Whilokii bei windows 8 entfernen

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by Family (administrator) on CHEF on 17-10-2013 23:31:20
Running from C:\Users\Family\Downloads
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(Broadcom Corp.) C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe
(Microsoft Corporation) C:\Windows\system32\dashost.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
(Dritek System INC.) C:\Windows\RfBtnSvc64.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Whilokii) C:\Program Files (x86)\Whilokii\bin\utilWhilokii.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Atheros) C:\Program Files (x86)\Qualcomm Atheros\Ath_WlanAgent.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Intel Corporation) C:\Windows\system32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe
() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\PMMUpdate.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\EgisUpdate.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1212048 2012-06-07] (Realtek Semiconductor)
HKLM\...\Run: [BtPreLoad] - C:\Program Files (x86)\Bluetooth Suite\BtPreLoad.exe [64640 2012-08-10] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [18642024 2013-02-28] (Skype Technologies S.A.)
HKLM-x32\...\Run: [Dolby Home Theater v4] - C:\Dolby PCEE4\pcee4.exe [508256 2012-04-23] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [LManager] - [x]
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [163000 2012-12-12] (Geek Software GmbH)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-10-17] (AVAST Software)
HKU\Default\...\RunOnce: [RegAutoPlay] - C:\Program Files (x86)\Acer\clear.fi Media\RegAutoplay.exe [1845392 2012-08-21] (Acer Incorporated)
HKU\Default User\...\RunOnce: [RegAutoPlay] - C:\Program Files (x86)\Acer\clear.fi Media\RegAutoplay.exe [1845392 2012-08-21] (Acer Incorporated)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [247144 2012-10-08] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [202600 2012-10-08] (NVIDIA Corporation)

==================== Internet (Whitelisted) ====================

SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKLM - {AF2E6D89-D3E4-4157-B44C-21D7E809C768} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKLM-x32 - {AF2E6D89-D3E4-4157-B44C-21D7E809C768} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKCU - DefaultScope {AF2E6D89-D3E4-4157-B44C-21D7E809C768} URL = 
SearchScopes: HKCU - {AF2E6D89-D3E4-4157-B44C-21D7E809C768} URL = 
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Family\AppData\Roaming\Mozilla\Firefox\Profiles\m05l4hq1.default
FF Homepage: hxxp://de.yahoo.com/
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK

==================== Services (Whitelisted) =================

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [211584 2012-08-10] (Qualcomm Atheros Commnucations)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-10-17] (AVAST Software)
R2 BrcmCardReader; C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe [176640 2012-08-20] (Broadcom Corp.)
S3 DeviceFastLaneService; C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [468624 2012-08-23] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [658576 2012-08-22] (Acer Incorporated)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [259136 2012-08-23] (NTI Corporation)
R2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [93296 2012-09-26] (Dritek System INC.)
R2 Util Whilokii; C:\Program Files (x86)\Whilokii\bin\utilWhilokii.exe [65304 2013-10-13] (Whilokii)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
R2 ZAtheros Wlan Agent; C:\Program Files (x86)\Qualcomm Atheros\Ath_WlanAgent.exe [81536 2012-08-01] (Atheros)

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [38984 2013-10-17] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [84328 2013-10-17] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-10-17] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-10-17] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1032416 2013-10-17] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [409832 2013-10-17] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-10-17] ()
S3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [5139968 2012-06-02] (Broadcom Corporation)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-08-10] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2012-09-26] (Dritek System Inc.)
