220982\Documents\DSC_7637.NEF

2013-12-11 12:30 - 2013-11-24 15:53 - 21195712 _____ C:\Users\Lilia220982\Documents\DSC_7638.NEF

2013-12-11 12:30 - 2013-11-24 15:52 - 21304101 _____ C:\Users\Lilia220982\Documents\DSC_7633.NEF

2013-12-11 12:30 - 2013-11-24 15:50 - 21467157 _____ C:\Users\Lilia220982\Documents\DSC_7625.NEF

2013-12-11 12:30 - 2013-11-24 15:50 - 21447827 _____ C:\Users\Lilia220982\Documents\DSC_7626.NEF

2013-12-11 12:30 - 2013-11-24 15:50 - 21400375 _____ C:\Users\Lilia220982\Documents\DSC_7627.NEF

2013-12-11 12:30 - 2013-11-24 15:50 - 21367779 _____ C:\Users\Lilia220982\Documents\DSC_7630.NEF

2013-12-11 12:30 - 2013-11-24 15:50 - 21314863 _____ C:\Users\Lilia220982\Documents\DSC_7628.NEF

2013-12-11 12:30 - 2013-11-24 15:50 - 21300118 _____ C:\Users\Lilia220982\Documents\DSC_7629.NEF

2013-12-11 12:30 - 2013-11-24 15:50 - 20352392 _____ C:\Users\Lilia220982\Documents\DSC_7632.NEF

2013-12-11 12:30 - 2013-11-24 15:50 - 20179086 _____ C:\Users\Lilia220982\Documents\DSC_7631.NEF

2013-12-11 12:30 - 2013-11-24 15:49 - 22735575 _____ C:\Users\Lilia220982\Documents\DSC_7620.NEF

2013-12-11 12:30 - 2013-11-24 15:49 - 21372700 _____ C:\Users\Lilia220982\Documents\DSC_7624.NEF

2013-12-11 12:30 - 2013-11-24 15:49 - 21367703 _____ C:\Users\Lilia220982\Documents\DSC_7621.NEF

2013-12-11 12:30 - 2013-11-24 15:49 - 21292874 _____ C:\Users\Lilia220982\Documents\DSC_7622.NEF

2013-12-11 12:30 - 2013-11-24 15:49 - 21149254 _____ C:\Users\Lilia220982\Documents\DSC_7623.NEF

2013-12-11 12:30 - 2013-11-24 15:48 - 22669157 _____ C:\Users\Lilia220982\Documents\DSC_7619.NEF

2013-12-11 12:30 - 2013-11-24 15:48 - 21809299 _____ C:\Users\Lilia220982\Documents\DSC_7615.NEF

2013-12-11 12:30 - 2013-11-24 15:48 - 21736955 _____ C:\Users\Lilia220982\Documents\DSC_7616.NEF

2013-12-11 12:30 - 2013-11-24 15:48 - 21695324 _____ C:\Users\Lilia220982\Documents\DSC_7614.NEF

2013-12-11 12:30 - 2013-11-24 15:48 - 21510820 _____ C:\Users\Lilia220982\Documents\DSC_7617.NEF

2013-12-11 12:30 - 2013-11-24 15:48 - 21510215 _____ C:\Users\Lilia220982\Documents\DSC_7618.NEF

2013-12-11 12:30 - 2013-11-24 15:46 - 22423892 _____ C:\Users\Lilia220982\Documents\DSC_7610.NEF

2013-12-11 12:30 - 2013-11-24 15:46 - 22409445 _____ C:\Users\Lilia220982\Documents\DSC_7612.NEF

2013-12-11 12:30 - 2013-11-24 15:46 - 22305286 _____ C:\Users\Lilia220982\Documents\DSC_7613.NEF

2013-12-11 12:30 - 2013-11-24 15:46 - 22270994 _____ C:\Users\Lilia220982\Documents\DSC_7611.NEF

2013-12-11 12:30 - 2013-11-24 15:45 - 22580974 _____ C:\Users\Lilia220982\Documents\DSC_7606.NEF

2013-12-11 12:30 - 2013-11-24 15:45 - 22460928 _____ C:\Users\Lilia220982\Documents\DSC_7607.NEF

2013-12-11 12:30 - 2013-11-24 15:45 - 22441655 _____ C:\Users\Lilia220982\Documents\DSC_7603.NEF

2013-12-11 12:30 - 2013-11-24 15:45 - 22328521 _____ C:\Users\Lilia220982\Documents\DSC_7609.NEF

2013-12-11 12:30 - 2013-11-24 15:45 - 22309339 _____ C:\Users\Lilia220982\Documents\DSC_7608.NEF

2013-12-11 12:30 - 2013-11-24 15:45 - 22058826 _____ C:\Users\Lilia220982\Documents\DSC_7604.NEF

2013-12-11 12:30 - 2013-11-24 15:45 - 21931094 _____ C:\Users\Lilia220982\Documents\DSC_7605.NEF

2013-12-11 12:30 - 2013-11-24 15:45 - 19753720 _____ C:\Users\Lilia220982\Documents\DSC_7601.NEF

2013-12-11 12:30 - 2013-11-24 15:45 - 19554852 _____ C:\Users\Lilia220982\Documents\DSC_7602.NEF

2013-12-11 12:30 - 2013-11-24 15:44 - 23499442 _____ C:\Users\Lilia220982\Documents\DSC_7596.NEF

2013-12-11 12:30 - 2013-11-24 15:44 - 23355628 _____ C:\Users\Lilia220982\Documents\DSC_7597.NEF

2013-12-11 12:30 - 2013-11-24 15:44 - 21924766 _____ C:\Users\Lilia220982\Documents\DSC_7600.NEF

2013-12-11 12:30 - 2013-11-24 15:44 - 21894421 _____ C:\Users\Lilia220982\Documents\DSC_7598.NEF

2013-12-11 12:30 - 2013-11-24 15:44 - 21807948 _____ C:\Users\Lilia220982\Documents\DSC_7599.NEF

2013-12-11 12:30 - 2013-11-24 15:43 - 22832312 _____ C:\Users\Lilia220982\Documents\DSC_7595.NEF

2013-12-11 12:30 - 2013-11-24 15:43 - 22312310 _____ C:\Users\Lilia220982\Documents\DSC_7594.NEF

2013-12-11 12:30 - 2013-11-24 15:43 - 22205342 _____ C:\Users\Lilia220982\Documents\DSC_7593.NEF

2013-12-11 12:30 - 2013-11-24 15:43 - 22170342 _____ C:\Users\Lilia220982\Documents\DSC_7592.NEF

2013-12-11 12:30 - 2013-11-24 15:43 - 21733799 _____ C:\Users\Lilia220982\Documents\DSC_7589.NEF

2013-12-11 12:30 - 2013-11-24 15:43 - 21538509 _____ C:\Users\Lilia220982\Documents\DSC_7590.NEF

2013-12-11 12:30 - 2013-11-24 15:43 - 21417136 _____ C:\Users\Lilia220982\Documents\DSC_7586.NEF

2013-12-11 12:30 - 2013-11-24 15:43 - 21381225 _____ C:\Users\Lilia220982\Documents\DSC_7591.NEF

2013-12-11 12:30 - 2013-11-24 15:43 - 21277249 _____ C:\Users\Lilia220982\Documents\DSC_7587.NEF

2013-12-11 12:30 - 2013-11-24 15:43 - 21217855 _____ C:\Users\Lilia220982\Documents\DSC_7588.NEF

2013-12-11 12:30 - 2013-11-24 15:42 - 21538864 _____ C:\Users\Lilia220982\Documents\DSC_7585.NEF

2013-12-11 12:30 - 2013-11-24 15:42 - 21531516 _____ C:\Users\Lilia220982\Documents\DSC_7583.NEF

2013-12-11 12:30 - 2013-11-24 15:42 - 21416426 _____ C:\Users\Lilia220982\Documents\DSC_7584.NEF

2013-12-11 12:30 - 2013-11-24 15:41 - 21795644 _____ C:\Users\Lilia220982\Documents\DSC_7582.NEF

2013-12-11 12:30 - 2013-11-24 15:41 - 21746628 _____ C:\Users\Lilia220982\Documents\DSC_7581.NEF

2013-12-11 12:30 - 2013-11-24 15:41 - 21140383 _____ C:\Users\Lilia220982\Documents\DSC_7577.NEF

2013-12-11 12:30 - 2013-11-24 15:41 - 21135945 _____ C:\Users\Lilia220982\Documents\DSC_7576.NEF

2013-12-11 12:30 - 2013-11-24 15:41 - 21132791 _____ C:\Users\Lilia220982\Documents\DSC_7579.NEF

2013-12-11 12:30 - 2013-11-24 15:41 - 21069071 _____ C:\Users\Lilia220982\Documents\DSC_7578.NEF

2013-12-11 12:30 - 2013-11-24 15:41 - 21054004 _____ C:\Users\Lilia220982\Documents\DSC_7580.NEF

2013-12-11 12:30 - 2013-11-24 15:40 - 21711527 _____ C:\Users\Lilia220982\Documents\DSC_7575.NEF

2013-12-11 12:30 - 2013-11-24 15:40 - 21556634 _____ C:\Users\Lilia220982\Documents\DSC_7573.NEF

2013-12-11 12:30 - 2013-11-24 15:40 - 21536599 _____ C:\Users\Lilia220982\Documents\DSC_7572.NEF

2013-12-11 12:30 - 2013-11-24 15:40 - 21366070 _____ C:\Users\Lilia220982\Documents\DSC_7574.NEF

2013-12-11 12:30 - 2013-11-24 15:39 - 21401438 _____ C:\Users\Lilia220982\Documents\DSC_7570.NEF

2013-12-11 12:30 - 2013-11-24 15:39 - 21312030 _____ C:\Users\Lilia220982\Documents\DSC_7571.NEF

2013-12-11 12:30 - 2013-11-24 15:38 - 21901458 _____ C:\Users\Lilia220982\Documents\DSC_7563.NEF

2013-12-11 12:30 - 2013-11-24 15:38 - 21899805 _____ C:\Users\Lilia220982\Documents\DSC_7560.NEF

2013-12-11 12:30 - 2013-11-24 15:38 - 21843853 _____ C:\Users\Lilia220982\Documents\DSC_7561.NEF

2013-12-11 12:30 - 2013-11-24 15:38 - 21650563 _____ C:\Users\Lilia220982\Documents\DSC_7562.NEF

2013-12-11 12:30 - 2013-11-24 15:38 - 21615132 _____ C:\Users\Lilia220982\Documents\DSC_7568.NEF

2013-12-11 12:30 - 2013-11-24 15:38 - 21464579 _____ C:\Users\Lilia220982\Documents\DSC_7569.NEF

2013-12-11 12:30 - 2013-11-24 15:38 - 21375434 _____ C:\Users\Lilia220982\Documents\DSC_7567.NEF

2013-12-11 12:30 - 2013-11-24 15:38 - 21357826 _____ C:\Users\Lilia220982\Documents\DSC_7564.NEF

2013-12-11 12:30 - 2013-11-24 15:38 - 21345732 _____ C:\Users\Lilia220982\Documents\DSC_7566.NEF

2013-12-11 12:30 - 2013-11-24 15:38 - 21320653 _____ C:\Users\Lilia220982\Documents\DSC_7565.NEF

2013-12-11 12:30 - 2013-11-24 15:37 - 22059051 _____ C:\Users\Lilia220982\Documents\DSC_7558.NEF

2013-12-11 12:30 - 2013-11-24 15:37 - 22035023 _____ C:\Users\Lilia220982\Documents\DSC_7559.NEF

2013-12-11 12:29 - 2013-12-10 22:53 - 00006731 _____ C:\Users\Lilia220982\Documents\DSC_7546.xmp

2013-12-11 12:29 - 2013-12-10 22:53 - 00006688 _____ C:\Users\Lilia220982\Documents\DSC_7553.xmp

2013-12-11 12:29 - 2013-12-10 22:33 - 00006732 _____ C:\Users\Lilia220982\Documents\DSC_7527.xmp

2013-12-11 12:29 - 2013-12-10 22:33 - 00006689 _____ C:\Users\Lilia220982\Documents\DSC_7532.xmp

2013-12-11 12:29 - 2013-12-10 22:33 - 00006689 _____ C:\Users\Lilia220982\Documents\DSC_7529.xmp

2013-12-11 12:29 - 2013-12-10 22:33 - 00006688 _____ C:\Users\Lilia220982\Documents\DSC_7545.xmp

2013-12-11 12:29 - 2013-12-10 22:19 - 00006724 _____ C:\Users\Lilia220982\Documents\DSC_7492.xmp

2013-12-11 12:29 - 2013-12-10 22:19 - 00006686 _____ C:\Users\Lilia220982\Documents\DSC_7510.xmp

2013-12-11 12:29 - 2013-12-10 22:19 - 00006686 _____ C:\Users\Lilia220982\Documents\DSC_7504.xmp

2013-12-11 12:29 - 2013-12-10 22:19 - 00006686 _____ C:\Users\Lilia220982\Documents\DSC_7499.xmp

2013-12-11 12:29 - 2013-12-10 22:19 - 00006681 _____ C:\Users\Lilia220982\Documents\DSC_7493.xmp

2013-12-11 12:29 - 2013-12-10 22:09 - 00006733 _____ C:\Users\Lilia220982\Documents\DSC_7483.xmp

2013-12-11 12:29 - 2013-12-10 22:09 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7486.xmp

2013-12-11 12:29 - 2013-12-10 21:48 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7479.xmp

