Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung
Windows 7, Rechner friert ein, ist dlprotect.exe schuld?

Windows 7, Rechner friert ein, ist dlprotect.exe schuld?


Log-Analyse und Auswertung: Windows 7, Rechner friert ein, ist dlprotect.exe schuld?

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

 
Vorheriger Beitrag Vorheriger Beitrag   Nächster Beitrag Nächster Beitrag
Alt 04.03.2014, 14:49   #1
ll_marvin
 
Windows 7, Rechner friert ein, ist dlprotect.exe schuld? - Standard

Windows 7, Rechner friert ein, ist dlprotect.exe schuld?


Hallo,

habe seit kurzem das Problem, dass der Rechner hin und wieder einfriert. Scanne mein System regelmäßig mit Avira (ist auch mein Echtzeitschutz/Scanner), hatte aber keinen Sucherfolg.

Heute habe ich in der Taskbar einen mir unbekannten Eintrag entdeckt, der sich auch nicht öffnen/deaktivieren oder entfernen läßt:

dlprotect.exe

Selbst wenn dieses Teil nicht der Grund für das Einfrieren sein sollte, wüsste ich doch gerne, was es ist und anstellt, bzw. wie ich es wieder los werde.

So, habe mir die "goldenen Regeln" des Boards angeschaut, die Programme heruntergeladen und die Logs erstellt:

1. FRST

Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 04-03-2014 01
Ran by brooklinmon (administrator) on CROOKED on 04-03-2014 14:00:27
Running from C:\Users\brooklinmon\Downloads
Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: English(US)
Internet Explorer Version 10
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files\EaseUS\Todo Backup\bin\Agent.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files\EaseUS\Todo Backup\bin\GuardAgent.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Google Inc.) C:\Program Files\Google\Update\1.3.22.5\GoogleCrashHandler.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Sony Corporation) C:\Program Files\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe
(Renesas Electronics Corporation) C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
() C:\ProgramData\dlprotect.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12017368 2014-03-02] (Realtek Semiconductor)
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [1425208 2012-09-20] (Logitech, Inc.)
HKLM\...\Run: [CDAServer] - C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [350072 2012-03-09] ()
HKLM\...\Run: [Reader Application Helper] - C:\Program Files\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe [899400 2013-11-27] (Sony Corporation)
HKLM\...\Run: [] - [X]
HKLM\...\Run: [SSD Tweaker] - C:\Program Files\SSD Tweaker\SSD Tweaker.exe -reboot
HKLM\...\Run: [NUSB3MON] - C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM\...\Run: [Download Protect] - C:\ProgramData\dlprotect.exe [12800 2014-02-28] ()
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [280576 2013-06-06] (Microsoft Corporation)
Startup: C:\Users\brooklinmon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\_uninst_78521225.lnk
ShortcutTarget: _uninst_78521225.lnk -> C:\Users\brooklinmon\AppData\Local\Temp\_uninst_78521225.bat ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.gmx.net/br/ie10_startpage
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xE0B822A4CD61CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus
SearchScopes: HKCU - {365945E8-D652-441A-A6A3-387EC2F8DB81} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms}
SearchScopes: HKCU - {7499225C-FBD3-40EB-8C20-500F5FC83699} URL = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms}
SearchScopes: HKCU - {B465D695-BB2A-45E0-80AF-B0A94D75643C} URL = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie
SearchScopes: HKCU - {D969FF7D-81F5-4044-B576-9339C8AD5D17} URL = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms}
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: GMX MailCheck BHO - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Program Files\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
Handler: gmx - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default
FF Homepage: hxxp://go.gmx.net/tb/mff_startpage_homepage
FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*')%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*'))%20%7B%20return%20'PROXY%20nq-us04.personalitycores.com%3A8000%3B%20PROXY%20nq-us09.personalitycores.com%3A8000%3B%20PROXY%20nq-us06.personalitycores.com%3A8000%3B%20PROXY%20nq-us10.personalitycores.com%3A8000%3B%20PROXY%20nq-us11.personalitycores.com%3A8000%3B%20PROXY%20nq-us08.personalitycores.com%3A8000%3B%20PROXY%20nq-us12.personalitycores.com%3A8000%3B%20PROXY%20nq-us05.personalitycores.com%3A8000%3B%20PROXY%20nq-us07.personalitycores.com%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @nullsoft.com/winampDetector;version=1 - C:\Program Files\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin: @sony.com/ReaderDesktop - C:\Program Files\Sony\ReaderDesktop\npreaderdetectmoz.dll (Sony Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.8 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin HKCU: @torrentstream.net/tsplugin,version=2.0 - C:\Users\brooklinmon\AppData\Roaming\TorrentStream\player\npts_plugin.dll (Innovative Digital Technologies)