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-18 07:32 - 2013-10-18 07:32 - 00000000 ____D C:\FRST
2013-10-17 23:09 - 2013-10-17 23:09 - 00001232 _____ C:\Users\Family\Desktop\Revo Uninstaller.lnk
2013-10-17 23:09 - 2013-10-17 23:09 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2013-10-17 23:05 - 2013-10-17 23:06 - 00000000 ____D C:\Users\Family\AppData\Roaming\Mozilla
2013-10-17 23:05 - 2013-10-17 23:05 - 00001115 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-10-17 23:05 - 2013-10-17 23:05 - 00000000 ____D C:\Users\Family\AppData\Local\Mozilla
2013-10-17 23:05 - 2013-10-17 23:05 - 00000000 ____D C:\ProgramData\Mozilla
2013-10-17 23:05 - 2013-10-17 23:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-10-17 23:04 - 2013-10-17 23:04 - 00281896 _____ (Mozilla) C:\Users\Family\Downloads\Firefox Setup Stub 24.0.exe
2013-10-17 23:03 - 2013-10-17 23:03 - 00163792 _____ C:\Users\Family\Documents\bookmarks_17.10.13.html
2013-10-17 22:58 - 2013-10-17 22:58 - 00001572 _____ C:\Users\Family\Downloads\JRT.txt
2013-10-17 22:54 - 2013-10-17 22:54 - 00000000 ____D C:\Windows\ERUNT
2013-10-17 22:51 - 2013-10-17 22:51 - 00000000 ____D C:\Users\Family\AppData\Roaming\AVAST Software
2013-10-17 22:45 - 2013-10-17 22:45 - 01033335 _____ (Thisisu) C:\Users\Family\Downloads\JRT.exe
2013-10-17 22:44 - 2013-10-17 22:44 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Family\Downloads\revosetup95.exe
2013-10-17 22:41 - 2013-10-17 22:41 - 00002617 _____ C:\Users\Family\Downloads\AdwCleaner[S0].txt
2013-10-17 22:37 - 2013-10-17 22:39 - 00000000 ____D C:\AdwCleaner
2013-10-17 22:31 - 2013-10-17 22:31 - 01050644 _____ C:\Users\Family\Downloads\adwcleaner.exe
2013-10-17 22:17 - 2013-10-17 22:17 - 00001077 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 ____D C:\Users\Family\AppData\Roaming\Malwarebytes
2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-17 22:17 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-10-17 22:15 - 2013-10-17 22:15 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Family\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-17 22:09 - 2013-10-17 22:09 - 00017087 _____ C:\Users\Family\Downloads\Addition.txt
2013-10-17 21:00 - 2013-10-17 21:00 - 01954124 _____ (Farbar) C:\Users\Family\Downloads\FRST64.exe
2013-10-14 21:00 - 2012-08-30 13:37 - 02213776 _____ (ELAN Microelectronics Corp.) C:\Windows\ETDUninst.dll
2013-10-14 20:05 - 2013-10-14 20:05 - 00000000 _____ C:\autoexec.bat
2013-10-14 20:03 - 2013-10-14 21:00 - 00000000 ____D C:\Windows\86CA3695A4124BAE92B649A60C2AC663.TMP
2013-10-14 20:03 - 2013-10-14 20:03 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-10-14 15:06 - 2013-10-14 15:06 - 00423696 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-13 08:12 - 2013-08-29 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbser.sys
2013-10-13 08:12 - 2013-07-06 02:15 - 00652288 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-13 08:12 - 2013-07-04 04:13 - 00541696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-13 08:11 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-13 08:11 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-13 08:11 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-13 08:11 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-13 08:11 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-13 08:11 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-13 08:11 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-13 08:11 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-13 08:11 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-13 08:11 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-13 08:11 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-10-13 08:11 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-13 08:11 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-13 08:11 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-13 08:11 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-13 08:11 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-13 08:11 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-13 08:10 - 2013-07-06 00:02 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-13 08:10 - 2013-07-06 00:01 - 00210560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-10-13 08:10 - 2013-07-02 00:14 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbprint.sys
