Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung
Starker Schädlingsbefall und stark verminderte Leistung.

Starker Schädlingsbefall und stark verminderte Leistung.


Log-Analyse und Auswertung: Starker Schädlingsbefall und stark verminderte Leistung.

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

Antwort
Seite 2 von 2 1 2
Alt 27.08.2013, 23:26   #16
aharonov
/// TB-Ausbilder
 
Starker Schädlingsbefall und stark verminderte Leistung. - Standard

Starker Schädlingsbefall und stark verminderte Leistung.


Ok.


Downloade dir bitte Farbar Service Scanner Farbar Service Scanner
  • Starte das Tool mit Doppelklick auf die FSS.exe
  • Gehe sicher, dass folgende Optionen angehakt sind.
    • Internet Services
    • Windows Firewall
    • System Restore
    • Security Center/Action Center
    • Windows Update
    • Windows Defender
    • Other Services
  • Klicke auf Scan.
  • Wenn das Tool fertig ist, wird es eine FSS.txt in dem Verzeichnis erstellen, wo das Tool gelaufen ist.

Poste bitte den Inhalt hier.


__________________
cheers,
Leo

Alt 27.08.2013, 23:34   #17
Allround
 
Starker Schädlingsbefall und stark verminderte Leistung. - Standard

Starker Schädlingsbefall und stark verminderte Leistung.


1. FSS

Code:
ATTFilter
Farbar Service Scanner Version: 18-08-2013
Ran by Strolchi (administrator) on 28-08-2013 at 00:32:50
Running from "C:\Users\Strolchi\Desktop"
Microsoft Windows 7 Home Premium  Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============
MpsSvc Service is not running. Checking service configuration:
The start type of MpsSvc service is OK.
The ImagePath of MpsSvc service is OK.
The ServiceDll of MpsSvc service is OK.


Firewall Disabled Policy: 
==================
"HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\\EnableFirewall" registry value does not exist.


System Restore:
============

System Restore Disabled Policy: 
========================


Action Center:
============

Action Center Notification Icon =====> Unable to open HKLM\...\ShellServiceObjects\{F56F6FDD-AA9D-4618-A949-C1B91AF43B1A} key. The key does not exist.


Windows Update:
============

Windows Autoupdate Disabled Policy: 
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Windows Defender Disabled Policy: 
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


Other Services:
==============
Checking FirewallRules of SharedAccess: ATTENTION!=====> Unable to open "SharedAccess\Defaults\FirewallPolicy\FirewallRules" registry key. The key does not exist.
Checking FirewallRules of SharedAccess: ATTENTION!=====> Unable to open "SharedAccess\Parameters\FirewallPolicy\FirewallRules" registry key. The key does not exist.
Checking Start type of iphlpsvc: ATTENTION!=====> Unable to retrieve start type of iphlpsvc. The value does not exist.
Checking ImagePath of iphlpsvc: ATTENTION!=====> Unable to retrieve ImagePath of iphlpsvc. The value does not exist.
Checking ServiceDll of iphlpsvc: ATTENTION!=====> Unable to retrieve ServiceDll of iphlpsvc. The value does not exist.


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\ipnathlp.dll => MD5 is legit
C:\Windows\System32\iphlpsvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****
__________________
Alt 27.08.2013, 23:40   #18
aharonov
/// TB-Ausbilder
 
Starker Schädlingsbefall und stark verminderte Leistung. - Standard

Starker Schädlingsbefall und stark verminderte Leistung.


Ja das ist noch was verbogen..


Schritt 1

Downloade dir bitte Windows Repair (all in one) und entpacke das Archiv auf den Desktop.
  • Starte nun die darin enthaltene Repair_Windows.exe.
  • Im Reiter Step 4 (optional) drücke unter System Restore auf Create.
  • Danach drücke im Reiter Start Repairs auf Start.
  • Klicke auf Select All, setze den Haken bei Restart/Shutdown System When Finished und wähle die Option Restart System.
  • Deaktiviere temporär dein Antivirenprogramm und drücke auf Start.



Schritt 2

Downloade dir bitte Farbar Service Scanner Farbar Service Scanner
  • Starte das Tool mit Doppelklick auf die FSS.exe
  • Gehe sicher, dass folgende Optionen angehakt sind.
    • Internet Services
    • Windows Firewall
    • System Restore
    • Security Center/Action Center
    • Windows Update
    • Windows Defender
    • Other Services
  • Klicke auf Scan.
  • Wenn das Tool fertig ist, wird es eine FSS.txt in dem Verzeichnis erstellen, wo das Tool gelaufen ist.

Poste bitte den Inhalt hier.





Schritt 3

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)




Bitte poste in deiner nächsten Antwort:
  • Log von FSS
  • Logs von FRST
__________________
__________________
Alt 28.08.2013, 00:43   #19
Allround
 
Starker Schädlingsbefall und stark verminderte Leistung. - Standard

Starker Schädlingsbefall und stark verminderte Leistung.


1.FSS

Code:
ATTFilter
Farbar Service Scanner Version: 18-08-2013
Ran by Strolchi (administrator) on 28-08-2013 at 01:29:48
Running from "C:\Users\Strolchi\Desktop"
Microsoft Windows 7 Home Premium  Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy: 
==================


System Restore:
============

System Restore Disabled Policy: 
========================


Action Center:
============

Action Center Notification Icon =====> Unable to open HKLM\...\ShellServiceObjects\{F56F6FDD-AA9D-4618-A949-C1B91AF43B1A} key. The key does not exist.