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\chip-online-suche.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\dastelefonbuch.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\dateiendungen-endungende.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\duckduckgo.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\head-fiorg.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\imdb.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\kinode.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\the-pirate-bay.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\urban-dictionary.xml
FF SearchPlugin: C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\searchplugins\youtube-videosuche.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: British English Dictionary - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\en-GB@dictionaries.addons.mozilla.org [2013-06-05]
FF Extension: FoxyProxy Standard - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\foxyproxy@eric.h.jung [2014-02-04]
FF Extension: Forecastfox - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3} [2013-06-05]
FF Extension: FireShot - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba} [2014-01-28]
FF Extension: Flagfox - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b} [2014-01-16]
FF Extension: IE Tab 2 (FF 3.6+) - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB} [2013-12-16]
FF Extension: TV-Fox - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{2f17f610-5e97-4fed-828f-9940b7b577a4} [2013-06-05]
FF Extension: FoxyTunes - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{463F6CA5-EE3C-4be1-B7E6-7FEE11953374} [2013-06-05]
FF Extension: FT DeepDark - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{77d2ed30-4cd2-11e0-b8af-0800200c9a66} [2014-02-22]
FF Extension: Clear Cache - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\clearcache@michel.de.almeida.xpi [2013-06-05]
FF Extension: Facebook Disconnect - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\facebook@disconnect.me.xpi [2013-06-05]
FF Extension: Ghostery - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\firefox@ghostery.com.xpi [2013-08-03]
FF Extension: ProxMate - Proxy on steroids! - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi [2013-07-05]
FF Extension: Mein Preis - Amazon Preisverlauf - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\jid1-QqA8RBLaxLGXxg@jetpack.xpi [2013-06-05]
FF Extension: ShareMeNot - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\sharemenot@franziroesner.com.xpi [2013-06-05]
FF Extension: Thumbnail Zoom Plus - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\thumbnailZoom@dadler.github.com.xpi [2013-09-18]
FF Extension: GMX MailCheck - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\toolbar@gmx.net.xpi [2013-06-06]
FF Extension: TrackMeNot - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\trackmenot@mrl.nyu.edu.xpi [2013-06-05]
FF Extension: Facebook Phishing Protector - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{023e9ca0-63f3-47b1-bcb2-9badf9d9ef28}.xpi [2013-06-05]
FF Extension: Copy Plain Text - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{723AAF16-AF1F-4404-A5D7-0BFE39766605}.xpi [2013-06-05]
FF Extension: NoScript - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-06-05]
FF Extension: Adblock Plus - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-02-27]
FF Extension: DownThemAll! - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2013-06-05]
FF Extension: ResultsAlpha - C:\Users\brooklinmon\AppData\Roaming\Mozilla\Firefox\Profiles\cipypa2e.default\Extensions\{f727685b-ed90-4adc-8eec-8234574a91e6}.xpi [2014-02-26]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-01-03]
FF HKLM\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ []
FF HKCU\...\Firefox\Extensions: [magicplayer@torrentstream.org] - C:\Users\brooklinmon\AppData\Roaming\TorrentStream\extensions\firefox\magicplayer@torrentstream.org
FF Extension: TS Magic Player - C:\Users\brooklinmon\AppData\Roaming\TorrentStream\extensions\firefox\magicplayer@torrentstream.org [2013-06-25]