2013-10-13 08:10 - 2013-06-29 05:08 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-13 08:10 - 2013-06-29 05:07 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-13 08:10 - 2013-06-22 07:45 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-13 08:10 - 2013-06-22 07:45 - 00054488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2013-10-13 08:09 - 2013-08-23 07:11 - 04040192 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-13 08:09 - 2013-07-20 00:13 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-13 08:09 - 2013-07-20 00:13 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-13 08:09 - 2013-07-02 03:41 - 00447320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2013-10-13 08:09 - 2013-07-02 03:41 - 00337752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2013-10-13 08:09 - 2013-07-02 03:41 - 00213336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UCX01000.SYS
2013-10-13 08:09 - 2013-07-01 03:42 - 00623448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-10-13 08:09 - 2013-07-01 03:42 - 00498008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-10-13 08:09 - 2013-07-01 03:42 - 00079192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-10-13 08:09 - 2013-07-01 03:42 - 00021848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-10-13 08:09 - 2013-06-29 05:07 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-10-13 08:09 - 2013-06-29 05:06 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-10-13 08:09 - 2013-05-27 01:17 - 00035328 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-13 08:09 - 2013-05-27 00:59 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-13 08:09 - 2013-05-25 05:15 - 00362496 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-13 08:09 - 2013-05-25 04:32 - 00300032 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-13 08:08 - 2013-08-10 07:21 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2013-10-13 08:08 - 2013-08-10 07:21 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncInfo.dll
2013-10-13 08:08 - 2013-08-10 05:58 - 00356352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2013-10-13 08:08 - 2013-08-03 08:40 - 01374208 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
2013-10-13 08:08 - 2013-08-03 08:40 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll
2013-10-13 08:08 - 2013-08-03 08:40 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx
2013-10-13 08:08 - 2013-08-03 07:14 - 00399360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysmon.ocx
2013-10-13 08:08 - 2013-08-03 07:13 - 01245696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdc.dll
2013-10-13 08:08 - 2013-08-03 07:13 - 00437248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wvc.dll
2013-10-13 08:08 - 2013-08-02 08:28 - 19758080 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-10-13 08:08 - 2013-08-02 08:28 - 10116608 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2013-10-13 08:08 - 2013-08-02 08:28 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-10-13 08:08 - 2013-08-02 08:26 - 02304512 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-10-13 08:08 - 2013-08-02 07:08 - 17561088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-10-13 08:08 - 2013-08-02 07:08 - 08858112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2013-10-13 08:08 - 2013-08-02 07:08 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-10-13 08:08 - 2013-08-02 07:06 - 02035712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-10-13 08:08 - 2013-08-01 12:41 - 02233688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-10-13 08:08 - 2013-07-31 01:30 - 00386923 _____ C:\Windows\system32\ApnDatabase.xml
2013-10-13 08:08 - 2013-07-25 01:10 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mbsmsapi.dll
2013-10-13 08:08 - 2013-07-25 01:06 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\mbsmsapi.dll