Windows Update:
============

Windows Autoupdate Disabled Policy: 
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Windows Defender Disabled Policy: 
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\ipnathlp.dll => MD5 is legit
C:\Windows\System32\iphlpsvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****
2.FRST


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-08-2013
Ran by Strolchi (administrator) on 28-08-2013 01:36:51
Running from C:\Users\Strolchi\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(AMD) C:\Windows\system32\atieclxx.exe
(ASUSTeK Computer Inc.) C:\Windows\system32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(ASUS) C:\Windows\AsScrPro.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(TuneUp Software) D:\Programme\TuneUp2013\TuneUpUtilitiesService64.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\ToolbarUpdater.exe
() C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\loggingserver.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(ASUS) C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(TuneUp Software) D:\Programme\TuneUp2013\TuneUpUtilitiesApp64.exe
() C:\Program Files (x86)\AVG Secure Search\vprot.exe
(Microsoft Corporation) C:\Windows\eHome\EhTray.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\ehome\ehsched.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5732992 2010-08-18] (ASUS)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Wireless Console 3] - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2255360 2011-06-10] (ASUS)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345144 2013-08-08] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [vProt] - C:\Program Files (x86)\AVG Secure Search\vprot.exe [2314416 2013-08-27] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FancyStart daemon.lnk
ShortcutTarget: FancyStart daemon.lnk -> C:\Windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_94E3CE3704FE82FBF49A6A.exe ()

==================== Internet (Whitelisted) ====================

SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP06&src=IE-SearchBox
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: No Name - {95B7759C-8C7F-4BF1-B163-73684A933233} -  No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - No Name - {95B7759C-8C7F-4BF1-B163-73684A933233} -  No File
Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\15.5.0\ViProtocol.dll (AVG Secure Search)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Strolchi\AppData\Roaming\Mozilla\Firefox\Profiles\lujpcl5t.default
FF Homepage: www.Jappy.de
FF Keyword.URL: user_pref("keyword.URL", "");
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\15.5.0\\npsitesafety.dll (AVG Technologies)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - D:\Programme\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: ZEON/PDF,version=2.0 - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Strolchi\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Users\Strolchi\AppData\Roaming\Mozilla\Firefox\Profiles\lujpcl5t.default\searchplugins\avg-secure-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\avg-secure-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wikipedia-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Users\Strolchi\AppData\Roaming\Mozilla\Firefox\Profiles\lujpcl5t.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM-x32\...\Firefox\Extensions: [avg@toolbar] C:\ProgramData\AVG Secure Search\FireFoxExt\15.5.0.2
FF Extension: AVG Security Toolbar - C:\ProgramData\AVG Secure Search\FireFoxExt\15.5.0.2