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1363616 2014-01-03] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1748640 2014-01-03] (Microsoft Corporation)
R2 EaseUS Agent; C:\Program Files\EaseUS\Todo Backup\bin\Agent.exe [69192 2013-10-11] (CHENGDU YIWO Tech Development Co., Ltd)
R2 Guard Agent; C:\Program Files\EaseUS\Todo Backup\bin\GuardAgent.exe [23624 2013-09-04] (CHENGDU YIWO Tech Development Co., Ltd)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-12] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-12] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-12] (Avira Operations GmbH & Co. KG)
R2 drhard; C:\Windows\system32\Drivers\drhard.sys [23600 2005-12-01] (Licensed for Gebhard Software)
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [14920 2013-03-07] ()
R0 EUBAKUP; C:\Windows\System32\drivers\eubakup.sys [51784 2013-09-04] (CHENGDU YIWO Tech Development Co., Ltd)
R0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [41544 2013-09-04] ()
R1 EUDSKACS; C:\Windows\system32\drivers\eudskacs.sys [15944 2013-09-04] (CHENGDU YIWO Tech Development Co., Ltd)
R1 EUFDDISK; C:\Windows\system32\drivers\EuFdDisk.sys [186952 2013-09-04] (CHENGDU YIWO Tech Development Co., Ltd)
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [9160 2013-03-07] ()
S3 FLASHSYS; C:\Program Files\MSI\Live Update 4\LU4\FLASHSYS.sys [9216 2007-12-14] ()
R3 nusb3hub; C:\Windows\System32\DRIVERS\nusb3hub.sys [63872 2011-02-10] (Renesas Electronics Corporation)
R3 nusb3xhc; C:\Windows\System32\DRIVERS\nusb3xhc.sys [141952 2011-02-10] (Renesas Electronics Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [13464 2014-01-19] ()
S3 PCAlertDriver; \??\C:\Program Files\MSI\PC Alert 4\NTGLM7X.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2099-09-22 02:30 - 2014-02-06 22:58 - 00100896 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst32.dll
2099-06-05 08:26 - 2013-06-05 08:32 - 00000000 ____D () C:\Windows\Panther
2099-06-05 08:17 - 15013-06-05 08:17 - 00000000 ____D () C:\Windows.old
2099-06-05 07:51 - 15013-06-05 07:51 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2099-06-05 07:47 - 2014-03-04 13:41 - 01311946 _____ () C:\Windows\WindowsUpdate.log
2099-06-05 07:43 - 15013-06-05 08:04 - 00001313 _____ () C:\Windows\TSSysprep.log
2099-02-07 00:59 - 2288-02-07 00:59 - 02395680 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00938752 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt32.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00823040 _____ (DTS, Inc.) C:\Windows\system32\sl3apo32.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00798520 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMSettingsIPC.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00761088 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO20.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00352016 _____ (Dolby Laboratories) C:\Windows\system32\R4EED32A.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00218368 _____ (TODO: <Company name>) C:\Windows\system32\slprp32.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00106768 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL32A.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 07162128 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP32A.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 04222104 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMlfx.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00873728 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO40.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00852016 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00604928 _____ (DTS, Inc.) C:\Windows\system32\sltech32.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00502584 _____ () C:\Windows\system32\audioLibVc.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00188696 _____ () C:\Windows\system32\AcpiServiceVnA.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00091920 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA32A.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00062224 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG32A.dll
2014-03-04 14:00 - 2014-03-04 14:00 - 00020033 _____ () C:\Users\brooklinmon\Downloads\FRST.txt
2014-03-04 14:00 - 2014-03-04 14:00 - 00000000 ____D () C:\FRST
2014-03-04 13:59 - 2014-03-04 13:59 - 01145344 _____ (Farbar) C:\Users\brooklinmon\Downloads\FRST.exe
2014-03-04 08:02 - 2014-03-04 08:02 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-03-04 07:59 - 2014-03-04 08:01 - 132595368 _____ () C:\Users\brooklinmon\Downloads\setup_11.0.1.1245.x01_2014_02_26_17_43.exe
2014-03-04 07:47 - 2014-03-04 07:58 - 00000000 ____D () C:\Program Files\stinger
2014-03-04 07:47 - 2014-03-04 07:47 - 00613200 _____ (Chip Digital GmbH) C:\Users\brooklinmon\Downloads\McAfee Labs Stinger 32 Bit - CHIP-Downloader.exe
