Facebook-Malware, brwlrg113.z

Muster123 · 26.06.2014, 15:32

Hallo liebes Trojaner-Board,

ich habe durch passives Mitverfolgen der Beiträge auf eurer Seite bereits viele Probleme lösen können. Vielen Dank hierfür. Nun habe ich ein Problem, zu dem ich weder einen Google-Treffer noch einen Beitrag auf eurer Seite finden konnte.

Meine Freundin war an meinem PC und hat bei Facebook auf einen Link geklickt, der Malware heruntergeladen hat.

Das war die Nachricht:

haha

brwlrg113.z

Es sieht aus, als handele es sich um einen Dateianhang. Ich habe den Link, der beim Anklicken geöffnet wird, kopiert:
https://www.facebook.com/ajax/messaging/attachment.php?attach_id=46851731ad97b42c42c1c059281e93aa&mid=mid.1402530510972%3A30b481dd005fa49b25&hash=AQB6oCawo2yvbbHr

Außerdem wurde dabei ein McAffee Security Scan heruntergeladen und auf dem Desktop eine Internetexplorerverknüpfung mit dem Namen "brwlrg113" erstellt. Ich benutze i.Ü. Chrome.

Passiert ist das Ganze gestern (25.06.2014) gegen 23.00 Uhr

Da ihr ab und zu nach FRST- und Addition-Dateien fragt und um den Vorgang zu beschleunigen, hier die Dateien, die beim Scan herausgekommen sind.

Ich habe zwar keine sichtbaren Probleme, möchte aber dieses Ding und alles was es anrichtet so schnell wie möglich entfernen. Soeben ist mir auch eingefallen, dass ich heute morgen eine E-Mail von mir selbst mit dubiosen Links erhalten habe. Ich vermute, dass das mit dem Virus zusammen hängt.

Vielen Dank im Voraus für eure Hilfe!

deeprybka · 26.06.2014, 15:34

Mein Name ist Jürgen und ich werde Dir bei Deinem Problem behilflich sein. Zusammen schaffen wir das...

Bitte arbeite alle Schritte der Reihe nach ab.
Lese die Anleitungen sorgfältig durch bevor Du beginnst. Wenn es Probleme gibt oder Du etwas nicht verstehst, dann stoppe mit Deiner Ausführung und beschreibe mir das Problem.
Führe bitte nur Scans durch, zu denen Du von mir aufgefordert wurdest.
Bitte kein Crossposting (posten in mehreren Foren).
Installiere oder deinstalliere während der Bereinigung keine Software, außer Du wurdest dazu aufgefordert.
Speichere alle unsere Tools auf dem Desktop ab.
Poste die Logfiles direkt in Deinen Thread in Code-Tags.
Bedenke, dass wir hier alle während unserer Freizeit tätig sind, wenn du innerhalb von 24 Stunden nichts von mir liest, dann schreibe mir bitte eine PM.

Hinweis:
Ich kann Dir niemals eine Garantie geben, dass wir alle schädlichen Dateien finden werden.
Eine Formatierung ist meist der schnellere und immer der sicherste Weg, aber auch nur bei wirklicher Malware empfehlenswert.
Adware & Co. können wir sehr gut entfernen.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Du mein clean bekommst.

Lesestoff
Posten in CODE-Tags: So gehts...
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert uns massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Muster123 · 26.06.2014, 15:50

Vielen Dank für die rekordverdächtig schnelle Antwort.

Leider ist es tatsächlich nicht möglich die beiden Dateien zu posten, weil sie zu lang sind. Der FRST-Scan hat i.Ü. automatisch mehrmals hintereinander einen Scan durchgeführt und immer wieder 2 Dateien erstellt und dabei die alten ersetzt. Zur Sicherheit lade ich mal die aktuellsten hoch.

Muster123 · 26.06.2014, 15:53

Ich kann mir vorstellen, dass du dich auch nicht unnötig einem Risiko aussetzen möchtest, deswegen lade ich die log-Dateien mal einzeln hoch.

deeprybka · 26.06.2014, 15:57

Wenn die Logs zu lang sind bitte auf mehrere Posts aufteilen...

Muster123 · 28.06.2014, 00:07

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-06-2014
Ran by SergejSh (administrator) on SERGEJ on 26-06-2014 16:41:08
Running from C:\Users\SergejSh\Desktop
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: Downloading Farbar Recovery Scan Tool 
Download link for 64-Bit Version: Downloading Farbar Recovery Scan Tool 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE
() C:\Program Files\ATI Technologies\ATI.ACE\a4\AdaptiveSleepService.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(AMD) C:\Windows\System32\atieclxx.exe
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUserAgent.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Spotify Ltd) C:\Users\SergejSh\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Dropbox, Inc.) C:\Users\SergejSh\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Reader_6.3.9654.17044_x64__8wekyb3d8bbwe\glcnd.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7204568 2013-11-04] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2780912 2013-09-20] (Synaptics Incorporated)
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-11-20] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-06-24] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [191528 2014-06-04] (Geek Software GmbH)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)
HKU\S-1-5-21-1673834559-152451206-4130808851-1001\...\Run: [Spotify Web Helper] => C:\Users\SergejSh\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-06-23] (Spotify Ltd)
Startup: C:\Users\SergejSh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\SergejSh\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers:  SkyDrivePro1 (ErrorConflict) -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers:  SkyDrivePro2 (SyncInProgress) -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers:  SkyDrivePro3 (InSync) -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers-x32:  SkyDrivePro1 (ErrorConflict) -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32:  SkyDrivePro2 (SyncInProgress) -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32:  SkyDrivePro3 (InSync) -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers-x32: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers-x32: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xBAF85E247C8CCF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Avira Savings Advisor BHO - {A18A516C-AA41-46A9-92DB-60208917E442} - C:\Program Files (x86)\avira\Internet Explorer\avira32.dll ()
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

Chrome: 
=======
CHR HomePage: 
CHR Extension: (Google Docs) - C:\Users\SergejSh\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-06-20]
CHR Extension: (Google Drive) - C:\Users\SergejSh\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-06-20]
CHR Extension: (YouTube) - C:\Users\SergejSh\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-06-20]
CHR Extension: (Adblock Plus) - C:\Users\SergejSh\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-06-20]
CHR Extension: (Google-Suche) - C:\Users\SergejSh\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-06-20]
CHR Extension: (AdBlock) - C:\Users\SergejSh\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-06-20]
CHR Extension: (Google Wallet) - C:\Users\SergejSh\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-20]
CHR Extension: (Google Mail) - C:\Users\SergejSh\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-06-20]
CHR HKLM-x32\...\Chrome\Extension: [cojnmaaohncijldefpkpkkakjonfmgeb] - C:\Program Files (x86)\avira\Chrome\avira-1.5.14.crx [2013-12-11]