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2011-07-14] (Advanced Micro Devices, Inc.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-08-08] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-08-08] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [589368 2013-08-08] (Avira Operations GmbH & Co. KG)
R2 TuneUp.UtilitiesSvc; D:\Programme\TuneUp2013\TuneUpUtilitiesService64.exe [2402080 2013-01-28] (TuneUp Software)
R2 vToolbarUpdater15.5.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\ToolbarUpdater.exe [1643184 2013-08-27] (AVG Secure Search)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-08-08] (Avira Operations GmbH & Co. KG)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [45856 2013-08-27] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-08-08] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-08-08] (Avira Operations GmbH & Co. KG)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R3 TuneUpUtilitiesDrv; D:\Programme\TuneUp2013\TuneUpUtilitiesDriver64.sys [11880 2012-09-19] (TuneUp Software)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-28 01:19 - 2013-08-28 01:19 - 00000214 _____ C:\Windows\Tasks\SidebarExecute.job
2013-08-28 00:49 - 2013-08-28 01:22 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE
2013-08-28 00:43 - 2013-08-28 00:43 - 00000000 ____D C:\Users\Strolchi\Desktop\tweaking.com_windows_repair_aio
2013-08-28 00:42 - 2013-08-28 00:42 - 03268369 _____ C:\Users\Strolchi\Desktop\tweaking.com_windows_repair_aio.zip
2013-08-28 00:32 - 2013-08-28 01:29 - 00002641 _____ C:\Users\Strolchi\Desktop\FSS.txt
2013-08-28 00:31 - 2013-08-28 00:31 - 00358507 _____ (Farbar) C:\Users\Strolchi\Desktop\FSS.exe
2013-08-27 23:37 - 2013-08-27 23:37 - 01010176 _____ C:\Users\Strolchi\Desktop\MicrosoftFixit50884.msi
2013-08-26 10:53 - 2013-08-26 10:53 - 00058520 _____ C:\Users\Strolchi\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-26 10:46 - 2013-08-26 10:46 - 00000000 ____D C:\FRST
2013-08-25 23:37 - 2013-08-28 01:24 - 00276600 _____ C:\Windows\system32\FNTCACHE.DAT
2013-08-25 23:37 - 2013-08-28 01:24 - 00000280 _____ C:\Windows\setupact.log
2013-08-25 23:37 - 2013-08-28 01:23 - 00002468 _____ C:\Windows\PFRO.log
2013-08-25 23:37 - 2013-08-25 23:37 - 00000000 _____ C:\Windows\setuperr.log
2013-08-25 22:27 - 2013-08-25 22:27 - 00000639 _____ C:\Users\Strolchi\Desktop\Bilder - Verknüpfung.lnk
2013-08-25 22:27 - 2013-08-25 22:27 - 00000630 _____ C:\Users\Strolchi\Desktop\Musik - Verknüpfung.lnk
2013-08-25 22:27 - 2013-08-25 22:27 - 00000630 _____ C:\Users\Strolchi\Desktop\Filme - Verknüpfung.lnk
2013-08-25 22:18 - 2013-08-25 22:18 - 00003408 ____N C:\bootsqm.dat
2013-08-25 21:57 - 2013-01-28 15:19 - 00037664 _____ (TuneUp Software) C:\Windows\system32\uxtuneup.dll
2013-08-25 21:57 - 2013-01-28 15:19 - 00029984 _____ (TuneUp Software) C:\Windows\SysWOW64\uxtuneup.dll
2013-08-25 21:52 - 2013-08-25 21:52 - 00000957 _____ C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk
2013-08-25 21:52 - 2013-08-25 21:52 - 00000933 _____ C:\Users\Public\Desktop\TuneUp Utilities 2013.lnk
2013-08-25 21:52 - 2013-01-28 15:19 - 00035104 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe
2013-08-25 21:52 - 2013-01-28 15:19 - 00026400 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll
2013-08-25 21:52 - 2013-01-28 15:19 - 00021792 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll
2013-08-25 21:51 - 2013-08-27 23:37 - 00003717 _____ C:\Program Files (x86)\Mozilla Firefoxavg-secure-search.xml
2013-08-25 21:51 - 2013-08-27 23:36 - 00045856 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys
2013-08-25 21:51 - 2013-08-27 23:36 - 00000000 ____D C:\Program Files (x86)\AVG Secure Search
2013-08-25 21:51 - 2013-08-25 21:51 - 00000000 ____D C:\Users\Strolchi\AppData\Local\AVG Secure Search
2013-08-25 21:51 - 2013-08-25 21:51 - 00000000 ____D C:\ProgramData\AVG Secure Search
2013-08-25 21:47 - 2013-08-25 23:28 - 00000000 __SHD C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
2013-08-25 09:28 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-08-25 09:28 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-08-25 09:23 - 2013-08-25 09:23 - 00002302 _____ C:\DelFix.txt
2013-08-25 09:23 - 2013-08-25 09:23 - 00000000 ____D C:\Windows\ERUNT
2013-08-25 09:10 - 2013-08-25 09:10 - 00000614 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-08-25 09:01 - 2013-08-25 09:02 - 00000000 ____D C:\Users\Strolchi\AppData\Local\Adobe
2013-08-25 08:57 - 2013-08-25 08:56 - 00867240 _____ (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2013-08-25 08:57 - 2013-08-25 08:56 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-08-25 08:57 - 2013-08-25 08:56 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-08-25 08:57 - 2013-08-25 08:56 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-08-25 08:57 - 2013-08-25 08:56 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-08-25 08:56 - 2013-08-25 08:56 - 00000000 ____D C:\Program Files (x86)\Java
2013-08-25 02:21 - 2012-07-26 06:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-08-25 02:21 - 2012-07-26 06:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2013-08-25 02:21 - 2012-07-26 04:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2013-08-25 02:21 - 2012-06-02 16:35 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2013-08-25 02:02 - 2013-08-25 02:02 - 19221504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 15407616 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 14317568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-25 02:02 - 2013-08-25 02:02 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-25 02:02 - 2013-08-25 02:02 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 02240512 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 02046464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 01766912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-08-25 02:02 - 2013-08-25 02:02 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-08-25 02:02 - 2013-08-25 02:02 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-08-25 02:02 - 2013-08-25 02:02 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-08-25 02:02 - 2013-08-25 02:02 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 01129984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-08-25 02:02 - 2013-08-25 02:02 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00526848 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-08-25 02:02 - 2013-08-25 02:02 - 00391680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-08-25 02:02 - 2013-08-25 02:02 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-08-25 02:02 - 2013-08-25 02:02 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-08-25 02:02 - 2013-08-25 02:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-08-25 02:02 - 2013-08-25 02:02 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-08-25 02:02 - 2013-08-25 02:02 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-08-25 02:02 - 2013-08-25 02:02 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-08-25 02:02 - 2013-08-25 02:02 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-08-25 02:02 - 2013-08-25 02:02 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-25 02:02 - 2013-08-25 02:02 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-08-25 02:02 - 2013-08-25 02:02 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-08-25 02:02 - 2013-08-25 02:02 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-08-25 02:02 - 2013-08-25 02:02 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-08-25 02:02 - 2013-08-25 02:02 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-25 02:02 - 2013-08-25 02:02 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-08-25 02:02 - 2013-08-25 02:02 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-08-25 02:02 - 2013-08-25 02:02 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-08-25 02:02 - 2013-08-25 02:02 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-08-25 01:56 - 2013-08-25 01:56 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00003584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00003584 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-08-25 01:36 - 2013-08-25 01:38 - 00000000 ____D C:\Windows\system32\MRT