2013-12-11 12:29 - 2013-11-24 15:37 - 21989279 _____ C:\Users\Lilia220982\Documents\DSC_7557.NEF

2013-12-11 12:29 - 2013-11-24 15:36 - 22880515 _____ C:\Users\Lilia220982\Documents\DSC_7549.NEF

2013-12-11 12:29 - 2013-11-24 15:36 - 22758262 _____ C:\Users\Lilia220982\Documents\DSC_7551.NEF

2013-12-11 12:29 - 2013-11-24 15:36 - 22715616 _____ C:\Users\Lilia220982\Documents\DSC_7550.NEF

2013-12-11 12:29 - 2013-11-24 15:36 - 22632203 _____ C:\Users\Lilia220982\Documents\DSC_7552.NEF

2013-12-11 12:29 - 2013-11-24 15:36 - 22524968 _____ C:\Users\Lilia220982\Documents\DSC_7553.NEF

2013-12-11 12:29 - 2013-11-24 15:36 - 22192346 _____ C:\Users\Lilia220982\Documents\DSC_7548.NEF

2013-12-11 12:29 - 2013-11-24 15:36 - 21784584 _____ C:\Users\Lilia220982\Documents\DSC_7554.NEF

2013-12-11 12:29 - 2013-11-24 15:36 - 21698619 _____ C:\Users\Lilia220982\Documents\DSC_7556.NEF

2013-12-11 12:29 - 2013-11-24 15:36 - 21638845 _____ C:\Users\Lilia220982\Documents\DSC_7555.NEF

2013-12-11 12:29 - 2013-11-24 15:35 - 21968658 _____ C:\Users\Lilia220982\Documents\DSC_7547.NEF

2013-12-11 12:29 - 2013-11-24 15:35 - 21903523 _____ C:\Users\Lilia220982\Documents\DSC_7546.NEF

2013-12-11 12:29 - 2013-11-24 15:34 - 22340933 _____ C:\Users\Lilia220982\Documents\DSC_7541.NEF

2013-12-11 12:29 - 2013-11-24 15:34 - 22322387 _____ C:\Users\Lilia220982\Documents\DSC_7542.NEF

2013-12-11 12:29 - 2013-11-24 15:34 - 22290506 _____ C:\Users\Lilia220982\Documents\DSC_7539.NEF

2013-12-11 12:29 - 2013-11-24 15:34 - 22215463 _____ C:\Users\Lilia220982\Documents\DSC_7540.NEF

2013-12-11 12:29 - 2013-11-24 15:34 - 21633867 _____ C:\Users\Lilia220982\Documents\DSC_7543.NEF

2013-12-11 12:29 - 2013-11-24 15:34 - 21569173 _____ C:\Users\Lilia220982\Documents\DSC_7544.NEF

2013-12-11 12:29 - 2013-11-24 15:34 - 21531044 _____ C:\Users\Lilia220982\Documents\DSC_7545.NEF

2013-12-11 12:29 - 2013-11-24 15:33 - 23068345 _____ C:\Users\Lilia220982\Documents\DSC_7537.NEF

2013-12-11 12:29 - 2013-11-24 15:33 - 22862777 _____ C:\Users\Lilia220982\Documents\DSC_7538.NEF

2013-12-11 12:29 - 2013-11-24 15:33 - 22286964 _____ C:\Users\Lilia220982\Documents\DSC_7536.NEF

2013-12-11 12:29 - 2013-11-24 15:32 - 22014147 _____ C:\Users\Lilia220982\Documents\DSC_7529.NEF

2013-12-11 12:29 - 2013-11-24 15:32 - 21995812 _____ C:\Users\Lilia220982\Documents\DSC_7530.NEF

2013-12-11 12:29 - 2013-11-24 15:32 - 21730264 _____ C:\Users\Lilia220982\Documents\DSC_7531.NEF

2013-12-11 12:29 - 2013-11-24 15:32 - 21623299 _____ C:\Users\Lilia220982\Documents\DSC_7532.NEF

2013-12-11 12:29 - 2013-11-24 15:32 - 21535044 _____ C:\Users\Lilia220982\Documents\DSC_7533.NEF

2013-12-11 12:29 - 2013-11-24 15:32 - 21482223 _____ C:\Users\Lilia220982\Documents\DSC_7535.NEF

2013-12-11 12:29 - 2013-11-24 15:32 - 21416162 _____ C:\Users\Lilia220982\Documents\DSC_7534.NEF

2013-12-11 12:29 - 2013-11-24 15:30 - 22542782 _____ C:\Users\Lilia220982\Documents\DSC_7523.NEF

2013-12-11 12:29 - 2013-11-24 15:30 - 21836084 _____ C:\Users\Lilia220982\Documents\DSC_7526.NEF

2013-12-11 12:29 - 2013-11-24 15:30 - 21802908 _____ C:\Users\Lilia220982\Documents\DSC_7527.NEF

2013-12-11 12:29 - 2013-11-24 15:30 - 21784925 _____ C:\Users\Lilia220982\Documents\DSC_7525.NEF

2013-12-11 12:29 - 2013-11-24 15:30 - 21678820 _____ C:\Users\Lilia220982\Documents\DSC_7528.NEF

2013-12-11 12:29 - 2013-11-24 15:30 - 21576176 _____ C:\Users\Lilia220982\Documents\DSC_7524.NEF

2013-12-11 12:29 - 2013-11-24 15:29 - 22875225 _____ C:\Users\Lilia220982\Documents\DSC_7521.NEF

2013-12-11 12:29 - 2013-11-24 15:29 - 21705374 _____ C:\Users\Lilia220982\Documents\DSC_7520.NEF

2013-12-11 12:29 - 2013-11-24 15:29 - 21310183 _____ C:\Users\Lilia220982\Documents\DSC_7522.NEF

2013-12-11 12:29 - 2013-11-24 15:20 - 21336959 _____ C:\Users\Lilia220982\Documents\DSC_7505.NEF

2013-12-11 12:29 - 2013-11-24 15:20 - 21295394 _____ C:\Users\Lilia220982\Documents\DSC_7519.NEF

2013-12-11 12:29 - 2013-11-24 15:20 - 21244348 _____ C:\Users\Lilia220982\Documents\DSC_7517.NEF

2013-12-11 12:29 - 2013-11-24 15:20 - 21234551 _____ C:\Users\Lilia220982\Documents\DSC_7516.NEF

2013-12-11 12:29 - 2013-11-24 15:20 - 21204727 _____ C:\Users\Lilia220982\Documents\DSC_7515.NEF

2013-12-11 12:29 - 2013-11-24 15:20 - 21195952 _____ C:\Users\Lilia220982\Documents\DSC_7506.NEF

2013-12-11 12:29 - 2013-11-24 15:20 - 21182283 _____ C:\Users\Lilia220982\Documents\DSC_7508.NEF

2013-12-11 12:29 - 2013-11-24 15:20 - 21148230 _____ C:\Users\Lilia220982\Documents\DSC_7507.NEF

2013-12-11 12:29 - 2013-11-24 15:20 - 21101848 _____ C:\Users\Lilia220982\Documents\DSC_7510.NEF

2013-12-11 12:29 - 2013-11-24 15:20 - 21094067 _____ C:\Users\Lilia220982\Documents\DSC_7511.NEF

2013-12-11 12:29 - 2013-11-24 15:20 - 21081049 _____ C:\Users\Lilia220982\Documents\DSC_7513.NEF

2013-12-11 12:29 - 2013-11-24 15:20 - 21019579 _____ C:\Users\Lilia220982\Documents\DSC_7509.NEF

2013-12-11 12:29 - 2013-11-24 15:20 - 20590326 _____ C:\Users\Lilia220982\Documents\DSC_7514.NEF

2013-12-11 12:29 - 2013-11-24 15:20 - 20560093 _____ C:\Users\Lilia220982\Documents\DSC_7512.NEF

2013-12-11 12:29 - 2013-11-24 15:20 - 20481702 _____ C:\Users\Lilia220982\Documents\DSC_7518.NEF

2013-12-11 12:29 - 2013-11-24 15:19 - 21416956 _____ C:\Users\Lilia220982\Documents\DSC_7504.NEF

2013-12-11 12:29 - 2013-11-24 15:19 - 21298396 _____ C:\Users\Lilia220982\Documents\DSC_7503.NEF

2013-12-11 12:29 - 2013-11-24 15:19 - 21223869 _____ C:\Users\Lilia220982\Documents\DSC_7499.NEF

2013-12-11 12:29 - 2013-11-24 15:19 - 21216482 _____ C:\Users\Lilia220982\Documents\DSC_7502.NEF

2013-12-11 12:29 - 2013-11-24 15:19 - 21203128 _____ C:\Users\Lilia220982\Documents\DSC_7495.NEF

2013-12-11 12:29 - 2013-11-24 15:19 - 21173440 _____ C:\Users\Lilia220982\Documents\DSC_7498.NEF

2013-12-11 12:29 - 2013-11-24 15:19 - 21150786 _____ C:\Users\Lilia220982\Documents\DSC_7500.NEF

2013-12-11 12:29 - 2013-11-24 15:19 - 21131788 _____ C:\Users\Lilia220982\Documents\DSC_7496.NEF

2013-12-11 12:29 - 2013-11-24 15:19 - 21096829 _____ C:\Users\Lilia220982\Documents\DSC_7497.NEF

2013-12-11 12:29 - 2013-11-24 15:19 - 20051811 _____ C:\Users\Lilia220982\Documents\DSC_7501.NEF

2013-12-11 12:29 - 2013-11-24 15:18 - 23792543 _____ C:\Users\Lilia220982\Documents\DSC_7493.NEF

2013-12-11 12:29 - 2013-11-24 15:18 - 23585727 _____ C:\Users\Lilia220982\Documents\DSC_7494.NEF

2013-12-11 12:29 - 2013-11-24 15:18 - 22799251 _____ C:\Users\Lilia220982\Documents\DSC_7490.NEF

2013-12-11 12:29 - 2013-11-24 15:18 - 22316516 _____ C:\Users\Lilia220982\Documents\DSC_7491.NEF

2013-12-11 12:29 - 2013-11-24 15:18 - 22121511 _____ C:\Users\Lilia220982\Documents\DSC_7492.NEF

2013-12-11 12:29 - 2013-11-24 15:17 - 24655178 _____ C:\Users\Lilia220982\Documents\DSC_7488.NEF

2013-12-11 12:29 - 2013-11-24 15:17 - 24348872 _____ C:\Users\Lilia220982\Documents\DSC_7487.NEF

2013-12-11 12:29 - 2013-11-24 15:17 - 24318736 _____ C:\Users\Lilia220982\Documents\DSC_7489.NEF

2013-12-11 12:29 - 2013-11-24 15:16 - 22787841 _____ C:\Users\Lilia220982\Documents\DSC_7484.NEF

2013-12-11 12:29 - 2013-11-24 15:16 - 22730035 _____ C:\Users\Lilia220982\Documents\DSC_7483.NEF

2013-12-11 12:29 - 2013-11-24 15:16 - 22463728 _____ C:\Users\Lilia220982\Documents\DSC_7486.NEF

2013-12-11 12:29 - 2013-11-24 15:16 - 22446440 _____ C:\Users\Lilia220982\Documents\DSC_7485.NEF

2013-12-11 12:29 - 2013-11-24 15:16 - 22269561 _____ C:\Users\Lilia220982\Documents\DSC_7482.NEF

2013-12-11 12:29 - 2013-11-24 15:15 - 21346132 _____ C:\Users\Lilia220982\Documents\DSC_7474.NEF

2013-12-11 12:29 - 2013-11-24 15:15 - 21324079 _____ C:\Users\Lilia220982\Documents\DSC_7475.NEF

2013-12-11 12:29 - 2013-11-24 15:15 - 21197060 _____ C:\Users\Lilia220982\Documents\DSC_7476.NEF

2013-12-11 12:29 - 2013-11-24 15:15 - 21163712 _____ C:\Users\Lilia220982\Documents\DSC_7477.NEF

2013-12-11 12:29 - 2013-11-24 15:15 - 21087744 _____ C:\Users\Lilia220982\Documents\DSC_7478.NEF

2013-12-11 12:29 - 2013-11-24 15:15 - 21048674 _____ C:\Users\Lilia220982\Documents\DSC_7481.NEF

2013-12-11 12:29 - 2013-11-24 15:15 - 21047430 _____ C:\Users\Lilia220982\Documents\DSC_7479.NEF

2013-12-11 12:29 - 2013-11-24 15:15 - 20999969 _____ C:\Users\Lilia220982\Documents\DSC_7480.NEF

2013-12-11 12:28 - 2013-12-10 21:48 - 00006733 _____ C:\Users\Lilia220982\Documents\DSC_7462.xmp

2013-12-11 12:28 - 2013-12-10 21:48 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7472.xmp

2013-12-11 12:28 - 2013-12-10 21:34 - 00006826 _____ C:\Users\Lilia220982\Documents\DSC_7423.xmp

2013-12-11 12:28 - 2013-12-10 21:34 - 00006733 _____ C:\Users\Lilia220982\Documents\DSC_7439.xmp

2013-12-11 12:28 - 2013-12-10 21:34 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7451.xmp

2013-12-11 12:28 - 2013-12-10 21:04 - 00006733 _____ C:\Users\Lilia220982\Documents\DSC_7402.xmp

2013-12-11 12:28 - 2013-12-10 21:04 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7413.xmp

2013-12-11 12:28 - 2013-12-10 21:04 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7403.xmp