2013-10-13 08:08 - 2013-04-10 01:17 - 01125888 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2013-10-13 08:08 - 2013-04-10 00:29 - 00893952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2013-10-10 21:44 - 2013-10-17 22:49 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2013-10-10 21:44 - 2013-10-17 22:49 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2013-10-10 21:44 - 2013-10-17 22:49 - 00038984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2013-10-10 21:44 - 2013-10-17 22:49 - 00001970 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-10-10 21:43 - 2013-10-17 22:49 - 01032416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-10-10 21:43 - 2013-10-17 22:49 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-10-10 21:43 - 2013-10-17 22:49 - 00205320 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-10-10 21:43 - 2013-10-17 22:49 - 00084328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-10-10 21:43 - 2013-10-17 22:49 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-10-10 21:43 - 2013-10-17 22:49 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-10-10 21:43 - 2013-10-17 22:49 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-10-10 21:43 - 2013-10-17 22:47 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-10-10 21:43 - 2013-10-10 21:43 - 00000000 ____D C:\Program Files\AVAST Software
2013-10-10 21:42 - 2013-10-17 22:48 - 00000000 ____D C:\ProgramData\AVAST Software
2013-10-10 21:41 - 2013-10-10 21:41 - 131918888 _____ C:\Users\Family\Downloads\avast_free_antivirus_setup.exe
2013-10-10 21:27 - 2013-10-16 07:30 - 00000094 _____ C:\Users\Family\AppData\Roaming\WB.CFG
2013-10-10 21:27 - 2013-10-16 07:30 - 00000006 _____ C:\Users\Family\AppData\Roaming\WBPU-TTL.DAT
2013-10-10 21:22 - 2013-10-10 21:22 - 00012784 _____ C:\Users\Family\Downloads\OTL.7z
2013-10-10 20:52 - 2013-10-10 18:19 - 00117428 _____ C:\Users\Family\Downloads\OTL.txt
2013-10-10 20:30 - 2013-10-10 20:30 - 127231689 _____ (Igor Pavlov) C:\Users\Family\Downloads\OTLPENet.exe
2013-10-10 20:28 - 2013-10-10 20:28 - 00000000 ____D C:\Windows\SysWOW64\searchplugins
2013-10-10 20:28 - 2013-10-10 20:28 - 00000000 ____D C:\Windows\SysWOW64\Extensions
2013-10-10 20:28 - 2013-10-10 20:28 - 00000000 ____D C:\Users\Family\AppData\Local\avgchrome
2013-10-10 20:27 - 2013-10-17 23:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-10 20:27 - 2013-10-17 22:55 - 00000000 ____D C:\Program Files (x86)\Whilokii
2013-10-03 09:46 - 2013-10-03 09:46 - 00000000 ___RD C:\Users\Family\AppData\Roaming\Brother
2013-09-26 10:26 - 2013-10-05 08:21 - 00024064 _____ C:\Users\Family\Downloads\08-Sp13-14.xls
2013-09-26 10:26 - 2013-09-28 09:38 - 00025088 _____ C:\Users\Family\Downloads\07-Sp13-14.xls
2013-09-26 10:26 - 2013-09-26 10:26 - 00031232 _____ C:\Users\Family\Downloads\13-Sp13-14.xls
2013-09-26 10:26 - 2013-09-26 10:26 - 00031232 _____ C:\Users\Family\Downloads\12-Sp13-14.xls
2013-09-26 10:26 - 2013-09-26 10:26 - 00031232 _____ C:\Users\Family\Downloads\11-Sp13-14.xls
2013-09-26 10:26 - 2013-09-26 10:26 - 00031232 _____ C:\Users\Family\Downloads\10-Sp13-14.xls
2013-09-26 10:26 - 2013-09-26 10:26 - 00030720 _____ C:\Users\Family\Downloads\14-Sp13-14.xls
2013-09-26 10:26 - 2013-09-26 10:26 - 00025088 _____ C:\Users\Family\Downloads\09-Sp13-14.xls
2013-09-22 19:31 - 2013-08-16 07:41 - 00058200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
2013-09-22 19:31 - 2013-08-16 07:39 - 02371728 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll
2013-09-22 19:31 - 2013-08-16 07:39 - 00059416 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2013-09-22 19:31 - 2013-08-16 07:32 - 00209200 _____ (Microsoft Corporation) C:\Windows\system32\NotificationUI.exe
2013-09-22 19:31 - 2013-08-16 07:22 - 04917760 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2013-09-22 19:31 - 2013-08-16 07:22 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2013-09-22 19:31 - 2013-08-16 07:21 - 03275776 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2013-09-22 19:31 - 2013-08-16 07:21 - 01621504 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2013-09-22 19:31 - 2013-08-16 07:21 - 01164288 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2013-09-22 19:31 - 2013-08-16 07:21 - 00773120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2013-09-22 19:31 - 2013-08-16 07:21 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2013-09-22 19:31 - 2013-08-16 07:21 - 00368640 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2013-09-22 19:31 - 2013-08-16 07:21 - 00252416 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2013-09-22 19:31 - 2013-08-16 07:21 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\WSClient.dll