2013-08-25 01:13 - 2012-12-16 19:11 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-08-25 01:13 - 2012-12-16 16:45 - 00367616 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-08-25 01:13 - 2012-12-16 16:13 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-08-25 01:13 - 2012-12-16 16:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-08-25 01:11 - 2012-07-26 05:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2013-08-25 01:11 - 2012-07-26 05:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2013-08-25 01:11 - 2012-07-26 05:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2013-08-25 01:11 - 2012-07-26 05:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2013-08-25 01:11 - 2012-07-26 05:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2013-08-25 01:11 - 2012-07-26 04:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2013-08-25 01:11 - 2012-07-26 04:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2013-08-25 01:11 - 2012-06-02 16:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2013-08-25 00:50 - 2013-08-25 00:50 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-08-25 00:50 - 2013-08-25 00:50 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-08-24 22:18 - 2013-04-10 08:01 - 00983400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-08-24 22:18 - 2013-04-10 08:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2013-08-24 22:18 - 2012-10-09 20:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2013-08-24 22:18 - 2012-10-09 20:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2013-08-24 22:18 - 2012-10-09 19:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2013-08-24 22:18 - 2012-10-09 19:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2013-08-24 22:18 - 2011-02-03 13:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2013-08-24 21:41 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-24 21:41 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-24 21:41 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-24 21:41 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-24 21:41 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-24 21:41 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-24 21:41 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-24 21:41 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-24 21:41 - 2013-02-15 08:08 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2013-08-24 21:41 - 2013-02-15 08:06 - 03717632 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2013-08-24 21:41 - 2013-02-15 08:02 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2013-08-24 21:41 - 2013-02-15 06:37 - 03217408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2013-08-24 21:41 - 2013-02-15 06:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2013-08-24 21:41 - 2013-02-15 05:25 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2013-08-24 21:40 - 2013-04-12 16:45 - 01656680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2013-08-24 21:40 - 2013-04-01 08:03 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_AuthenticAMD.dll
2013-08-24 21:40 - 2013-03-19 07:53 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2013-08-24 21:40 - 2013-03-19 07:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2013-08-24 21:40 - 2013-02-27 08:02 - 00111448 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2013-08-24 21:40 - 2013-02-27 07:52 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-08-24 21:40 - 2013-02-27 07:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-08-24 21:40 - 2013-02-27 07:48 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-08-24 21:40 - 2013-02-27 07:47 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2013-08-24 21:40 - 2013-02-27 06:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-08-24 21:40 - 2013-02-27 06:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-08-24 21:40 - 2013-02-27 06:49 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-08-24 21:39 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-24 21:39 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-24 21:39 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-24 21:39 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-24 21:39 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-24 21:39 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-24 21:39 - 2013-02-12 06:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2013-08-24 21:39 - 2012-11-01 07:43 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2013-08-24 21:39 - 2012-11-01 07:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2013-08-24 21:39 - 2012-11-01 06:47 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2013-08-24 21:39 - 2012-11-01 06:47 - 01236992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2013-08-24 21:39 - 2012-10-03 19:44 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2013-08-24 21:39 - 2012-10-03 19:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2013-08-24 21:39 - 2012-10-03 19:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2013-08-24 21:39 - 2012-10-03 19:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2013-08-24 21:39 - 2012-10-03 19:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2013-08-24 21:39 - 2012-10-03 19:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2013-08-24 21:39 - 2012-10-03 18:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2013-08-24 21:39 - 2012-10-03 18:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2013-08-24 21:39 - 2012-10-03 18:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2013-08-24 21:39 - 2012-10-03 18:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2013-08-24 21:39 - 2012-08-22 20:12 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2013-08-24 21:39 - 2012-07-04 22:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2013-08-24 21:39 - 2012-01-13 09:12 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2013-08-24 21:37 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-08-24 21:37 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-08-24 21:37 - 2013-01-04 07:46 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-08-24 21:37 - 2013-01-04 06:51 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-08-24 21:37 - 2013-01-04 04:47 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-08-24 21:37 - 2013-01-04 04:47 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-08-24 21:37 - 2013-01-04 04:47 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-08-24 21:37 - 2013-01-04 04:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-08-24 21:37 - 2012-11-20 07:48 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-08-24 21:37 - 2012-11-20 06:51 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-08-24 21:37 - 2012-11-02 07:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2013-08-24 21:37 - 2012-11-02 07:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2013-08-24 21:37 - 2012-08-21 23:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2013-08-24 21:36 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-24 21:36 - 2012-11-22 07:44 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2013-08-24 21:36 - 2012-11-22 06:45 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2013-08-24 21:35 - 2012-12-07 15:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2013-08-24 21:35 - 2012-12-07 15:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2013-08-24 21:35 - 2012-12-07 14:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2013-08-24 21:35 - 2012-12-07 14:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2013-08-24 21:35 - 2012-12-07 13:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2013-08-24 21:35 - 2012-12-07 13:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2013-08-24 21:35 - 2012-12-07 13:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2013-08-24 21:35 - 2012-12-07 13:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2013-08-24 21:35 - 2012-12-07 13:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2013-08-24 21:35 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2013-08-24 21:35 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2013-08-24 21:35 - 2012-12-07 13:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2013-08-24 21:35 - 2012-12-07 13:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2013-08-24 21:35 - 2012-12-07 13:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2013-08-24 21:35 - 2012-12-07 13:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2013-08-24 21:35 - 2012-12-07 13:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2013-08-24 21:35 - 2012-12-07 13:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2013-08-24 21:35 - 2012-12-07 13:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2013-08-24 21:35 - 2012-12-07 12:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2013-08-24 21:35 - 2012-12-07 12:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2013-08-24 21:35 - 2012-12-07 12:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2013-08-24 21:35 - 2012-12-07 12:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2013-08-24 21:35 - 2012-12-07 12:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2013-08-24 21:35 - 2012-12-07 12:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2013-08-24 21:35 - 2012-12-07 12:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2013-08-24 21:35 - 2012-12-07 12:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2013-08-24 21:35 - 2012-12-07 12:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2013-08-24 21:35 - 2012-12-07 12:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2013-08-24 21:35 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2013-08-24 21:35 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2013-08-24 21:35 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2013-08-24 21:35 - 2012-12-07 12:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2013-08-24 21:34 - 2012-11-30 07:45 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-08-24 21:34 - 2012-11-30 07:45 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-08-24 21:34 - 2012-11-30 07:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-08-24 21:34 - 2012-11-30 07:43 