2013-12-11 12:28 - 2013-12-10 20:54 - 00006733 _____ C:\Users\Lilia220982\Documents\DSC_7385.xmp

2013-12-11 12:28 - 2013-12-10 20:54 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7389.xmp

2013-12-11 12:28 - 2013-12-10 20:23 - 00006741 _____ C:\Users\Lilia220982\Documents\DSC_7421.xmp

2013-12-11 12:28 - 2013-12-10 20:23 - 00006741 _____ C:\Users\Lilia220982\Documents\DSC_7420.xmp

2013-12-11 12:28 - 2013-12-10 20:23 - 00006740 _____ C:\Users\Lilia220982\Documents\DSC_7422.xmp

2013-12-11 12:28 - 2013-11-24 15:14 - 21497843 _____ C:\Users\Lilia220982\Documents\DSC_7471.NEF

2013-12-11 12:28 - 2013-11-24 15:14 - 21460021 _____ C:\Users\Lilia220982\Documents\DSC_7463.NEF

2013-12-11 12:28 - 2013-11-24 15:14 - 21446671 _____ C:\Users\Lilia220982\Documents\DSC_7464.NEF

2013-12-11 12:28 - 2013-11-24 15:14 - 21394027 _____ C:\Users\Lilia220982\Documents\DSC_7465.NEF

2013-12-11 12:28 - 2013-11-24 15:14 - 21340966 _____ C:\Users\Lilia220982\Documents\DSC_7469.NEF

2013-12-11 12:28 - 2013-11-24 15:14 - 21323368 _____ C:\Users\Lilia220982\Documents\DSC_7470.NEF

2013-12-11 12:28 - 2013-11-24 15:14 - 21143505 _____ C:\Users\Lilia220982\Documents\DSC_7466.NEF

2013-12-11 12:28 - 2013-11-24 15:14 - 21131960 _____ C:\Users\Lilia220982\Documents\DSC_7472.NEF

2013-12-11 12:28 - 2013-11-24 15:14 - 21117300 _____ C:\Users\Lilia220982\Documents\DSC_7473.NEF

2013-12-11 12:28 - 2013-11-24 15:14 - 21067892 _____ C:\Users\Lilia220982\Documents\DSC_7468.NEF

2013-12-11 12:28 - 2013-11-24 15:14 - 20654662 _____ C:\Users\Lilia220982\Documents\DSC_7467.NEF

2013-12-11 12:28 - 2013-11-24 15:13 - 21777542 _____ C:\Users\Lilia220982\Documents\DSC_7461.NEF

2013-12-11 12:28 - 2013-11-24 15:13 - 21631454 _____ C:\Users\Lilia220982\Documents\DSC_7454.NEF

2013-12-11 12:28 - 2013-11-24 15:13 - 21562143 _____ C:\Users\Lilia220982\Documents\DSC_7462.NEF

2013-12-11 12:28 - 2013-11-24 15:13 - 21379767 _____ C:\Users\Lilia220982\Documents\DSC_7458.NEF

2013-12-11 12:28 - 2013-11-24 15:13 - 21312073 _____ C:\Users\Lilia220982\Documents\DSC_7460.NEF

2013-12-11 12:28 - 2013-11-24 15:13 - 21288746 _____ C:\Users\Lilia220982\Documents\DSC_7455.NEF

2013-12-11 12:28 - 2013-11-24 15:13 - 21228059 _____ C:\Users\Lilia220982\Documents\DSC_7457.NEF

2013-12-11 12:28 - 2013-11-24 15:13 - 21088834 _____ C:\Users\Lilia220982\Documents\DSC_7453.NEF

2013-12-11 12:28 - 2013-11-24 15:13 - 21077963 _____ C:\Users\Lilia220982\Documents\DSC_7456.NEF

2013-12-11 12:28 - 2013-11-24 15:13 - 20962085 _____ C:\Users\Lilia220982\Documents\DSC_7459.NEF

2013-12-11 12:28 - 2013-11-24 15:12 - 20733992 _____ C:\Users\Lilia220982\Documents\DSC_7448.NEF

2013-12-11 12:28 - 2013-11-24 15:12 - 20728945 _____ C:\Users\Lilia220982\Documents\DSC_7447.NEF

2013-12-11 12:28 - 2013-11-24 15:12 - 20655395 _____ C:\Users\Lilia220982\Documents\DSC_7452.NEF

2013-12-11 12:28 - 2013-11-24 15:12 - 20612182 _____ C:\Users\Lilia220982\Documents\DSC_7449.NEF

2013-12-11 12:28 - 2013-11-24 15:12 - 20590216 _____ C:\Users\Lilia220982\Documents\DSC_7446.NEF

2013-12-11 12:28 - 2013-11-24 15:12 - 20589777 _____ C:\Users\Lilia220982\Documents\DSC_7450.NEF

2013-12-11 12:28 - 2013-11-24 15:12 - 20554434 _____ C:\Users\Lilia220982\Documents\DSC_7445.NEF

2013-12-11 12:28 - 2013-11-24 15:12 - 20541110 _____ C:\Users\Lilia220982\Documents\DSC_7451.NEF

2013-12-11 12:28 - 2013-11-24 15:11 - 21183172 _____ C:\Users\Lilia220982\Documents\DSC_7433.NEF

2013-12-11 12:28 - 2013-11-24 15:11 - 21179096 _____ C:\Users\Lilia220982\Documents\DSC_7432.NEF

2013-12-11 12:28 - 2013-11-24 15:11 - 21039180 _____ C:\Users\Lilia220982\Documents\DSC_7431.NEF

2013-12-11 12:28 - 2013-11-24 15:11 - 21009433 _____ C:\Users\Lilia220982\Documents\DSC_7434.NEF

2013-12-11 12:28 - 2013-11-24 15:11 - 20998969 _____ C:\Users\Lilia220982\Documents\DSC_7430.NEF

2013-12-11 12:28 - 2013-11-24 15:11 - 20974387 _____ C:\Users\Lilia220982\Documents\DSC_7441.NEF

2013-12-11 12:28 - 2013-11-24 15:11 - 20970241 _____ C:\Users\Lilia220982\Documents\DSC_7439.NEF

2013-12-11 12:28 - 2013-11-24 15:11 - 20966724 _____ C:\Users\Lilia220982\Documents\DSC_7438.NEF

2013-12-11 12:28 - 2013-11-24 15:11 - 20663089 _____ C:\Users\Lilia220982\Documents\DSC_7444.NEF

2013-12-11 12:28 - 2013-11-24 15:11 - 20644040 _____ C:\Users\Lilia220982\Documents\DSC_7440.NEF

2013-12-11 12:28 - 2013-11-24 15:11 - 20642688 _____ C:\Users\Lilia220982\Documents\DSC_7437.NEF

2013-12-11 12:28 - 2013-11-24 15:11 - 20616258 _____ C:\Users\Lilia220982\Documents\DSC_7435.NEF

2013-12-11 12:28 - 2013-11-24 15:11 - 20606319 _____ C:\Users\Lilia220982\Documents\DSC_7436.NEF

2013-12-11 12:28 - 2013-11-24 15:11 - 20538784 _____ C:\Users\Lilia220982\Documents\DSC_7442.NEF

2013-12-11 12:28 - 2013-11-24 15:11 - 20501957 _____ C:\Users\Lilia220982\Documents\DSC_7443.NEF

2013-12-11 12:28 - 2013-11-24 15:10 - 20854905 _____ C:\Users\Lilia220982\Documents\DSC_7419.NEF

2013-12-11 12:28 - 2013-11-24 15:10 - 20847637 _____ C:\Users\Lilia220982\Documents\DSC_7422.NEF

2013-12-11 12:28 - 2013-11-24 15:10 - 20780747 _____ C:\Users\Lilia220982\Documents\DSC_7425.NEF

2013-12-11 12:28 - 2013-11-24 15:10 - 20754471 _____ C:\Users\Lilia220982\Documents\DSC_7421.NEF

2013-12-11 12:28 - 2013-11-24 15:10 - 20739595 _____ C:\Users\Lilia220982\Documents\DSC_7420.NEF

2013-12-11 12:28 - 2013-11-24 15:10 - 20718686 _____ C:\Users\Lilia220982\Documents\DSC_7418.NEF

2013-12-11 12:28 - 2013-11-24 15:10 - 20717016 _____ C:\Users\Lilia220982\Documents\DSC_7429.NEF

2013-12-11 12:28 - 2013-11-24 15:10 - 20652934 _____ C:\Users\Lilia220982\Documents\DSC_7426.NEF

2013-12-11 12:28 - 2013-11-24 15:10 - 20633222 _____ C:\Users\Lilia220982\Documents\DSC_7428.NEF

2013-12-11 12:28 - 2013-11-24 15:10 - 20317174 _____ C:\Users\Lilia220982\Documents\DSC_7424.NEF

2013-12-11 12:28 - 2013-11-24 15:10 - 20292224 _____ C:\Users\Lilia220982\Documents\DSC_7423.NEF

2013-12-11 12:28 - 2013-11-24 15:10 - 20065019 _____ C:\Users\Lilia220982\Documents\DSC_7427.NEF

2013-12-11 12:28 - 2013-11-24 15:09 - 21045333 _____ C:\Users\Lilia220982\Documents\DSC_7414.NEF

2013-12-11 12:28 - 2013-11-24 15:09 - 21036424 _____ C:\Users\Lilia220982\Documents\DSC_7412.NEF

2013-12-11 12:28 - 2013-11-24 15:09 - 21017918 _____ C:\Users\Lilia220982\Documents\DSC_7411.NEF

2013-12-11 12:28 - 2013-11-24 15:09 - 20992504 _____ C:\Users\Lilia220982\Documents\DSC_7413.NEF

2013-12-11 12:28 - 2013-11-24 15:09 - 20721724 _____ C:\Users\Lilia220982\Documents\DSC_7417.NEF

2013-12-11 12:28 - 2013-11-24 15:09 - 20708609 _____ C:\Users\Lilia220982\Documents\DSC_7416.NEF

2013-12-11 12:28 - 2013-11-24 15:09 - 20095742 _____ C:\Users\Lilia220982\Documents\DSC_7415.NEF

2013-12-11 12:28 - 2013-11-24 15:08 - 21185091 _____ C:\Users\Lilia220982\Documents\DSC_7404.NEF

2013-12-11 12:28 - 2013-11-24 15:08 - 21175515 _____ C:\Users\Lilia220982\Documents\DSC_7405.NEF

2013-12-11 12:28 - 2013-11-24 15:08 - 21096162 _____ C:\Users\Lilia220982\Documents\DSC_7407.NEF

2013-12-11 12:28 - 2013-11-24 15:08 - 21007209 _____ C:\Users\Lilia220982\Documents\DSC_7406.NEF

2013-12-11 12:28 - 2013-11-24 15:08 - 20987079 _____ C:\Users\Lilia220982\Documents\DSC_7409.NEF

2013-12-11 12:28 - 2013-11-24 15:08 - 20919609 _____ C:\Users\Lilia220982\Documents\DSC_7410.NEF

2013-12-11 12:28 - 2013-11-24 15:08 - 20178642 _____ C:\Users\Lilia220982\Documents\DSC_7408.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 21734254 _____ C:\Users\Lilia220982\Documents\DSC_7398.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 21722919 _____ C:\Users\Lilia220982\Documents\DSC_7401.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 21706159 _____ C:\Users\Lilia220982\Documents\DSC_7387.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 21702838 _____ C:\Users\Lilia220982\Documents\DSC_7403.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 21408493 _____ C:\Users\Lilia220982\Documents\DSC_7399.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 21399885 _____ C:\Users\Lilia220982\Documents\DSC_7397.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 20651089 _____ C:\Users\Lilia220982\Documents\DSC_7400.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 20608418 _____ C:\Users\Lilia220982\Documents\DSC_7393.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 20597335 _____ C:\Users\Lilia220982\Documents\DSC_7396.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 20584347 _____ C:\Users\Lilia220982\Documents\DSC_7392.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 20529511 _____ C:\Users\Lilia220982\Documents\DSC_7402.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 20524161 _____ C:\Users\Lilia220982\Documents\DSC_7391.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 20504204 _____ C:\Users\Lilia220982\Documents\DSC_7390.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 20502823 _____ C:\Users\Lilia220982\Documents\DSC_7385.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 20461452 _____ C:\Users\Lilia220982\Documents\DSC_7384.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 20458696 _____ C:\Users\Lilia220982\Documents\DSC_7386.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 20418163 _____ C:\Users\Lilia220982\Documents\DSC_7394.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 20361442 _____ C:\Users\Lilia220982\Documents\DSC_7395.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 20361317 _____ C:\Users\Lilia220982\Documents\DSC_7389.NEF

2013-12-11 12:28 - 2013-11-24 15:04 - 20324331 _____ C:\Users\Lilia220982\Documents\DSC_7388.NEF

2013-12-11 12:27 - 2013-11-24 15:04 - 20496084 _____ C:\Users\Lilia220982\Documents\DSC_7380.NEF

2013-12-11 12:27 - 2013-11-24 15:04 - 20461415 _____ C:\Users\Lilia220982\Documents\DSC_7383.NEF

2013-12-11 12:27 - 2013-11-24 15:04 - 20429075 _____ C:\Users\Lilia220982\Documents\DSC_7381.NEF

2013-12-11 12:27 - 2013-11-24 15:04 - 20370069 _____ C:\Users\Lilia220982\Documents\DSC_7382.NEF

2013-12-11 12:27 - 2013-11-24 15:03 - 21209584 _____ C:\Users\Lilia220982\Documents\DSC_7375.NEF