2013-09-22 19:31 - 2013-08-16 07:21 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2013-09-22 19:31 - 2013-08-16 07:21 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\WSSync.dll
2013-09-22 19:31 - 2013-08-16 07:21 - 00174592 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2013-09-22 19:31 - 2013-08-16 07:21 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-09-22 19:31 - 2013-08-16 07:21 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2013-09-22 19:31 - 2013-08-16 07:21 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll
2013-09-22 19:31 - 2013-08-16 07:21 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2013-09-22 19:31 - 2013-08-16 07:21 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\setupcln.dll
2013-09-22 19:31 - 2013-08-16 07:21 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2013-09-22 19:31 - 2013-08-16 07:21 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2013-09-22 19:31 - 2013-08-16 07:20 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2013-09-22 19:31 - 2013-08-16 00:43 - 00628736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2013-09-22 19:31 - 2013-08-16 00:43 - 00562688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2013-09-22 19:31 - 2013-08-16 00:43 - 00167424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSClient.dll
2013-09-22 19:31 - 2013-08-16 00:43 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSSync.dll
2013-09-22 19:31 - 2013-08-16 00:43 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2013-09-22 19:31 - 2013-08-16 00:43 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2013-09-22 19:31 - 2013-08-16 00:43 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-09-22 19:31 - 2013-08-16 00:43 - 00084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2013-09-22 19:31 - 2013-08-16 00:43 - 00083968 _____ C:\Windows\SysWOW64\OEMLicense.dll
2013-09-22 19:31 - 2013-08-16 00:43 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2013-09-22 19:31 - 2013-08-16 00:43 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2013-09-22 19:31 - 2013-08-16 00:42 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppc.dll
2013-09-22 19:31 - 2013-08-16 00:42 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupcln.dll
2013-09-22 19:28 - 2013-07-09 10:04 - 00120144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys
2013-09-22 19:28 - 2013-07-09 08:18 - 00439488 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2013-09-22 19:28 - 2013-07-09 06:25 - 00385768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2013-09-22 19:28 - 2013-07-09 05:57 - 00245760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LocationApi.dll
2013-09-22 19:28 - 2013-07-09 00:46 - 00543744 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll
2013-09-22 19:28 - 2013-07-09 00:46 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2013-09-22 19:28 - 2013-07-09 00:46 - 00370688 _____ (Microsoft Corporation) C:\Windows\system32\Wwanadvui.dll
2013-09-22 19:28 - 2013-07-09 00:45 - 00312832 _____ (Microsoft Corporation) C:\Windows\system32\LocationApi.dll
2013-09-22 19:28 - 2013-07-06 02:16 - 01025024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2013-09-22 19:28 - 2013-07-03 02:23 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2013-09-22 19:28 - 2013-07-03 02:23 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2013-09-22 19:28 - 2013-07-03 02:22 - 02839552 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2013-09-22 19:28 - 2013-07-03 02:22 - 01300480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-09-22 19:28 - 2013-07-03 02:11 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2013-09-22 19:28 - 2013-07-03 02:11 - 00268800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2013-09-22 19:28 - 2013-07-03 02:10 - 02273792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2013-09-22 19:28 - 2013-07-01 00:30 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\openfiles.exe