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-08-24 21:34 - 2012-11-30 07:41 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-08-24 21:34 - 2012-11-30 07:41 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-08-24 21:34 - 2012-11-30 07:38 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 07:38 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 07:38 - 00004608 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 07:38 - 00004608 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 07:38 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 07:38 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 07:38 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 07:38 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 07:38 - 00003584 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 07:38 - 00003584 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 07:38 - 00003584 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 07:38 - 00003584 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 07:38 - 00003584 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 07:38 - 00003584 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 07:38 - 00003584 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 07:38 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 07:38 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 07:38 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 07:38 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 07:38 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 07:38 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 07:38 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 07:38 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 07:38 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 07:38 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 07:38 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 07:38 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 07:38 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 06:53 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-08-24 21:34 - 2012-11-30 06:53 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-08-24 21:34 - 2012-11-30 06:45 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 06:45 - 00004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 06:45 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 06:45 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 06:45 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 06:45 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 06:45 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 06:45 - 00003584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 06:45 - 00003584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 06:45 - 00003584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 06:45 - 00003584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 06:45 - 00003584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 06:45 - 00003584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 06:45 - 00003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 06:45 - 00003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 06:45 - 00003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 06:45 - 00003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 06:45 - 00003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 06:45 - 00003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 06:45 - 00003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 06:45 - 00003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 06:45 - 00003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 06:45 - 00003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 06:45 - 00003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 05:23 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-08-24 21:34 - 2012-11-30 04:38 - 00006144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 04:38 - 00004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 04:38 - 00003584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 04:38 - 00003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-08-24 21:34 - 2012-11-30 01:17 - 00420064 _____ C:\Windows\SysWOW64\locale.nls
2013-08-24 21:34 - 2012-11-30 01:15 - 00420064 _____ C:\Windows\system32\locale.nls
2013-08-24 21:34 - 2012-08-11 02:56 - 00715776 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2013-08-24 21:34 - 2012-08-11 01:56 - 00542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2013-08-24 21:19 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-08-24 21:19 - 2013-04-26 07:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2013-08-24 21:19 - 2013-04-26 06:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-08-24 21:19 - 2012-11-23 05:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2013-08-24 21:19 - 2012-09-26 00:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2013-08-24 21:19 - 2012-09-26 00:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2013-08-24 21:19 - 2012-07-06 22:07 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2013-08-24 21:18 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-24 21:18 - 2013-05-10 07:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2013-08-24 21:18 - 2013-05-10 05:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-08-24 21:18 - 2013-01-24 08:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2013-08-24 21:18 - 2013-01-03 08:00 - 00288088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2013-08-24 21:18 - 2012-08-22 20:12 - 00376688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2013-08-24 21:18 - 2012-07-05 00:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2013-08-24 21:18 - 2012-07-05 00:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2013-08-24 21:18 - 2012-07-05 00:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2013-08-24 21:18 - 2012-07-04 23:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2013-08-24 21:18 - 2012-07-04 23:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2013-08-24 21:17 - 2012-05-05 10:36 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2013-08-24 21:17 - 2012-05-05 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2013-08-24 21:16 - 2013-05-13 07:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2013-08-24 21:16 - 2013-05-13 05:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2013-08-24 21:16 - 2013-05-13 05:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-08-24 21:16 - 2013-05-13 05:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-08-24 21:16 - 2012-05-14 07:26 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2013-08-24 21:15 - 2013-03-19 08:04 - 05550424 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-24 21:15 - 2013-03-19 07:46 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-08-24 21:15 - 2013-03-19 07:04 - 03968856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-08-24 21:15 - 2013-03-19 07:04 - 03913560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-08-24 21:15 - 2013-03-19 06:47 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-08-24 21:15 - 2013-03-19 05:06 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-08-24 20:50 - 2013-04-26 01:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-08-24 20:50 - 2013-04-01 00:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2013-08-24 20:34 - 2012-02-11 08:36 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2013-08-24 20:34 - 2012-02-11 08:36 - 00067072 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2013-08-24 19:50 - 2013-08-24 20:07 - 00000335 _____ C:\local.conf
2013-08-24 18:12 - 2013-08-25 09:22 - 00000000 ____D C:\Windows\erdnt
2013-08-24 18:01 - 2013-08-24 18:02 - 00000000 ____D C:\AdwCleaner
2013-08-18 04:02 - 2013-08-18 04:02 - 00000000 ____D C:\Users\Strolchi\AppData\Local\{D0411400-257F-4B1D-882D-69E6128B6187}
2013-08-17 16:52 - 2013-08-27 23:37 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-17 16:06 - 2013-08-17 16:06 - 00000000 ____D C:\Users\Strolchi\AppData\Roaming\Malwarebytes
2013-08-17 16:05 - 2013-08-17 16:05 - 00001115 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-08-17 16:05 - 2013-08-17 16:05 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-17 16:05 - 2013-08-17 16:05 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-17 16:05 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-08-08 17:58 - 2013-08-08 17:57 - 00083672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-08-08 17:46 - 2013-08-08 17:46 - 00001996 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-08-08 17:46 - 2013-08-08 17:46 - 00000000 ____D C:\Users\Strolchi\AppData\Roaming\Avira
2013-08-08 17:45 - 2013-08-08 17:45 - 00000000 ____D C:\ProgramData\Avira
2013-08-08 17:45 - 2013-08-08 17:45 - 00000000 ____D C:\Program Files (x86)\Avira
2013-08-08 17:45 - 2013-08-08 17:38 - 00130016 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-08-08 17:45 - 2013-08-08 17:38 - 00100712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-08-08 17:45 - 2013-08-08 17:38 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-08-02 21:17 - 2013-08-19 20:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-02 21:17 - 2013-08-02 21:17 - 00001153 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk

==================== One Month Modified Files and Folders =======

2013-08-28 01:31 - 2013-08-28 01:31 - 01579080 _____ (Farbar) C:\Users\Strolchi\Desktop\FRST64.exe
2013-08-28 01:29 - 2013-08-28 00:32 - 00002641 _____ C:\Users\Strolchi\Desktop\FSS.txt
2013-08-28 01:29 - 2009-07-14 06:45 - 00009696 _____ C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-28 01:29 - 2009-07-14 06:45 - 00009696 _____ C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-28 01:28 - 2011-02-19 06:24 - 01539700 _____ C:\Windows\system32\perfh007.dat
2013-08-28 01:28 - 2011-02-19 06:24 - 00413862 _____ C:\Windows\system32\perfc007.dat
2013-08-28 01:28 - 2009-07-14 07:13 - 00005438 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-28 01:24 - 2013-08-25 23:37 - 00276600 _____ C:\Windows\system32\FNTCACHE.DAT
2013-08-28 01:24 - 2013-08-25 23:37 - 00000280 _____ C:\Windows\setupact.log
2013-08-28 01:24 - 2012-04-07 19:11 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-28 01:24 - 2012-04-07 19:11 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-28 01:24 - 2011-12-01 20:31 - 00000000 ___HD C:\ASUS.DAT
2013-08-28 01:24 - 2009-07-14 09:44 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-08-28 01:24 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-28 01:23 - 2013-08-25 23:37 - 00002468 _____ C:\Windows\PFRO.log
2013-08-28 01:22 - 2013-08-28 00:49 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE
2013-08-28 01:19 - 2013-08-28 01:19 - 00000214 _____ C:\Windows\Tasks\SidebarExecute.job
2013-08-28 01:14 - 2009-07-14 04:34 - 00000439 _____ C:\Windows\win.ini
2013-08-28 01:08 - 2011-11-12 16:56 - 01772641 _____ C:\Windows\WindowsUpdate.log
2013-08-28 00:43 - 2013-08-28 00:43 - 00000000 ____D C:\Users\Strolchi\Desktop\tweaking.com_windows_repair_aio
2013-08-28 00:42 - 2013-08-28 00:42 - 03268369 _____ C:\Users\Strolchi\Desktop\tweaking.com_windows_repair_aio.zip
2013-08-28 00:31 - 2013-08-28 00:31 - 00358507 _____ (Farbar) C:\Users\Strolchi\Desktop\FSS.exe
2013-08-27 23:41 - 2011-11-12 17:23 - 00001381 _____ C:\Windows\system32\ServiceFilter.ini
2013-08-27 23:37 - 2013-08-27 23:37 - 01010176 _____ C:\Users\Strolchi\Desktop\MicrosoftFixit50884.msi
2013-08-27 23:37 - 2013-08-25 21:51 - 00003717 _____ C:\Program Files (x86)\Mozilla Firefoxavg-secure-search.xml
2013-08-27 23:37 - 2013-08-17 16:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-27 23:36 - 2013-08-25 21:51 - 00045856 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys
2013-08-27 23:36 - 2013-08-25 21:51 - 00000000 ____D C:\Program Files (x86)\AVG Secure Search
2013-08-26 10:53 - 2013-08-26 10:53 - 00058520 _____ C:\Users\Strolchi\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-26 10:46 - 2013-08-26 10:46 - 00000000 ____D C:\FRST
2013-08-25 23:37 - 2013-08-25 23:37 - 00000000 _____ C:\Windows\setuperr.log
2013-08-25 23:28 - 2013-08-25 21:47 - 00000000 __SHD C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
2013-08-25 23:28 - 2012-06-19 15:17 - 00000000 __SHD C:\ProgramData\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
2013-08-25 23:23 - 2009-07-29 08:03 - 00000000 ____D C:\Windows\Panther
2013-08-25 23:21 - 2011-04-13 04:38 - 00000000 ____D C:\Program Files (x86)\Windows Live
2013-08-25 22:27 - 2013-08-25 22:27 - 00000639 _____ C:\Users\Strolchi\Desktop\Bilder - Verknüpfung.lnk
2013-08-25 22:27 - 2013-08-25 22:27 - 00000630 _____ C:\Users\Strolchi\Desktop\Musik - Verknüpfung.lnk
2013-08-25 22:27 - 2013-08-25 22:27 - 00000630 _____ C:\Users\Strolchi\Desktop\Filme - Verknüpfung.lnk
2013-08-25 22:20 - 2011-11-12 17:23 - 00002108 _____ C:\Windows\system32\AutoRunFilter.ini
2013-08-25 22:18 - 2013-08-25 22:18 - 00003408 ____N C:\bootsqm.dat
2013-08-25 21:52 - 2013-08-25 21:52 - 00000957 _____ C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk
2013-08-25 21:52 - 2013-08-25 21:52 - 00000933 _____ C:\Users\Public\Desktop\TuneUp Utilities 2013.lnk
2013-08-25 21:51 - 2013-08-25 21:51 - 00000000 ____D C:\Users\Strolchi\AppData\Local\AVG Secure Search
2013-08-25 21:51 - 2013-08-25 21:51 - 00000000 ____D C:\ProgramData\AVG Secure Search
2013-08-25 21:50 - 2012-06-19 15:18 - 00000000 ____D C:\Users\Strolchi\AppData\Roaming\TuneUp Software
2013-08-25 21:50 - 2012-06-19 15:17 - 00000000 ____D C:\ProgramData\TuneUp Software
2013-08-25 09:58 - 2013-01-30 02:03 - 00484864 ___SH C:\Users\Strolchi\Downloads\Thumbs.db
2013-08-25 09:49 - 2012-11-28 01:01 - 00000000 ____D C:\Users\Strolchi\AppData\Roaming\vlc
2013-08-25 09:23 - 2013-08-25 09:23 - 00002302 _____ C:\DelFix.txt
2013-08-25 09:23 - 2013-08-25 09:23 - 00000000 ____D C:\Windows\ERUNT
2013-08-25 09:22 - 2013-08-24 18:12 - 00000000 ____D C:\Windows\erdnt
2013-08-25 09:18 - 2011-12-01 20:30 - 00000000 ____D C:\Users\Strolchi
2013-08-25 09:10 - 2013-08-25 09:10 - 00000614 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-08-25 09:02 - 2013-08-25 09:01 - 00000000 ____D C:\Users\Strolchi\AppData\Local\Adobe
2013-08-25 09:01 - 2012-04-07 19:11 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-25 09:01 - 2012-01-22 19:33 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-25 08:56 - 2013-08-25 08:57 - 00867240 _____ (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2013-08-25 08:56 - 2013-08-25 08:57 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-08-25 08:56 - 2013-08-25 08:57 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-08-25 08:56 - 2013-08-25 08:57 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-08-25 08:56 - 2013-08-25 08:57 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-08-25 08:56 - 2013-08-25 08:56 - 00000000 ____D C:\Program Files (x86)\Java
2013-08-25 08:56 - 2011-12-07 00:43 - 00789416 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-08-25 08:51 - 2011-12-01 20:32 - 00001427 _____ C:\Users\Strolchi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-08-25 08:51 - 2011-12-01 20:32 - 00000000 ___RD C:\Users\Strolchi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-08-25 08:51 - 2011-12-01 20:32 - 00000000 ___RD C:\Users\Strolchi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-08-25 08:44 - 2011-04-13 04:47 - 00000000 ____D C:\Program Files (x86)\ASUS
2013-08-25 08:08 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-08-25 08:08 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-08-25 08:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\he-IL
2013-08-25 08:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\ar-SA
2013-08-25 08:07 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK
2013-08-25 08:07 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-08-25 08:07 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\zh-HK
2013-08-25 08:07 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\tr-TR
2013-08-25 08:07 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\he-IL
2013-08-25 08:07 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\ar-SA
2013-08-25 08:07 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-08-25 08:06 - 2009-07-14 09:45 - 00000000 ____D C:\Program Files\Windows Journal
2013-08-25 02:02 - 2013-08-25 02:02 - 19221504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 15407616 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 14317568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-25 02:02 - 2013-08-25 02:02 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-25 02:02 - 2013-08-25 02:02 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 02240512 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 02046464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 01766912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-08-25 02:02 - 2013-08-25 02:02 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-08-25 02:02 - 2013-08-25 02:02 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-08-25 02:02 - 2013-08-25 02:02 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-08-25 02:02 - 2013-08-25 02:02 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 01129984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-08-25 02:02 - 2013-08-25 02:02 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00526848 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-08-25 02:02 - 2013-08-25 02:02 - 00391680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-08-25 02:02 - 2013-08-25 02:02 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-08-25 02:02 - 2013-08-25 02:02 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-08-25 02:02 - 2013-08-25 02:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-08-25 02:02 - 2013-08-25 02:02 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-08-25 02:02 - 2013-08-25 02:02 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-08-25 02:02 - 2013-08-25 02:02 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-08-25 02:02 - 2013-08-25 02:02 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-08-25 02:02 - 2013-08-25 02:02 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-25 02:02 - 2013-08-25 02:02 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-08-25 02:02 - 2013-08-25 02:02 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-08-25 02:02 - 2013-08-25 02:02 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-08-25 02:02 - 2013-08-25 02:02 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-08-25 02:02 - 2013-08-25 02:02 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-25 02:02 - 2013-08-25 02:02 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-08-25 02:02 - 2013-08-25 02:02 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-08-25 02:02 - 2013-08-25 02:02 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-08-25 02:02 - 2013-08-25 02:02 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-08-25 02:02 - 2013-08-25 02:02 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-08-25 01:56 - 2013-08-25 01:56 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00003584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00003584 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-08-25 01:56 - 2013-08-25 01:56 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-08-25 01:38 - 2013-08-25 01:36 - 00000000 ____D C:\Windows\system32\MRT
2013-08-25 00:50 - 2013-08-25 00:50 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-08-25 00:50 - 2013-08-25 00:50 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-08-24 20:07 - 2013-08-24 19:50 - 00000335 _____ C:\local.conf
2013-08-24 19:02 - 2009-07-14 05:20 - 00000000 ___RD C:\Users\Default
2013-08-24 18:56 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-08-24 18:56 - 2009-07-14 04:34 - 00000027 _____ C:\Windows\system32\Drivers\etc\hosts_bak_649
2013-08-24 18:02 - 2013-08-24 18:01 - 00000000 ____D C:\AdwCleaner
2013-08-19 20:07 - 2013-08-02 21:17 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-18 04:02 - 2013-08-18 04:02 - 00000000 ____D C:\Users\Strolchi\AppData\Local\{D0411400-257F-4B1D-882D-69E6128B6187}
2013-08-17 16:06 - 2013-08-17 16:06 - 00000000 ____D C:\Users\Strolchi\AppData\Roaming\Malwarebytes
2013-08-17 16:05 - 2013-08-17 16:05 - 00001115 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-08-17 16:05 - 2013-08-17 16:05 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-17 16:05 - 2013-08-17 16:05 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-17 15:38 - 2012-11-25 18:15 - 00000000 ____D C:\Users\Strolchi\AppData\Roaming\FileZilla
2013-08-08 17:57 - 2013-08-08 17:58 - 00083672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-08-08 17:46 - 2013-08-08 17:46 - 00001996 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-08-08 17:46 - 2013-08-08 17:46 - 00000000 ____D C:\Users\Strolchi\AppData\Roaming\Avira
2013-08-08 17:45 - 2013-08-08 17:45 - 00000000 ____D C:\ProgramData\Avira
2013-08-08 17:45 - 2013-08-08 17:45 - 00000000 ____D C:\Program Files (x86)\Avira
2013-08-08 17:38 - 2013-08-08 17:45 - 00130016 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-08-08 17:38 - 2013-08-08 17:45 - 00100712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-08-08 17:38 - 2013-08-08 17:45 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-08-07 17:49 - 2012-05-28 13:30 - 00000000 ____D C:\Users\Strolchi\AppData\Roaming\SoftGrid Client
2013-08-05 16:14 - 2012-03-17 03:50 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-03 21:25 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-08-02 21:17 - 2013-08-02 21:17 - 00001153 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-08-02 21:09 - 2013-07-14 04:28 - 00000000 ____D C:\ProgramData\Skype