2013-12-11 12:27 - 2013-11-24 15:03 - 20919598 _____ C:\Users\Lilia220982\Documents\DSC_7377.NEF

2013-12-11 12:27 - 2013-11-24 15:03 - 20858560 _____ C:\Users\Lilia220982\Documents\DSC_7374.NEF

2013-12-11 12:27 - 2013-11-24 15:03 - 20747658 _____ C:\Users\Lilia220982\Documents\DSC_7373.NEF

2013-12-11 12:27 - 2013-11-24 15:03 - 20699349 _____ C:\Users\Lilia220982\Documents\DSC_7372.NEF

2013-12-11 12:27 - 2013-11-24 15:03 - 20646783 _____ C:\Users\Lilia220982\Documents\DSC_7371.NEF

2013-12-11 12:27 - 2013-11-24 15:03 - 20490057 _____ C:\Users\Lilia220982\Documents\DSC_7376.NEF

2013-12-11 12:27 - 2013-11-24 15:03 - 20005728 _____ C:\Users\Lilia220982\Documents\DSC_7379.NEF

2013-12-11 12:27 - 2013-11-24 15:03 - 19991129 _____ C:\Users\Lilia220982\Documents\DSC_7378.NEF

2013-12-04 19:47 - 2013-12-16 12:10 - 00000000 ____D C:\ProgramData\a241d15d344a9c13

2013-12-04 19:35 - 2013-12-04 19:35 - 00000000 ____D C:\Program Files\Alien Skin

2013-12-04 01:45 - 2013-12-04 01:45 - 00000000 ____D C:\Windows\SysWOW64\64

2013-12-04 01:45 - 2013-12-04 01:45 - 00000000 ____D C:\Windows\SysWOW64\32

2013-12-04 01:45 - 2013-12-04 01:45 - 00000000 ____D C:\Windows\system32\64

2013-12-04 01:45 - 2013-12-04 01:45 - 00000000 ____D C:\Windows\system32\32

2013-12-04 01:00 - 2013-12-04 01:01 - 00000000 ____D C:\Users\Lilia220982\Downloads\AlienSkin Software

2013-12-04 00:59 - 2013-12-04 00:59 - 00061405 _____ C:\Users\Lilia220982\Downloads\[rutracker.org].t3969653 (2).torrent

2013-12-04 00:55 - 2013-12-04 00:56 - 00061405 _____ C:\Users\Lilia220982\Downloads\[rutracker.org].t3969653 (1).torrent

2013-12-03 20:00 - 2013-12-03 20:09 - 103935608 _____ (Alien Skin Software, LLC) C:\Users\Lilia220982\Downloads\exposure-5.0.0.703.exe

2013-12-03 19:55 - 2013-12-03 19:55 - 00000023 _____ C:\Users\Lilia220982\Downloads\Pass for Alien Skin Exposure 5.txt

2013-12-03 19:04 - 2013-12-03 19:04 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\WinRAR

2013-12-03 19:04 - 2013-12-03 19:04 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

2013-12-03 19:04 - 2013-12-03 19:04 - 00000000 ____D C:\Program Files\WinRAR

2013-12-03 19:04 - 2013-10-17 01:55 - 00000509 _____ C:\Users\Lilia220982\Desktop\First Read Me , Password here !!.txt

2013-12-03 19:03 - 2013-12-03 19:04 - 01814608 _____ C:\Users\Lilia220982\Downloads\wrar501ar.exe

2013-12-03 19:03 - 2013-12-03 19:03 - 02074056 _____ C:\Users\Lilia220982\Downloads\winrar-x64-500d.exe

2013-12-03 18:41 - 2013-12-03 18:51 - 00001049 _____ C:\Users\Lilia220982\Desktop\Free Zip Opener.lnk

2013-12-03 18:41 - 2013-12-03 18:51 - 00000000 ____D C:\Program Files (x86)\Free Zip Opener

2013-12-03 18:41 - 2013-12-03 18:41 - 00000000 ____D C:\Users\UpdatusUser\AppData\Local\Free Zip Opener

2013-12-03 18:41 - 2013-12-03 18:41 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Zip Opener

2013-12-03 18:41 - 2013-12-03 18:41 - 00000000 ____D C:\Users\Lilia220982\AppData\Local\Free Zip Opener

2013-12-03 18:40 - 2013-12-03 18:41 - 02057080 _____ C:\Users\Lilia220982\Downloads\FreeZipOpener_Install.exe

2013-12-03 16:37 - 2013-12-04 19:35 - 00001073 _____ C:\Users\Lilia220982\Desktop\Exposure 5.lnk

2013-11-27 22:51 - 2013-12-04 19:46 - 00000000 ____D C:\ProgramData\InstallMate

2013-11-26 22:07 - 2013-11-26 22:07 - 00411944 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\mfencbdc.sys

2013-11-26 22:07 - 2013-11-26 22:07 - 00096112 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\mfencrk.sys

2013-11-26 22:07 - 2013-11-26 22:07 - 00010856 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\mfeclnrk.sys

2013-11-19 18:43 - 2013-11-19 18:43 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1

2013-11-17 22:13 - 2013-12-04 00:00 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\Alien Skin

2013-11-17 22:13 - 2013-12-03 23:26 - 00000000 ____D C:\Users\Lilia220982\AppData\Local\Alien Skin

2013-11-17 22:13 - 2013-11-17 22:13 - 00000000 ____D C:\Users\Lilia220982\.AS

2013-11-17 22:11 - 2013-11-17 22:11 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Alien Skin Software

2013-11-17 22:10 - 2013-12-03 23:27 - 00000000 ____D C:\ProgramData\Alien Skin

2013-11-17 22:10 - 2013-12-03 23:25 - 00000000 ____D C:\Program Files (x86)\Alien Skin
 

==================== One Month Modified Files and Folders =======
 

2013-12-16 12:29 - 2013-12-15 22:05 - 00016784 _____ C:\Users\Lilia220982\Downloads\FRST.txt

2013-12-16 12:27 - 2013-12-16 12:27 - 01927940 _____ (Farbar) C:\Users\Lilia220982\Downloads\FRST64 (1).exe

2013-12-16 12:24 - 2013-12-16 12:24 - 00000845 _____ C:\Users\Lilia220982\Desktop\JRT.txt

2013-12-16 12:17 - 2013-12-16 12:17 - 00000000 ____D C:\Windows\ERUNT

2013-12-16 12:16 - 2013-12-16 12:16 - 01034531 _____ (Thisisu) C:\Users\Lilia220982\Downloads\JRT.exe

2013-12-16 12:16 - 2013-11-11 17:15 - 00443392 ___SH C:\Users\Lilia220982\Downloads\Thumbs.db

2013-12-16 12:13 - 2013-11-05 12:19 - 00001128 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-12-16 12:13 - 2012-07-26 08:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-12-16 12:12 - 2013-08-15 10:58 - 01733293 _____ C:\Windows\WindowsUpdate.log

2013-12-16 12:12 - 2013-04-18 03:46 - 00154714 _____ C:\Windows\PFRO.log

2013-12-16 12:11 - 2013-12-16 12:09 - 00000000 ____D C:\AdwCleaner

2013-12-16 12:11 - 2013-10-29 18:07 - 00000000 ____D C:\Users\Lilia220982

2013-12-16 12:10 - 2013-12-04 19:47 - 00000000 ____D C:\ProgramData\a241d15d344a9c13

2013-12-16 12:09 - 2013-12-16 12:09 - 01226750 _____ C:\Users\Lilia220982\Downloads\adwcleaner.exe

2013-12-16 12:05 - 2013-10-29 18:25 - 00000000 ____D C:\Users\Lilia220982\AppData\Local\Adobe

2013-12-16 12:02 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\sru

2013-12-16 01:22 - 2013-12-15 22:37 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2013-12-16 01:22 - 2013-12-15 22:34 - 00000000 ____D C:\Users\Lilia220982\Desktop\mbar

2013-12-16 01:10 - 2013-11-05 12:19 - 00001132 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-12-16 00:44 - 2013-12-15 22:37 - 00117464 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2013-12-16 00:43 - 2013-12-15 22:35 - 00089304 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2013-12-15 23:04 - 2013-08-15 20:36 - 00753134 _____ C:\Windows\system32\perfh007.dat

2013-12-15 23:04 - 2013-08-15 20:36 - 00155826 _____ C:\Windows\system32\perfc007.dat

2013-12-15 23:04 - 2012-07-26 08:28 - 01745416 _____ C:\Windows\system32\PerfStringBackup.INI

2013-12-15 23:01 - 2012-07-26 08:21 - 00030837 _____ C:\Windows\setupact.log

2013-12-15 22:37 - 2013-12-15 22:37 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-12-15 22:34 - 2013-12-15 22:32 - 12582688 _____ (Malwarebytes Corp.) C:\Users\Lilia220982\Downloads\mbar-1.07.0.1008.exe

2013-12-15 22:07 - 2013-12-15 22:06 - 00028174 _____ C:\Users\Lilia220982\Downloads\Addition.txt

2013-12-15 22:05 - 2013-12-15 22:05 - 00000000 ____D C:\FRST

2013-12-15 22:04 - 2013-12-15 22:03 - 01927796 _____ (Farbar) C:\Users\Lilia220982\Downloads\FRST64.exe

2013-12-15 22:00 - 2013-12-15 22:00 - 00000963 _____ C:\Users\UpdatusUser\Desktop\MiPony.lnk

2013-12-15 22:00 - 2013-12-15 22:00 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MiPony

2013-12-15 22:00 - 2013-12-15 22:00 - 00000000 ____D C:\Program Files (x86)\MiPony

2013-12-15 21:58 - 2013-10-29 18:25 - 00000000 ____D C:\Users\Lilia220982\AppData\Local\CrashDumps

2013-12-15 21:57 - 2013-12-15 21:57 - 00673080 _____ (                                                            ) C:\Users\Lilia220982\Downloads\DownloadAcceleratorSetup.exe

2013-12-15 19:19 - 2013-10-29 22:55 - 00000000 ____D C:\Program Files (x86)\McAfee

2013-12-14 22:20 - 2013-04-18 05:36 - 00000000 ____D C:\Program Files\Common Files\mcafee

2013-12-14 10:00 - 2013-12-13 23:25 - 00854016 ___SH C:\Users\Lilia220982\Documents\Thumbs.db

2013-12-14 09:13 - 2013-10-29 18:15 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1065350271-2814899295-3722501385-1002

2013-12-14 08:36 - 2013-12-14 08:36 - 05087072 _____ C:\Windows\system32\FNTCACHE.DAT

2013-12-13 23:41 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\NDF

2013-12-13 18:43 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\rescache

2013-12-13 18:08 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\SecureBootUpdates

2013-12-13 10:18 - 2013-10-29 20:04 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-12-13 10:16 - 2012-07-26 06:38 - 00000000 ____D C:\Windows\system32\oobe

2013-12-13 10:09 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\AUInstallAgent

2013-12-13 00:17 - 2012-07-26 06:26 - 00262144 ___SH C:\Windows\system32\config\ELAM

2013-12-11 00:01 - 2013-12-11 12:31 - 00006733 _____ C:\Users\Lilia220982\Documents\DSC_7642.xmp

2013-12-11 00:01 - 2013-12-11 12:31 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7671.xmp

2013-12-11 00:01 - 2013-12-11 12:31 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7656.xmp

2013-12-11 00:01 - 2013-12-11 12:31 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7653.xmp

2013-12-11 00:01 - 2013-12-11 12:31 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7650.xmp

2013-12-11 00:01 - 2013-12-11 12:31 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7649.xmp

2013-12-10 23:41 - 2013-12-11 12:30 - 00006733 _____ C:\Users\Lilia220982\Documents\DSC_7608.xmp

2013-12-10 23:41 - 2013-12-11 12:30 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7631.xmp

2013-12-10 23:41 - 2013-12-11 12:30 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7630.xmp

2013-12-10 23:41 - 2013-12-11 12:30 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7624.xmp

2013-12-10 23:41 - 2013-12-11 12:30 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7621.xmp

2013-12-10 23:41 - 2013-12-11 12:30 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7618.xmp

2013-12-10 23:41 - 2013-12-11 12:30 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7610.xmp

2013-12-10 23:41 - 2013-12-11 12:30 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7609.xmp

2013-12-10 23:21 - 2013-12-11 12:30 - 00006734 _____ C:\Users\Lilia220982\Documents\DSC_7591.xmp

2013-12-10 23:21 - 2013-12-11 12:30 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7592.xmp

2013-12-10 23:21 - 2013-12-11 12:30 - 00006684 _____ C:\Users\Lilia220982\Documents\DSC_7598.xmp

2013-12-10 23:05 - 2013-12-11 12:30 - 00006733 _____ C:\Users\Lilia220982\Documents\DSC_7561.xmp

2013-12-10 23:05 - 2013-12-11 12:30 - 00006691 _____ C:\Users\Lilia220982\Documents\DSC_7564.xmp

2013-12-10 23:05 - 2013-12-11 12:30 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7577.xmp

2013-12-10 23:05 - 2013-12-11 12:30 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7573.xmp

2013-12-10 23:05 - 2013-12-11 12:30 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7567.xmp

2013-12-10 22:53 - 2013-12-11 12:30 - 00006691 _____ C:\Users\Lilia220982\Documents\DSC_7558.xmp

2013-12-10 22:53 - 2013-12-11 12:29 - 00006731 _____ C:\Users\Lilia220982\Documents\DSC_7546.xmp