2013-09-22 19:28 - 2013-07-01 00:29 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\openfiles.exe
2013-09-22 19:28 - 2013-06-29 08:15 - 00195416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2013-09-22 19:28 - 2013-06-29 08:15 - 00125784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2013-09-22 19:28 - 2013-06-29 07:43 - 00327512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2013-09-22 19:28 - 2013-06-29 03:12 - 01022464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-09-22 19:28 - 2013-06-26 05:01 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys
2013-09-22 19:28 - 2013-06-26 04:59 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\HdAudio.sys
2013-09-22 19:28 - 2013-06-25 00:54 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2013-09-22 19:28 - 2013-06-25 00:54 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2013-09-22 19:28 - 2013-06-25 00:54 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2013-09-22 19:28 - 2013-06-19 07:36 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\winmmbase.dll
2013-09-22 19:28 - 2013-06-19 07:36 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll
2013-09-22 19:28 - 2013-06-19 00:38 - 00160256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmmbase.dll
2013-09-22 19:28 - 2013-06-19 00:38 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll
2013-09-22 19:28 - 2013-06-12 01:43 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
2013-09-22 19:28 - 2013-06-12 01:26 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2013-09-22 19:28 - 2013-06-10 23:17 - 00096512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
2013-09-22 19:28 - 2013-06-10 21:16 - 00888832 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-09-22 19:28 - 2013-06-10 21:15 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-09-22 19:28 - 2013-06-10 21:15 - 00723968 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2013-09-22 19:28 - 2013-06-10 21:15 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-09-22 19:28 - 2013-06-10 21:10 - 00702464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-09-22 19:28 - 2013-06-10 21:10 - 00245248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-09-22 19:28 - 2013-06-06 10:03 - 00119040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2013-09-22 19:26 - 2013-08-07 07:15 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\tssdisai.dll

==================== One Month Modified Files and Folders =======

2013-10-18 07:32 - 2013-10-18 07:32 - 00000000 ____D C:\FRST
2013-10-17 23:19 - 2013-01-01 16:16 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2665461011-2761154639-2427061440-1002
2013-10-17 23:14 - 2012-07-26 09:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-17 23:10 - 2013-01-01 16:55 - 00000000 ____D C:\Users\Family\AppData\Local\Google
2013-10-17 23:10 - 2013-01-01 16:55 - 00000000 ____D C:\Program Files (x86)\Google
2013-10-17 23:09 - 2013-10-17 23:09 - 00001232 _____ C:\Users\Family\Desktop\Revo Uninstaller.lnk
2013-10-17 23:09 - 2013-10-17 23:09 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2013-10-17 23:06 - 2013-10-17 23:05 - 00000000 ____D C:\Users\Family\AppData\Roaming\Mozilla
2013-10-17 23:05 - 2013-10-17 23:05 - 00001115 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-10-17 23:05 - 2013-10-17 23:05 - 00000000 ____D C:\Users\Family\AppData\Local\Mozilla
2013-10-17 23:05 - 2013-10-17 23:05 - 00000000 ____D C:\ProgramData\Mozilla
2013-10-17 23:05 - 2013-10-17 23:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-10-17 23:05 - 2013-10-10 20:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-17 23:04 - 2013-10-17 23:04 - 00281896 _____ (Mozilla) C:\Users\Family\Downloads\Firefox Setup Stub 24.0.exe
2013-10-17 23:03 - 2013-10-17 23:03 - 00163792 _____ C:\Users\Family\Documents\bookmarks_17.10.13.html
2013-10-17 22:58 - 2013-10-17 22:58 - 00001572 _____ C:\Users\Family\Downloads\JRT.txt
2013-10-17 22:55 - 2013-10-10 20:27 - 00000000 ____D C:\Program Files (x86)\Whilokii
2013-10-17 22:54 - 2013-10-17 22:54 - 00000000 ____D C:\Windows\ERUNT
2013-10-17 22:51 - 2013-10-17 22:51 - 00000000 ____D C:\Users\Family\AppData\Roaming\AVAST Software
2013-10-17 22:50 - 2012-09-03 12:56 - 00071018 _____ C:\Windows\PFRO.log