==================== Services (Whitelisted) =================

R2 AdaptiveSleepService; c:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe [99328 2013-11-19] () [File not signed]
R2 AMD FUEL Service; c:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-11-19] (Advanced Micro Devices, Inc.) [File not signed]
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2279608 2014-05-21] (Microsoft Corporation)
R2 DisplayLinkService; C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe [9960240 2014-02-24] (DisplayLink Corp.)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [289496 2013-10-16] (Realtek Semiconductor)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R3 AmdAS4; C:\Windows\System32\drivers\AmdAS4.sys [17504 2013-02-07] (Advanced Micro Devices, INC.)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3880448 2013-11-13] (Qualcomm Atheros Communications, Inc.)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [222720 2013-09-24] (Advanced Micro Devices)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-06-24] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-05-27] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-05-27] (Avira Operations GmbH & Co. KG)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [290520 2013-08-26] (Realtek Semiconductor Corp.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2013-07-22] (Hewlett-Packard Development Company, L.P.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-26 16:32 - 2014-06-26 16:32 - 00057784 _____ () C:\Users\SergejSh\Desktop\Log-File über FRST64.zip
2014-06-26 15:58 - 2014-06-26 16:41 - 00078532 _____ () C:\Users\SergejSh\Desktop\Addition.txt
2014-06-26 15:56 - 2014-06-26 16:41 - 00012709 _____ () C:\Users\SergejSh\Desktop\FRST.txt
2014-06-26 15:56 - 2014-06-26 16:41 - 00000000 ____D () C:\FRST
2014-06-26 15:55 - 2014-06-26 15:55 - 02082816 _____ (Farbar) C:\Users\SergejSh\Desktop\FRST64.exe
2014-06-26 15:30 - 2014-06-25 13:03 - 00000030 _____ () C:\AVScanner.ini
2014-06-25 13:42 - 2014-06-25 13:42 - 00000000 ____D () C:\Users\SergejSh\Documents\Benutzerdefinierte Office-Vorlagen
2014-06-25 13:07 - 2014-06-25 13:07 - 00000000 ____D () C:\Users\SergejSh\AppData\Local\Adobe
2014-06-25 13:03 - 2014-06-25 13:03 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-06-25 13:03 - 2014-06-25 13:03 - 00000000 ____D () C:\ProgramData\McAfee
2014-06-25 13:02 - 2014-06-25 13:08 - 00000000 ____D () C:\ProgramData\Adobe
2014-06-25 13:02 - 2014-06-25 13:02 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-06-23 13:10 - 2014-06-23 15:45 - 00000000 ____D () C:\Users\SergejSh\AppData\Local\Spotify
2014-06-23 13:10 - 2014-06-23 13:10 - 00001814 _____ () C:\Users\SergejSh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-06-23 13:09 - 2014-06-25 11:33 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\Spotify
2014-06-23 12:35 - 2014-05-31 07:13 - 00703992 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-06-23 12:35 - 2014-05-31 07:13 - 00105464 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-06-23 12:30 - 2014-06-23 12:36 - 00000000 ___RD () C:\Windows\BrowserChoice
2014-06-22 16:26 - 2014-06-22 16:26 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2014-06-22 16:25 - 2014-06-26 15:25 - 00000000 ___RD () C:\Users\SergejSh\Dropbox
2014-06-22 16:25 - 2014-06-26 15:25 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\DropboxMaster
2014-06-22 16:24 - 2014-06-22 16:24 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-06-22 16:21 - 2014-06-26 15:25 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\Dropbox
2014-06-22 16:18 - 2014-06-22 16:18 - 00000000 ____D () C:\Users\SergejSh\AppData\Local\PDF24
2014-06-22 16:15 - 2014-06-22 16:15 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-06-22 16:14 - 2014-06-22 16:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24
2014-06-22 16:14 - 2014-06-22 16:14 - 00000000 ____D () C:\Program Files (x86)\PDF24
2014-06-22 16:12 - 2014-06-22 16:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-06-22 16:10 - 2014-06-22 16:10 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-06-22 16:09 - 2014-06-22 16:09 - 01351872 _____ (Microsoft Corporation) C:\Users\SergejSh\Downloads\Setup.X64.de-de_O365ProPlusRetail_76a59357-cf4e-4b82-a30c-5762ef5e6dc9_TX_PR_.exe
2014-06-22 16:09 - 2014-06-22 16:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2014-06-22 15:15 - 2014-06-22 15:16 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-22 15:15 - 2014-06-01 17:17 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-22 14:50 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-22 14:50 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-22 14:50 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-22 14:50 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-22 14:50 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-22 14:50 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-22 14:50 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-22 14:50 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-22 14:50 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-22 14:50 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-22 14:50 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-22 14:50 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-22 14:50 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-22 14:50 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-06-22 14:50 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-22 14:50 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-22 14:50 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-22 14:50 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-22 14:50 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-22 14:50 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-22 14:50 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-22 14:50 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-22 14:50 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-22 14:50 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-22 14:50 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-22 14:50 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-22 14:50 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-22 14:50 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-22 14:50 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-06-22 14:50 - 2014-02-06 13:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-22 14:50 - 2014-02-06 13:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-22 14:50 - 2014-02-06 13:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-22 14:50 - 2014-02-06 13:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-22 14:50 - 2014-02-06 12:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-22 14:50 - 2014-02-06 12:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-22 14:50 - 2014-02-06 12:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-22 14:50 - 2014-02-06 12:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-06-22 14:50 - 2014-02-06 12:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-22 14:50 - 2014-02-06 12:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-22 14:50 - 2014-02-06 11:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-22 14:50 - 2014-02-06 11:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-22 14:50 - 2014-02-06 11:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-22 14:50 - 2014-02-06 11:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-22 14:49 - 2014-03-20 06:19 - 01291200 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-06-22 14:49 - 2014-03-20 02:53 - 00950784 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2014-06-22 14:49 - 2014-03-20 02:48 - 00201216 _____ (Microsoft Corporation) C:\Windows\system32\ReInfo.dll
2014-06-22 14:49 - 2014-03-20 01:55 - 01036288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-06-22 14:49 - 2014-03-20 01:39 - 00800256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll
2014-06-22 14:49 - 2014-03-20 01:36 - 00172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReInfo.dll
2014-06-22 14:49 - 2014-03-19 09:13 - 00836096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-06-22 14:49 - 2014-03-19 07:57 - 00621568 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2014-06-22 14:49 - 2014-03-13 14:35 - 00157016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wof.sys
2014-06-22 14:49 - 2014-03-11 17:18 - 01015808 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll
2014-06-22 14:49 - 2014-03-11 16:28 - 00887296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll
2014-06-22 14:49 - 2014-03-11 14:42 - 02641920 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-06-22 14:49 - 2014-03-11 14:35 - 02317824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-06-22 14:49 - 2014-03-08 17:29 - 00356848 _____ (Microsoft Corporation) C:\Windows\system32\dcomp.dll
2014-06-22 14:49 - 2014-03-08 13:34 - 01095488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2014-06-22 14:49 - 2014-03-08 10:33 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\spp.dll
2014-06-22 14:49 - 2014-03-08 09:53 - 01843712 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
2014-06-22 14:49 - 2014-03-08 09:47 - 00222720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spp.dll
2014-06-22 14:49 - 2014-03-08 09:12 - 01816576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll
2014-06-22 14:49 - 2014-03-08 09:04 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2014-06-22 14:49 - 2014-03-08 08:48 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2014-06-22 14:49 - 2014-03-08 08:40 - 00139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2014-06-22 14:49 - 2014-03-08 08:31 - 00222720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcomp.dll
2014-06-22 14:49 - 2014-03-08 08:30 - 00197632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2014-06-22 14:49 - 2014-03-08 07:41 - 01306624 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2014-06-22 14:49 - 2014-03-08 07:11 - 00924160 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll
2014-06-22 14:49 - 2014-03-06 14:53 - 02141912 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-06-22 14:49 - 2014-03-06 14:53 - 00518552 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-06-22 14:49 - 2014-03-06 14:51 - 01557848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-06-22 14:49 - 2014-03-06 14:51 - 00488280 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll
2014-06-22 14:49 - 2014-03-06 14:51 - 00379224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-06-22 14:49 - 2014-03-06 14:39 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-06-22 14:49 - 2014-03-06 13:19 - 00390488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll
2014-06-22 14:49 - 2014-03-06 13:13 - 01779800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2014-06-22 14:49 - 2014-03-06 13:13 - 00406912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-06-22 14:49 - 2014-03-06 11:22 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2014-06-22 14:49 - 2014-03-06 08:51 - 02900992 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2014-06-22 14:49 - 2014-03-06 08:39 - 02133504 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2014-06-22 14:49 - 2014-03-06 08:23 - 02270208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2014-06-22 14:49 - 2014-03-06 08:23 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\dafWfdProvider.dll
2014-06-22 14:49 - 2014-03-06 08:09 - 01764864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2014-06-22 14:49 - 2014-03-04 14:25 - 02373784 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2014-06-22 14:49 - 2014-03-04 14:14 - 00360512 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2014-06-22 14:49 - 2014-03-04 13:16 - 02088160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2014-06-22 14:49 - 2014-03-04 13:10 - 00355832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll
2014-06-22 14:49 - 2014-03-04 09:00 - 00512000 _____ (Microsoft Corporation) C:\Windows\system32\wlidprov.dll
2014-06-22 14:49 - 2014-03-04 08:32 - 00356864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidprov.dll
2014-06-22 14:48 - 2014-03-20 05:41 - 02013016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-06-22 14:48 - 2014-03-20 05:41 - 00376152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2014-06-22 14:48 - 2014-03-20 05:40 - 01112536 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-06-22 14:48 - 2014-03-19 07:50 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\w32tm.exe
2014-06-22 14:48 - 2014-03-19 07:31 - 01656832 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2014-06-22 14:48 - 2014-03-19 07:20 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\w32tm.exe
2014-06-22 14:48 - 2014-03-19 07:08 - 01351168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2014-06-22 14:48 - 2014-03-12 15:45 - 00387210 _____ () C:\Windows\system32\ApnDatabase.xml
2014-06-22 14:48 - 2014-03-08 22:40 - 00136024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
2014-06-22 14:48 - 2014-03-08 22:38 - 01542768 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2014-06-22 14:48 - 2014-03-08 22:35 - 00467800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2014-06-22 14:48 - 2014-03-08 11:02 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\sxproxy.dll
2014-06-22 14:48 - 2014-03-08 10:25 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\SetNetworkLocation.dll
2014-06-22 14:48 - 2014-03-08 10:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sxproxy.dll
2014-06-22 14:48 - 2014-03-08 09:03 - 00939520 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-06-22 14:48 - 2014-03-08 09:01 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2014-06-22 14:48 - 2014-03-08 08:46 - 01063424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-06-22 14:48 - 2014-03-08 08:41 - 00412672 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-06-22 14:48 - 2014-03-08 08:37 - 00755712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-06-22 14:48 - 2014-03-08 08:25 - 00264192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2014-06-22 14:48 - 2014-03-08 08:04 - 00717312 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2014-06-22 14:48 - 2014-03-08 07:58 - 00567296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2014-06-22 14:48 - 2014-03-06 16:34 - 02331000 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-22 14:48 - 2014-03-06 16:34 - 00113648 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll
2014-06-22 14:48 - 2014-03-06 13:19 - 00094016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\userenv.dll
2014-06-22 14:48 - 2014-03-06 12:46 - 01679128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2014-06-22 14:48 - 2014-03-06 11:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2014-06-22 14:48 - 2014-03-06 11:24 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys
2014-06-22 14:48 - 2014-03-06 11:24 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2014-06-22 14:48 - 2014-03-06 11:22 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2014-06-22 14:48 - 2014-03-06 11:19 - 00283648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2014-06-22 14:48 - 2014-03-06 11:19 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2014-06-22 14:48 - 2014-03-06 11:08 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\l2gpstore.dll
2014-06-22 14:48 - 2014-03-06 10:41 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\DevPropMgr.dll
2014-06-22 14:48 - 2014-03-06 10:38 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2014-06-22 14:48 - 2014-03-06 10:10 - 00058368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\l2gpstore.dll
2014-06-22 14:48 - 2014-03-06 10:00 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\SensorsApi.dll
2014-06-22 14:48 - 2014-03-06 09:46 - 00085504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2014-06-22 14:48 - 2014-03-06 09:16 - 00171008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsApi.dll
2014-06-22 14:48 - 2014-03-06 09:02 - 00834560 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
2014-06-22 14:48 - 2014-03-06 08:31 - 02479616 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-06-22 14:48 - 2014-03-06 08:29 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll
2014-06-22 14:48 - 2014-03-06 08:27 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2014-06-22 14:48 - 2014-03-06 08:24 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\wlangpui.dll
2014-06-22 14:48 - 2014-03-06 08:21 - 00291840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll
2014-06-22 14:48 - 2014-03-06 08:13 - 00298496 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll
2014-06-22 14:48 - 2014-03-06 08:11 - 02030080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2014-06-22 14:48 - 2014-03-06 08:06 - 00386560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlangpui.dll
2014-06-22 14:48 - 2014-03-06 08:04 - 00226304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Sensors.dll
2014-06-22 14:48 - 2014-03-06 08:01 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Scanners.dll
2014-06-22 14:48 - 2014-03-06 07:51 - 00151040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Scanners.dll
2014-06-22 14:48 - 2014-03-06 07:47 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll
2014-06-22 14:48 - 2014-03-06 07:42 - 00280576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SessEnv.dll
2014-06-22 14:48 - 2014-03-04 09:16 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2014-06-22 14:48 - 2014-03-04 09:13 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2014-06-22 14:48 - 2014-03-04 09:08 - 00299008 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
2014-06-22 14:48 - 2014-03-04 08:56 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RMapi.dll
2014-06-22 14:48 - 2014-03-04 08:50 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2014-06-22 14:48 - 2014-03-04 08:42 - 00494592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2014-06-22 14:48 - 2014-03-04 08:39 - 00254976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdh.dll
2014-06-22 14:48 - 2014-03-04 08:15 - 00542208 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.dll
2014-06-22 14:48 - 2014-03-04 08:05 - 00402432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.dll
2014-06-22 14:48 - 2014-03-04 08:03 - 00669696 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2014-06-22 14:48 - 2014-03-04 08:03 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\CredentialMigrationHandler.dll
2014-06-22 14:48 - 2014-03-04 07:54 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredentialMigrationHandler.dll
2014-06-22 14:48 - 2014-03-04 07:52 - 00605184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll
2014-06-22 14:48 - 2013-12-24 01:28 - 00262656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LocationApi.dll
2014-06-22 14:48 - 2013-12-24 01:26 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\LocationApi.dll
2014-06-22 14:46 - 2014-05-05 06:02 - 03360256 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-06-22 14:45 - 2014-05-10 05:46 - 02151424 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-22 14:45 - 2014-05-10 05:22 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-06-22 14:45 - 2014-05-09 01:06 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2014-06-22 14:45 - 2014-05-03 09:14 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\WSReset.exe
2014-06-22 14:45 - 2014-05-03 06:21 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-22 14:45 - 2014-05-03 06:07 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-22 14:45 - 2014-05-03 05:41 - 00921088 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-06-22 14:45 - 2014-05-03 05:38 - 00754688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-06-22 14:45 - 2014-04-30 13:16 - 01336648 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-06-22 14:45 - 2014-04-30 05:51 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-06-22 14:45 - 2014-04-09 00:46 - 00086688 _____ (Microsoft Corporation) C:\Windows\system32\mrt_map.dll
2014-06-22 14:45 - 2014-04-09 00:46 - 00028320 _____ (Microsoft Corporation) C:\Windows\system32\mrt100.dll
2014-06-22 14:45 - 2014-04-08 20:54 - 00080032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mrt_map.dll
2014-06-22 14:45 - 2014-04-08 20:54 - 00026784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mrt100.dll
2014-06-22 14:45 - 2014-04-03 09:59 - 02518872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-22 14:45 - 2014-04-03 09:59 - 00428888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-22 14:45 - 2014-03-24 04:30 - 00257880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2014-06-22 14:45 - 2014-03-24 04:30 - 00123224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys
2014-06-22 14:45 - 2014-03-24 04:27 - 00035856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2014-06-22 14:45 - 2014-03-13 09:42 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe
2014-06-22 14:45 - 2014-03-13 08:51 - 00305152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wusa.exe
2014-06-22 14:44 - 2014-04-11 12:03 - 00555736 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2014-06-22 14:44 - 2014-04-11 12:03 - 00054776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-06-22 14:44 - 2014-04-11 10:25 - 00419928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
2014-06-22 14:44 - 2014-04-11 08:04 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-06-22 14:44 - 2014-04-11 07:22 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-06-22 14:44 - 2014-04-11 05:54 - 00201728 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2014-06-22 14:44 - 2014-04-11 05:06 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-06-22 14:44 - 2014-04-11 05:05 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-06-22 14:44 - 2014-04-11 05:02 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-06-22 14:44 - 2014-04-11 05:01 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-06-22 14:44 - 2014-04-11 05:00 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-06-22 14:44 - 2014-04-11 04:59 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-06-22 14:44 - 2014-04-11 04:57 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2014-06-22 14:44 - 2014-04-11 04:56 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2014-06-22 14:44 - 2014-04-11 04:55 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-06-22 14:44 - 2014-04-11 04:53 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-06-22 14:44 - 2014-04-11 04:52 - 03464192 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-06-22 14:44 - 2014-04-11 04:46 - 01705472 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-06-22 14:44 - 2014-04-11 04:36 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2014-06-22 14:44 - 2014-04-11 04:29 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2014-06-22 14:43 - 2014-04-18 11:32 - 13287936 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-06-22 14:43 - 2014-04-18 10:09 - 08652800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2014-06-22 14:43 - 2014-04-18 09:49 - 05833216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2014-06-22 14:43 - 2014-04-06 18:31 - 21268952 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-06-22 14:43 - 2014-04-06 18:20 - 02140888 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2014-06-22 14:43 - 2014-04-06 18:20 - 00765408 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2014-06-22 14:43 - 2014-04-06 17:22 - 18755672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-06-22 14:43 - 2014-04-06 16:10 - 04190720 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-06-22 14:43 - 2014-04-06 13:55 - 16872448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2014-06-22 14:43 - 2014-04-06 13:54 - 12711424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2014-06-22 14:43 - 2014-04-03 10:12 - 02124840 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2014-06-22 14:43 - 2014-04-03 05:53 - 01797896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll
2014-06-22 14:43 - 2014-04-03 04:53 - 04269056 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2014-06-22 14:43 - 2014-03-31 00:54 - 01308160 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2014-06-22 14:43 - 2014-03-20 02:44 - 06645248 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-06-22 14:43 - 2014-03-20 01:33 - 05774848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-06-22 14:43 - 2014-03-19 07:02 - 01527296 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2014-06-22 14:43 - 2014-03-19 06:18 - 02688000 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2014-06-22 14:43 - 2014-03-18 07:00 - 07173120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2014-06-22 14:43 - 2014-03-18 06:52 - 05104640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2014-06-22 14:42 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe
2014-06-22 14:42 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe
2014-06-22 14:42 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2014-06-22 14:42 - 2014-05-01 15:31 - 03048904 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe
2014-06-22 14:42 - 2014-05-01 15:31 - 00055328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys
2014-06-22 14:42 - 2014-05-01 09:14 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2014-06-22 14:42 - 2014-05-01 09:05 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll
2014-06-22 14:42 - 2014-05-01 08:51 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2014-06-22 14:42 - 2014-05-01 07:24 - 02834944 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
2014-06-22 14:42 - 2014-04-30 06:43 - 01975296 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-06-22 14:42 - 2014-04-30 06:26 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-06-22 14:42 - 2014-04-30 05:47 - 01509888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-06-22 14:42 - 2014-04-18 16:57 - 00032600 _____ (Microsoft Corporation) C:\Windows\system32\ploptin.dll
2014-06-22 14:42 - 2014-04-18 16:44 - 01466856 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2014-06-22 14:42 - 2014-04-18 15:29 - 01200288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
2014-06-22 14:42 - 2014-04-18 11:44 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\energyprov.dll
2014-06-22 14:42 - 2014-04-18 10:58 - 11792384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2014-06-22 14:42 - 2014-04-18 10:32 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-06-22 14:42 - 2014-04-18 10:21 - 01126912 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2014-06-22 14:42 - 2014-04-18 09:51 - 00836608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2014-06-22 14:42 - 2014-04-14 11:20 - 00324888 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll
2014-06-22 14:42 - 2014-04-14 10:01 - 00285144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll
2014-06-22 14:42 - 2014-04-11 08:13 - 01200128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2014-06-22 14:42 - 2014-04-11 06:51 - 00250368 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2014-06-22 14:42 - 2014-04-11 06:23 - 00209920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll
2014-06-22 14:42 - 2014-04-11 05:30 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll
2014-06-22 14:42 - 2014-04-09 13:53 - 00337240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2014-06-22 14:42 - 2014-04-09 08:39 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2014-06-22 14:42 - 2014-04-09 07:44 - 00144384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2014-06-22 14:42 - 2014-04-09 06:35 - 01411584 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-06-22 14:42 - 2014-04-09 05:33 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2014-06-22 14:42 - 2014-04-08 04:01 - 00589656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2014-06-22 14:42 - 2014-04-06 18:34 - 00372568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-06-22 14:42 - 2014-04-06 18:34 - 00275800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-06-22 14:42 - 2014-04-06 18:32 - 00125496 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2014-06-22 14:42 - 2014-04-06 18:30 - 00201920 _____ (Microsoft Corporation) C:\Windows\system32\MSVideoDSP.dll
2014-06-22 14:42 - 2014-04-06 18:24 - 00360792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys
2014-06-22 14:42 - 2014-04-06 18:20 - 01403856 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2014-06-22 14:42 - 2014-04-06 18:20 - 01379064 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2014-06-22 14:42 - 2014-04-06 18:20 - 00881616 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2014-06-22 14:42 - 2014-04-06 18:20 - 00609448 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-06-22 14:42 - 2014-04-06 18:20 - 00491744 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2014-06-22 14:42 - 2014-04-06 18:20 - 00467496 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-06-22 14:42 - 2014-04-06 18:20 - 00463256 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-06-22 14:42 - 2014-04-06 18:20 - 00364640 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-06-22 14:42 - 2014-04-06 18:20 - 00244880 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2014-06-22 14:42 - 2014-04-06 18:20 - 00233912 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-06-22 14:42 - 2014-04-06 18:20 - 00028408 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2014-06-22 14:42 - 2014-04-06 17:23 - 00098584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2014-06-22 14:42 - 2014-04-06 17:22 - 00178184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVideoDSP.dll
2014-06-22 14:42 - 2014-04-06 17:16 - 02144984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2014-06-22 14:42 - 2014-04-06 17:16 - 01209616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2014-06-22 14:42 - 2014-04-06 17:16 - 00707048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2014-06-22 14:42 - 2014-04-06 17:16 - 00669856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2014-06-22 14:42 - 2014-04-06 17:16 - 00518544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-06-22 14:42 - 2014-04-06 17:16 - 00406504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-06-22 14:42 - 2014-04-06 17:16 - 00387896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2014-06-22 14:42 - 2014-04-06 17:16 - 00326024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-06-22 14:42 - 2014-04-06 17:16 - 00305768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-06-22 14:42 - 2014-04-06 14:58 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2014-06-22 14:42 - 2014-04-06 14:51 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2014-06-22 14:42 - 2014-04-06 14:33 - 00335872 _____ (Microsoft Corporation) C:\Windows\system32\MDEServer.exe
2014-06-22 14:42 - 2014-04-06 14:24 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2014-06-22 14:42 - 2014-04-06 14:06 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2014-06-22 14:42 - 2014-04-06 13:26 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll
2014-06-22 14:42 - 2014-04-06 13:20 - 00201216 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2014-06-22 14:42 - 2014-04-06 13:01 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-06-22 14:42 - 2014-04-06 12:52 - 00955904 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2014-06-22 14:42 - 2014-04-06 12:51 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2014-06-22 14:42 - 2014-04-06 12:37 - 00800768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2014-06-22 14:42 - 2014-04-06 12:36 - 00888320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2014-06-22 14:42 - 2014-04-06 12:05 - 01222656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2014-06-22 14:42 - 2014-04-06 11:59 - 00982016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll
2014-06-22 14:42 - 2014-04-03 10:12 - 00307304 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-06-22 14:42 - 2014-04-03 10:12 - 00130144 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
2014-06-22 14:42 - 2014-04-03 06:03 - 00230808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2014-06-22 14:42 - 2014-04-03 06:03 - 00111528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpapi.dll
2014-06-22 14:42 - 2014-04-03 04:53 - 00677376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-06-22 14:42 - 2014-04-03 04:51 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2014-06-22 14:42 - 2014-04-03 04:23 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-06-22 14:42 - 2014-04-03 04:23 - 00402432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-06-22 14:42 - 2014-04-03 04:23 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tlscsp.dll
2014-06-22 14:42 - 2014-04-03 04:22 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\tlscsp.dll
2014-06-22 14:42 - 2014-04-01 08:23 - 00384856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2014-06-22 14:42 - 2014-03-31 07:42 - 07425368 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-06-22 14:42 - 2014-03-31 02:41 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d8thk.dll
2014-06-22 14:42 - 2014-03-31 02:01 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll
2014-06-22 14:42 - 2014-03-31 01:43 - 00761856 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll
2014-06-22 14:42 - 2014-03-31 00:49 - 01287168 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2014-06-22 14:42 - 2014-03-31 00:35 - 01029120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2014-06-22 14:42 - 2014-03-31 00:11 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2014-06-22 14:42 - 2014-03-30 23:47 - 00872448 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2014-06-22 14:42 - 2014-03-28 17:58 - 00407016 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2014-06-22 14:42 - 2014-03-27 08:16 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-06-22 14:42 - 2014-03-27 07:36 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2014-06-22 14:42 - 2014-03-27 06:59 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2014-06-22 14:42 - 2014-03-27 06:48 - 00219136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
2014-06-22 14:42 - 2014-03-27 06:19 - 00313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2014-06-22 14:42 - 2014-03-27 05:46 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2014-06-22 14:42 - 2014-03-27 05:15 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\swprv.dll
2014-06-22 14:42 - 2014-03-27 05:10 - 01436160 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2014-06-22 14:42 - 2014-03-25 00:58 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-06-22 14:42 - 2014-03-20 05:48 - 00263424 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2014-06-22 14:42 - 2014-03-19 10:15 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
2014-06-22 14:42 - 2014-03-19 10:07 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2014-06-22 14:42 - 2014-03-19 09:24 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-06-22 14:42 - 2014-03-19 09:17 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanhlp.dll
2014-06-22 14:42 - 2014-03-19 08:36 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-06-22 14:42 - 2014-03-19 07:56 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-06-22 14:42 - 2014-03-19 07:45 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2014-06-22 14:42 - 2014-03-19 07:19 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2014-06-22 14:42 - 2014-03-19 07:07 - 00370176 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2014-06-22 14:42 - 2014-03-19 07:00 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2014-06-22 14:42 - 2014-03-19 06:51 - 00300544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2014-06-22 14:42 - 2014-03-19 06:31 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll
2014-06-22 14:42 - 2014-03-18 10:19 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys
2014-06-22 14:42 - 2014-03-17 07:09 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-06-22 14:42 - 2014-03-17 06:11 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-06-22 14:42 - 2014-03-17 05:01 - 00486912 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2014-06-22 14:42 - 2014-03-17 04:47 - 01025024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-06-22 14:42 - 2014-03-17 04:45 - 00370176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2014-06-22 14:42 - 2014-03-14 08:26 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\GeofenceMonitorService.dll
2014-06-22 14:42 - 2014-03-14 08:10 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GeofenceMonitorService.dll
2014-06-22 14:42 - 2014-03-11 15:21 - 00918528 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2014-06-22 14:42 - 2014-03-11 15:02 - 00629760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2014-06-22 14:42 - 2014-03-08 22:47 - 00565536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-06-22 14:42 - 2014-03-08 22:47 - 00180056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-06-22 14:42 - 2014-03-08 11:34 - 00731648 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-06-22 14:42 - 2014-03-08 10:44 - 00731648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-06-22 14:42 - 2014-03-06 14:42 - 00310616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2014-06-22 14:42 - 2014-03-06 11:19 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2014-06-22 14:42 - 2014-03-06 11:19 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.Search.UriHandler.dll
2014-06-22 14:42 - 2014-03-06 10:20 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Shell.Search.UriHandler.dll
2014-06-22 14:42 - 2014-01-27 20:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-06-20 18:18 - 2014-06-26 15:48 - 00000000 ____D () C:\Users\SergejSh\Desktop\Programme
2014-06-20 14:00 - 2014-06-20 13:58 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-06-20 13:57 - 2014-06-20 13:57 - 00003408 _____ () C:\Windows\System32\Tasks\aviraSWU
2014-06-20 13:57 - 2014-06-20 13:57 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\Avira
2014-06-20 13:56 - 2014-06-20 13:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-06-20 13:54 - 2014-06-24 12:04 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-06-20 13:54 - 2014-06-20 13:57 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-06-20 13:54 - 2014-06-20 13:54 - 00000000 ____D () C:\ProgramData\Avira
2014-06-20 13:54 - 2014-05-27 17:12 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-06-20 13:54 - 2014-05-27 17:12 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-06-20 13:45 - 2014-06-26 15:56 - 00001128 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-20 13:45 - 2014-06-26 15:25 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-20 13:45 - 2014-06-25 01:51 - 00004100 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-20 13:45 - 2014-06-25 01:51 - 00003864 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-20 13:45 - 2014-06-20 13:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-06-20 13:44 - 2014-06-20 13:45 - 00000000 ____D () C:\Program Files (x86)\Google
2014-06-20 13:43 - 2014-06-20 13:46 - 00000000 ____D () C:\Users\SergejSh\AppData\Local\Google
2014-06-20 13:38 - 2014-06-20 13:38 - 00000000 __SHD () C:\Users\SergejSh\AppData\Local\EmieUserList
2014-06-20 13:38 - 2014-06-20 13:38 - 00000000 __SHD () C:\Users\SergejSh\AppData\Local\EmieSiteList
2014-06-20 13:38 - 2014-06-20 13:38 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\Macromedia
2014-06-20 13:37 - 2014-06-26 15:27 - 00003934 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{3DAA8791-98CA-4076-9EE3-4E67C271DA9E}
2014-06-20 12:09 - 2014-06-20 11:17 - 00000000 ____D () C:\Windows\Panther
2014-06-20 12:07 - 2014-06-20 12:07 - 00000000 ____D () C:\Windows\Options
2014-06-20 12:07 - 2014-06-20 12:07 - 00000000 ____D () C:\Program Files (x86)\Qualcomm Atheros
2014-06-20 12:07 - 2013-11-13 00:05 - 03880448 _____ (Qualcomm Atheros Communications, Inc.) C:\Windows\system32\Drivers\athwbx.sys
2014-06-20 12:06 - 2014-06-20 12:07 - 00000000 ____D () C:\ProgramData\Qualcomm Atheros
2014-06-20 11:58 - 2014-06-20 11:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
2014-06-20 11:57 - 2014-06-20 11:58 - 00000000 ____D () C:\Program Files\Hewlett-Packard
2014-06-20 11:57 - 2014-06-20 11:57 - 00000000 ____D () C:\system.sav
2014-06-20 11:57 - 2014-06-20 11:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools
2014-06-20 11:57 - 2014-06-20 11:57 - 00000000 ____D () C:\hp
2014-06-20 11:53 - 2014-06-20 11:54 - 00000032 _____ () C:\Windows\0
2014-06-20 11:53 - 2014-06-20 11:53 - 00000000 ____D () C:\Program Files (x86)\Ralink Corporation
2014-06-20 11:53 - 2014-06-20 11:53 - 00000000 _____ () C:\Windows\system32\0
2014-06-20 11:53 - 2013-11-25 13:34 - 00382492 _____ () C:\Windows\system32\Drivers\FW7650.bin
2014-06-20 11:49 - 2014-06-20 11:49 - 00003100 _____ () C:\Windows\System32\Tasks\{E4856A59-2919-4B81-BC74-F859E72F7EC5}
2014-06-20 11:49 - 2014-06-20 11:49 - 00000000 ____D () C:\Program Files\HP USB Port Replicator
2014-06-20 11:48 - 2014-06-20 11:48 - 00000000 ____D () C:\Program Files\DisplayLink Core Software
2014-06-20 11:48 - 2014-06-20 11:48 - 00000000 _____ () C:\Windows\SysWOW64\dlumd9.dll
2014-06-20 11:48 - 2014-06-20 11:48 - 00000000 _____ () C:\Windows\SysWOW64\dlumd11.dll
2014-06-20 11:48 - 2014-06-20 11:48 - 00000000 _____ () C:\Windows\SysWOW64\dlumd10.dll
2014-06-20 11:48 - 2014-06-20 11:48 - 00000000 _____ () C:\Windows\system32\dlumd9.dll
2014-06-20 11:48 - 2014-06-20 11:48 - 00000000 _____ () C:\Windows\system32\dlumd11.dll
2014-06-20 11:48 - 2014-06-20 11:48 - 00000000 _____ () C:\Windows\system32\dlumd10.dll
2014-06-20 11:47 - 2014-06-20 11:47 - 00000000 ____D () C:\Program Files (x86)\SP65752
2014-06-20 11:46 - 2014-06-20 11:46 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\Synaptics
2014-06-20 11:46 - 2014-06-20 11:46 - 00000000 ____D () C:\ProgramData\Synaptics
2014-06-20 11:36 - 2014-06-20 11:36 - 00072097 _____ () C:\Windows\SysWOW64\CCCInstall_201406201136272696.log
2014-06-20 11:36 - 2014-06-20 11:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2014-06-20 11:36 - 2014-06-20 11:36 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2014-06-20 11:35 - 2014-06-26 00:21 - 00065536 _____ () C:\Windows\system32\spu_storage.bin
2014-06-20 11:35 - 2014-06-20 11:36 - 00000000 ____D () C:\ProgramData\AMD
2014-06-20 11:35 - 2014-06-20 11:35 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2014-06-20 11:35 - 2014-06-20 11:35 - 00000000 ____D () C:\AMD
2014-06-20 11:35 - 2014-06-20 11:35 - 00000000 _____ () C:\Windows\ativpsrm.bin
2014-06-20 11:34 - 2014-06-20 11:36 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2014-06-20 11:34 - 2014-06-20 11:34 - 00000000 ____D () C:\ProgramData\Package Cache
2014-06-20 11:33 - 2014-06-20 11:35 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-06-20 11:33 - 2014-06-20 11:33 - 00000000 ____D () C:\Program Files\ATI
2014-06-20 11:30 - 2014-06-20 11:30 - 00000000 ____D () C:\Windows\SysWOW64\sda
2014-06-20 11:30 - 2013-08-26 14:54 - 09889352 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RtsP2StorIcon.dll
2014-06-20 11:30 - 2013-08-26 14:54 - 00290520 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RtsP2Stor.sys
2014-06-20 11:30 - 2013-08-26 14:54 - 00263896 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RtsUStor.sys
2014-06-20 11:28 - 2014-06-20 11:28 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-06-20 11:28 - 2014-06-20 11:28 - 00000000 ____D () C:\Windows\system32\SRSLabs
2014-06-20 11:28 - 2014-06-20 11:28 - 00000000 ____D () C:\Program Files\Realtek
2014-06-20 11:28 - 2013-11-05 19:47 - 03707864 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-06-20 11:28 - 2013-11-05 18:54 - 38385664 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2014-06-20 11:28 - 2013-11-05 15:48 - 00681905 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-06-20 11:28 - 2013-11-04 19:26 - 00153304 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-06-20 11:28 - 2013-11-04 11:11 - 02587864 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-06-20 11:28 - 2013-10-28 17:29 - 01021656 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-06-20 11:28 - 2013-10-18 16:41 - 01286360 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-06-20 11:28 - 2013-10-07 11:05 - 02810072 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-06-20 11:28 - 2013-10-02 17:10 - 00617176 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-06-20 11:28 - 2013-04-24 17:16 - 01662024 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-06-20 11:28 - 2011-12-20 15:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2014-06-20 11:28 - 2011-11-22 16:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2014-06-20 11:28 - 2010-11-08 07:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2014-06-20 11:28 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2014-06-20 11:28 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2014-06-20 11:28 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2014-06-20 11:28 - 2010-11-08 07:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2014-06-20 11:28 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2014-06-20 11:28 - 2010-11-03 18:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2014-06-20 11:28 - 2009-11-24 09:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2014-06-20 11:28 - 2009-11-24 09:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2014-06-20 11:27 - 2014-06-20 11:30 - 00000000 ___HD () C:\Program Files (x86)\Temp
2014-06-20 11:27 - 2013-10-16 03:43 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-06-20 11:27 - 2013-10-11 12:47 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-06-20 11:27 - 2013-09-13 18:44 - 02080472 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2014-06-20 11:27 - 2012-03-08 11:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-06-20 11:25 - 2014-06-20 11:25 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2014-06-20 11:25 - 2014-06-20 11:25 - 00000000 ____D () C:\Program Files\Synaptics
2014-06-20 11:24 - 2014-06-20 11:26 - 00001328 _____ () C:\Windows\Synaptics.log
2014-06-20 11:23 - 2014-06-26 15:35 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1673834559-152451206-4130808851-1001
2014-06-20 11:22 - 2014-06-20 12:06 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-06-20 11:22 - 2014-06-20 11:30 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-06-20 11:22 - 2013-08-16 06:28 - 00830680 _____ (Realtek ) C:\Windows\system32\Drivers\Rt630x64.sys
2014-06-20 11:22 - 2013-08-16 06:28 - 00074456 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2014-06-20 11:21 - 2014-06-20 11:49 - 00015574 _____ () C:\Windows\DPINST.LOG
2014-06-20 11:21 - 2014-06-20 11:21 - 00000000 ____D () C:\Windows\Dell
2014-06-20 11:21 - 2014-06-20 11:21 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\hpqLog
2014-06-20 11:20 - 2014-06-20 12:06 - 00000000 ____D () C:\SwSetup
2014-06-20 11:20 - 2014-06-20 11:20 - 00000000 ____D () C:\ProgramData\Hewlett-Packard
2014-06-20 11:20 - 2014-06-20 11:20 - 00000000 ____D () C:\Program Files (x86)\Hewlett-Packard
2014-06-20 11:19 - 2014-06-20 11:19 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-06-20 11:17 - 2014-06-26 15:45 - 01154891 _____ () C:\Windows\WindowsUpdate.log
2014-06-20 11:17 - 2014-06-25 13:07 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\Adobe
2014-06-20 11:17 - 2014-06-25 03:43 - 00000000 ____D () C:\Users\SergejSh
2014-06-20 11:17 - 2014-06-24 23:42 - 00000000 ____D () C:\Users\SergejSh\AppData\Local\Packages
2014-06-20 11:17 - 2014-06-20 11:17 - 00001450 _____ () C:\Users\SergejSh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-20 11:17 - 2014-06-20 11:17 - 00000020 ___SH () C:\Users\SergejSh\ntuser.ini
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Vorlagen
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Startmenü
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Netzwerkumgebung
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Lokale Einstellungen
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Eigene Dateien
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Druckumgebung
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Documents\Eigene Musik
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Documents\Eigene Bilder
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\AppData\Local\Verlauf
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\AppData\Local\Anwendungsdaten
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Anwendungsdaten
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 ____D () C:\Users\SergejSh\AppData\Local\VirtualStore
2014-06-20 11:17 - 2014-03-18 12:31 - 00000000 ___RD () C:\Users\SergejSh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-06-20 11:17 - 2014-03-18 12:31 - 00000000 ___RD () C:\Users\SergejSh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-06-20 11:17 - 2014-03-18 12:11 - 00000369 _____ () C:\Users\SergejSh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-06-20 11:17 - 2014-03-18 12:11 - 00000369 _____ () C:\Users\SergejSh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-06-20 11:17 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\SergejSh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-06-20 11:17 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Programme
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-06-20 11:13 - 2014-06-20 11:13 - 00000000 __SHD () C:\Recovery
2014-06-02 08:55 - 2014-06-02 08:55 - 00829264 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100.dll
2014-06-02 08:55 - 2014-06-02 08:55 - 00773968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr100.dll
2014-06-02 08:55 - 2014-06-02 08:55 - 00608080 _____ (Microsoft Corporation) C:\Windows\system32\msvcp100.dll
2014-06-02 08:55 - 2014-06-02 08:55 - 00421200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp100.dll