2014-03-04 07:34 - 2014-03-04 07:39 - 00000000 ____D () C:\AdwCleaner
2014-03-04 07:33 - 2014-03-04 07:33 - 00613200 _____ (Chip Digital GmbH) C:\Users\brooklinmon\Downloads\AdwCleaner - CHIP-Downloader.exe
2014-03-02 15:46 - 2014-03-02 15:46 - 00001101 _____ () C:\Users\Public\Desktop\GMX-SMS-Manager.lnk
2014-03-02 15:46 - 2014-03-02 15:46 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\com.unitedinternet.ums.sms-mms-manager
2014-03-02 15:46 - 2014-03-02 15:46 - 00000000 ____D () C:\Program Files\GMX SMS-MMS-Manager
2014-03-02 09:14 - 2014-03-02 09:14 - 43342848 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes.dat
2014-03-02 09:14 - 2014-03-02 09:14 - 05801652 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-03-02 09:14 - 2014-03-02 09:14 - 02947160 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHDA.sys
2014-03-02 09:14 - 2014-03-02 09:14 - 02329816 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO.dll
2014-03-02 09:14 - 2014-03-02 09:14 - 01892056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSndMgr.cpl
2014-03-02 09:14 - 2014-03-02 09:14 - 00696013 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-03-02 09:14 - 2014-03-02 09:14 - 00125144 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoInstII.dll
2014-02-28 23:19 - 2014-02-28 23:19 - 00012800 _____ () C:\ProgramData\dlprotect.exe
2014-02-28 23:17 - 2014-03-01 11:47 - 00000000 ____D () C:\Program Files\ResultsAlpha
2014-02-28 23:16 - 2014-02-28 23:16 - 00000154 _____ () C:\Users\brooklinmon\Desktop\Goodgame Empire.url
2014-02-28 23:15 - 2014-02-28 23:15 - 00695632 _____ () C:\Users\brooklinmon\Downloads\easybrake-1020-Downloader.exe
2014-02-24 00:32 - 2014-02-24 00:35 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\foobar2000
2014-02-24 00:32 - 2014-02-24 00:32 - 03762776 _____ (foobar2000.org) C:\Users\brooklinmon\Downloads\foobar2000_v1.3.1.exe
2014-02-24 00:32 - 2014-02-24 00:32 - 00000989 _____ () C:\Users\Public\Desktop\foobar2000.lnk
2014-02-24 00:32 - 2014-02-24 00:32 - 00000000 ____D () C:\Program Files\foobar2000
2014-02-22 11:54 - 2014-02-22 11:54 - 00380416 _____ () C:\Users\brooklinmon\Downloads\Gmer-19357.exe
2014-02-22 01:05 - 2014-02-22 01:05 - 00461088 _____ () C:\Users\brooklinmon\Documents\landrover 2.odt
2014-02-22 00:47 - 2014-02-22 00:49 - 00460798 _____ () C:\Users\brooklinmon\Documents\landrover 1.odt
2014-02-20 10:58 - 2013-12-18 06:13 - 00231584 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-02-20 10:50 - 2014-02-20 10:50 - 00000000 ____D () C:\Users\brooklinmon\Downloads\renesas_usb3_mb
2014-02-20 10:50 - 2014-02-20 10:50 - 00000000 ____D () C:\ProgramData\Downloaded Installations
2014-02-20 10:50 - 2014-02-20 10:50 - 00000000 ____D () C:\Program Files\Renesas Electronics
2014-02-20 10:49 - 2014-02-20 10:49 - 16817256 _____ () C:\Users\brooklinmon\Downloads\renesas_usb3_mb.zip
2014-02-18 02:01 - 2014-02-18 02:01 - 00004096 ___SH () C:\{D075A20F-3BD2-44BC-BF09-B30682582EB5}.CBM
2014-02-18 01:50 - 2014-02-18 01:50 - 00488960 ___SH () C:\EUMONBMP.SYS
2014-02-18 00:43 - 2014-02-18 00:45 - 00000968 _____ () C:\Users\Public\Desktop\SSD Fresh.lnk
2014-02-18 00:43 - 2014-02-18 00:45 - 00000000 ____D () C:\Program Files\SSD Fresh
2014-02-18 00:43 - 2014-02-18 00:43 - 00000000 ____D () C:\Users\brooklinmon\AppData\Local\Abelssoft
2014-02-18 00:42 - 2014-02-18 00:42 - 00002036 _____ () C:\Users\Public\Desktop\SSDlife Free.lnk
2014-02-18 00:42 - 2014-02-18 00:42 - 00000000 ____D () C:\ProgramData\Binarysense
2014-02-18 00:42 - 2014-02-18 00:42 - 00000000 ____D () C:\Program Files\BinarySense
2014-02-18 00:40 - 2014-02-18 00:40 - 02576384 _____ () C:\Users\brooklinmon\Downloads\SSDlife_Free_2.3.56.msi
2014-02-18 00:39 - 2014-02-18 00:39 - 02880000 _____ (Abelssoft ) C:\Users\brooklinmon\Downloads\ssdfresh_2014.exe
2014-02-18 00:36 - 2014-02-18 02:08 - 00000000 ____D () C:\Program Files\SSD Tweaker
2014-02-18 00:35 - 2014-02-18 00:35 - 00613011 _____ () C:\Users\brooklinmon\Downloads\SSD31Tweaker.zip
2014-02-17 01:24 - 2014-02-17 01:38 - 00011297 _____ () C:\Users\brooklinmon\Documents\ein teppichmesser in der not 03.odt
2014-02-17 01:18 - 2014-02-17 01:18 - 00011261 _____ () C:\Users\brooklinmon\Documents\ein teppichmesser in der not 02.odt
2014-02-16 00:43 - 2014-02-16 01:26 - 00010606 _____ () C:\Users\brooklinmon\Documents\ein teppichmesser in der not.odt
2014-02-15 12:42 - 2014-02-25 12:21 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-02-14 23:03 - 2014-02-22 00:11 - 00012271 _____ () C:\Users\brooklinmon\Documents\vor dem schaufenster des schlachters.odt
2014-02-14 21:52 - 2014-02-14 21:54 - 00000000 ____D () C:\ProgramData\ctyajht
2014-02-14 21:46 - 2014-02-14 21:51 - 00000000 ____D () C:\ProgramData\oopaf