2013-12-10 22:53 - 2013-12-11 12:29 - 00006688 _____ C:\Users\Lilia220982\Documents\DSC_7553.xmp

2013-12-10 22:33 - 2013-12-11 12:29 - 00006732 _____ C:\Users\Lilia220982\Documents\DSC_7527.xmp

2013-12-10 22:33 - 2013-12-11 12:29 - 00006689 _____ C:\Users\Lilia220982\Documents\DSC_7532.xmp

2013-12-10 22:33 - 2013-12-11 12:29 - 00006689 _____ C:\Users\Lilia220982\Documents\DSC_7529.xmp

2013-12-10 22:33 - 2013-12-11 12:29 - 00006688 _____ C:\Users\Lilia220982\Documents\DSC_7545.xmp

2013-12-10 22:19 - 2013-12-11 12:29 - 00006724 _____ C:\Users\Lilia220982\Documents\DSC_7492.xmp

2013-12-10 22:19 - 2013-12-11 12:29 - 00006686 _____ C:\Users\Lilia220982\Documents\DSC_7510.xmp

2013-12-10 22:19 - 2013-12-11 12:29 - 00006686 _____ C:\Users\Lilia220982\Documents\DSC_7504.xmp

2013-12-10 22:19 - 2013-12-11 12:29 - 00006686 _____ C:\Users\Lilia220982\Documents\DSC_7499.xmp

2013-12-10 22:19 - 2013-12-11 12:29 - 00006681 _____ C:\Users\Lilia220982\Documents\DSC_7493.xmp

2013-12-10 22:09 - 2013-12-11 12:29 - 00006733 _____ C:\Users\Lilia220982\Documents\DSC_7483.xmp

2013-12-10 22:09 - 2013-12-11 12:29 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7486.xmp

2013-12-10 21:48 - 2013-12-11 12:29 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7479.xmp

2013-12-10 21:48 - 2013-12-11 12:28 - 00006733 _____ C:\Users\Lilia220982\Documents\DSC_7462.xmp

2013-12-10 21:48 - 2013-12-11 12:28 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7472.xmp

2013-12-10 21:34 - 2013-12-11 12:28 - 00006826 _____ C:\Users\Lilia220982\Documents\DSC_7423.xmp

2013-12-10 21:34 - 2013-12-11 12:28 - 00006733 _____ C:\Users\Lilia220982\Documents\DSC_7439.xmp

2013-12-10 21:34 - 2013-12-11 12:28 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7451.xmp

2013-12-10 21:04 - 2013-12-11 12:28 - 00006733 _____ C:\Users\Lilia220982\Documents\DSC_7402.xmp

2013-12-10 21:04 - 2013-12-11 12:28 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7413.xmp

2013-12-10 21:04 - 2013-12-11 12:28 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7403.xmp

2013-12-10 20:54 - 2013-12-11 12:28 - 00006733 _____ C:\Users\Lilia220982\Documents\DSC_7385.xmp

2013-12-10 20:54 - 2013-12-11 12:28 - 00006690 _____ C:\Users\Lilia220982\Documents\DSC_7389.xmp

2013-12-10 20:23 - 2013-12-11 12:28 - 00006741 _____ C:\Users\Lilia220982\Documents\DSC_7421.xmp

2013-12-10 20:23 - 2013-12-11 12:28 - 00006741 _____ C:\Users\Lilia220982\Documents\DSC_7420.xmp

2013-12-10 20:23 - 2013-12-11 12:28 - 00006740 _____ C:\Users\Lilia220982\Documents\DSC_7422.xmp

2013-12-09 13:34 - 2012-07-26 06:26 - 00262144 ___SH C:\Windows\system32\config\BBI

2013-12-06 23:17 - 2012-07-26 09:12 - 00000000 ___HD C:\Windows\ELAMBKUP

2013-12-06 19:32 - 2013-11-05 12:19 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2013-12-06 19:32 - 2013-11-05 12:19 - 00003868 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2013-12-05 10:34 - 2013-11-05 12:26 - 00002139 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2013-12-04 19:46 - 2013-11-27 22:51 - 00000000 ____D C:\ProgramData\InstallMate

2013-12-04 19:35 - 2013-12-04 19:35 - 00000000 ____D C:\Program Files\Alien Skin

2013-12-04 19:35 - 2013-12-03 16:37 - 00001073 _____ C:\Users\Lilia220982\Desktop\Exposure 5.lnk

2013-12-04 01:53 - 2013-11-13 21:23 - 00694240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-12-04 01:53 - 2013-11-13 21:23 - 00078304 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-12-04 01:50 - 2013-10-30 17:06 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\uTorrent

2013-12-04 01:45 - 2013-12-04 01:45 - 00000000 ____D C:\Windows\SysWOW64\64

2013-12-04 01:45 - 2013-12-04 01:45 - 00000000 ____D C:\Windows\SysWOW64\32

2013-12-04 01:45 - 2013-12-04 01:45 - 00000000 ____D C:\Windows\system32\64

2013-12-04 01:45 - 2013-12-04 01:45 - 00000000 ____D C:\Windows\system32\32

2013-12-04 01:42 - 2013-10-29 16:58 - 00000000 ____D C:\Program Files\Adobe

2013-12-04 01:01 - 2013-12-04 01:00 - 00000000 ____D C:\Users\Lilia220982\Downloads\AlienSkin Software

2013-12-04 00:59 - 2013-12-04 00:59 - 00061405 _____ C:\Users\Lilia220982\Downloads\[rutracker.org].t3969653 (2).torrent

2013-12-04 00:56 - 2013-12-04 00:55 - 00061405 _____ C:\Users\Lilia220982\Downloads\[rutracker.org].t3969653 (1).torrent

2013-12-04 00:00 - 2013-11-17 22:13 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\Alien Skin

2013-12-03 23:27 - 2013-11-17 22:10 - 00000000 ____D C:\ProgramData\Alien Skin

2013-12-03 23:26 - 2013-11-17 22:13 - 00000000 ____D C:\Users\Lilia220982\AppData\Local\Alien Skin

2013-12-03 23:25 - 2013-11-17 22:10 - 00000000 ____D C:\Program Files (x86)\Alien Skin

2013-12-03 21:20 - 2013-10-30 23:08 - 00061405 _____ C:\Users\Lilia220982\Downloads\[rutracker.org].t3969653.torrent

2013-12-03 20:09 - 2013-12-03 20:00 - 103935608 _____ (Alien Skin Software, LLC) C:\Users\Lilia220982\Downloads\exposure-5.0.0.703.exe

2013-12-03 19:55 - 2013-12-03 19:55 - 00000023 _____ C:\Users\Lilia220982\Downloads\Pass for Alien Skin Exposure 5.txt

2013-12-03 19:04 - 2013-12-03 19:04 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\WinRAR

2013-12-03 19:04 - 2013-12-03 19:04 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

2013-12-03 19:04 - 2013-12-03 19:04 - 00000000 ____D C:\Program Files\WinRAR

2013-12-03 19:04 - 2013-12-03 19:03 - 01814608 _____ C:\Users\Lilia220982\Downloads\wrar501ar.exe

2013-12-03 19:03 - 2013-12-03 19:03 - 02074056 _____ C:\Users\Lilia220982\Downloads\winrar-x64-500d.exe

2013-12-03 18:51 - 2013-12-03 18:41 - 00001049 _____ C:\Users\Lilia220982\Desktop\Free Zip Opener.lnk

2013-12-03 18:51 - 2013-12-03 18:41 - 00000000 ____D C:\Program Files (x86)\Free Zip Opener

2013-12-03 18:41 - 2013-12-03 18:41 - 00000000 ____D C:\Users\UpdatusUser\AppData\Local\Free Zip Opener

2013-12-03 18:41 - 2013-12-03 18:41 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Zip Opener

2013-12-03 18:41 - 2013-12-03 18:41 - 00000000 ____D C:\Users\Lilia220982\AppData\Local\Free Zip Opener

2013-12-03 18:41 - 2013-12-03 18:40 - 02057080 _____ C:\Users\Lilia220982\Downloads\FreeZipOpener_Install.exe

2013-12-03 16:10 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\Resources

2013-11-26 22:07 - 2013-11-26 22:07 - 00411944 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\mfencbdc.sys

2013-11-26 22:07 - 2013-11-26 22:07 - 00096112 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\mfencrk.sys

2013-11-26 22:07 - 2013-11-26 22:07 - 00010856 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\mfeclnrk.sys

2013-11-24 16:03 - 2013-12-11 12:31 - 20918831 _____ C:\Users\Lilia220982\Documents\DSC_7675.NEF

2013-11-24 16:03 - 2013-12-11 12:31 - 20797938 _____ C:\Users\Lilia220982\Documents\DSC_7676.NEF

2013-11-24 16:02 - 2013-12-11 12:31 - 21243562 _____ C:\Users\Lilia220982\Documents\DSC_7673.NEF

2013-11-24 16:02 - 2013-12-11 12:31 - 21050357 _____ C:\Users\Lilia220982\Documents\DSC_7674.NEF

2013-11-24 16:02 - 2013-12-11 12:31 - 20894698 _____ C:\Users\Lilia220982\Documents\DSC_7669.NEF

2013-11-24 16:02 - 2013-12-11 12:31 - 20877156 _____ C:\Users\Lilia220982\Documents\DSC_7667.NEF

2013-11-24 16:02 - 2013-12-11 12:31 - 20808617 _____ C:\Users\Lilia220982\Documents\DSC_7668.NEF

2013-11-24 16:02 - 2013-12-11 12:31 - 20734360 _____ C:\Users\Lilia220982\Documents\DSC_7670.NEF

2013-11-24 16:02 - 2013-12-11 12:31 - 20544495 _____ C:\Users\Lilia220982\Documents\DSC_7671.NEF

2013-11-24 16:02 - 2013-12-11 12:31 - 18966280 _____ C:\Users\Lilia220982\Documents\DSC_7672.NEF

2013-11-24 16:01 - 2013-12-11 12:31 - 21415320 _____ C:\Users\Lilia220982\Documents\DSC_7664.NEF

2013-11-24 16:01 - 2013-12-11 12:31 - 21395737 _____ C:\Users\Lilia220982\Documents\DSC_7663.NEF

2013-11-24 16:01 - 2013-12-11 12:31 - 21332472 _____ C:\Users\Lilia220982\Documents\DSC_7662.NEF

2013-11-24 16:01 - 2013-12-11 12:31 - 21319346 _____ C:\Users\Lilia220982\Documents\DSC_7660.NEF

2013-11-24 16:01 - 2013-12-11 12:31 - 21308066 _____ C:\Users\Lilia220982\Documents\DSC_7665.NEF

2013-11-24 16:01 - 2013-12-11 12:31 - 21305142 _____ C:\Users\Lilia220982\Documents\DSC_7666.NEF

2013-11-24 16:01 - 2013-12-11 12:31 - 21203240 _____ C:\Users\Lilia220982\Documents\DSC_7661.NEF

2013-11-24 16:00 - 2013-12-11 12:31 - 22575164 _____ C:\Users\Lilia220982\Documents\DSC_7658.NEF

2013-11-24 16:00 - 2013-12-11 12:31 - 22150831 _____ C:\Users\Lilia220982\Documents\DSC_7657.NEF

2013-11-24 16:00 - 2013-12-11 12:31 - 21688063 _____ C:\Users\Lilia220982\Documents\DSC_7659.NEF

2013-11-24 16:00 - 2013-12-11 12:31 - 20757841 _____ C:\Users\Lilia220982\Documents\DSC_7655.NEF

2013-11-24 16:00 - 2013-12-11 12:31 - 20613570 _____ C:\Users\Lilia220982\Documents\DSC_7656.NEF

2013-11-24 15:59 - 2013-12-11 12:31 - 21345798 _____ C:\Users\Lilia220982\Documents\DSC_7649.NEF

2013-11-24 15:59 - 2013-12-11 12:31 - 21255932 _____ C:\Users\Lilia220982\Documents\DSC_7654.NEF

2013-11-24 15:59 - 2013-12-11 12:31 - 21190900 _____ C:\Users\Lilia220982\Documents\DSC_7648.NEF

2013-11-24 15:59 - 2013-12-11 12:31 - 21138980 _____ C:\Users\Lilia220982\Documents\DSC_7650.NEF

2013-11-24 15:59 - 2013-12-11 12:31 - 21128003 _____ C:\Users\Lilia220982\Documents\DSC_7653.NEF

2013-11-24 15:59 - 2013-12-11 12:31 - 21031230 _____ C:\Users\Lilia220982\Documents\DSC_7652.NEF

2013-11-24 15:59 - 2013-12-11 12:31 - 20999587 _____ C:\Users\Lilia220982\Documents\DSC_7651.NEF

2013-11-24 15:59 - 2013-12-11 12:31 - 20574091 _____ C:\Users\Lilia220982\Documents\DSC_7646.NEF

2013-11-24 15:59 - 2013-12-11 12:31 - 20544547 _____ C:\Users\Lilia220982\Documents\DSC_7647.NEF

2013-11-24 15:54 - 2013-12-11 12:31 - 21269278 _____ C:\Users\Lilia220982\Documents\DSC_7640.NEF

2013-11-24 15:54 - 2013-12-11 12:31 - 21198537 _____ C:\Users\Lilia220982\Documents\DSC_7642.NEF

2013-11-24 15:54 - 2013-12-11 12:31 - 21110996 _____ C:\Users\Lilia220982\Documents\DSC_7641.NEF

2013-11-24 15:54 - 2013-12-11 12:31 - 21049193 _____ C:\Users\Lilia220982\Documents\DSC_7643.NEF