2013-10-17 22:49 - 2013-10-10 21:44 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2013-10-17 22:49 - 2013-10-10 21:44 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2013-10-17 22:49 - 2013-10-10 21:44 - 00038984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2013-10-17 22:49 - 2013-10-10 21:44 - 00001970 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-10-17 22:49 - 2013-10-10 21:43 - 01032416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-10-17 22:49 - 2013-10-10 21:43 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-10-17 22:49 - 2013-10-10 21:43 - 00205320 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-10-17 22:49 - 2013-10-10 21:43 - 00084328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-10-17 22:49 - 2013-10-10 21:43 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-10-17 22:49 - 2013-10-10 21:43 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-10-17 22:49 - 2013-10-10 21:43 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-10-17 22:48 - 2013-10-10 21:42 - 00000000 ____D C:\ProgramData\AVAST Software
2013-10-17 22:47 - 2013-10-10 21:43 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-10-17 22:45 - 2013-10-17 22:45 - 01033335 _____ (Thisisu) C:\Users\Family\Downloads\JRT.exe
2013-10-17 22:44 - 2013-10-17 22:44 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Family\Downloads\revosetup95.exe
2013-10-17 22:41 - 2013-10-17 22:41 - 00002617 _____ C:\Users\Family\Downloads\AdwCleaner[S0].txt
2013-10-17 22:39 - 2013-10-17 22:37 - 00000000 ____D C:\AdwCleaner
2013-10-17 22:31 - 2013-10-17 22:31 - 01050644 _____ C:\Users\Family\Downloads\adwcleaner.exe
2013-10-17 22:17 - 2013-10-17 22:17 - 00001077 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 ____D C:\Users\Family\AppData\Roaming\Malwarebytes
2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-17 22:15 - 2013-10-17 22:15 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Family\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-17 22:09 - 2013-10-17 22:09 - 00017087 _____ C:\Users\Family\Downloads\Addition.txt
2013-10-17 22:00 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\system32\sru
2013-10-17 21:59 - 2012-09-27 01:38 - 00753134 _____ C:\Windows\system32\perfh007.dat
2013-10-17 21:59 - 2012-09-27 01:38 - 00155826 _____ C:\Windows\system32\perfc007.dat
2013-10-17 21:59 - 2012-07-26 09:28 - 01745416 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-17 21:00 - 2013-10-17 21:00 - 01954124 _____ (Farbar) C:\Users\Family\Downloads\FRST64.exe
2013-10-17 20:51 - 2013-01-01 21:49 - 00000000 ____D C:\Users\Family\Documents\Ausgaben
2013-10-17 20:48 - 2013-01-01 16:54 - 00000000 ____D C:\Users\Family\AppData\Local\Deployment
2013-10-16 07:30 - 2013-10-10 21:27 - 00000094 _____ C:\Users\Family\AppData\Roaming\WB.CFG
2013-10-16 07:30 - 2013-10-10 21:27 - 00000006 _____ C:\Users\Family\AppData\Roaming\WBPU-TTL.DAT
2013-10-14 21:00 - 2013-10-14 20:03 - 00000000 ____D C:\Windows\86CA3695A4124BAE92B649A60C2AC663.TMP
2013-10-14 20:47 - 2013-01-01 16:11 - 00001446 _____ C:\Users\Family\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-10-14 20:17 - 2013-01-01 16:10 - 01885156 _____ C:\Windows\WindowsUpdate.log
2013-10-14 20:05 - 2013-10-14 20:05 - 00000000 _____ C:\autoexec.bat
2013-10-14 20:03 - 2013-10-14 20:03 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-10-14 15:22 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-10-14 15:06 - 2013-10-14 15:06 - 00423696 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-14 00:24 - 2013-01-01 16:11 - 00000000 ___RD C:\Users\Family\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-14 00:24 - 2013-01-01 16:11 - 00000000 ___RD C:\Users\Family\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-10-13 08:24 - 2012-07-26 10:12 - 00000000 ___RD C:\Windows\ToastData
2013-10-13 08:24 - 2012-07-26 07:26 - 00262144 ___SH C:\Windows\system32\config\BBI
2013-10-13 08:20 - 2013-01-01 17:53 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-13 08:19 - 2013-07-26 21:31 - 00000000 ____D C:\Windows\system32\MRT
2013-10-13 08:18 - 2013-01-02 00:25 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-10-10 21:43 - 2013-10-10 21:43 - 00000000 ____D C:\Program Files\AVAST Software