==================== One Month Modified Files and Folders =======

2014-06-26 16:41 - 2014-06-26 15:58 - 00078532 _____ () C:\Users\SergejSh\Desktop\Addition.txt
2014-06-26 16:41 - 2014-06-26 15:56 - 00012709 _____ () C:\Users\SergejSh\Desktop\FRST.txt
2014-06-26 16:41 - 2014-06-26 15:56 - 00000000 ____D () C:\FRST
2014-06-26 16:32 - 2014-06-26 16:32 - 00057784 _____ () C:\Users\SergejSh\Desktop\Log-File über FRST64.zip
2014-06-26 16:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2014-06-26 15:56 - 2014-06-20 13:45 - 00001128 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-26 15:55 - 2014-06-26 15:55 - 02082816 _____ (Farbar) C:\Users\SergejSh\Desktop\FRST64.exe
2014-06-26 15:48 - 2014-06-20 18:18 - 00000000 ____D () C:\Users\SergejSh\Desktop\Programme
2014-06-26 15:45 - 2014-06-20 11:17 - 01154891 _____ () C:\Windows\WindowsUpdate.log
2014-06-26 15:35 - 2014-06-20 11:23 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1673834559-152451206-4130808851-1001
2014-06-26 15:27 - 2014-06-20 13:37 - 00003934 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{3DAA8791-98CA-4076-9EE3-4E67C271DA9E}
2014-06-26 15:25 - 2014-06-22 16:25 - 00000000 ___RD () C:\Users\SergejSh\Dropbox
2014-06-26 15:25 - 2014-06-22 16:25 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\DropboxMaster
2014-06-26 15:25 - 2014-06-22 16:21 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\Dropbox
2014-06-26 15:25 - 2014-06-20 13:45 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-26 00:21 - 2014-06-20 11:35 - 00065536 _____ () C:\Windows\system32\spu_storage.bin
2014-06-25 13:42 - 2014-06-25 13:42 - 00000000 ____D () C:\Users\SergejSh\Documents\Benutzerdefinierte Office-Vorlagen
2014-06-25 13:08 - 2014-06-25 13:02 - 00000000 ____D () C:\ProgramData\Adobe
2014-06-25 13:07 - 2014-06-25 13:07 - 00000000 ____D () C:\Users\SergejSh\AppData\Local\Adobe
2014-06-25 13:07 - 2014-06-20 11:17 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\Adobe
2014-06-25 13:03 - 2014-06-26 15:30 - 00000030 _____ () C:\AVScanner.ini
2014-06-25 13:03 - 2014-06-25 13:03 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-06-25 13:03 - 2014-06-25 13:03 - 00000000 ____D () C:\ProgramData\McAfee
2014-06-25 13:02 - 2014-06-25 13:02 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-06-25 11:33 - 2014-06-23 13:09 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\Spotify
2014-06-25 03:43 - 2014-06-20 11:17 - 00000000 ____D () C:\Users\SergejSh
2014-06-25 01:51 - 2014-06-20 13:45 - 00004100 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-25 01:51 - 2014-06-20 13:45 - 00003864 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-24 23:42 - 2014-06-20 11:17 - 00000000 ____D () C:\Users\SergejSh\AppData\Local\Packages
2014-06-24 21:23 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache
2014-06-24 20:27 - 2014-03-18 12:03 - 01686150 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-24 20:27 - 2014-03-18 11:25 - 00727930 _____ () C:\Windows\system32\perfh007.dat
2014-06-24 20:27 - 2014-03-18 11:25 - 00151586 _____ () C:\Windows\system32\perfc007.dat
2014-06-24 12:31 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp
2014-06-24 12:04 - 2014-06-20 13:54 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-06-24 11:59 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-23 15:45 - 2014-06-23 13:10 - 00000000 ____D () C:\Users\SergejSh\AppData\Local\Spotify
2014-06-23 13:10 - 2014-06-23 13:10 - 00001814 _____ () C:\Users\SergejSh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-06-23 12:46 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-06-23 12:36 - 2014-06-23 12:30 - 00000000 ___RD () C:\Windows\BrowserChoice
2014-06-23 12:33 - 2013-08-22 16:44 - 00478840 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-06-23 12:32 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-06-23 12:30 - 2014-03-18 03:50 - 00161152 _____ () C:\Windows\PFRO.log
2014-06-23 12:30 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ToastData
2014-06-23 12:30 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2014-06-23 12:30 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-06-23 12:30 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-06-23 12:30 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore
2014-06-23 12:30 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\setup
2014-06-23 12:30 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\SecureBootUpdates
2014-06-23 12:30 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-06-23 12:30 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-06-23 12:30 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\oobe
2014-06-22 16:26 - 2014-06-22 16:26 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2014-06-22 16:26 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-06-22 16:24 - 2014-06-22 16:24 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-06-22 16:18 - 2014-06-22 16:18 - 00000000 ____D () C:\Users\SergejSh\AppData\Local\PDF24
2014-06-22 16:17 - 2014-06-22 16:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-06-22 16:15 - 2014-06-22 16:15 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-06-22 16:14 - 2014-06-22 16:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24
2014-06-22 16:14 - 2014-06-22 16:14 - 00000000 ____D () C:\Program Files (x86)\PDF24
2014-06-22 16:10 - 2014-06-22 16:10 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-06-22 16:09 - 2014-06-22 16:09 - 01351872 _____ (Microsoft Corporation) C:\Users\SergejSh\Downloads\Setup.X64.de-de_O365ProPlusRetail_76a59357-cf4e-4b82-a30c-5762ef5e6dc9_TX_PR_.exe
2014-06-22 16:09 - 2014-06-22 16:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2014-06-22 16:09 - 2013-08-22 16:46 - 00013971 _____ () C:\Windows\setupact.log
2014-06-22 15:16 - 2014-06-22 15:15 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-22 15:15 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-06-20 13:58 - 2014-06-20 14:00 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-06-20 13:57 - 2014-06-20 13:57 - 00003408 _____ () C:\Windows\System32\Tasks\aviraSWU
2014-06-20 13:57 - 2014-06-20 13:57 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\Avira
2014-06-20 13:57 - 2014-06-20 13:54 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-06-20 13:56 - 2014-06-20 13:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-06-20 13:54 - 2014-06-20 13:54 - 00000000 ____D () C:\ProgramData\Avira
2014-06-20 13:46 - 2014-06-20 13:43 - 00000000 ____D () C:\Users\SergejSh\AppData\Local\Google
2014-06-20 13:45 - 2014-06-20 13:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-06-20 13:45 - 2014-06-20 13:44 - 00000000 ____D () C:\Program Files (x86)\Google
2014-06-20 13:38 - 2014-06-20 13:38 - 00000000 __SHD () C:\Users\SergejSh\AppData\Local\EmieUserList
2014-06-20 13:38 - 2014-06-20 13:38 - 00000000 __SHD () C:\Users\SergejSh\AppData\Local\EmieSiteList
2014-06-20 13:38 - 2014-06-20 13:38 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\Macromedia
2014-06-20 12:09 - 2013-08-22 17:36 - 00262144 _____ () C:\Windows\system32\config\BCD-Template
2014-06-20 12:07 - 2014-06-20 12:07 - 00000000 ____D () C:\Windows\Options
2014-06-20 12:07 - 2014-06-20 12:07 - 00000000 ____D () C:\Program Files (x86)\Qualcomm Atheros
2014-06-20 12:07 - 2014-06-20 12:06 - 00000000 ____D () C:\ProgramData\Qualcomm Atheros
2014-06-20 12:06 - 2014-06-20 11:22 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-06-20 12:06 - 2014-06-20 11:20 - 00000000 ____D () C:\SwSetup
2014-06-20 11:58 - 2014-06-20 11:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
2014-06-20 11:58 - 2014-06-20 11:57 - 00000000 ____D () C:\Program Files\Hewlett-Packard
2014-06-20 11:57 - 2014-06-20 11:57 - 00000000 ____D () C:\system.sav
2014-06-20 11:57 - 2014-06-20 11:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools
2014-06-20 11:57 - 2014-06-20 11:57 - 00000000 ____D () C:\hp
2014-06-20 11:54 - 2014-06-20 11:53 - 00000032 _____ () C:\Windows\0
2014-06-20 11:53 - 2014-06-20 11:53 - 00000000 ____D () C:\Program Files (x86)\Ralink Corporation
2014-06-20 11:53 - 2014-06-20 11:53 - 00000000 _____ () C:\Windows\system32\0
2014-06-20 11:49 - 2014-06-20 11:49 - 00003100 _____ () C:\Windows\System32\Tasks\{E4856A59-2919-4B81-BC74-F859E72F7EC5}
2014-06-20 11:49 - 2014-06-20 11:49 - 00000000 ____D () C:\Program Files\HP USB Port Replicator
2014-06-20 11:49 - 2014-06-20 11:21 - 00015574 _____ () C:\Windows\DPINST.LOG
2014-06-20 11:48 - 2014-06-20 11:48 - 00000000 ____D () C:\Program Files\DisplayLink Core Software
2014-06-20 11:48 - 2014-06-20 11:48 - 00000000 _____ () C:\Windows\SysWOW64\dlumd9.dll
2014-06-20 11:48 - 2014-06-20 11:48 - 00000000 _____ () C:\Windows\SysWOW64\dlumd11.dll
2014-06-20 11:48 - 2014-06-20 11:48 - 00000000 _____ () C:\Windows\SysWOW64\dlumd10.dll
2014-06-20 11:48 - 2014-06-20 11:48 - 00000000 _____ () C:\Windows\system32\dlumd9.dll
2014-06-20 11:48 - 2014-06-20 11:48 - 00000000 _____ () C:\Windows\system32\dlumd11.dll
2014-06-20 11:48 - 2014-06-20 11:48 - 00000000 _____ () C:\Windows\system32\dlumd10.dll
2014-06-20 11:47 - 2014-06-20 11:47 - 00000000 ____D () C:\Program Files (x86)\SP65752
2014-06-20 11:46 - 2014-06-20 11:46 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\Synaptics
2014-06-20 11:46 - 2014-06-20 11:46 - 00000000 ____D () C:\ProgramData\Synaptics
2014-06-20 11:36 - 2014-06-20 11:36 - 00072097 _____ () C:\Windows\SysWOW64\CCCInstall_201406201136272696.log
2014-06-20 11:36 - 2014-06-20 11:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2014-06-20 11:36 - 2014-06-20 11:36 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2014-06-20 11:36 - 2014-06-20 11:35 - 00000000 ____D () C:\ProgramData\AMD
2014-06-20 11:36 - 2014-06-20 11:34 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2014-06-20 11:35 - 2014-06-20 11:35 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2014-06-20 11:35 - 2014-06-20 11:35 - 00000000 ____D () C:\AMD
2014-06-20 11:35 - 2014-06-20 11:35 - 00000000 _____ () C:\Windows\ativpsrm.bin
2014-06-20 11:35 - 2014-06-20 11:33 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-06-20 11:34 - 2014-06-20 11:34 - 00000000 ____D () C:\ProgramData\Package Cache
2014-06-20 11:33 - 2014-06-20 11:33 - 00000000 ____D () C:\Program Files\ATI
2014-06-20 11:30 - 2014-06-20 11:30 - 00000000 ____D () C:\Windows\SysWOW64\sda
2014-06-20 11:30 - 2014-06-20 11:27 - 00000000 ___HD () C:\Program Files (x86)\Temp
2014-06-20 11:30 - 2014-06-20 11:22 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-06-20 11:28 - 2014-06-20 11:28 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-06-20 11:28 - 2014-06-20 11:28 - 00000000 ____D () C:\Windows\system32\SRSLabs
2014-06-20 11:28 - 2014-06-20 11:28 - 00000000 ____D () C:\Program Files\Realtek
2014-06-20 11:26 - 2014-06-20 11:24 - 00001328 _____ () C:\Windows\Synaptics.log
2014-06-20 11:25 - 2014-06-20 11:25 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2014-06-20 11:25 - 2014-06-20 11:25 - 00000000 ____D () C:\Program Files\Synaptics
2014-06-20 11:21 - 2014-06-20 11:21 - 00000000 ____D () C:\Windows\Dell
2014-06-20 11:21 - 2014-06-20 11:21 - 00000000 ____D () C:\Users\SergejSh\AppData\Roaming\hpqLog
2014-06-20 11:20 - 2014-06-20 11:20 - 00000000 ____D () C:\ProgramData\Hewlett-Packard
2014-06-20 11:20 - 2014-06-20 11:20 - 00000000 ____D () C:\Program Files (x86)\Hewlett-Packard
2014-06-20 11:20 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\restore
2014-06-20 11:19 - 2014-06-20 11:19 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-06-20 11:17 - 2014-06-20 12:09 - 00000000 ____D () C:\Windows\Panther
2014-06-20 11:17 - 2014-06-20 11:17 - 00001450 _____ () C:\Users\SergejSh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-20 11:17 - 2014-06-20 11:17 - 00000020 ___SH () C:\Users\SergejSh\ntuser.ini
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Vorlagen
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Startmenü
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Netzwerkumgebung
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Lokale Einstellungen
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Eigene Dateien
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Druckumgebung
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Documents\Eigene Musik
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Documents\Eigene Bilder
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\AppData\Local\Verlauf
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\AppData\Local\Anwendungsdaten
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 _SHDL () C:\Users\SergejSh\Anwendungsdaten
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-06-20 11:17 - 2014-06-20 11:17 - 00000000 ____D () C:\Users\SergejSh\AppData\Local\VirtualStore
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Programme
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-06-20 11:14 - 2014-06-20 11:14 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-06-20 11:14 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-06-20 11:14 - 2013-08-22 15:36 - 00000000 __RHD () C:\Users\Default
2014-06-20 11:13 - 2014-06-20 11:13 - 00000000 __SHD () C:\Recovery
2014-06-20 11:13 - 2013-08-22 17:37 - 00002664 _____ () C:\Windows\DtcInstall.log
2014-06-20 11:13 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\Recovery
2014-06-02 08:55 - 2014-06-02 08:55 - 00829264 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100.dll
2014-06-02 08:55 - 2014-06-02 08:55 - 00773968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr100.dll
2014-06-02 08:55 - 2014-06-02 08:55 - 00608080 _____ (Microsoft Corporation) C:\Windows\system32\msvcp100.dll
2014-06-02 08:55 - 2014-06-02 08:55 - 00421200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp100.dll
2014-06-01 17:17 - 2014-06-22 15:15 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-31 07:13 - 2014-06-23 12:35 - 00703992 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-31 07:13 - 2014-06-23 12:35 - 00105464 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-30 12:21 - 2014-06-22 14:50 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-30 11:45 - 2014-06-22 14:50 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-05-30 11:28 - 2014-06-22 14:50 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-05-30 11:20 - 2014-06-22 14:50 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-05-30 11:18 - 2014-06-22 14:50 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-30 11:08 - 2014-06-22 14:50 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-05-30 11:06 - 2014-06-22 14:50 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-05-30 10:46 - 2014-06-22 14:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-30 10:44 - 2014-06-22 14:50 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-05-30 10:43 - 2014-06-22 14:50 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-05-30 10:38 - 2014-06-22 14:50 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-05-30 10:35 - 2014-06-22 14:50 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-05-30 10:29 - 2014-06-22 14:50 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-05-30 10:27 - 2014-06-22 14:50 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-05-30 10:23 - 2014-06-22 14:50 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-05-30 10:16 - 2014-06-22 14:50 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-05-30 10:04 - 2014-06-22 14:50 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-30 10:02 - 2014-06-22 14:50 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-05-30 09:56 - 2014-06-22 14:50 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-05-30 09:56 - 2014-06-22 14:50 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-05-30 09:54 - 2014-06-22 14:50 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-05-30 09:49 - 2014-06-22 14:50 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-05-30 09:43 - 2014-06-22 14:50 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-05-30 09:40 - 2014-06-22 14:50 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-05-30 09:30 - 2014-06-22 14:50 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-05-30 09:21 - 2014-06-22 14:50 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-05-30 09:15 - 2014-06-22 14:50 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-05-30 09:13 - 2014-06-22 14:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-05-30 09:13 - 2014-06-22 14:50 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-05-27 17:12 - 2014-06-20 13:54 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-05-27 17:12 - 2014-06-20 13:54 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

Some content of TEMP:
====================
C:\Users\SergejSh\AppData\Local\Temp\avgnt.exe
C:\Users\SergejSh\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpgapydy.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-20 11:10

==================== End Of Log ============================

--- --- ---

Muster123 · 28.06.2014, 00:09

FRST Additions Logfile:

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-06-2014
Ran by SergejSh at 2014-06-26 16:42:21
Running from C:\Users\SergejSh\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 13.20.100.31119 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2013.1119.2211.39813 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (HKLM\...\{37ED2328-4288-6720-9D34-ECD5709B4F21}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
AMD Fuel (Version: 2013.1119.2211.39813 - Ihr Firmenname) Hidden
AMD Start Now (Version: 2013.1119.2211.39813 - Advanced Micro Devices, Inc.) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.5.444 - Avira)
Avira Savings Advisor (HKLM-x32\...\{A18A516C-AA41-46A9-92DB-60208917E442}) (Version: 1.5.14 - Avira) <==== ATTENTION
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.1119.2211.39813 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.1119.2211.39813 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.1119.2211.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2013.1119.2210.39813 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.1119.2211.39813 - Advanced Micro Devices, Inc.) Hidden
DisplayLink Core Software (HKLM\...\{E4F639D7-769C-4E9E-8CD7-12D903E99BFB}) (Version: 7.5.54018.0 - DisplayLink Corp.)
Dropbox (HKCU\...\Dropbox) (Version: 2.8.3 - Dropbox, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
HP AC Power Control (HKLM\...\{F819C151-FFEE-4F01-BE68-0D1F76574F44}) (Version: 1.0.6 - Hewlett-Packard)
HP Port Replicator Software Installer (HKLM-x32\...\{6313BCDF-1109-4682-A19D-413189817787}) (Version: 1.3.35 - HP)
HP USB Port Replicator (HKLM\...\{77F90DBD-CDF9-47E0-8274-E94DD45F1BF7}) (Version: 7.5.54081.0 - Hewlett-Packard)
HP Utility Center (HKLM\...\{D2CC454E-69D8-4640-B9EE-5A272DF3404C}) (Version: 2.4.4 - Hewlett-Packard Company)
HP Wireless Button Driver (HKLM-x32\...\{30B2D1D8-0A07-4B71-9553-0710C5D31E35}) (Version: 1.1.2.1 - Hewlett-Packard Company)
Microsoft Office 365 ProPlus - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 15.0.4623.1003 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
OEM Application Profile (HKLM-x32\...\{70D5F822-F4C4-33D9-7EEC-2A4AF4EA7BDC}) (Version: 1.00.0000 - Ihr Firmenname)
Office 15 Click-to-Run Extensibility Component (Version: 15.0.4623.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4623.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (Version: 15.0.4623.1003 - Microsoft Corporation) Hidden
PDF24 Creator 6.5.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
Qualcomm Atheros Driver Installation Program (HKLM-x32\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 10.0 - Qualcomm Atheros)
Ralink Bluetooth Stack (HKLM\...\{49AA3AFC-37F9-94C8-BFC6-43E7DCE88C77}) (Version: 11.0.752.0 - Mediatek)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.29070 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 8.20.815.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7083 - Realtek Semiconductor Corp.)
Spotify (HKCU\...\Spotify) (Version: 0.9.10.21.g22fbdb39 - Spotify AB)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.15.0 - Synaptics Incorporated)