2013-11-24 15:54 - 2013-12-11 12:31 - 21009068 _____ C:\Users\Lilia220982\Documents\DSC_7644.NEF

2013-11-24 15:54 - 2013-12-11 12:31 - 20864095 _____ C:\Users\Lilia220982\Documents\DSC_7645.NEF

2013-11-24 15:54 - 2013-12-11 12:30 - 21220707 _____ C:\Users\Lilia220982\Documents\DSC_7639.NEF

2013-11-24 15:53 - 2013-12-11 12:30 - 21446364 _____ C:\Users\Lilia220982\Documents\DSC_7634.NEF

2013-11-24 15:53 - 2013-12-11 12:30 - 21317836 _____ C:\Users\Lilia220982\Documents\DSC_7635.NEF

2013-11-24 15:53 - 2013-12-11 12:30 - 21312189 _____ C:\Users\Lilia220982\Documents\DSC_7636.NEF

2013-11-24 15:53 - 2013-12-11 12:30 - 21285187 _____ C:\Users\Lilia220982\Documents\DSC_7637.NEF

2013-11-24 15:53 - 2013-12-11 12:30 - 21195712 _____ C:\Users\Lilia220982\Documents\DSC_7638.NEF

2013-11-24 15:52 - 2013-12-11 12:30 - 21304101 _____ C:\Users\Lilia220982\Documents\DSC_7633.NEF

2013-11-24 15:50 - 2013-12-11 12:30 - 21467157 _____ C:\Users\Lilia220982\Documents\DSC_7625.NEF

2013-11-24 15:50 - 2013-12-11 12:30 - 21447827 _____ C:\Users\Lilia220982\Documents\DSC_7626.NEF

2013-11-24 15:50 - 2013-12-11 12:30 - 21400375 _____ C:\Users\Lilia220982\Documents\DSC_7627.NEF

2013-11-24 15:50 - 2013-12-11 12:30 - 21367779 _____ C:\Users\Lilia220982\Documents\DSC_7630.NEF

2013-11-24 15:50 - 2013-12-11 12:30 - 21314863 _____ C:\Users\Lilia220982\Documents\DSC_7628.NEF

2013-11-24 15:50 - 2013-12-11 12:30 - 21300118 _____ C:\Users\Lilia220982\Documents\DSC_7629.NEF

2013-11-24 15:50 - 2013-12-11 12:30 - 20352392 _____ C:\Users\Lilia220982\Documents\DSC_7632.NEF

2013-11-24 15:50 - 2013-12-11 12:30 - 20179086 _____ C:\Users\Lilia220982\Documents\DSC_7631.NEF

2013-11-24 15:49 - 2013-12-11 12:30 - 22735575 _____ C:\Users\Lilia220982\Documents\DSC_7620.NEF

2013-11-24 15:49 - 2013-12-11 12:30 - 21372700 _____ C:\Users\Lilia220982\Documents\DSC_7624.NEF

2013-11-24 15:49 - 2013-12-11 12:30 - 21367703 _____ C:\Users\Lilia220982\Documents\DSC_7621.NEF

2013-11-24 15:49 - 2013-12-11 12:30 - 21292874 _____ C:\Users\Lilia220982\Documents\DSC_7622.NEF

2013-11-24 15:49 - 2013-12-11 12:30 - 21149254 _____ C:\Users\Lilia220982\Documents\DSC_7623.NEF

2013-11-24 15:48 - 2013-12-11 12:30 - 22669157 _____ C:\Users\Lilia220982\Documents\DSC_7619.NEF

2013-11-24 15:48 - 2013-12-11 12:30 - 21809299 _____ C:\Users\Lilia220982\Documents\DSC_7615.NEF

2013-11-24 15:48 - 2013-12-11 12:30 - 21736955 _____ C:\Users\Lilia220982\Documents\DSC_7616.NEF

2013-11-24 15:48 - 2013-12-11 12:30 - 21695324 _____ C:\Users\Lilia220982\Documents\DSC_7614.NEF

2013-11-24 15:48 - 2013-12-11 12:30 - 21510820 _____ C:\Users\Lilia220982\Documents\DSC_7617.NEF

2013-11-24 15:48 - 2013-12-11 12:30 - 21510215 _____ C:\Users\Lilia220982\Documents\DSC_7618.NEF

2013-11-24 15:46 - 2013-12-11 12:30 - 22423892 _____ C:\Users\Lilia220982\Documents\DSC_7610.NEF

2013-11-24 15:46 - 2013-12-11 12:30 - 22409445 _____ C:\Users\Lilia220982\Documents\DSC_7612.NEF

2013-11-24 15:46 - 2013-12-11 12:30 - 22305286 _____ C:\Users\Lilia220982\Documents\DSC_7613.NEF

2013-11-24 15:46 - 2013-12-11 12:30 - 22270994 _____ C:\Users\Lilia220982\Documents\DSC_7611.NEF

2013-11-24 15:45 - 2013-12-11 12:30 - 22580974 _____ C:\Users\Lilia220982\Documents\DSC_7606.NEF

2013-11-24 15:45 - 2013-12-11 12:30 - 22460928 _____ C:\Users\Lilia220982\Documents\DSC_7607.NEF

2013-11-24 15:45 - 2013-12-11 12:30 - 22441655 _____ C:\Users\Lilia220982\Documents\DSC_7603.NEF

2013-11-24 15:45 - 2013-12-11 12:30 - 22328521 _____ C:\Users\Lilia220982\Documents\DSC_7609.NEF

2013-11-24 15:45 - 2013-12-11 12:30 - 22309339 _____ C:\Users\Lilia220982\Documents\DSC_7608.NEF

2013-11-24 15:45 - 2013-12-11 12:30 - 22058826 _____ C:\Users\Lilia220982\Documents\DSC_7604.NEF

2013-11-24 15:45 - 2013-12-11 12:30 - 21931094 _____ C:\Users\Lilia220982\Documents\DSC_7605.NEF

2013-11-24 15:45 - 2013-12-11 12:30 - 19753720 _____ C:\Users\Lilia220982\Documents\DSC_7601.NEF

2013-11-24 15:45 - 2013-12-11 12:30 - 19554852 _____ C:\Users\Lilia220982\Documents\DSC_7602.NEF

2013-11-24 15:44 - 2013-12-11 12:30 - 23499442 _____ C:\Users\Lilia220982\Documents\DSC_7596.NEF

2013-11-24 15:44 - 2013-12-11 12:30 - 23355628 _____ C:\Users\Lilia220982\Documents\DSC_7597.NEF

2013-11-24 15:44 - 2013-12-11 12:30 - 21924766 _____ C:\Users\Lilia220982\Documents\DSC_7600.NEF

2013-11-24 15:44 - 2013-12-11 12:30 - 21894421 _____ C:\Users\Lilia220982\Documents\DSC_7598.NEF

2013-11-24 15:44 - 2013-12-11 12:30 - 21807948 _____ C:\Users\Lilia220982\Documents\DSC_7599.NEF

2013-11-24 15:43 - 2013-12-11 12:30 - 22832312 _____ C:\Users\Lilia220982\Documents\DSC_7595.NEF

2013-11-24 15:43 - 2013-12-11 12:30 - 22312310 _____ C:\Users\Lilia220982\Documents\DSC_7594.NEF

2013-11-24 15:43 - 2013-12-11 12:30 - 22205342 _____ C:\Users\Lilia220982\Documents\DSC_7593.NEF

2013-11-24 15:43 - 2013-12-11 12:30 - 22170342 _____ C:\Users\Lilia220982\Documents\DSC_7592.NEF

2013-11-24 15:43 - 2013-12-11 12:30 - 21733799 _____ C:\Users\Lilia220982\Documents\DSC_7589.NEF

2013-11-24 15:43 - 2013-12-11 12:30 - 21538509 _____ C:\Users\Lilia220982\Documents\DSC_7590.NEF

2013-11-24 15:43 - 2013-12-11 12:30 - 21417136 _____ C:\Users\Lilia220982\Documents\DSC_7586.NEF

2013-11-24 15:43 - 2013-12-11 12:30 - 21381225 _____ C:\Users\Lilia220982\Documents\DSC_7591.NEF

2013-11-24 15:43 - 2013-12-11 12:30 - 21277249 _____ C:\Users\Lilia220982\Documents\DSC_7587.NEF

2013-11-24 15:43 - 2013-12-11 12:30 - 21217855 _____ C:\Users\Lilia220982\Documents\DSC_7588.NEF

2013-11-24 15:42 - 2013-12-11 12:30 - 21538864 _____ C:\Users\Lilia220982\Documents\DSC_7585.NEF

2013-11-24 15:42 - 2013-12-11 12:30 - 21531516 _____ C:\Users\Lilia220982\Documents\DSC_7583.NEF

2013-11-24 15:42 - 2013-12-11 12:30 - 21416426 _____ C:\Users\Lilia220982\Documents\DSC_7584.NEF

2013-11-24 15:41 - 2013-12-11 12:30 - 21795644 _____ C:\Users\Lilia220982\Documents\DSC_7582.NEF

2013-11-24 15:41 - 2013-12-11 12:30 - 21746628 _____ C:\Users\Lilia220982\Documents\DSC_7581.NEF

2013-11-24 15:41 - 2013-12-11 12:30 - 21140383 _____ C:\Users\Lilia220982\Documents\DSC_7577.NEF

2013-11-24 15:41 - 2013-12-11 12:30 - 21135945 _____ C:\Users\Lilia220982\Documents\DSC_7576.NEF

2013-11-24 15:41 - 2013-12-11 12:30 - 21132791 _____ C:\Users\Lilia220982\Documents\DSC_7579.NEF

2013-11-24 15:41 - 2013-12-11 12:30 - 21069071 _____ C:\Users\Lilia220982\Documents\DSC_7578.NEF

2013-11-24 15:41 - 2013-12-11 12:30 - 21054004 _____ C:\Users\Lilia220982\Documents\DSC_7580.NEF

2013-11-24 15:40 - 2013-12-11 12:30 - 21711527 _____ C:\Users\Lilia220982\Documents\DSC_7575.NEF

2013-11-24 15:40 - 2013-12-11 12:30 - 21556634 _____ C:\Users\Lilia220982\Documents\DSC_7573.NEF

2013-11-24 15:40 - 2013-12-11 12:30 - 21536599 _____ C:\Users\Lilia220982\Documents\DSC_7572.NEF

2013-11-24 15:40 - 2013-12-11 12:30 - 21366070 _____ C:\Users\Lilia220982\Documents\DSC_7574.NEF

2013-11-24 15:39 - 2013-12-11 12:30 - 21401438 _____ C:\Users\Lilia220982\Documents\DSC_7570.NEF

2013-11-24 15:39 - 2013-12-11 12:30 - 21312030 _____ C:\Users\Lilia220982\Documents\DSC_7571.NEF

2013-11-24 15:38 - 2013-12-11 12:30 - 21901458 _____ C:\Users\Lilia220982\Documents\DSC_7563.NEF

2013-11-24 15:38 - 2013-12-11 12:30 - 21899805 _____ C:\Users\Lilia220982\Documents\DSC_7560.NEF

2013-11-24 15:38 - 2013-12-11 12:30 - 21843853 _____ C:\Users\Lilia220982\Documents\DSC_7561.NEF

2013-11-24 15:38 - 2013-12-11 12:30 - 21650563 _____ C:\Users\Lilia220982\Documents\DSC_7562.NEF

2013-11-24 15:38 - 2013-12-11 12:30 - 21615132 _____ C:\Users\Lilia220982\Documents\DSC_7568.NEF

2013-11-24 15:38 - 2013-12-11 12:30 - 21464579 _____ C:\Users\Lilia220982\Documents\DSC_7569.NEF

2013-11-24 15:38 - 2013-12-11 12:30 - 21375434 _____ C:\Users\Lilia220982\Documents\DSC_7567.NEF

2013-11-24 15:38 - 2013-12-11 12:30 - 21357826 _____ C:\Users\Lilia220982\Documents\DSC_7564.NEF

2013-11-24 15:38 - 2013-12-11 12:30 - 21345732 _____ C:\Users\Lilia220982\Documents\DSC_7566.NEF

2013-11-24 15:38 - 2013-12-11 12:30 - 21320653 _____ C:\Users\Lilia220982\Documents\DSC_7565.NEF

2013-11-24 15:37 - 2013-12-11 12:30 - 22059051 _____ C:\Users\Lilia220982\Documents\DSC_7558.NEF

2013-11-24 15:37 - 2013-12-11 12:30 - 22035023 _____ C:\Users\Lilia220982\Documents\DSC_7559.NEF

2013-11-24 15:37 - 2013-12-11 12:29 - 21989279 _____ C:\Users\Lilia220982\Documents\DSC_7557.NEF

2013-11-24 15:36 - 2013-12-11 12:29 - 22880515 _____ C:\Users\Lilia220982\Documents\DSC_7549.NEF

2013-11-24 15:36 - 2013-12-11 12:29 - 22758262 _____ C:\Users\Lilia220982\Documents\DSC_7551.NEF

2013-11-24 15:36 - 2013-12-11 12:29 - 22715616 _____ C:\Users\Lilia220982\Documents\DSC_7550.NEF

2013-11-24 15:36 - 2013-12-11 12:29 - 22632203 _____ C:\Users\Lilia220982\Documents\DSC_7552.NEF

2013-11-24 15:36 - 2013-12-11 12:29 - 22524968 _____ C:\Users\Lilia220982\Documents\DSC_7553.NEF