2014-02-13 23:18 - 2014-02-13 23:18 - 00033238 _____ () C:\Users\brooklinmon\Documents\ein weißes rauschen.odt
2014-02-12 14:12 - 2013-12-21 08:56 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-12 14:09 - 2014-02-01 08:58 - 01140736 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-12 14:09 - 2014-02-01 08:58 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-12 14:09 - 2014-02-01 08:57 - 02877952 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 02049024 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-12 14:09 - 2014-02-01 08:57 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-12 14:09 - 2014-02-01 08:34 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-12 14:09 - 2014-02-01 07:38 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-02-12 14:08 - 2014-02-01 08:58 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-12 14:08 - 2014-02-01 08:57 - 14359040 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-12 14:08 - 2014-02-01 08:57 - 13760512 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-12 14:08 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-12 14:08 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-12 14:08 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-12 14:08 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-11 01:00 - 2014-02-11 01:09 - 00010787 _____ () C:\Users\brooklinmon\Documents\mein elefant.odt
2014-02-08 03:55 - 2014-02-08 04:22 - 00033228 _____ () C:\Users\brooklinmon\Documents\bemerkenswert2014.odt
2014-02-06 22:58 - 2014-02-06 22:58 - 00683736 _____ (Realtek ) C:\Windows\system32\Drivers\Rt86win7.sys
2014-02-06 22:58 - 2014-02-06 22:58 - 00076872 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 27369216 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 13881600 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 06176944 _____ (Dolby Laboratories) C:\Windows\system32\DDPP32A.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 05115672 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 03629824 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 02547928 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkPgExt.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01935104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01824000 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01677568 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek2.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01489072 _____ (Dolby Laboratories) C:\Windows\system32\DDPD32A.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01097984 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO50.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00926976 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00919600 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00865592 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00860416 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00782040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApoApi.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00426944 _____ (DTS) C:\Windows\system32\DTSU2PLFX32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00403392 _____ (DTS) C:\Windows\system32\DTSU2PGFX32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00346048 _____ (DTS) C:\Windows\system32\DTSU2PREC32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00272048 _____ (Dolby Laboratories) C:\Windows\system32\DDPO32A.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00219312 _____ (Dolby Laboratories) C:\Windows\system32\DDPA32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00215656 _____ (NVIDIA Corporation) C:\Windows\system32\NVCOSMU.DLL
2014-02-06 22:57 - 2014-02-06 22:57 - 00182472 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTACap.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00092584 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00018944 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvsmu.sys
2014-02-06 19:24 - 1998-10-02 19:00 - 00327168 _____ (InstallShield Software Corporation) C:\Windows\IsUninst.exe
2014-02-06 19:18 - 2014-02-06 19:23 - 00040629 _____ () C:\LU4.log
2014-02-06 01:32 - 2014-02-07 00:45 - 00009727 _____ () C:\Users\brooklinmon\Documents\metzgerlatein.odt
2014-02-05 17:06 - 2014-02-05 22:11 - 00000000 ____D () C:\Program Files\MOBILedit! PhoneCopier
2014-02-04 00:47 - 2014-02-04 01:19 - 00010401 _____ () C:\Users\brooklinmon\Documents\ein krankes tier3.odt
2014-02-04 00:40 - 2014-02-04 00:40 - 00009989 _____ () C:\Users\brooklinmon\Documents\ein krankes tier2.odt
2014-02-04 00:36 - 2014-02-04 00:36 - 00009693 _____ () C:\Users\brooklinmon\Documents\ein krankes tier.odt
2014-02-02 02:29 - 2014-02-02 02:34 - 00009751 _____ () C:\Users\brooklinmon\Documents\alle gläser einer samstagnacht.odt