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-18 10:28

==================== End Of Log ============================
--- --- ---
Alt 28.08.2013, 00:57   #20
aharonov
/// TB-Ausbilder
 
Starker Schädlingsbefall und stark verminderte Leistung. - Standard

Starker Schädlingsbefall und stark verminderte Leistung.


Läuft jetzt die Firewall wieder wie gewünscht? Bestehen sonst noch Probleme?

Noch etwas:


Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
REG: reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects\{F56F6FDD-AA9D-4618-A949-C1B91AF43B1A}"
REG: reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects\{F56F6FDD-AA9D-4618-A949-C1B91AF43B1A}" /v AutoStart

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.



Danach bitte nochmals einen Scan mit FSS machen und ebenfalls das Log posten.

__________________
cheers,
Leo

Alt 28.08.2013, 01:03   #21
Allround
 
Starker Schädlingsbefall und stark verminderte Leistung. - Standard

Starker Schädlingsbefall und stark verminderte Leistung.


Code:
ATTFilter
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 28-08-2013
Ran by Strolchi at 2013-08-28 02:03:10 Run:1
Running from C:\Users\Strolchi\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
REG: reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects\{F56F6FDD-AA9D-4618-A949-C1B91AF43B1A}"
REG: reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects\{F56F6FDD-AA9D-4618-A949-C1B91AF43B1A}" /v AutoStart

*****************


========= reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects\{F56F6FDD-AA9D-4618-A949-C1B91AF43B1A}" =========

Der Vorgang wurde erfolgreich beendet.



========= End of Reg: =========


========= reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects\{F56F6FDD-AA9D-4618-A949-C1B91AF43B1A}" /v AutoStart =========

Der Vorgang wurde erfolgreich beendet.



========= End of Reg: =========


==== End of Fixlog ====

Alt 28.08.2013, 01:10   #22
aharonov
/// TB-Ausbilder
 
Starker Schädlingsbefall und stark verminderte Leistung. - Standard

Starker Schädlingsbefall und stark verminderte Leistung.


Ok, dann bitte noch ein neues FSS-Log.
Läuft die Firewall wieder? Sind sonst noch Probleme vorhanden?
__________________
cheers,
Leo

Alt 28.08.2013, 01:14   #23
Allround
 
Starker Schädlingsbefall und stark verminderte Leistung. - Standard

Starker Schädlingsbefall und stark verminderte Leistung.


Ja die Firewall läuft.
Weitere Probleme sind grad nicht vorhanden.

Code:
ATTFilter
Farbar Service Scanner Version: 18-08-2013
Ran by Strolchi (administrator) on 28-08-2013 at 02:11:28
Running from "C:\Users\Strolchi\Desktop"
Microsoft Windows 7 Home Premium  Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy: 
==================


System Restore:
============

System Restore Disabled Policy: 
========================


Action Center:
============


Windows Update:
============

Windows Autoupdate Disabled Policy: 
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Windows Defender Disabled Policy: 
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****

Alt 28.08.2013, 01:19   #24
aharonov
/// TB-Ausbilder
 
Starker Schädlingsbefall und stark verminderte Leistung. - Standard

Starker Schädlingsbefall und stark verminderte Leistung.


Prima, dann kannst du jetzt noch die Update- und Cleanupschritte durchführen oder weiterführen. Solltest du dort schon durch gewesen sein, dann wiederhole bitte nochmals den Schritt mit delfix.
__________________
cheers,
Leo

Alt 28.08.2013, 01:48   #25
Allround
 
Starker Schädlingsbefall und stark verminderte Leistung. - Standard

Starker Schädlingsbefall und stark verminderte Leistung.