2013-11-24 15:36 - 2013-12-11 12:29 - 22192346 _____ C:\Users\Lilia220982\Documents\DSC_7548.NEF

2013-11-24 15:36 - 2013-12-11 12:29 - 21784584 _____ C:\Users\Lilia220982\Documents\DSC_7554.NEF

2013-11-24 15:36 - 2013-12-11 12:29 - 21698619 _____ C:\Users\Lilia220982\Documents\DSC_7556.NEF

2013-11-24 15:36 - 2013-12-11 12:29 - 21638845 _____ C:\Users\Lilia220982\Documents\DSC_7555.NEF

2013-11-24 15:35 - 2013-12-11 12:29 - 21968658 _____ C:\Users\Lilia220982\Documents\DSC_7547.NEF

2013-11-24 15:35 - 2013-12-11 12:29 - 21903523 _____ C:\Users\Lilia220982\Documents\DSC_7546.NEF

2013-11-24 15:34 - 2013-12-11 12:29 - 22340933 _____ C:\Users\Lilia220982\Documents\DSC_7541.NEF

2013-11-24 15:34 - 2013-12-11 12:29 - 22322387 _____ C:\Users\Lilia220982\Documents\DSC_7542.NEF

2013-11-24 15:34 - 2013-12-11 12:29 - 22290506 _____ C:\Users\Lilia220982\Documents\DSC_7539.NEF

2013-11-24 15:34 - 2013-12-11 12:29 - 22215463 _____ C:\Users\Lilia220982\Documents\DSC_7540.NEF

2013-11-24 15:34 - 2013-12-11 12:29 - 21633867 _____ C:\Users\Lilia220982\Documents\DSC_7543.NEF

2013-11-24 15:34 - 2013-12-11 12:29 - 21569173 _____ C:\Users\Lilia220982\Documents\DSC_7544.NEF

2013-11-24 15:34 - 2013-12-11 12:29 - 21531044 _____ C:\Users\Lilia220982\Documents\DSC_7545.NEF

2013-11-24 15:33 - 2013-12-11 12:29 - 23068345 _____ C:\Users\Lilia220982\Documents\DSC_7537.NEF

2013-11-24 15:33 - 2013-12-11 12:29 - 22862777 _____ C:\Users\Lilia220982\Documents\DSC_7538.NEF

2013-11-24 15:33 - 2013-12-11 12:29 - 22286964 _____ C:\Users\Lilia220982\Documents\DSC_7536.NEF

2013-11-24 15:32 - 2013-12-11 12:29 - 22014147 _____ C:\Users\Lilia220982\Documents\DSC_7529.NEF

2013-11-24 15:32 - 2013-12-11 12:29 - 21995812 _____ C:\Users\Lilia220982\Documents\DSC_7530.NEF

2013-11-24 15:32 - 2013-12-11 12:29 - 21730264 _____ C:\Users\Lilia220982\Documents\DSC_7531.NEF

2013-11-24 15:32 - 2013-12-11 12:29 - 21623299 _____ C:\Users\Lilia220982\Documents\DSC_7532.NEF

2013-11-24 15:32 - 2013-12-11 12:29 - 21535044 _____ C:\Users\Lilia220982\Documents\DSC_7533.NEF

2013-11-24 15:32 - 2013-12-11 12:29 - 21482223 _____ C:\Users\Lilia220982\Documents\DSC_7535.NEF

2013-11-24 15:32 - 2013-12-11 12:29 - 21416162 _____ C:\Users\Lilia220982\Documents\DSC_7534.NEF

2013-11-24 15:30 - 2013-12-11 12:29 - 22542782 _____ C:\Users\Lilia220982\Documents\DSC_7523.NEF

2013-11-24 15:30 - 2013-12-11 12:29 - 21836084 _____ C:\Users\Lilia220982\Documents\DSC_7526.NEF

2013-11-24 15:30 - 2013-12-11 12:29 - 21802908 _____ C:\Users\Lilia220982\Documents\DSC_7527.NEF

2013-11-24 15:30 - 2013-12-11 12:29 - 21784925 _____ C:\Users\Lilia220982\Documents\DSC_7525.NEF

2013-11-24 15:30 - 2013-12-11 12:29 - 21678820 _____ C:\Users\Lilia220982\Documents\DSC_7528.NEF

2013-11-24 15:30 - 2013-12-11 12:29 - 21576176 _____ C:\Users\Lilia220982\Documents\DSC_7524.NEF

2013-11-24 15:29 - 2013-12-11 12:29 - 22875225 _____ C:\Users\Lilia220982\Documents\DSC_7521.NEF

2013-11-24 15:29 - 2013-12-11 12:29 - 21705374 _____ C:\Users\Lilia220982\Documents\DSC_7520.NEF

2013-11-24 15:29 - 2013-12-11 12:29 - 21310183 _____ C:\Users\Lilia220982\Documents\DSC_7522.NEF

2013-11-24 15:20 - 2013-12-11 12:29 - 21336959 _____ C:\Users\Lilia220982\Documents\DSC_7505.NEF

2013-11-24 15:20 - 2013-12-11 12:29 - 21295394 _____ C:\Users\Lilia220982\Documents\DSC_7519.NEF

2013-11-24 15:20 - 2013-12-11 12:29 - 21244348 _____ C:\Users\Lilia220982\Documents\DSC_7517.NEF

2013-11-24 15:20 - 2013-12-11 12:29 - 21234551 _____ C:\Users\Lilia220982\Documents\DSC_7516.NEF

2013-11-24 15:20 - 2013-12-11 12:29 - 21204727 _____ C:\Users\Lilia220982\Documents\DSC_7515.NEF

2013-11-24 15:20 - 2013-12-11 12:29 - 21195952 _____ C:\Users\Lilia220982\Documents\DSC_7506.NEF

2013-11-24 15:20 - 2013-12-11 12:29 - 21182283 _____ C:\Users\Lilia220982\Documents\DSC_7508.NEF

2013-11-24 15:20 - 2013-12-11 12:29 - 21148230 _____ C:\Users\Lilia220982\Documents\DSC_7507.NEF

2013-11-24 15:20 - 2013-12-11 12:29 - 21101848 _____ C:\Users\Lilia220982\Documents\DSC_7510.NEF

2013-11-24 15:20 - 2013-12-11 12:29 - 21094067 _____ C:\Users\Lilia220982\Documents\DSC_7511.NEF

2013-11-24 15:20 - 2013-12-11 12:29 - 21081049 _____ C:\Users\Lilia220982\Documents\DSC_7513.NEF

2013-11-24 15:20 - 2013-12-11 12:29 - 21019579 _____ C:\Users\Lilia220982\Documents\DSC_7509.NEF

2013-11-24 15:20 - 2013-12-11 12:29 - 20590326 _____ C:\Users\Lilia220982\Documents\DSC_7514.NEF

2013-11-24 15:20 - 2013-12-11 12:29 - 20560093 _____ C:\Users\Lilia220982\Documents\DSC_7512.NEF

2013-11-24 15:20 - 2013-12-11 12:29 - 20481702 _____ C:\Users\Lilia220982\Documents\DSC_7518.NEF

2013-11-24 15:19 - 2013-12-11 12:29 - 21416956 _____ C:\Users\Lilia220982\Documents\DSC_7504.NEF

2013-11-24 15:19 - 2013-12-11 12:29 - 21298396 _____ C:\Users\Lilia220982\Documents\DSC_7503.NEF

2013-11-24 15:19 - 2013-12-11 12:29 - 21223869 _____ C:\Users\Lilia220982\Documents\DSC_7499.NEF

2013-11-24 15:19 - 2013-12-11 12:29 - 21216482 _____ C:\Users\Lilia220982\Documents\DSC_7502.NEF

2013-11-24 15:19 - 2013-12-11 12:29 - 21203128 _____ C:\Users\Lilia220982\Documents\DSC_7495.NEF

2013-11-24 15:19 - 2013-12-11 12:29 - 21173440 _____ C:\Users\Lilia220982\Documents\DSC_7498.NEF

2013-11-24 15:19 - 2013-12-11 12:29 - 21150786 _____ C:\Users\Lilia220982\Documents\DSC_7500.NEF

2013-11-24 15:19 - 2013-12-11 12:29 - 21131788 _____ C:\Users\Lilia220982\Documents\DSC_7496.NEF

2013-11-24 15:19 - 2013-12-11 12:29 - 21096829 _____ C:\Users\Lilia220982\Documents\DSC_7497.NEF

2013-11-24 15:19 - 2013-12-11 12:29 - 20051811 _____ C:\Users\Lilia220982\Documents\DSC_7501.NEF

2013-11-24 15:18 - 2013-12-11 12:29 - 23792543 _____ C:\Users\Lilia220982\Documents\DSC_7493.NEF

2013-11-24 15:18 - 2013-12-11 12:29 - 23585727 _____ C:\Users\Lilia220982\Documents\DSC_7494.NEF

2013-11-24 15:18 - 2013-12-11 12:29 - 22799251 _____ C:\Users\Lilia220982\Documents\DSC_7490.NEF

2013-11-24 15:18 - 2013-12-11 12:29 - 22316516 _____ C:\Users\Lilia220982\Documents\DSC_7491.NEF

2013-11-24 15:18 - 2013-12-11 12:29 - 22121511 _____ C:\Users\Lilia220982\Documents\DSC_7492.NEF

2013-11-24 15:17 - 2013-12-11 12:29 - 24655178 _____ C:\Users\Lilia220982\Documents\DSC_7488.NEF

2013-11-24 15:17 - 2013-12-11 12:29 - 24348872 _____ C:\Users\Lilia220982\Documents\DSC_7487.NEF

2013-11-24 15:17 - 2013-12-11 12:29 - 24318736 _____ C:\Users\Lilia220982\Documents\DSC_7489.NEF

2013-11-24 15:16 - 2013-12-11 12:29 - 22787841 _____ C:\Users\Lilia220982\Documents\DSC_7484.NEF

2013-11-24 15:16 - 2013-12-11 12:29 - 22730035 _____ C:\Users\Lilia220982\Documents\DSC_7483.NEF

2013-11-24 15:16 - 2013-12-11 12:29 - 22463728 _____ C:\Users\Lilia220982\Documents\DSC_7486.NEF

2013-11-24 15:16 - 2013-12-11 12:29 - 22446440 _____ C:\Users\Lilia220982\Documents\DSC_7485.NEF

2013-11-24 15:16 - 2013-12-11 12:29 - 22269561 _____ C:\Users\Lilia220982\Documents\DSC_7482.NEF

2013-11-24 15:15 - 2013-12-11 12:29 - 21346132 _____ C:\Users\Lilia220982\Documents\DSC_7474.NEF

2013-11-24 15:15 - 2013-12-11 12:29 - 21324079 _____ C:\Users\Lilia220982\Documents\DSC_7475.NEF

2013-11-24 15:15 - 2013-12-11 12:29 - 21197060 _____ C:\Users\Lilia220982\Documents\DSC_7476.NEF

2013-11-24 15:15 - 2013-12-11 12:29 - 21163712 _____ C:\Users\Lilia220982\Documents\DSC_7477.NEF

2013-11-24 15:15 - 2013-12-11 12:29 - 21087744 _____ C:\Users\Lilia220982\Documents\DSC_7478.NEF

2013-11-24 15:15 - 2013-12-11 12:29 - 21048674 _____ C:\Users\Lilia220982\Documents\DSC_7481.NEF

2013-11-24 15:15 - 2013-12-11 12:29 - 21047430 _____ C:\Users\Lilia220982\Documents\DSC_7479.NEF

2013-11-24 15:15 - 2013-12-11 12:29 - 20999969 _____ C:\Users\Lilia220982\Documents\DSC_7480.NEF

2013-11-24 15:14 - 2013-12-11 12:28 - 21497843 _____ C:\Users\Lilia220982\Documents\DSC_7471.NEF

2013-11-24 15:14 - 2013-12-11 12:28 - 21460021 _____ C:\Users\Lilia220982\Documents\DSC_7463.NEF

2013-11-24 15:14 - 2013-12-11 12:28 - 21446671 _____ C:\Users\Lilia220982\Documents\DSC_7464.NEF

2013-11-24 15:14 - 2013-12-11 12:28 - 21394027 _____ C:\Users\Lilia220982\Documents\DSC_7465.NEF

2013-11-24 15:14 - 2013-12-11 12:28 - 21340966 _____ C:\Users\Lilia220982\Documents\DSC_7469.NEF

2013-11-24 15:14 - 2013-12-11 12:28 - 21323368 _____ C:\Users\Lilia220982\Documents\DSC_7470.NEF

2013-11-24 15:14 - 2013-12-11 12:28 - 21143505 _____ C:\Users\Lilia220982\Documents\DSC_7466.NEF

2013-11-24 15:14 - 2013-12-11 12:28 - 21131960 _____ C:\Users\Lilia220982\Documents\DSC_7472.NEF

2013-11-24 15:14 - 2013-12-11 12:28 - 21117300 _____ C:\Users\Lilia220982\Documents\DSC_7473.NEF

2013-11-24 15:14 - 2013-12-11 12:28 - 21067892 _____ C:\Users\Lilia220982\Documents\DSC_7468.NEF

2013-11-24 15:14 - 2013-12-11 12:28 - 20654662 _____ C:\Users\Lilia220982\Documents\DSC_7467.NEF

2013-11-24 15:13 - 2013-12-11 12:28 - 21777542 _____ C:\Users\Lilia220982\Documents\DSC_7461.NEF

2013-11-24 15:13 - 2013-12-11 12:28 - 21631454 _____ C:\Users\Lilia220982\Documents\DSC_7454.NEF