==================== One Month Modified Files and Folders =======

2099-06-05 08:23 - 2009-07-14 05:57 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2099-06-05 08:23 - 2009-07-14 05:52 - 00028672 _____ () C:\Windows\system32\config\BCD-Template
2099-06-05 08:17 - 15013-06-05 08:17 - 00000000 ____D () C:\Windows.old
2099-06-05 08:04 - 15013-06-05 07:43 - 00001313 _____ () C:\Windows\TSSysprep.log
2099-06-05 07:51 - 15013-06-05 07:51 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2099-06-05 07:43 - 2009-07-14 08:49 - 00000000 ____D () C:\Windows\CSC
2099-06-05 07:43 - 2009-07-14 05:34 - 00001778 _____ () C:\Windows\DtcInstall.log
2099-02-07 00:59 - 2288-02-07 00:59 - 02395680 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00938752 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt32.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00823040 _____ (DTS, Inc.) C:\Windows\system32\sl3apo32.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00798520 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMSettingsIPC.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00761088 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO20.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00352016 _____ (Dolby Laboratories) C:\Windows\system32\R4EED32A.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00218368 _____ (TODO: <Company name>) C:\Windows\system32\slprp32.dll
2099-02-07 00:59 - 2288-02-07 00:59 - 00106768 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL32A.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 07162128 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP32A.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 04222104 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMlfx.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00873728 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO40.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00852016 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00604928 _____ (DTS, Inc.) C:\Windows\system32\sltech32.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00502584 _____ () C:\Windows\system32\audioLibVc.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00188696 _____ () C:\Windows\system32\AcpiServiceVnA.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00091920 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA32A.dll
2099-01-18 18:15 - 2287-01-18 18:15 - 00062224 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG32A.dll
2014-03-04 14:00 - 2014-03-04 14:00 - 00020033 _____ () C:\Users\brooklinmon\Downloads\FRST.txt
2014-03-04 14:00 - 2014-03-04 14:00 - 00000000 ____D () C:\FRST
2014-03-04 14:00 - 2013-06-05 23:21 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\NetSpeedMonitor
2014-03-04 13:59 - 2014-03-04 13:59 - 01145344 _____ (Farbar) C:\Users\brooklinmon\Downloads\FRST.exe
2014-03-04 13:58 - 2013-09-25 23:29 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-04 13:47 - 2009-07-14 05:34 - 00019296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-04 13:47 - 2009-07-14 05:34 - 00019296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-04 13:42 - 2013-06-05 08:26 - 01643200 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-04 13:41 - 15013-06-05 07:47 - 01311946 _____ () C:\Windows\WindowsUpdate.log
2014-03-04 13:38 - 2013-09-25 23:29 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-04 13:38 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-04 13:38 - 2009-07-14 05:39 - 00068908 _____ () C:\Windows\setupact.log
2014-03-04 13:31 - 2013-06-06 03:29 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\uTorrent
2014-03-04 10:37 - 2013-06-05 11:34 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\vlc
2014-03-04 08:02 - 2014-03-04 08:02 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-03-04 08:01 - 2014-03-04 07:59 - 132595368 _____ () C:\Users\brooklinmon\Downloads\setup_11.0.1.1245.x01_2014_02_26_17_43.exe
2014-03-04 08:01 - 2013-06-05 09:31 - 00000000 ____D () C:\Users\brooklinmon
2014-03-04 07:58 - 2014-03-04 07:47 - 00000000 ____D () C:\Program Files\stinger
2014-03-04 07:47 - 2014-03-04 07:47 - 00613200 _____ (Chip Digital GmbH) C:\Users\brooklinmon\Downloads\McAfee Labs Stinger 32 Bit - CHIP-Downloader.exe
2014-03-04 07:42 - 2014-01-19 17:49 - 00000000 ____D () C:\ProgramData\AllMyBooks
2014-03-04 07:39 - 2014-03-04 07:34 - 00000000 ____D () C:\AdwCleaner
2014-03-04 07:33 - 2014-03-04 07:33 - 00613200 _____ (Chip Digital GmbH) C:\Users\brooklinmon\Downloads\AdwCleaner - CHIP-Downloader.exe
2014-03-02 15:46 - 2014-03-02 15:46 - 00001101 _____ () C:\Users\Public\Desktop\GMX-SMS-Manager.lnk
2014-03-02 15:46 - 2014-03-02 15:46 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\com.unitedinternet.ums.sms-mms-manager
2014-03-02 15:46 - 2014-03-02 15:46 - 00000000 ____D () C:\Program Files\GMX SMS-MMS-Manager
2014-03-02 09:14 - 2014-03-02 09:14 - 43342848 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes.dat
2014-03-02 09:14 - 2014-03-02 09:14 - 05801652 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-03-02 09:14 - 2014-03-02 09:14 - 02947160 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHDA.sys