==================== Restore Points  =========================

20-06-2014 09:20:35 Installed HP Wireless Button Driver.
24-06-2014 10:30:39 Windows Update

==================== Hosts content: ==========================

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {1DE0CA86-2FC0-42EE-B3E5-675AE49C6571} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {2559CBD2-D54B-411A-84C9-E2A689E2115A} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-03-18] (Microsoft Corporation)
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3650CB0E-9D60-4D24-910F-A90B4E4704B0} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2014-06-22] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {7BB1EC61-3140-48A7-9245-3DD56ECC42BA} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {8E088B26-23A1-4E07-858A-A1BDD9516358} - System32\Tasks\aviraSWU => Cscript.exe "C:\Program Files (x86)\avira\Internet Explorer\swu.vbs"
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {A5BA4CA1-BFA1-4837-81B4-27DD1F71C78E} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2014-06-22] (Microsoft Corporation)
Task: {A9AE5F29-FE76-4ECF-BD97-C28152FDC442} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-20] (Google Inc.)
Task: {BB1CE4BB-F10A-4486-B4BE-A97E0D9FC305} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-20] (Google Inc.)
Task: {C9C225E8-8211-4747-8279-7126BDE72043} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv
Task: {CA7E968C-6FB8-4B8B-8B44-DE31DB59C55E} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-05-13] (Microsoft Corporation)
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D4F1838F-B2D1-4B45-AEF2-FB800DF0E0ED} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation
Task: {D58C17CD-9543-4B2D-A253-13D22AC20343} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2014-06-22] (Microsoft Corporation)
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {FD824BF4-1020-48D6-8C7C-D76757600745} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload
Task: {FF197F51-0690-48B0-A00F-0D026405BC8D} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-06-01] (Microsoft Corporation)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-11-19 22:15 - 2013-11-19 22:15 - 00099328 _____ () c:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe
2013-11-19 22:14 - 2013-11-19 22:14 - 00127488 _____ () c:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2014-06-22 16:10 - 2013-10-31 18:13 - 00102568 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2014-06-26 15:25 - 2014-06-26 15:25 - 00043008 _____ () c:\users\sergejsh\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpgapydy.dll
2014-06-22 16:24 - 2013-10-19 01:55 - 25100288 _____ () C:\Users\SergejSh\AppData\Roaming\Dropbox\bin\libcef.dll
2014-06-20 13:45 - 2014-06-05 15:58 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\libglesv2.dll
2014-06-20 13:45 - 2014-06-05 15:58 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\libegl.dll
2014-06-20 13:45 - 2014-06-05 15:58 - 04217672 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\pdf.dll
2014-06-20 13:45 - 2014-06-05 15:58 - 00414536 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll
2014-06-20 13:45 - 2014-06-05 15:58 - 01732424 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ffmpegsumo.dll

==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== MSCONFIG/TASK MANAGER disabled items =========


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (06/25/2014 11:05:41 AM) (Source: Desktop Window Manager) (EventID: 9020) (User: )
Description: Der Desktopfenster-Manager hat einen schwerwiegenden Fehler (0x8898008d) festgestellt.

Error: (06/20/2014 00:14:29 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0x80072EE7
Befehlszeilenargumente:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=b080aea2-e6c5-4b22-838e-fa4a21c931e3;NotificationInterval=1440;Trigger=UserLogon;SessionId=1

Error: (06/20/2014 00:14:29 PM) (Source: Software Protection Platform Service) (EventID: 1014) (User: )
Description: Fehler beim Erwerb der Endbenutzerlizenz. hr=0x80072EE7
SKU-ID=b080aea2-e6c5-4b22-838e-fa4a21c931e3

Error: (06/20/2014 00:14:29 PM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )
Description: Lizenzerwerb-Fehlerdetails. 
hr=0x80072EE7

Error: (06/20/2014 11:46:08 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0x80072EE7
Befehlszeilenargumente:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=b080aea2-e6c5-4b22-838e-fa4a21c931e3;NotificationInterval=1440;Trigger=UserLogon;SessionId=1

Error: (06/20/2014 11:46:08 AM) (Source: Software Protection Platform Service) (EventID: 1014) (User: )
Description: Fehler beim Erwerb der Endbenutzerlizenz. hr=0x80072EE7
SKU-ID=b080aea2-e6c5-4b22-838e-fa4a21c931e3

Error: (06/20/2014 11:46:08 AM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )
Description: Lizenzerwerb-Fehlerdetails. 
hr=0x80072EE7

Error: (06/20/2014 11:17:39 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0x80072EE7
Befehlszeilenargumente:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=b080aea2-e6c5-4b22-838e-fa4a21c931e3;NotificationInterval=1440;Trigger=UserLogon;SessionId=1

Error: (06/20/2014 11:17:38 AM) (Source: Software Protection Platform Service) (EventID: 1014) (User: )
Description: Fehler beim Erwerb der Endbenutzerlizenz. hr=0x80072EE7
SKU-ID=b080aea2-e6c5-4b22-838e-fa4a21c931e3

Error: (06/20/2014 11:17:38 AM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )
Description: Lizenzerwerb-Fehlerdetails. 
hr=0x80072EE7


System errors:
=============
Error: (06/25/2014 11:20:45 AM) (Source: DCOM) (EventID: 10010) (User: Sergej)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (06/25/2014 11:20:14 AM) (Source: DCOM) (EventID: 10010) (User: Sergej)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (06/24/2014 09:20:08 PM) (Source: DCOM) (EventID: 10010) (User: Sergej)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (06/24/2014 09:19:38 PM) (Source: DCOM) (EventID: 10010) (User: Sergej)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (06/24/2014 08:27:12 PM) (Source: DCOM) (EventID: 10010) (User: Sergej)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (06/24/2014 08:26:42 PM) (Source: DCOM) (EventID: 10010) (User: Sergej)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (06/24/2014 01:16:05 PM) (Source: DCOM) (EventID: 10010) (User: Sergej)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (06/24/2014 01:15:35 PM) (Source: DCOM) (EventID: 10010) (User: Sergej)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (06/24/2014 00:31:31 PM) (Source: DCOM) (EventID: 10010) (User: Sergej)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (06/24/2014 00:31:01 PM) (Source: DCOM) (EventID: 10010) (User: Sergej)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}


Microsoft Office Sessions:
=========================
Error: (06/25/2014 11:05:41 AM) (Source: Desktop Window Manager) (EventID: 9020) (User: )
Description: 0x8898008d

Error: (06/20/2014 00:14:29 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: hr=0x80072EE7RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=b080aea2-e6c5-4b22-838e-fa4a21c931e3;NotificationInterval=1440;Trigger=UserLogon;SessionId=1

Error: (06/20/2014 00:14:29 PM) (Source: Software Protection Platform Service) (EventID: 1014) (User: )
Description: hr=0x80072EE7b080aea2-e6c5-4b22-838e-fa4a21c931e3