2013-11-24 15:13 - 2013-12-11 12:28 - 21562143 _____ C:\Users\Lilia220982\Documents\DSC_7462.NEF

2013-11-24 15:13 - 2013-12-11 12:28 - 21379767 _____ C:\Users\Lilia220982\Documents\DSC_7458.NEF

2013-11-24 15:13 - 2013-12-11 12:28 - 21312073 _____ C:\Users\Lilia220982\Documents\DSC_7460.NEF

2013-11-24 15:13 - 2013-12-11 12:28 - 21288746 _____ C:\Users\Lilia220982\Documents\DSC_7455.NEF

2013-11-24 15:13 - 2013-12-11 12:28 - 21228059 _____ C:\Users\Lilia220982\Documents\DSC_7457.NEF

2013-11-24 15:13 - 2013-12-11 12:28 - 21088834 _____ C:\Users\Lilia220982\Documents\DSC_7453.NEF

2013-11-24 15:13 - 2013-12-11 12:28 - 21077963 _____ C:\Users\Lilia220982\Documents\DSC_7456.NEF

2013-11-24 15:13 - 2013-12-11 12:28 - 20962085 _____ C:\Users\Lilia220982\Documents\DSC_7459.NEF

2013-11-24 15:12 - 2013-12-11 12:28 - 20733992 _____ C:\Users\Lilia220982\Documents\DSC_7448.NEF

2013-11-24 15:12 - 2013-12-11 12:28 - 20728945 _____ C:\Users\Lilia220982\Documents\DSC_7447.NEF

2013-11-24 15:12 - 2013-12-11 12:28 - 20655395 _____ C:\Users\Lilia220982\Documents\DSC_7452.NEF

2013-11-24 15:12 - 2013-12-11 12:28 - 20612182 _____ C:\Users\Lilia220982\Documents\DSC_7449.NEF

2013-11-24 15:12 - 2013-12-11 12:28 - 20590216 _____ C:\Users\Lilia220982\Documents\DSC_7446.NEF

2013-11-24 15:12 - 2013-12-11 12:28 - 20589777 _____ C:\Users\Lilia220982\Documents\DSC_7450.NEF

2013-11-24 15:12 - 2013-12-11 12:28 - 20554434 _____ C:\Users\Lilia220982\Documents\DSC_7445.NEF

2013-11-24 15:12 - 2013-12-11 12:28 - 20541110 _____ C:\Users\Lilia220982\Documents\DSC_7451.NEF

2013-11-24 15:11 - 2013-12-11 12:28 - 21183172 _____ C:\Users\Lilia220982\Documents\DSC_7433.NEF

2013-11-24 15:11 - 2013-12-11 12:28 - 21179096 _____ C:\Users\Lilia220982\Documents\DSC_7432.NEF

2013-11-24 15:11 - 2013-12-11 12:28 - 21039180 _____ C:\Users\Lilia220982\Documents\DSC_7431.NEF

2013-11-24 15:11 - 2013-12-11 12:28 - 21009433 _____ C:\Users\Lilia220982\Documents\DSC_7434.NEF

2013-11-24 15:11 - 2013-12-11 12:28 - 20998969 _____ C:\Users\Lilia220982\Documents\DSC_7430.NEF

2013-11-24 15:11 - 2013-12-11 12:28 - 20974387 _____ C:\Users\Lilia220982\Documents\DSC_7441.NEF

2013-11-24 15:11 - 2013-12-11 12:28 - 20970241 _____ C:\Users\Lilia220982\Documents\DSC_7439.NEF

2013-11-24 15:11 - 2013-12-11 12:28 - 20966724 _____ C:\Users\Lilia220982\Documents\DSC_7438.NEF

2013-11-24 15:11 - 2013-12-11 12:28 - 20663089 _____ C:\Users\Lilia220982\Documents\DSC_7444.NEF

2013-11-24 15:11 - 2013-12-11 12:28 - 20644040 _____ C:\Users\Lilia220982\Documents\DSC_7440.NEF

2013-11-24 15:11 - 2013-12-11 12:28 - 20642688 _____ C:\Users\Lilia220982\Documents\DSC_7437.NEF

2013-11-24 15:11 - 2013-12-11 12:28 - 20616258 _____ C:\Users\Lilia220982\Documents\DSC_7435.NEF

2013-11-24 15:11 - 2013-12-11 12:28 - 20606319 _____ C:\Users\Lilia220982\Documents\DSC_7436.NEF

2013-11-24 15:11 - 2013-12-11 12:28 - 20538784 _____ C:\Users\Lilia220982\Documents\DSC_7442.NEF

2013-11-24 15:11 - 2013-12-11 12:28 - 20501957 _____ C:\Users\Lilia220982\Documents\DSC_7443.NEF

2013-11-24 15:10 - 2013-12-11 12:28 - 20854905 _____ C:\Users\Lilia220982\Documents\DSC_7419.NEF

2013-11-24 15:10 - 2013-12-11 12:28 - 20847637 _____ C:\Users\Lilia220982\Documents\DSC_7422.NEF

2013-11-24 15:10 - 2013-12-11 12:28 - 20780747 _____ C:\Users\Lilia220982\Documents\DSC_7425.NEF

2013-11-24 15:10 - 2013-12-11 12:28 - 20754471 _____ C:\Users\Lilia220982\Documents\DSC_7421.NEF

2013-11-24 15:10 - 2013-12-11 12:28 - 20739595 _____ C:\Users\Lilia220982\Documents\DSC_7420.NEF

2013-11-24 15:10 - 2013-12-11 12:28 - 20718686 _____ C:\Users\Lilia220982\Documents\DSC_7418.NEF

2013-11-24 15:10 - 2013-12-11 12:28 - 20717016 _____ C:\Users\Lilia220982\Documents\DSC_7429.NEF

2013-11-24 15:10 - 2013-12-11 12:28 - 20652934 _____ C:\Users\Lilia220982\Documents\DSC_7426.NEF

2013-11-24 15:10 - 2013-12-11 12:28 - 20633222 _____ C:\Users\Lilia220982\Documents\DSC_7428.NEF

2013-11-24 15:10 - 2013-12-11 12:28 - 20317174 _____ C:\Users\Lilia220982\Documents\DSC_7424.NEF

2013-11-24 15:10 - 2013-12-11 12:28 - 20292224 _____ C:\Users\Lilia220982\Documents\DSC_7423.NEF

2013-11-24 15:10 - 2013-12-11 12:28 - 20065019 _____ C:\Users\Lilia220982\Documents\DSC_7427.NEF

2013-11-24 15:09 - 2013-12-11 12:28 - 21045333 _____ C:\Users\Lilia220982\Documents\DSC_7414.NEF

2013-11-24 15:09 - 2013-12-11 12:28 - 21036424 _____ C:\Users\Lilia220982\Documents\DSC_7412.NEF

2013-11-24 15:09 - 2013-12-11 12:28 - 21017918 _____ C:\Users\Lilia220982\Documents\DSC_7411.NEF

2013-11-24 15:09 - 2013-12-11 12:28 - 20992504 _____ C:\Users\Lilia220982\Documents\DSC_7413.NEF

2013-11-24 15:09 - 2013-12-11 12:28 - 20721724 _____ C:\Users\Lilia220982\Documents\DSC_7417.NEF

2013-11-24 15:09 - 2013-12-11 12:28 - 20708609 _____ C:\Users\Lilia220982\Documents\DSC_7416.NEF

2013-11-24 15:09 - 2013-12-11 12:28 - 20095742 _____ C:\Users\Lilia220982\Documents\DSC_7415.NEF

2013-11-24 15:08 - 2013-12-11 12:28 - 21185091 _____ C:\Users\Lilia220982\Documents\DSC_7404.NEF

2013-11-24 15:08 - 2013-12-11 12:28 - 21175515 _____ C:\Users\Lilia220982\Documents\DSC_7405.NEF

2013-11-24 15:08 - 2013-12-11 12:28 - 21096162 _____ C:\Users\Lilia220982\Documents\DSC_7407.NEF

2013-11-24 15:08 - 2013-12-11 12:28 - 21007209 _____ C:\Users\Lilia220982\Documents\DSC_7406.NEF

2013-11-24 15:08 - 2013-12-11 12:28 - 20987079 _____ C:\Users\Lilia220982\Documents\DSC_7409.NEF

2013-11-24 15:08 - 2013-12-11 12:28 - 20919609 _____ C:\Users\Lilia220982\Documents\DSC_7410.NEF

2013-11-24 15:08 - 2013-12-11 12:28 - 20178642 _____ C:\Users\Lilia220982\Documents\DSC_7408.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 21734254 _____ C:\Users\Lilia220982\Documents\DSC_7398.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 21722919 _____ C:\Users\Lilia220982\Documents\DSC_7401.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 21706159 _____ C:\Users\Lilia220982\Documents\DSC_7387.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 21702838 _____ C:\Users\Lilia220982\Documents\DSC_7403.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 21408493 _____ C:\Users\Lilia220982\Documents\DSC_7399.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 21399885 _____ C:\Users\Lilia220982\Documents\DSC_7397.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 20651089 _____ C:\Users\Lilia220982\Documents\DSC_7400.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 20608418 _____ C:\Users\Lilia220982\Documents\DSC_7393.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 20597335 _____ C:\Users\Lilia220982\Documents\DSC_7396.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 20584347 _____ C:\Users\Lilia220982\Documents\DSC_7392.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 20529511 _____ C:\Users\Lilia220982\Documents\DSC_7402.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 20524161 _____ C:\Users\Lilia220982\Documents\DSC_7391.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 20504204 _____ C:\Users\Lilia220982\Documents\DSC_7390.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 20502823 _____ C:\Users\Lilia220982\Documents\DSC_7385.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 20461452 _____ C:\Users\Lilia220982\Documents\DSC_7384.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 20458696 _____ C:\Users\Lilia220982\Documents\DSC_7386.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 20418163 _____ C:\Users\Lilia220982\Documents\DSC_7394.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 20361442 _____ C:\Users\Lilia220982\Documents\DSC_7395.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 20361317 _____ C:\Users\Lilia220982\Documents\DSC_7389.NEF

2013-11-24 15:04 - 2013-12-11 12:28 - 20324331 _____ C:\Users\Lilia220982\Documents\DSC_7388.NEF

2013-11-24 15:04 - 2013-12-11 12:27 - 20496084 _____ C:\Users\Lilia220982\Documents\DSC_7380.NEF

2013-11-24 15:04 - 2013-12-11 12:27 - 20461415 _____ C:\Users\Lilia220982\Documents\DSC_7383.NEF

2013-11-24 15:04 - 2013-12-11 12:27 - 20429075 _____ C:\Users\Lilia220982\Documents\DSC_7381.NEF

2013-11-24 15:04 - 2013-12-11 12:27 - 20370069 _____ C:\Users\Lilia220982\Documents\DSC_7382.NEF

2013-11-24 15:03 - 2013-12-11 12:27 - 21209584 _____ C:\Users\Lilia220982\Documents\DSC_7375.NEF

2013-11-24 15:03 - 2013-12-11 12:27 - 20919598 _____ C:\Users\Lilia220982\Documents\DSC_7377.NEF

2013-11-24 15:03 - 2013-12-11 12:27 - 20858560 _____ C:\Users\Lilia220982\Documents\DSC_7374.NEF

2013-11-24 15:03 - 2013-12-11 12:27 - 20747658 _____ C:\Users\Lilia220982\Documents\DSC_7373.NEF

2013-11-24 15:03 - 2013-12-11 12:27 - 20699349 _____ C:\Users\Lilia220982\Documents\DSC_7372.NEF

2013-11-24 15:03 - 2013-12-11 12:27 - 20646783 _____ C:\Users\Lilia220982\Documents\DSC_7371.NEF

2013-11-24 15:03 - 2013-12-11 12:27 - 20490057 _____ C:\Users\Lilia220982\Documents\DSC_7376.NEF

2013-11-24 15:03 - 2013-12-11 12:27 - 20005728 _____ C:\Users\Lilia220982\Documents\DSC_7379.NEF

2013-11-24 15:03 - 2013-12-11 12:27 - 19991129 _____ C:\Users\Lilia220982\Documents\DSC_7378.NEF

2013-11-23 07:43 - 2013-12-13 10:00 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2013-11-23 06:05 - 2013-12-13 10:00 - 00368640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2013-11-22 17:29 - 2013-10-30 17:07 - 00000858 _____ C:\Users\Lilia220982\Desktop\µTorrent.lnk

2013-11-22 17:29 - 2013-10-30 17:07 - 00000838 _____ C:\Users\Lilia220982\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk

2013-11-22 17:29 - 2013-10-30 17:07 - 00000000 ____D C:\Program Files (x86)\uTorrent

2013-11-19 18:43 - 2013-11-19 18:43 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1

2013-11-19 18:43 - 2013-10-29 18:09 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\Adobe

2013-11-17 22:13 - 2013-11-17 22:13 - 00000000 ____D C:\Users\Lilia220982\.AS

2013-11-17 22:11 - 2013-11-17 22:11 - 00000000 ____D C:\Users\Lilia220982\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Alien Skin Software
 

Some content of TEMP:

====================

C:\Users\Lilia220982\AppData\Local\Temp\135.65761418153417_Update.exe

C:\Users\Lilia220982\AppData\Local\Temp\ICReinstall_DownloadAcceleratorSetup.exe

C:\Users\Lilia220982\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-12-08 12:38
 

==================== End Of Log ============================

--- --- ---