2014-03-02 09:14 - 2014-03-02 09:14 - 02329816 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO.dll
2014-03-02 09:14 - 2014-03-02 09:14 - 01892056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSndMgr.cpl
2014-03-02 09:14 - 2014-03-02 09:14 - 00696013 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-03-02 09:14 - 2014-03-02 09:14 - 00125144 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoInstII.dll
2014-03-02 09:14 - 2013-06-06 00:14 - 00000000 ____D () C:\Windows\system32\RTCOM
2014-03-01 11:47 - 2014-02-28 23:17 - 00000000 ____D () C:\Program Files\ResultsAlpha
2014-02-28 23:19 - 2014-02-28 23:19 - 00012800 _____ () C:\ProgramData\dlprotect.exe
2014-02-28 23:16 - 2014-02-28 23:16 - 00000154 _____ () C:\Users\brooklinmon\Desktop\Goodgame Empire.url
2014-02-28 23:15 - 2014-02-28 23:15 - 00695632 _____ () C:\Users\brooklinmon\Downloads\easybrake-1020-Downloader.exe
2014-02-27 21:15 - 2013-06-06 08:20 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\XnView
2014-02-25 12:24 - 2013-06-07 10:38 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-02-25 12:24 - 2013-06-07 10:38 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-02-25 12:21 - 2014-02-15 12:42 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-02-25 12:21 - 2013-06-11 04:01 - 00000000 ___RD () C:\Program Files\Skype
2014-02-25 12:21 - 2013-06-11 04:01 - 00000000 ____D () C:\ProgramData\Skype
2014-02-25 00:41 - 2013-06-26 10:24 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\MyPhoneExplorer
2014-02-24 22:06 - 2013-06-11 04:01 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\Skype
2014-02-24 11:26 - 2013-06-06 00:16 - 00104398 _____ () C:\Windows\PFRO.log
2014-02-24 00:35 - 2014-02-24 00:32 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\foobar2000
2014-02-24 00:32 - 2014-02-24 00:32 - 03762776 _____ (foobar2000.org) C:\Users\brooklinmon\Downloads\foobar2000_v1.3.1.exe
2014-02-24 00:32 - 2014-02-24 00:32 - 00000989 _____ () C:\Users\Public\Desktop\foobar2000.lnk
2014-02-24 00:32 - 2014-02-24 00:32 - 00000000 ____D () C:\Program Files\foobar2000
2014-02-24 00:09 - 2013-08-21 14:04 - 00002180 _____ () C:\Users\Public\Desktop\Free Audio Converter.lnk
2014-02-24 00:09 - 2013-08-21 14:04 - 00000000 ____D () C:\Program Files\DVDVideoSoft
2014-02-24 00:08 - 2013-12-26 15:53 - 33524456 _____ (DVDVideoSoft Ltd. ) C:\Users\brooklinmon\Downloads\FreeAudioConverter.exe
2014-02-24 00:08 - 2013-08-21 14:04 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft
2014-02-24 00:08 - 2013-07-26 21:16 - 00000000 ____D () C:\Users\brooklinmon\AppData\Roaming\DVDVideoSoft
2014-02-22 11:54 - 2014-02-22 11:54 - 00380416 _____ () C:\Users\brooklinmon\Downloads\Gmer-19357.exe
2014-02-22 01:05 - 2014-02-22 01:05 - 00461088 _____ () C:\Users\brooklinmon\Documents\landrover 2.odt
2014-02-22 00:49 - 2014-02-22 00:47 - 00460798 _____ () C:\Users\brooklinmon\Documents\landrover 1.odt
2014-02-22 00:11 - 2014-02-14 23:03 - 00012271 _____ () C:\Users\brooklinmon\Documents\vor dem schaufenster des schlachters.odt
2014-02-20 10:51 - 2013-06-06 00:11 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-02-20 10:50 - 2014-02-20 10:50 - 00000000 ____D () C:\Users\brooklinmon\Downloads\renesas_usb3_mb
2014-02-20 10:50 - 2014-02-20 10:50 - 00000000 ____D () C:\ProgramData\Downloaded Installations
2014-02-20 10:50 - 2014-02-20 10:50 - 00000000 ____D () C:\Program Files\Renesas Electronics
2014-02-20 10:49 - 2014-02-20 10:49 - 16817256 _____ () C:\Users\brooklinmon\Downloads\renesas_usb3_mb.zip
2014-02-18 02:08 - 2014-02-18 00:36 - 00000000 ____D () C:\Program Files\SSD Tweaker
2014-02-18 02:01 - 2014-02-18 02:01 - 00004096 ___SH () C:\{D075A20F-3BD2-44BC-BF09-B30682582EB5}.CBM
2014-02-18 01:50 - 2014-02-18 01:50 - 00488960 ___SH () C:\EUMONBMP.SYS
2014-02-18 00:45 - 2014-02-18 00:43 - 00000968 _____ () C:\Users\Public\Desktop\SSD Fresh.lnk
2014-02-18 00:45 - 2014-02-18 00:43 - 00000000 ____D () C:\Program Files\SSD Fresh
2014-02-18 00:43 - 2014-02-18 00:43 - 00000000 ____D () C:\Users\brooklinmon\AppData\Local\Abelssoft
2014-02-18 00:42 - 2014-02-18 00:42 - 00002036 _____ () C:\Users\Public\Desktop\SSDlife Free.lnk
2014-02-18 00:42 - 2014-02-18 00:42 - 00000000 ____D () C:\ProgramData\Binarysense
2014-02-18 00:42 - 2014-02-18 00:42 - 00000000 ____D () C:\Program Files\BinarySense
2014-02-18 00:40 - 2014-02-18 00:40 - 02576384 _____ () C:\Users\brooklinmon\Downloads\SSDlife_Free_2.3.56.msi
2014-02-18 00:39 - 2014-02-18 00:39 - 02880000 _____ (Abelssoft ) C:\Users\brooklinmon\Downloads\ssdfresh_2014.exe
2014-02-18 00:35 - 2014-02-18 00:35 - 00613011 _____ () C:\Users\brooklinmon\Downloads\SSD31Tweaker.zip
2014-02-17 01:38 - 2014-02-17 01:24 - 00011297 _____ () C:\Users\brooklinmon\Documents\ein teppichmesser in der not 03.odt
2014-02-17 01:18 - 2014-02-17 01:18 - 00011261 _____ () C:\Users\brooklinmon\Documents\ein teppichmesser in der not 02.odt
2014-02-16 01:26 - 2014-02-16 00:43 - 00010606 _____ () C:\Users\brooklinmon\Documents\ein teppichmesser in der not.odt
2014-02-15 15:44 - 2013-07-02 23:22 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-02-14 21:54 - 2014-02-14 21:52 - 00000000 ____D () C:\ProgramData\ctyajht