Error: (06/20/2014 00:14:29 PM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )
Description: hr=0x80072EE700010001(0x00000000, 12:14:29:553 - https://activation-v2.sls.microsoft.com/SLActivateProduct/SLActivateProduct.asmx?configextension=Retail)
00020001(0x00000000, 12:14:29:569)
00030001(0x00000000, 12:14:29:569 - https://activation-v2.sls.microsoft.com)
00030002(0x00000000, 12:14:29:569 - 0)
00040001(0x00000000, 12:14:29:569 - https://activation-v2.sls.microsoft.com)
00040002(0x00000000, 12:14:29:569 - 1, <NULL>, <NULL>, <NULL>)
00050002(0x80072F94, 12:14:29:584 - 0, 1)
00040006(0x00000001, 12:14:29:584 - 0, https://activation-v2.sls.microsoft.com, <N/A>, <N/A>)
00020005(0x00000000, 12:14:29:584 - 0)
00020008(0x80072EE7, 12:14:29:600 - SOAPAction: "hxxp://microsoft.com/SL/ProductActivationService/IssueToken"
Content-Type: text/xml; charset=utf-8
, <soap:Envelope xmlns:soap="hxxp://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="hxxp://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="hxxp://www.w3.org/2001/XMLSchema" xmlns:soapenc="hxxp://schemas.xmlsoap.org/soap/encoding/"><soap:Body><RequestSecurityToken xmlns="hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust"><TokenType>ProductActivation</TokenType><RequestType>hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust/Issue</RequestType><UseKey><Values xmlns:q1="hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust" soapenc:arrayType="q1:TokenEntry[1]"><TokenEntry><Name>PublishLicense</Name><Value>dqKv0U+R/955Z2OrBbucjfimXYBereelmDCJ6wd+x8EDQmwIF3VudwWkSzQFifFdvByRxfUC59I5NDq+/nGOTrlB7XV9HdZaNiblSLer+3BvofQCjFqFl+75a14lYzUtUYe0UeulxRvn4s1xkCS2wdhLVprcQdbnS1fJ9m6Iw3zOxNmeS2zYqxxuHXMGLqIwZzCjmLn/2h0Kz9huTNfgoIfeM8RRVHE6cF5gOkSNczcAhe+x7FOUs/wISkhDYkjjNPnvCUjkbV8yZBfLvzJTxz2LOMFosFDwTPPG2w/CRKtVedMwjfvhrxJoNZq1rgT3VJRC8/G3Rp77DVX0i6dJ31SfDWt4vpSB8xwrmlcBXySaZUgqSsR+SI9UeVgM4GFG090jq5iOToE4RdqqSdew2dFIrw0NL2oyYkJDqZSsvDUIy6nCVeWlS1qR/sS1EwxOFjfyVdylYrZOq7YMXURwbpR4RZsy/JmJSP1nkPk6o8kRJSGqKAlP5fjWE72BsE08XhQ8P+6AyaWNWlhMmTa9fehinN5rlou3hB6IceCuXawq2ENL1XsI3KboA0dM7qgVbgLN2VnxnsWzdn3EGeeOpXZpFLsSeiQxsiQ/I5rU5mjM4wBWv0dI6GCtCYblV7sW2Tso2fMNmlb7cvcn5EB+cSTqKu0grrWIoNaSOdATD5OSWzEVOXFT4YyviWGq/2ta7wN03ITPfvjQlpeuYScIxqCBn7Cx4f8gcyXNZciqFzeakEjeiu5dVabcCaFvh/1k598/sU2gAua9R663qZKjmPKlsD4vrf0Gxmf+/xMRXiGrrNjPCAKShoPhaIB0LOtwsOfbLu9s53PBGOehWB85IIfbS1v0hJmkZ16hFLHxZ7RBCnPVLJfNxmAIzhA/Q7+mZzRni+UE7+75DBoB3BrnlaLNX7+I0pNSdIkuS7JGzVfsGex6HZlWS3fex2jpdg0HUfPEN3Kg/8b6synHAqFnXVEzErTTGwCAx1M80EgCtpbTz4YcS2aVKSnCmX0n3qavBS9zTjNwUxBqX25qULtjlGXwhQjbMo1PTZyVLxR/zbZqXLTAg6I0fOEAtSUnOTsX3qJXQKs4o88afWncwVb65BvsXQjQb4Pzade1BpajXeXJ7i9sZDI135QQf+YMzbOeMusnAfl1FE8po2o5Mg3x4gJREuVWm99eUCMWdzk0h1zZHatkq/DPIzlIvLFqkMCoIYUnIs0weoy43i5AnPK2Im64P/aKZ3XlE/jlbN+stnWjUjI0RizowvlDKgT6xUOhX9pXmXigYkT/IoupCmdZUetmqwDtI1KxIVuvPrfJJrTCmE0y1OalNB2Z4B05mRK8isASiRBbie1XyOi6p6zSgGFmoOgS8ufr9iPhX57wyKQ3TrlPJwxL50z6HFBUR2q3DEbtfehT5Rq/HQ0/ngVpZ5G1DhXZoARPqX6TBWeJGgnraj3It7cAEpj7VYJQ+OxU5my3ogrR3eB3ECZFbCjwTSOTMhW8a/wY1B0dyRygN3t+lIM7CSoxShVb+OMsNzo1GLrD8DSdB6+zcXXmmSbjeDQ94NiRWaIzMqtNVnr4BevWVs3rMDRY89GeaJKAdV32gsXaEr5xsThsWdfvltrLcIW+NtNLmtADBft7kM02NHvHznnFjDMLhOE9vRpeFH8yVAU1y5pKq347k03Q2zFv6u53vS9aSO1mYAPUSkiIyQ4xEePKmzubK7xDr9tmiY+syAh76a5v/GjxFgajR+dYCiRWIVUGqA6dqqGWm2sOhBf36vUa3NEtoK3717Vux8Ptza9EScmPUn0YGbc3JTIjsggiMoNPP0DVylJBjGnKdyQ9BeC+cc5IKlN98qxy+rbfBnHajjurJuSa1mQ5lxQYj4PAIstPiknhpY5665rB4svOA5RyiNr1MrNe87b209uZp87oA4ZuEeE0+9zV56YyG2jSXbzwJTDm7HfHc35F8PrTWqYzgw1nlbAN8d+CDrwYLJC2Bv2cDRta510IgOLTLClLsGMDRN/NRAQhQIiWXo0aXBkc4q8mutrN9G4fu2fJ62G5es+FywQubXFtdm3vHBbn72fJLJG+HL4cR/10uBD8XqzjXPVnKorHhR4oWcaXyXKWXSuWLevOKfv9ADa5xgNInpnVpUEMwQQB/4f2k3rM1ZtCrYHRvKC84qz/ZVeSxVGN6xsMiPAtDahni3YNaiRJ2nL9/JZkHiUieiBGPKvncc/fU1LLSSssNV2g+CzxNpx3iwkOkXZeH6KTMONRXK273+FvjAVfSMZ8TwDrMYDVXfA3rgFb2o3h/t9UMxpkGYJMF2jqcMOzLx1fzaSpNnW0CibL3wxwGlxV3/S98dV/nWAPLpqPMNNqN4oDRNFWSUebHwafHQ3gxAtr7WAgrweKJ5MZqhOe8t4GU6PqcVZimM/FhvxGu4XthdbZnNACw0oOvbKRttr6wTwWXHyM5ZD1/lzIJRABHVa+ovLn/3pIsgIVFcSQBPKoQ5PScEwMXhqMF/omEXVbeY0CzIelrjhuq6+OxP46DdPHagOGl4oarkbsiDCgxTZOFnidQ+T7REgHZeEZxrmhIaHR6McOG+aMu4BdOo2c2VCyloV2SX1urPqgD+yYEs5UZ6JkqqqQbX95MIi/KeOPZQGEX1iMozNEi37nWKnVmHePBBOXjKPMqpOr0TbETGDiEiGq9BFCqfVY33tXtQ/vm+gMzq7kL5yijhiNgoERNhHJu+SW/n7HRGg1uC/OLveTJzsw/uUipV4vWH6llaVOMA1Ei8aizJkc6gzrZ7hkOF/vZ34iIbSFyqwx/w2ee540voxPlHYergFT8rWqVDtTyJ7oBJvDFBxH1JmFHBBFINX6KwBfX2Ae9I5QYdkVD5zx0DnRrjBHs9sJw3W/l+16IzDFl4tOn9kfHLJ9b2lSZrlhegV4I0S5zbj9e8Bv/mXSn4whDYkX07GONXbXbjZQ+t51tznxDzF214TDZwTztkKcImv7Bo6OBwYL0G9pEXEBKBaD3uNhmDzZvadyB30v/zJuu2/HLvhs1cCmvczJMp5DG7vb6jSI3a4N7eBS8hp1pUll6SMlS7jJLLqPQEOII5mqg1u+n/D3jbQ94+uAXKvafiezWh2IUrzFEvXVDshp6ZcaUz3xLQdNcY0eFD2kNho9bsWOhvNWW4Nv/VHBVzs5SQ9r+u2PeXNzU+4Gi7yJIoGBgad4RE82+zg3H0IvHU8iHjICZvrFFbbAdS5ThDaRZIfz42cDeLxucZGOkkC57Rk7E+nPregTQ7VmXk2f7UjBBa8EpT/u5n0scCa0yndKzjcMlb0JSDBzmHPjIH0s+1M02w0P7bTZJyloDY1Ricd8u6MYK+QQfoGAXUcyWquoEgmfd5zOnRXi6RQu7wNwuc+wYcQLioLP5PzS+H6Aq3vKgFg6FavD6z4ILIANVL7xN3PpO1PuWip8y2BIH+TW2PprazvUDO6NcBPQ4kggh0C8tPyrCEL1+C2Yiz0QVQZdqbaTM3aQksyQnLx1eYK6sKgEIa2KP8Z63zR2v1KuynLLnhaNhkRx/mKcBgrY89akTgYl+7szSNAmBuuYjxvOq50o6a2LFGMUZhKPJeAd6E5OdsVzSbtt3qRFQZPDgVGxDt6rEb56mNpeqANszHxbBcEWkL9GboF7p+MVqcz5vho1n7JJCS2LQb1mxqUBCDCenTQ1ghZamvZoanUL9wFj8Y51C3Keb52fT/5+1vWyHYj2E7Kz+zkvqOANDsDGtcLfYfjS1kfnR7X1Y3EylJRauTXuhPl9FVsKaEb2N67MAx3C6RxLMgmwZDC8uvC014C8AMdZ5kOHGcRsOh6ApTbbOrSsedIWDl9rdtdqYfhstY0wp7aV6vBkwyTUmAFfqwj1v2hs96FyU1Pz/PkDy5iIRC9ydA4gbL1GxU2Mwdcj3ew/7rnCi9ptfi56jr/fOnNM9aY6k25EUWl7OsPOt4EeNZKQh7/dVBRMqgOC88um54piE81Z/numOoC7kk4aFOSp84ZzyDLij6ZByxOQAFGNJAgjPswWHbfbDKbLhHXhXNh0SAZY2fAysWIv+uLfeceLzkVdUURo5kBZOsxjOTm+MMUib5lP4zkWCRYWqEIYsrD9ALCzVEvsKcO1ZNukm+HrifvmZp9/QKTTRbWT8d609GOGeCWVqu9F7KqlfTKT7QArksMKfVzArrxWmB45CYr5a4BGB4P99a43mkbJs7QU3uNNP6Eal8KDa6YStpDAM2iumt9hf8TIKOAvzHBTRpFh1abM7LK9d49Ni6HeOGdL7C5rW49evMv+TV+IwuBhGkDCKFp7lrqtXijEsQKZFCiRmK1SEoXGSqrc7eYe5YJ5o3+xIkNPx5KpaNZ914XZuuKCbFBCDipJWGFfhytopdGygl2uGT0qfIWErgEJwqGEhajCbelGa1ZPNznIsAfz/WpJw8wAwvhUdh1hsw3upK0VDdyJY9HyAXkb5tn2AxOzVd5N1ZAzii8qTWBXde8rAOqrwxw043wbXGTdapNlY4dFZUfBcBd5WP2ldZ6lo+2tt/c4GyD32NelFfeuiwAI1+vZclJTBMJmz0HbRfD0VJ1GPpSW7DEnD7qtxjg4q4pN5fJfdsO2/ESbx7QKkuU3DVQArm1ivLli+0QTr2zLyzx73cLqtF6IYn/IImoIf4r8d0+Jtx0dGA6Wl8xS9e/OVtgCkVDRA3pTvppJ/Vn/meKagxZLvGPkCkO0bHiXGNHL1WdtuSGJG6SBgv+CrPBmREwR4x6sSVxTOM1sqk5zGxvAey27ow3g6z7tSpSJNa2WjKK4IVw6fp89xzzmFzxhjduxnG6bDlDRAsO7hoYfknGG96dscOvDA8aJIKsTl9KWIZ1VAoLeg3R6LjwQgfZ8HCAJt+cH/gVrTFOjovlLjY69bbmiTPIpGcAXAUrVHUwl/8UDanz3YPcmN9VIedk/TUO52HpRYiTQco/bWnDoEmr3EPG8jjPJ0RgPRlx1uN/C61YA6haUJnZu99XmTrNN9CXY7RKhEeQi6Q7cJR0j6P/jHTHAfMyAMKdtY+chC2xZFXvVR2NW7mJmZsQwSCVHP6i/PQ1KuAqkaoUBGi0M1XatSdNVpt6wYUvVKo4qk3KY0KW12PAZMThzQTRIn1aMIfyC8UCzaSzyKs+zk3F3Y6ZqSvwxQMqmTFl5bt9VRgqUp/3DaexgShU1D/Vp9rS3JtbFY/8HdDQft29Lw00MTSFFTbSDit2Y9Z4DyMwGagZpreRQM21rdHnGm9xnyyQOoe7nMKizGtZfxlJMjIqg8uEX/1+Om0DAn5ffADI5aVvbwj+jHaoh2i+xsfiTnUI662jPaSVrkS/WpnhGxyUt95Fi7JZwqXKRyRXSIQknzEiJ9eEr7us2kbAyCbQZ+yz4T50hT+6CDIwS4YQypnquMKwrxwKJygTAq4nwqc8rm7uN83FT/u0TQkEhYi0cTbpqt9EWYL5IxyLhR4DNOCOW1Elh3B61W8CSNHvDGoYSmtOW0Hee+SxvjDhxQQ+9JusWt4gW+Ql4L7w9yDSY3TMKyeeO8ztie/itkG6xtCtO49VM/rk9toGAVxhe/v3TxADr8AlZJc3KWgjyNuT1nHmEH9E9R5lvuMjkzBmFD7uWoZNHiILQsURkAuPwwsc/1T+hXhmVuQMKtI5e9q2cw9lxjZVnJDraT7Hd+sNziFxLgT6OOZG6c8EQ2QGKtGr+GuYh0nywecMS0faratPoPjudsAipmxAgfmuDavyaInAXce+BEpODEimXT6J4dzH6eEMbwTR4XSDsO5Y0hXLBxndu6AMvP5m4Lm/qKI7yf9lmHHctvOXTI4wWcaDgJPi8z+uooh8/fl6vKXbKnQBJaGb5ldUdxAKAbXZRAeVn4sGeJmaJBzTSP1UOJM8tY9qZ64YXjrOsYZAC/YvxaJ3H76l2bCd3865OZGi9z7VOfcfGmRjyO6dhxIQu/Gr7fwnDsUkB4S02iSh1u4KUOrZksrQTGedwFCIZQiqZ13fFnW3nsYCEAdZuhDLJJbmbx2zaQmDx569HvjFEcs4HCZzD4hebejjXQTH/FFpZ9CfWFSKeRux44BRHOXZLP//r2YBLhWAYH27ZU/AzedHVUm0brQt3msxFvwr/OKhUXgeckZH9Uz8Gx8o97GU2qfV6uMiTy2qnU+2wHFde1jDzfuw9YPmb+WZhHUZ9Yjyc4jdP4vTZLgrx0ihKZYUy98WnDtCWhOzNWnMOn9tVJdvyrkUZhBaDpMS20kqLJ+yhPqttCjeXwniuJPfdpFqhRmVWUvLb1XyF1LufbUk+6f06r6B2waXG2VqoGfJG3AXEieASKsvQcXbKCA0HcG0HxrmpMuW+cNMUYgAvMXo6dE5msxCaU0mRMZu6CN8Ibhq80b24ZCpdrfQG+ZPxnMSxqjMe2lc4yRUEYucTBrMWOhkuQz3WG2Bdf4HkWclTfC55dDk0tx0HLEphu55d1O2b4rkkBixVhJ4/krY+XKcm6C4+plyuEVCbDkfyQ77o02/xgWGXnn6HrFEi1p8nMpwxPWKYz5yhPiccPDb7wAOSu5Xpo40mkllKett/iy3Bo7V6pYcxSaJU87sgX/zJOESzK9m8mN5TDTG4H8sHT3Qkr1nHconlEAPWmYsRASCFqeTOTp/Hs0gG+lCqbpk7Q/n1LnnhzclEuRL6qAytAbB751F4+iq70FeLhFPGQHVPxvXgPcawsVdcz8JTjBokvGwcKTVs0Is1XLxvVIoJ1sU++JACpQCqcppWOcnMQf197vjkSJcnxw2QSbi4dJ9NidxR2+Zts0JpDvSiPbK5k1uMP9nr9mModv49NBhuNDpmNnjVmEFmAkfj5XhCARbgW7FSV8hkIYnJy7W75ZM7nQNDdwcrxB4kpKroy20Y+pVfINfCh3j7irWamZotGrfUhqaL2r2BpqTY3+dJjJ2IYPH6T6Tlh5/FSGQB2PBq8Rs3mY4qeNBnEJhtVlsC5AZMHJVx4nZhLFxM4ScjR2uEdbSpZGJ7YuCLzzp6fFha5ythMYBT+aL48LfvNNcO+mQHxrN2UDOQIc4+Varf8RdM/+bgvF+hVJBncHDgOeY4bxsQ+5wpZ162SpIWbjxN5SRNQukV+5JUET5RHPiICpn7RwDsR+EW+oPZ8+vaYGbKy3Efep0+PPjxDtkm1M+i+CUpaSl9oo7vo0FDIhnXeR3VEB3fJZyR2mzBSXKgWDUOZHEKPZzGe+ebA9We6efeqoFnil2vEqJvlwvgWbUGUqNYMl0wIMrwp12mH85O1CY5PDjgj2ccpeCiMMeiC/8Xhz5/uGV19xior6FoOPb6IkWEyieeu1VTsOiuOC72Tnp4pqbylfnIFkQPwxiXmYMihECpQvGl8hJ46RU0WJJiCIlLd6KyeemKz1DXy0X8/gSlpsGksCqGpGSzgAWnb/RoXPjD8kePdBjs61+1+DG+JB2TnQ5iD/9YAeyHmV1tkKM923o9iDQ7VNd5ptCrrocDNAcr8WhrtIEeUXhFb33LP5X5uGUvtib4L98fjZ+JnHfu9Jcs2w8pemqJ71td7GiIErjXpsIM2H6/kQUbE4dQ3P9aJchjngfmrIBu6XtqxM5lnLkztLa7vAWErYiMFE7mbC9R931YBlp1gwLbrzhlKcOMq9/DFhia/usLkq4GqOLfTMWko6RkLMDqrwFblaHoYP2EdEC8xbyf9rcltKfY0drdRaodNTiSUdPPOnhxpF4ffKDHDxQrhY+lmtrYZkRaI4yJxmARp5NuwSQ+bfnOou/qwkARyxKqxa0Xc5b5TD+EvMreeT/d470N8h0d61ENebIxLEROEuwdEpQJ5rDYErDVahJt2ythlnpz75r1KdW/E1hVAgQOyCIdhjgBVlNWLPIg7sX2HUeaAwi7yssbrN5DFeMqzh8DCEgvR9mDu+mxImSZlixyBtbl7j