2013-10-10 21:41 - 2013-10-10 21:41 - 131918888 _____ C:\Users\Family\Downloads\avast_free_antivirus_setup.exe
2013-10-10 21:22 - 2013-10-10 21:22 - 00012784 _____ C:\Users\Family\Downloads\OTL.7z
2013-10-10 20:30 - 2013-10-10 20:30 - 127231689 _____ (Igor Pavlov) C:\Users\Family\Downloads\OTLPENet.exe
2013-10-10 20:28 - 2013-10-10 20:28 - 00000000 ____D C:\Windows\SysWOW64\searchplugins
2013-10-10 20:28 - 2013-10-10 20:28 - 00000000 ____D C:\Windows\SysWOW64\Extensions
2013-10-10 20:28 - 2013-10-10 20:28 - 00000000 ____D C:\Users\Family\AppData\Local\avgchrome
2013-10-10 18:19 - 2013-10-10 20:52 - 00117428 _____ C:\Users\Family\Downloads\OTL.txt
2013-10-07 10:39 - 2012-07-26 09:21 - 00043118 _____ C:\Windows\setupact.log
2013-10-06 10:13 - 2013-01-01 16:10 - 00000000 ____D C:\Users\Family\AppData\Local\Packages
2013-10-06 10:11 - 2013-02-16 09:01 - 00000000 ____D C:\Users\Family\AppData\Local\CrashDumps
2013-10-05 08:21 - 2013-09-26 10:26 - 00024064 _____ C:\Users\Family\Downloads\08-Sp13-14.xls
2013-10-03 09:46 - 2013-10-03 09:46 - 00000000 ___RD C:\Users\Family\AppData\Roaming\Brother
2013-10-02 03:38 - 2012-07-26 10:14 - 00694232 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-02 03:38 - 2012-07-26 10:14 - 00078296 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-28 09:38 - 2013-09-26 10:26 - 00025088 _____ C:\Users\Family\Downloads\07-Sp13-14.xls
2013-09-26 10:26 - 2013-09-26 10:26 - 00031232 _____ C:\Users\Family\Downloads\13-Sp13-14.xls
2013-09-26 10:26 - 2013-09-26 10:26 - 00031232 _____ C:\Users\Family\Downloads\12-Sp13-14.xls
2013-09-26 10:26 - 2013-09-26 10:26 - 00031232 _____ C:\Users\Family\Downloads\11-Sp13-14.xls
2013-09-26 10:26 - 2013-09-26 10:26 - 00031232 _____ C:\Users\Family\Downloads\10-Sp13-14.xls
2013-09-26 10:26 - 2013-09-26 10:26 - 00030720 _____ C:\Users\Family\Downloads\14-Sp13-14.xls
2013-09-26 10:26 - 2013-09-26 10:26 - 00025088 _____ C:\Users\Family\Downloads\09-Sp13-14.xls
2013-09-23 01:28 - 2013-10-13 08:11 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-23 01:28 - 2013-10-13 08:11 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-23 01:27 - 2013-10-13 08:11 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-23 01:27 - 2013-10-13 08:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-23 01:27 - 2013-10-13 08:11 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-23 01:27 - 2013-10-13 08:11 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-23 01:27 - 2013-10-13 08:11 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-23 01:27 - 2013-10-13 08:11 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-23 00:55 - 2013-10-13 08:11 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-23 00:55 - 2013-10-13 08:11 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-23 00:55 - 2013-10-13 08:11 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-23 00:54 - 2013-10-13 08:11 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-23 00:54 - 2013-10-13 08:11 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-23 00:54 - 2013-10-13 08:11 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-23 00:54 - 2013-10-13 08:11 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-23 00:54 - 2013-10-13 08:11 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-23 00:54 - 2013-10-13 08:11 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-22 19:59 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\WinStore
2013-09-22 19:59 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-09-22 19:59 - 2012-07-26 07:38 - 00000000 ____D C:\Windows\system32\oobe
2013-09-22 19:52 - 2013-01-01 21:49 - 00000000 ____D C:\Users\Family\Documents\UP

Some content of TEMP:
====================
C:\Users\Family\AppData\Local\Temp\AcerCloudDocsSetup.exe
C:\Users\Family\AppData\Local\Temp\AcerCloudSetup.exe
C:\Users\Family\AppData\Local\Temp\AskSLib.dll
C:\Users\Family\AppData\Local\Temp\ose00000.exe
C:\Users\Family\AppData\Local\Temp\ose00002.exe
C:\Users\Family\AppData\Local\Temp\Quarantine.exe
C:\Users\Family\AppData\Local\Temp\SHSetup.exe
C:\Users\Family\AppData\Local\Temp\uninst1.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-14 21:43

==================== End Of Log ============================