Code:
ATTFilter
# DelFix v10.4 - Datei am 28/08/2013 um 02:45:18 erstellt
# Aktualisiert am 19/07/2013 von Xplode
# Benutzer : Strolchi - STROLCHI-PC
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)

~ Aktiviere die Benutzerkontensteuerung ... OK

~ Entferne die Bereinigungsprogramme ...

Gelöscht : C:\FRST

~ Erstelle ein Backup der Registrierungsdatenbank ... OK

~ Lösche die Wiederherstellungspunkte ...

Gelöscht : RP #99 [TuneUp Utilities 2013 wird installiert | 08/25/2013 19:49:19]
Gelöscht : RP #100 [Windows Live Essentials | 08/25/2013 21:17:40]
Gelöscht : RP #101 [WLSetup | 08/25/2013 21:18:06]
Gelöscht : RP #102 [Installed Microsoft Fix it 50884 | 08/27/2013 21:38:17]
Gelöscht : RP #103 [Tweaking.com - Windows Repair | 08/27/2013 22:44:39]
Gelöscht : RP #104 [Tweaking.com - Windows Repair | 08/27/2013 22:47:14]

Ein neuer Wiederherstellungspunkt wurde erstellt !

~ Stelle die Systemeinstellungen wieder her ... OK

########## - EOF - ##########

Alt 28.08.2013, 01:50   #26
aharonov
/// TB-Ausbilder
 
Starker Schädlingsbefall und stark verminderte Leistung. - Standard

Starker Schädlingsbefall und stark verminderte Leistung.


Jep. Ist alles in Ordnung und wir können das Thema beschliessen?
__________________
cheers,
Leo

Alt 28.08.2013, 02:02   #27
Allround
 
Starker Schädlingsbefall und stark verminderte Leistung. - Standard

Starker Schädlingsbefall und stark verminderte Leistung.


Ja das Thema kann dann geschlossen werden. Aktuell sind alle Probleme weg.

Danke für die gute und ausdauernde Hilfe.

Alt 28.08.2013, 10:15   #28
aharonov
/// TB-Ausbilder
 
Starker Schädlingsbefall und stark verminderte Leistung. - Standard

Starker Schädlingsbefall und stark verminderte Leistung.


Freut mich, dass wir helfen konnten.

Falls du dem Forum noch Verbesserungsvorschläge, Kritik oder ein Lob mitgeben möchtest, kannst du das hier tun.

Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Ich bekomme somit keine Benachrichtigung mehr über neue Antworten.
Solltest du das Thema erneut brauchen, schicke mir bitte eine PM und wir machen hier weiter.

Jeder andere bitte diese Anleitung lesen und einen eigenen Thread erstellen.
__________________
cheers,
Leo

Antwort
Seite 2 von 2 1 2

Themen zu Starker Schädlingsbefall und stark verminderte Leistung.
0x8007042, bingbar, computer, converter, farbar, farbar recovery scan tool, firefox, firefox 23.0.1, flash player, focus, homepage, iexplore.exe, install.exe, installation, plug-in, pup.blabbers, pup.dealply, pup.dealply.a, pup.optional.babylon.a, pup.optional.dealply, pup.optional.dealply.a, pup.optional.opencandy, riskware.tool.ck, rootkit, rootkit.necurs.64, security, software, svchost.exe, trojan.agent, trojan.phex.thagen3, trojan.spyeyes, tunnel, usbvideo.sys


« windows 8 oder 7 beim neuaufsetzen von windows bei nagelneuem rechner? | Windows 7: System Care Antivirus »


Ähnliche Themen: Starker Schädlingsbefall und stark verminderte Leistung.


  1. Windows Vista: Seiten laden nicht richtig, Leistung stark vermindert, System sehr langsam
    Plagegeister aller Art und deren Bekämpfung - 26.04.2015 (5)
  2. Leistung vom Laptop stark vermindert
    Plagegeister aller Art und deren Bekämpfung - 12.04.2015 (23)
  3. Laptop Leistung stark beeinträchtigt + diverse andere Probleme
    Plagegeister aller Art und deren Bekämpfung - 21.03.2015 (28)
  4. Starker PC-Leistungsabfall
    Plagegeister aller Art und deren Bekämpfung - 07.11.2014 (12)
  5. Starker Verdacht auf Virenbefall
    Plagegeister aller Art und deren Bekämpfung - 30.05.2014 (13)
  6. Starker Adwarebefall
    Plagegeister aller Art und deren Bekämpfung - 18.04.2014 (9)
  7. PC Leistung stark ausgebremst
    Log-Analyse und Auswertung - 18.04.2013 (9)
  8. Win.32/Sirefef.0 - Starker Virenbefall
    Plagegeister aller Art und deren Bekämpfung - 17.11.2011 (46)
  9. starker Performanceverlust auf Laptop
    Log-Analyse und Auswertung - 12.05.2011 (5)
  10. Schädlingsbefall
    Plagegeister aller Art und deren Bekämpfung - 09.07.2010 (10)
  11. Trojaner? PC Leistung stark vermindert. HIJACKTHIS
    Log-Analyse und Auswertung - 10.03.2010 (1)
  12. Starker Verdacht auf Malware
    Plagegeister aller Art und deren Bekämpfung - 06.02.2010 (8)
  13. Starker Virenbefall - 38 Funde!!!
    Plagegeister aller Art und deren Bekämpfung - 18.09.2008 (7)
  14. Vermute: Win32:ScarMorph, pop-ups, verminderte download- und leistungsgeschwindigkeit
    Log-Analyse und Auswertung - 24.07.2008 (1)
  15. Starker Schädlingsbefall!!
    Plagegeister aller Art und deren Bekämpfung - 17.05.2006 (6)
  16. Starker Verdacht auf Trojaner!!
    Log-Analyse und Auswertung - 31.03.2006 (3)
  17. hilfe starker xp befahl
    Log-Analyse und Auswertung - 26.04.2005 (3)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Starker Schädlingsbefall und stark verminderte Leistung. - Ok. Downloade dir bitte Farbar Service Scanner Starte das Tool mit Doppelklick auf die FSS.exe Gehe sicher, dass folgende Optionen angehakt sind. Internet Services Windows Firewall System Restore Security Center/Action - Starker Schädlingsbefall und stark verminderte Leistung....
Archiv
Du betrachtest: Starker Schädlingsbefall und stark verminderte Leistung. auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131