8/PxGvZLdmKmizlH4zlWMXKAex7YbYkv/FgVwN1Zi6LrriwSkMpBe4FfK/dRPf4/7lGEquJx1Uw+lr9JHoqKqi5omXGwoc/dXk7hRlCpR16zXdylXSwAYxh+6x6xPJZCK8whyqpHluRElL2ZWo4Kv/m5VtyrJskjmv/a2u5wMk6pyJBciCV+ZQPhziRePLN2Fdm+W+LDG0rgr1BwrYNZ5WSUgHSP5Z6GuAjANBy1bHJq/lULguscNQON92hwwtVHyb4cIuscwU63snjrxQqSYn1unqj77CIPxxHatB+2u409iyr64Dc18PW83+5IS3I4866C4w+CDCohq/cr+QFt38MIHoD9bqcHbibczWRpxAvvKVW7wDQDmyUXljFPGog2Trcvmap/sYXPxt43DmWRlDf5PtBZXCdHT7szCWQO236aaWMVaJqe85ORsONMUlIYF/FYlJJLw39I357SRpeILL1KAyue1vWixbfxbN1fIqUtLqHx8Jznb7oyzV2MYjDNhv6WIkibeu1DmgMnXVj8XolTqfpq+LpOIM+RVe6QzQLZktr3NBlIL3QTCkuRxhNw7b2XDgoB8kFPrpnp60uO76EyzvmPSrrzTUjMkgLKVR1hJDhyrQngUmluX39OtK2exrrH89p5IjSgbo/rn93v+JLLNG3Bvr/iXdRovGfY3qMacM0z6O086Ju3xzYSCVfFyDVLo8dvk3lyr99ZKg5Is/1c124sRNmL0IXOqvzFIQp2wXlqeQDV3q6KgDzZaXvjCwJ89oP51ga2QqmqX2W9WdDF3b2Ij7RChhXn9GSEN0Z785USAl6pUn7Zr73IGFIHrJhjYLCalN8Ry0iWy0ebk2QrYP7PFgI2uWP1xH194H++u/5+c63nphehIuqI4qp//pq2wIctCEhIsEGVlJQCBaDstm+IH6SyQKIpt/GPfbShsdvRknGFjgtxvj0cuAVs+y3Po8RjWtZ5XKsoJr0lrqlYhdPwstTPAuwsnbTC1c1oO9lIpBNCDNZyIBqqWOxykF0Q93ko2ovCm4mAl3LYZxO+SjAcSIxa/4091sAeOFvyx2c2UNPORBdqMBSmDWhjx/HIiwivICpLVTPF5Yq84137qWInT0gihKOlSJNy0kpatLRjV9/v0BMRe8Yr6IQZCLFuZsANmPbGwIlYpM+isajFByOG3yvjgFbhM6D8tag+UksqhkGu4Z9xiY5kXXkhzCMlSJ+GjfOOIe9eHvdpwmFzI3T2T/w4PX7R2ZR/c5jnXLb0Pon8T0PtjAVtnz//qA/4DhAq6yCEpLHEUAGynf4aohYYwAFcv7SAph0FWBREsKQCjxjBTsjQjAALCuAOOYqjR9W/YoKGtDG0FNzPCEBuXipv+Io/MxL+GePL8UShDBNZS+cuQAtj2BZr8pXGH3dh3yghN1eLrfih4Kcmxgo0gDJdOTDdZUDDNq/d7cEqyvSg7PaYHnrYPQEDisbYBvqrH5hwo1lVFCGdP0Lzygc58wowpXJ5Ft3Y0ceQD9lN1/dmg0kFPUD8mx55QcJZsqWnC+eVInWcTaE7zNY4TLc+fKhK6K2NewNhQ+yJsjHkTSZQjux95ZdmNFoOA65O/1b7u/2YKjTkArgCL0oPMH1yOadrgDPsBuXz5pGZgN8M44VjH3GQvewbPmiunx9wNSn/0JJ9bgwLl+CfIEnl0Q8jWQ/XI6oAu2irdDLOWrIPi/fD5rj0mlVfhHqAI8UOzs4sAhqbyk3Q+nF47W9bIftmx7HWu6n8k5RM2MMa3ZIkSPYGM4NNNt/4le05f7I/9iSz7sI/5i+oV6nkBZ1aExUQrVk0eDZonv0gaUfdqMY31gHCd2xBTECiUGhfvNNzV4O7PZLUrY1hZzthTdHG2B/FOni8+LulKo+J7/2fVyD6oJRgjadlKasM9Qa9DNNlohXtC9h6Zi4M5oFx1cGn4MIS6oTqytWXkANo+k1WBHZyL5/9hICcKEdWaqEYbLNThcv9lMceXWQJs8Ydsb6EPYQnyL+Dc05muWeP+utkO6abuJr93Pz89rrsEX4GNB+7YsCsd6HMomQgX3MxNY8wP4B8mjwjdGlaXWQswUJcRD2WeitL1W6MbY1jLe3YvBym9FY9ZyNQt/+RjUZ7vtanDaf2fqYgWT0PtUBL7gIvTj7vXW7AF5KiNSZl0Rt/g5RkIwPE0LLfWs5vLUV2F5Q1YLBgSarwELsLDa97IPlv9TScIRb0Mn4HCZ27zv9gMC7lMHsJqg2h0nV1r/73R7avbB0K222VR2FFIAWc4kl3jXSrUeZSVFl6cvtF7r+3+ity/iw4KP0v0NWqm1T8jN6l1j5G19F0BcMwTmvSzoiorZOhqV4X4JitrS3fwBn1tXS1PjpiyrcHHqtHGpTCAtrXsTOGj0vTwF4YgyeOKTisBLwUuxOzkvt3P5EqTnNyQM9MED612DyE09SHrUQS0iJ0NgVFfYDhyldTSBurlmRiCS24CgCAFtNK+5XqQnv1KAwrz4ZQ8dU7NHvC5inxWL26WXS/CQS80qoNjsUUMXWrPWBol33q3b2/UWUzcwT3Mht268AzOZCZ4vzvB4ZDOWaPmZPDbDmQV/yXMyqc3gdUmAOQJOCX4JQwLAEoy1I8VETeiZZndi5dYabFrAVwLV/O2rp3dihcf0V1OrxNl9o007GUyCSsP++jxISangqtuqL9z8NBL0gHdaxiW2YF0KsNA7OBZCj1tkXr4Dg57XVUUsUGDGEbWWfyN0Pe0+f9megB7gSU327ihATh5pR/7axLNq5hDRCyQQ8IoZnthxk1QkT608uKvVEcCwBSiWyMUCzzix4/WlqOi/yr8E7luZoMBBnZ2C9bpcZUf6mwC9NzaF/hz0aGiFoTMTY1nUhtj/UzyjlQUhav9pReEIa+tc3BeimYFNnK1ZNbvtRx5V7GcV3PTKoDZHmIJhpHQfo4ZEuAVCJCHEdCV/crRW/S6JHCAZxiwh0+40/aHWr34J5vyFwE8zt/PT71HPkZ54ZRzi+SUUPX8jPyuh2pRQkAgIue2w7p7wZrOjeJvZAdiaTNRVgKOIhvZok1Rr34Jxn3I3HifBbGbmPvIm0F2llcewHINH1K5GT0+uVok1nghP6Zf6l5Fy8vkfGeD+JvPdY0M+cmWHkr8NMEq3s8FAN0yerSGHIvC/6uz3bsgBZl8tIQPKP/WbJwiQ+9d2/wW9zOfHwId8mloicWsAPYBJLXq9jxxvWWb1rl6WW82WOtLHNCwhu8Sdqvl035Oh3r1yDpK89uNJa1joWIm+FiUVYS7GNH1lt9Q8pgDvF2aR8jKwHgLH2L5On9ubCh+Il6bkB8wYXKx0LpBj0/kY6fneABT2lmcXoZjcPUazvLPO42U9uawb6gK2gMC0sdOMan3ZTdTTpVRXuBA/7bYJmwYrdcDhjQcD2U7pgGJ5b7AteJVIkn+7XLSruHARccqckIaa3IZTQaENh/UZijld/K5IInaCbCiqXZOo4ASznNu6sHG5BQgRV4qeZBFH61QfDqFVE+QJg7ucy8eoNnoTeFnl56Xay3U4+Os/+fokYazzr06v99BuwLYzbkU/dcSwSMQA9emIlEEkMerZzvWn9HIY+q4EP2oA62slMkTpXQr9bGgGkATFC0T/g/AAyztzP06EYblScHExn/M3sdOeKdQbnIGeHVQ/G4+0hiqeuy0f5aJk3Bf85JmAwTFhq+VdiyFBQzZHPiXc0/INpPoT/3JEF6tmB6l3H2txfvqCJiOaZnosaTg+YJDKytHpdw5f7VQadOHVo4+5v84rrxe3kCpt1pZdf7WzpyZ2QJRnypD8HSFiTcU1qzdFLqXKpdSCvbnHN5jz7qOWyQIryjwXlYaWrgoM+2oCxKqr56QbGPp6/WdfCyvHxEh+K9aEs0+rXNji2W2H6JiSbVHSJ6/t4/C/qJ/AfyAZVMKZbRf5ypB/XPl932TeAK9Zy7zioaeFAspBvLH/IB+hOoPAU3QNHI+Ht+bgQjMsdxKn0p0JcPN45JxsO/82/fgpOtpJsRppH+m+2MR0HixwxfnIkqtmQH2ykKAv3HyQDCIfFPpMTrOXFPr1yKyfLlxxr7Vab+RgSO6foTQtkzDoK3DbPOzGLa40zSSPuRvisp3ruNY5HIAqgOkddU/2YxZfF1kF6M1ar+EaibLSl/snH19JPXr9TJy27hXpYxrz1yTSxdW41v698s/cwzurIKQXdtxrFfJTIHg00+WxuQn52s1pY7LLNXdP1ClkXAtZzhNfSdapzFxreYTI67dskI0w7SWBSjqdNyo97YtuP+Di3XimFvXlgUdllpxS/08apiVlrIBZQV47ez8rlA6xi8kghk7qEW3ZNF9FRtFw7mbfHA/uunLUbLoUpV4Cks5BqK++g3ONfpKb1w9cGegoyZmiUyK8RQY2wRXuiOojQsf5s1u2pkq862hEhVGu8fz0an7il6g/yrsCOpqhNiSwcKzK65VlI9spjD0AdjpEMzJ2nMW6vAMKJgu78T8iHa/sejus4V1svNopd5BnXdiqao1vFMilaMu4Klqsid8BdGEUzzwL4Pmek2SrBS963KtdYi045mz56fjfWoA3wAgbALr7GOzOY1Qe0amLXfyBX5ETitQGfPjnF8KC4hY6nOO+/Na2FZk1iFqXsS8MA1zvSkshP2KKDLDIEwsH8bnUpOXTo/h53LTwh7Jy+uDoOEHwW0ZQ6L6I49GKzeumsgEnhJYXpbPz2PrfwQ2a75CT66BlAe5Thak1pqNzxVTx25eWrgdrEA/yrTist//02RjJJkyFRCT4uP5T+MMsfb2s5BvgFHJpI2XYLzdaNHFMKbBgjTTtIGBeTyY4HNkOLPHDgC6N8P3Hs6NvVVYHP1T4cVEF4L/ICVfjDv/POaBQPK72gLE8kN/+eWj3iXpp5asWcG8usCEgYyBJmBHoJnye9wToEkatZC77YPF8zMU7P3zdJc6/GCVhS1iIUbOVGIASAihDDaLjt9U/sl/TaDZFaOb3+2uWmMErEVSqlay+JUEJqvaX5hhhnWDsuGLdW3PQ/ytVr4MKzzY2jS0/SwsZ3s+xqx10x3MpDKhRFgpbcxr1fn3FXwiRJ6KY40gk+21RVbix5wkiRRJlfy1yf64WVsZWcKpM8xHD39MXeAgIYzPeu/xfHXWb8gJlXWZYJzcxvfntKlcim0ae31mT0KnIhkvtUs8whaICrVhp08KRqvg17kxPih3D5L4V+ShA37eSijuO8CZeMWPTWoXmiLfvow4zlMYimn6NCRVEof9poIVmVeVQnqOEu9karClFLF6RK3Ode8S5cf6Gl9YQjmxGLwK4rBRJ8mMA38/69iCkfZBMBkcoH21g7JHmGesE39w81yq0bHGOrdqykr7yJ1lEGKZs4c71iB/wdi7+XdMm0xnAXj9LtvBuCCZW2heZk6Kd/edgZreNgM7siq46mDRz5B8M5vBKvOJZqCZYZxv927EL2RqXBfApbcB20A8ugdKJ57Q6u/xA1OrWEYksmbtjvT0BUb1q3kffABSvZws2l7mgZiSdvI8OEM7TwoCejChjbaW3WvnWTXGZz1THdaAgwGnxxXywiTUgXC/VdhyZ2hyLB7ZzaG7zpotrf3HyMbCQtCQgd3Wfmz9iBq01IqvoMY/wrAkC2XgqxGeUoeKQfCLIlAV6bZ0z+ecBR8Ap06OtUDlgy2UWPo767hxkcL6G3qMjx1JPmGfk6DOnk/4JocyNAld64uCrMZF/VTYMZEFBxPuYXkv/kse1Ha96KHfyUSR5gDXvFFI4BT82piPPQMzETRWSLdQKst9EpjRrVyEcCTmTqC41wE5Bjjy4QyRomDC4vwmpgXGIN3vZqbwHmrLAcglo8t4fBTuAvvFOV8PQggyrWGik46jXwBoCW4hdVwoKQ/B136k3oAjxD09LYyHfuEBiwNCv0lM/cXvMtPMBMiVgv4LLGBkA5tc6jCZGrARlMUMOPREwNqQNIofsYth04RflKwniB6HDSEg0yzGkCdCO2xvHY4OZqEsbXplcMwjTiTGTiN6eNMU+EsrD3+G9tnqoTi4LQzFTEsRrrnv0kA0+1vBGfTi7pl7ws3z2z8hCFip3PowKZ+atKD+fDw+oOQKQsI2y5FYm07octKasHbIGFZdXVAXhqpZx599mue7FI5oWp/arCZMiclGb/VTWA+1hNTrjBHRxfJxf9p8wTFPdqXHhsKA9/MpVyMR3PiosRDgJn5xKl9llV+WugHzvK7WMrxuj+8e1Y9qRlVW6bWH6Rj/GT4y+IC4EzSZReSA5R5k2i6OV7Pi9D2dUi4hO5QmLO5WqRAuuZQz9EyXvw/OeOhcC/Ik5DvcgGYhF1JcAFOfagqMhkIDJ68DpoF/BdiG5ygtq7RcppHYDoBt5BTeNRYbJuI6IeYtKCBO/jkq/rzkNUCVKuREPgeHHDTdKbSIMOKLEsBnBuqYG+2wOs4D0/YP9BCiPDAGez5dCF+llOIZQA3jOXCF8R+9jaIOlf96TJNjhtsYW0cLMf75o4qTUtKHnLzZxmI+4nEEoBUn5poVfddGi5+ISS+cyd4h0kmSrslGugV6BoXbSIcb48nVQ2UfEj8s3ZB6SxwXTTbrEYNykzh2nv+L4+j9Lg5GtO/GNMqLLzGZdGw==</Value></TokenEntry></Values></UseKey><Claims><Values xmlns:q1="hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust" soapenc:arrayType="q1:TokenEntry[17]"><TokenEntry><Name>SessionKey</Name><Value>VBna9DD7iK0jUcwT87LXXo9fzcw9PmAtdZ1RHJie7ERI9Z1J1G8c+H8zqAvPnVun8Y3nudKfZ3UNaIOD37O19N9vodQkA/914EpPAixXEIOCjYHcG7uQHZ80sbhE0//ZPZfqytDaZzzDnnesIwlwMJl1FbtGr5cIuAOv7tw2KfIZm+VVh3hz2HIS4hqkkBle43n/dI8B3lkG2+hxctBO5SgIPovYKMN3K7wOxG/peh0qNb7E9CAWE/ghFX56sAjUN/sbZvzpV2eL8pEm1E8IEdekIVGOGz9kLJYmLOwT1b+07rNMuhptElHjVsnVtPWqgHWNkAWztQw70GlzTpyPjA==</Value></TokenEntry><TokenEntry><Name>BindingType</Name><Value>gtNtXXi81J1KJR/vPciOsXb7d6/Jg9SD4r7wUI6wKPU=</Value></TokenEntry><TokenEntry><Name>Binding</Name><Value>DDdpVoOdK4JU97UbUF+xIOQzqW+DoLxu9YK7KIp9vqQhcJfamF9sSbvOIxCyUNsS9MdbNtEcy+HZIQcOnj/VdYyLJWhgO/WcrPWOBmojKn0=</Value></TokenEntry><TokenEntry><Name>ProductKey</Name><Value>1h8MiscdGTlLSYa2HFUgH97/d9nPRRFKCmXya8rXlnQ=</Value></TokenEntry><TokenEntry><Name>ProductKeyType</Name><Value>gtNtXXi81J1KJR/vPciOsXFuGQqteL6Y8E4EAOR2aVY=</Value></TokenEntry><TokenEntry><Name>ProductKeyActConfigId</Name><Value>kLW2mt3ngHPEOfajE+Ycohx06MDR9ZLXxh03jOqhK0/5fgAt9kIHITCgC1IGfPYoh4dKg+J6s0sbxwXJDNOP59ir7cCMI3qLQEyC3TLbg4o=</Value></TokenEntry><TokenEntry><Name>SppSvcVersion</Name><Value>fiswnqxTtEisvizIV2bbtQ==</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.licenseCategory</Name><Value>kWIX2Z7jWQEzK0gr1vTMOXdNaFe972JDbo9hUn5EA98=</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.licenseCategory</Name><Value>kWIX2Z7jWQEzK0gr1vTMOVjGcBw5X+pkpQCf+c2vlYw=</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.sysprepAction</Name><Value>gE/rwNRuef/NigYV1CtA/w==</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.sysprepAction</Name><Value>gE/rwNRuef/NigYV1CtA/w==</Value></TokenEntry><TokenEntry><Name>ClientInformation</Name><Value>P3ljkAQ+QlDk5IA+twivYeMREnNY8iylBaWtmJOfYP5zogSF2OVWB/Pjl2qVpvbZ7aiT4Ouq7lRlnh724Fsa8w==</Value></TokenEntry><TokenEntry><Name>ReferralInformation</Name><Value>6vCfEPPU25Rsp6a6YZDdhFvbcPTva4GJqTkKw8q8tEZiJp4DNVTohWK8m/TTZW7vwBnSKEx4PgiTkZ4sxY4amQ==</Value></TokenEntry><TokenEntry><Name>ClientSystemTime</Name><Value>/68F6+24X3cw2w4Jed7xv+y+Y7dFoYmqLE0s2m8wvcg=</Value></TokenEntry><TokenEntry><Name>ClientSystemTimeUtc</Name><Value>/68F6+24X3cw2w4Jed7xv+y+Y7dFoYmqLE0s2m8wvcg=</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.secureStoreId</Name><Value>WxR+VouLrify0OfCt69y1tcAYTQ9+knwhd2/16HTRrbbtmn+0HUAx0unKBknDESq</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.secureStoreId</Name><Value>WxR+VouLrify0OfCt69y1tcAYTQ9+knwhd2/16HTRrbbtmn+0HUAx0unKBknDESq</Value></TokenEntry></Values></Claims></RequestSecurityToken></soap:Body></soap:Envelope>)
00010002(0x80072EE7, 12:14:29:616 - <NULL>)
00010003(0x80072EE7, 12:14:29:616)

Error: (06/20/2014 11:46:08 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: hr=0x80072EE7RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=b080aea2-e6c5-4b22-838e-fa4a21c931e3;NotificationInterval=1440;Trigger=UserLogon;SessionId=1

Error: (06/20/2014 11:46:08 AM) (Source: Software Protection Platform Service) (EventID: 1014) (User: )
Description: hr=0x80072EE7b080aea2-e6c5-4b22-838e-fa4a21c931e3

Error: (06/20/2014 11:46:08 AM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )
Description: hr=0x80072EE700010001(0x00000000, 11:46:08:086 - https://activation-v2.sls.microsoft.com/SLActivateProduct/SLActivateProduct.asmx?configextension=Retail)
00020001(0x00000000, 11:46:08:211)
00030001(0x00000000, 11:46:08:227 - https://activation-v2.sls.microsoft.com)
00030002(0x00000000, 11:46:08:227 - 0)
00040001(0x00000000, 11:46:08:227 - https://activation-v2.sls.microsoft.com)
00040002(0x00000000, 11:46:08:242 - 1, <NULL>, <NULL>, <NULL>)
00050002(0x80072F94, 11:46:08:242 - 0, 1)
00040006(0x00000001, 11:46:08:242 - 0, https://activation-v2.sls.microsoft.com, <N/A>, <N/A>)
00020005(0x00000000, 11:46:08:242 - 0)
00020008(0x80072EE7, 11:46:08:274 - SOAPAction: "hxxp://microsoft.com/SL/ProductActivationService/IssueToken"
Content-Type: text/xml; charset=utf-8
, <soap:Envelope xmlns:soap="hxxp://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="hxxp://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="hxxp://www.w3.org/2001/XMLSchema" xmlns:soapenc="hxxp://schemas.xmlsoap.org/soap/encoding/"><soap:Body><RequestSecurityToken xmlns="hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust"><TokenType>ProductActivation</TokenType><RequestType>hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust/Issue</RequestType><UseKey><Values xmlns:q1="hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust" soapenc:arrayType="q1:TokenEntry[1]"><TokenEntry><Name>PublishLicense</Name><Value>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</Value></TokenEntry></Values></UseKey><Claims><Values xmlns:q1="hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust" soapenc:arrayType="q1:TokenEntry[17]"><TokenEntry><Name>SessionKey</Name><Value>fVp3+D3LHXAD8KJo2fZdfwW3VI8+9jGgzGsOjWU8bPEUBZd1qh25l3HZQ+Aa/4cQne5Vb30JVgIWw+UvfAI45tzJN2HnuW8HFNUzV/OwG0Lv9mke7sx8ZoYyjeg1H2fyYWcfK5xrdhgRVXJOSTg/U5W4sjM+mKJt9us9uWsWYnWHkJRYYoVjRpUxdVxGHEz1clnsEjjLn0pUKcIIsfOxxb7x7WLYHUwdxIdMNjwj27vLVKxRJbaSEDOU3gabFa2np438flhRDO3VBTXpUGpYLyOlZSGJzs1KPI3M2R4RSLLSAw1xdKshKBBX19vyiKx0pJWAa1v9vQxIveb0jUbg4g==</Value></TokenEntry><TokenEntry><Name>BindingType</Name><Value>DOMXIlwhGwokfte+V0oPK/7mQA14gTbl5SMmh0axvmU=</Value></TokenEntry><TokenEntry><Name>Binding</Name><Value>Xwb8k2K9GR6kJf1cmvhRuT2zYUVPL3are2lF3CKuDl5lVp80FETGjZ5m4yJ6m7EKgLIeHZTtpOctcra295VEbn/MyaiwZWj20cC0PqxliDg=</Value></TokenEntry><TokenEntry><Name>ProductKey</Name><Value>3qist6kjhzTsyWPXGhu88XL6LoyQ/xTDmnrpzl0PH+Y=</Value></TokenEntry><TokenEntry><Name>ProductKeyType</Name><Value>DOMXIlwhGwokfte+V0oPK/uRLkPLgnLC7MoQ9ePUPq0=</Value></TokenEntry><TokenEntry><Name>ProductKeyActConfigId</Name><Value>u/akMPiwAGJxJGCMBNRPG2rYk5zJ2q5K4YaO/J8Xf7Txr35duR0aXCMJYwkQCwvzDrisj2uIZ/r6oG+iiNGaVcR16zq9JXEeoIXXBHy203Y=</Value></TokenEntry><TokenEntry><Name>SppSvcVersion</Name><Value>brZcpBV1J0F8nUDzJx7qhw==</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.licenseCategory</Name><Value>8yxhuIi0Flt2z8bzgXdUq2iUAB+0uVVUpJVzomGN60k=</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.licenseCategory</Name><Value>8yxhuIi0Flt2z8bzgXdUq9xAwrDXuFGBs1StmnpZfDM=</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.sysprepAction</Name><Value>Aq3mfZv9AqSywK1rM+EMgQ==</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.sysprepAction</Name><Value>Aq3mfZv9AqSywK1rM+EMgQ==</Value></TokenEntry><TokenEntry><Name>ClientInformation</Name><Value>FvJLhQnC2OfhzTl1mvqgU/vkrqQ1CdIz7WndUW3JiitCNsE8t7iAODKAoTK2uxh+e8RCl0ZcvSSdrU9620HO/Q==</Value></TokenEntry><TokenEntry><Name>ReferralInformation</Name><Value>Prbv6fucA8wPi/O4muOvH70xlSdXmxSnmfrDlAeC6cR58GSZBO87G6owFxbYGMOqIxnQbKR2LVTlTbEENE8UqA==</Value></TokenEntry><TokenEntry><Name>ClientSystemTime</Name><Value>p4wGO8FuWj5LkwburYXTg5nzZUI7quLz1yMdiJIOWQU=</Value></TokenEntry><TokenEntry><Name>ClientSystemTimeUtc</Name><Value>p4wGO8FuWj5LkwburYXTg5nzZUI7quLz1yMdiJIOWQU=</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.secureStoreId</Name><Value>xE4wZiw+kbfxrUpkOLX783MSkkFP6qm+xdy7EZlCKwSlRIyLl3zH+YnB2jAlKai9</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.secureStoreId</Name><Value>xE4wZiw+kbfxrUpkOLX783MSkkFP6qm+xdy7EZlCKwSlRIyLl3zH+YnB2jAlKai9</Value></TokenEntry></Values></Claims></RequestSecurityToken></soap:Body></soap:Envelope>)
00010002(0x80072EE7, 11:46:08:289 - <NULL>)
00010003(0x80072EE7, 11:46:08:289)

Error: (06/20/2014 11:17:39 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: hr=0x80072EE7RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=b080aea2-e6c5-4b22-838e-fa4a21c931e3;NotificationInterval=1440;Trigger=UserLogon;SessionId=1

Error: (06/20/2014 11:17:38 AM) (Source: Software Protection Platform Service) (EventID: 1014) (User: )
Description: hr=0x80072EE7b080aea2-e6c5-4b22-838e-fa4a21c931e3

Error: (06/20/2014 11:17:38 AM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )
Description: hr=0x80072EE700010001(0x00000000, 11:17:38:128 - https://activation-v2.sls.microsoft.com/SLActivateProduct/SLActivateProduct.asmx?configextension=Retail)
00020001(0x00000000, 11:17:38:128)
00030001(0x00000000, 11:17:38:128 - https://activation-v2.sls.microsoft.com)
00030002(0x00000000, 11:17:38:128 - 0)
00040001(0x00000000, 11:17:38:128 - https://activation-v2.sls.microsoft.com)
00040002(0x00000000, 11:17:38:159 - 1, <NULL>, <NULL>, <NULL>)
00050002(0x80072F94, 11:17:38:159 - 0, 1)
00040006(0x00000001, 11:17:38:159 - 0, https://activation-v2.sls.microsoft.com, <N/A>, <N/A>)
00020005(0x00000000, 11:17:38:159 - 0)
00020008(0x80072EE7, 11:17:38:253 - SOAPAction: "hxxp://microsoft.com/SL/ProductActivationService/IssueToken"
Content-Type: text/xml; charset=utf-8
, <soap:Envelope xmlns:soap="hxxp://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="hxxp://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="hxxp://www.w3.org/2001/XMLSchema" xmlns:soapenc="hxxp://schemas.xmlsoap.org/soap/encoding/"><soap:Body><RequestSecurityToken xmlns="hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust"><TokenType>ProductActivation</TokenType><RequestType>hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust/Issue</RequestType><UseKey><Values xmlns:q1="hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust" soapenc:arrayType="q1:TokenEntry[1]"><TokenEntry><Name>PublishLicense</Name><Value>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</Value></TokenEntry></Values></UseKey><Claims><Values xmlns:q1="hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust" soapenc:arrayType="q1:TokenEntry[17]"><TokenEntry><Name>SessionKey</Name><Value>cGOil2bTfdKAj3Q4plzObDZMViiTCN+7IteXWFMiPPq3C3KXjNvVsAOf+tkk8UogpoVf2XN1Ichstn+p8hpYmbCX8jPQEC+KbED3lSOmUJCU+luf5tuaPau/aozHVHTT+9IWDWI0xbPKJAHPgeXLWRIcwRtqj7MeQs/FTtLiC1EhQOzDY2L6v0SE1vOU/foU0IeuF4yQSy8O7fjBIeKWeEWIIeFx74knODUsiD/VYVV/iuOjS6FZNlNiphtOix97pVHekPy2116XooX6wQAe0EVeaOUFCllcLqZfT6gkpAgjxG3yoctVfmEIxrEJTjtmx1tRYmwWzH7TGRQm3tMsWw==</Value></TokenEntry><TokenEntry><Name>BindingType</Name><Value>2zpfbeAP4BVRfxQGcaZZw//6jpypHr01hzdqHGrw6H0=</Value></TokenEntry><TokenEntry><Name>Binding</Name><Value>Un0H5U8/lxJDchJPnNJ5CmTZTIundibPTHGgpw1sLNiTIDdmuDH7US3A5bHHibt8yzYyIJSnp41OeAg3/fbsZ4WUdlqKWV03vXM9zkcB8Vw=</Value></TokenEntry><TokenEntry><Name>ProductKey</Name><Value>bq78kZCuel/fnJjRQu39INUV3dtUoCN7tMr39DCrMUI=</Value></TokenEntry><TokenEntry><Name>ProductKeyType</Name><Value>2zpfbeAP4BVRfxQGcaZZw+/jaLqCIbccFUs4929yIho=</Value></TokenEntry><TokenEntry><Name>ProductKeyActConfigId</Name><Value>0whL0SsWLWxEFr3xA3TGMKECtNfnRC8sXINbdhgCTQT+nFcfGeskNc89WZyYyzmKcprdOj1ieo1Cv/Q0ZmF2UUeRoGrXOxG9iFWKqNKfZ04=</Value></TokenEntry><TokenEntry><Name>SppSvcVersion</Name><Value>CSH/1Ede1eqzpr7NA/B7WQ==</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.licenseCategory</Name><Value>Ss6yhjz8tP+Jup18LJEqPo/bsPjJcxsKr9zG1HVa6Ek=</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.licenseCategory</Name><Value>Ss6yhjz8tP+Jup18LJEqPukv/5/iED0IB6rNoItNJTo=</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.sysprepAction</Name><Value>ZT4n9oHALIALKiDmP4Vdtg==</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.sysprepAction</Name><Value>ZT4n9oHALIALKiDmP4Vdtg==</Value></TokenEntry><TokenEntry><Name>ClientInformation</Name><Value>5QiFq9D821ntDVJK9UWR/0ctoiVNZDAfUerayMnoMKI14Q/0SrtCOXMyGvFfKZYpc3GR/6fjB6jDy12xJuXSkQ==</Value></TokenEntry><TokenEntry><Name>ReferralInformation</Name><Value>2qsg5jp1wuXASyPLk7tSbc+cmpJlUelYX9gGrs8wPEcDX7Rr+JX9fQl2Jb09iFtB8tKD2xVps6XyTA2JqZS2yg==</Value></TokenEntry><TokenEntry><Name>ClientSystemTime</Name><Value>DaMdKWTtkiR/enotcqNG5xywQP2/CAQofx5ExHmyaeI=</Value></TokenEntry><TokenEntry><Name>ClientSystemTimeUtc</Name><Value>DaMdKWTtkiR/enotcqNG5xywQP2/CAQofx5ExHmyaeI=</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.secureStoreId</Name><Value>546yKhGAtPArZ/u6jpxkpSwM1jlvMB76mnHYxYZ/G5p+rKG8lnei0XsMQPCxiJiJ</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.secureStoreId</Name><Value>546yKhGAtPArZ/u6jpxkpSwM1jlvMB76mnHYxYZ/G5p+rKG8lnei0XsMQPCxiJiJ</Value></TokenEntry></Values></Claims></RequestSecurityToken></soap:Body></soap:Envelope>)
00010002(0x80072EE7, 11:17:38:284 - <NULL>)
00010003(0x80072EE7, 11:17:38:284)


==================== Memory info =========================== 

Percentage of memory in use: 45%
Total physical RAM: 3550.11 MB
Available physical RAM: 1934.75 MB
Total Pagefile: 4894.11 MB
Available Pagefile: 2736.32 MB
Total Virtual: 131072 MB
Available Virtual: 131071.8 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:98.6 GB) (Free:71.76 GB) NTFS
Drive d: () (Fixed) (Total:7.78 GB) (Free:6.55 GB) FAT32
Drive e: () (Fixed) (Total:351.56 GB) (Free:351.43 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: A11CAC6D)
Partition 1: (Not Active) - (Size=8 GB) - (Type=0B)
Partition 2: (Active) - (Size=8 GB) - (Type=0C)
Partition 3: (Not Active) - (Size=99 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=352 GB) - (Type=07 NTFS)

==================== End Of Log ============================

--- --- ---

deeprybka · 28.06.2014, 00:20

Hi,

Schritt 1

Malwarebytes Antimalware

Download-Link
Installiere das Programm in den vorgegebenen Pfad.
Starte Malwarebytes' Anti-Malware (MBAM).
Sollte die Benutzeroberfläche noch in Englisch sein, klicke auf Settings und wähle bei Language Deutsch aus.
Unter Erkennung und Schutz setze bitte einen Haken bei "Suche nach Rootkits".
Klicke im Anschluss auf "Suchlauf", wähle den Bedrohungssuchlauf aus, aktualisiere die Datenbanken und klicke auf "Suchlauf jetzt starten".
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. (geht so...)
Poste mir den Inhalt der Logdatei (geht so...). Klicke dazu auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Suchlauf-Protokoll aus und klicke auf Ansicht. Klicke auf "In Zwischenablage kopieren" poste mir den Inhalt in Code-Tags als Antwort in den Thread.

Schritt 2

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Muster123 · 28.06.2014, 10:33

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 28.06.2014
Suchlauf-Zeit: 01:34:38
Logdatei: 
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.06.27.09
Rootkit Datenbank: v2014.06.23.02
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 8.1
CPU: x64
Dateisystem: NTFS
Benutzer: SergejSh

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 263599
Verstrichene Zeit: 23 Min, 34 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 0
(No malicious items detected)

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 0
(No malicious items detected)

Physische Sektoren: 0
(No malicious items detected)


(end)

Habe gerade Avira-Antivirus Echtzeitscanner auf aus gestellt. Reicht das?

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7587
# api_version=3.0.2
# EOSSerial=aa12ea6ca037a146bf2eb578473619ee
# engine=18923
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-06-28 01:12:34
# local_time=2014-06-28 03:12:34 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1='Avira Desktop'
# compatibility_mode=1810 16777213 100 100 11635 2714389 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 398498 28799247 0 0
# scanned=124527
# found=1
# cleaned=1
# scan_time=2261
sh=08A0C25B0BF40535697C1C584ACCDA490D6BC882 ft=1 fh=dbe7f66a50ce49ed vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\SergejSh\AppData\Local\Temp\OCS\ocs_v71b.exe"

Führe es noch einmal richtig durch

Hat beim 2. Mal keine log-Datei erstellt. Hier die 6 Funde

C:\$Recycle.Bin\S-1-5-21-1673834559-152451206-4130808851-1001\$R5A592R.z VBS/Agent.NGA Wurm
C:\$Recycle.Bin\S-1-5-21-1673834559-152451206-4130808851-1001\$RBS82R8.z VBS/Agent.NGA Wurm
C:\$Recycle.Bin\S-1-5-21-1673834559-152451206-4130808851-1001\$RME43T4.z VBS/Agent.NGA Wurm
C:\$Recycle.Bin\S-1-5-21-1673834559-152451206-4130808851-1001\$RVX2X7R.z VBS/Agent.NGA Wurm
C:\Program Files (x86)\Avira\AntiVir Desktop\offercast_avirav7_.exe Variante von Win32/Bundled.Toolbar.Ask.D potenziell unsichere Anwendung
C:\Users\SergejSh\AppData\Local\Temp\OCS\ocs_v71b.exe Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung

Bei den 4 Dateien im Papierkorb handelt es sich um die "Links", die auf dem Desktop erstellt worden sind, nachdem ich auf den Link geklickt habe.

Habe den Papierkorb geleert.

Kann zurzeit auf der Seite von Yahoo nichts anklicken, komme ergo nicht in meinen Mail-Postfach. Bin auf meinem PC noch darin eingeloggt. Auf meinem Handy funktioniert der Account jedoch einwandfrei.

deeprybka · 28.06.2014, 12:19

Hi,

Zitat:

Kann zurzeit auf der Seite von Yahoo nichts anklicken, komme ergo nicht in meinen Mail-Postfach. Bin auf meinem PC noch darin eingeloggt.

Bitte genauer definieren. Nur bei Yahoo? Nur beim Chrome? Bei allen Browsern?

Muster123 · 28.06.2014, 13:14

In den Browsern Chrome und Explorer. Nur bei yahoo. Es lädt unendlich lange. Sieht aus als befinde es sich in der Endlosschleife. Die Seite ist vollständig sichtbar, aber nichts anklickbar.

War mein Vorgehen bisher in Ordnung? Was hat es mit den Funden auf sich? Kann es sein, dass das neuartige Malware ist, die sich nicht identifizieren lässt?

deeprybka · 28.06.2014, 13:34

Bitte mal das durchführen:

https://support.google.com/chrome/answer/95582

Wie kann ich den Cache im Internet Explorer leeren?

Veränderungen?

Muster123 · 28.06.2014, 13:48

Keine Veränderung.

Auf der yahoo-Seite funktioniert einfach gar nichts. Sogar der Befehl Strg+F löst keine Reaktion oben rechts aus. Alle anderen Seiten funktionieren einwandfrei.

deeprybka · 28.06.2014, 13:51

Und auf einem anderen PC geht yahoo?

Muster123 · 28.06.2014, 13:57

Habe leider keinen anderen. Auf meinem Handy funktioniert die mobile Version. Funktioniert die Seite denn bei dir? Habe das Gefühl, dass das ein blöder Zufall ist, dass Yahoo gleichzeitig nicht geht und diese komische Datei vor ein paar Tagen runtergeladen worden ist.

Vielen Dank im Übrigen für deine schnellen Antworten jedes Mal

26.06.2014, 15:57	#5
deeprybka /// TB-Ausbilder /// Anleitungs-Guru	Facebook-Malware, brwlrg113.z Wenn die Logs zu lang sind bitte auf mehrere Posts aufteilen... __________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer

28.06.2014, 13:51	#14
deeprybka /// TB-Ausbilder /// Anleitungs-Guru	Facebook-Malware, brwlrg113.z Und auf einem anderen PC geht yahoo? __________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer

Facebook-Malware, brwlrg113.z

Plagegeister aller Art und deren Bekämpfung: Facebook-Malware, brwlrg113.z