2014-02-14 21:51 - 2014-02-14 21:46 - 00000000 ____D () C:\ProgramData\oopaf
2014-02-13 23:18 - 2014-02-13 23:18 - 00033238 _____ () C:\Users\brooklinmon\Documents\ein weißes rauschen.odt
2014-02-12 14:57 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-02-12 14:12 - 2013-07-11 11:47 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-12 14:11 - 2013-06-05 22:32 - 85946576 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-11 01:09 - 2014-02-11 01:00 - 00010787 _____ () C:\Users\brooklinmon\Documents\mein elefant.odt
2014-02-08 04:22 - 2014-02-08 03:55 - 00033228 _____ () C:\Users\brooklinmon\Documents\bemerkenswert2014.odt
2014-02-07 00:45 - 2014-02-06 01:32 - 00009727 _____ () C:\Users\brooklinmon\Documents\metzgerlatein.odt
2014-02-06 23:02 - 2013-06-13 21:44 - 00000000 ____D () C:\Program Files\MSI
2014-02-06 23:00 - 2013-06-05 09:42 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-06 22:58 - 2289-09-22 02:30 - 00100896 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst32.dll
2014-02-06 22:58 - 2014-02-06 22:58 - 00683736 _____ (Realtek ) C:\Windows\system32\Drivers\Rt86win7.sys
2014-02-06 22:58 - 2014-02-06 22:58 - 00076872 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 27369216 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 13881600 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 06176944 _____ (Dolby Laboratories) C:\Windows\system32\DDPP32A.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 05115672 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 03629824 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 02547928 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkPgExt.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01935104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01824000 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01677568 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek2.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01489072 _____ (Dolby Laboratories) C:\Windows\system32\DDPD32A.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 01097984 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO50.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00926976 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00919600 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00865592 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00860416 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00782040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApoApi.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00426944 _____ (DTS) C:\Windows\system32\DTSU2PLFX32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00403392 _____ (DTS) C:\Windows\system32\DTSU2PGFX32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00346048 _____ (DTS) C:\Windows\system32\DTSU2PREC32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00272048 _____ (Dolby Laboratories) C:\Windows\system32\DDPO32A.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00219312 _____ (Dolby Laboratories) C:\Windows\system32\DDPA32.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00215656 _____ (NVIDIA Corporation) C:\Windows\system32\NVCOSMU.DLL
2014-02-06 22:57 - 2014-02-06 22:57 - 00182472 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTACap.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00092584 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-02-06 22:57 - 2014-02-06 22:57 - 00018944 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvsmu.sys
2014-02-06 22:57 - 2013-06-05 09:42 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-02-06 19:23 - 2014-02-06 19:18 - 00040629 _____ () C:\LU4.log
2014-02-06 19:23 - 2013-06-06 00:11 - 00000000 ____D () C:\Program Files\Realtek
2014-02-06 01:39 - 2013-08-19 00:04 - 00001020 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-02-05 22:11 - 2014-02-05 17:06 - 00000000 ____D () C:\Program Files\MOBILedit! PhoneCopier
2014-02-04 01:19 - 2014-02-04 00:47 - 00010401 _____ () C:\Users\brooklinmon\Documents\ein krankes tier3.odt
2014-02-04 00:40 - 2014-02-04 00:40 - 00009989 _____ () C:\Users\brooklinmon\Documents\ein krankes tier2.odt
2014-02-04 00:36 - 2014-02-04 00:36 - 00009693 _____ () C:\Users\brooklinmon\Documents\ein krankes tier.odt
2014-02-02 02:34 - 2014-02-02 02:29 - 00009751 _____ () C:\Users\brooklinmon\Documents\alle gläser einer samstagnacht.odt

Files to move or delete:
====================
C:\Windows\System32\mctadmin.exe
C:\ProgramData\dlprotect.exe
C:\Users\brooklinmon\setup.exe


Some content of TEMP:
====================
C:\Users\brooklinmon\AppData\Local\Temp\abelssoft.setup.exe
C:\Users\brooklinmon\AppData\Local\Temp\avgnt.exe
C:\Users\brooklinmon\AppData\Local\Temp\Foxit Reader Updater.exe
C:\Users\brooklinmon\AppData\Local\Temp\Quarantine.exe
C:\Users\brooklinmon\AppData\Local\Temp\vlc-2.1.3-win32.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-28 12:14

==================== End Of Log ============================
2. Addition

Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 04-03-2014 01
Ran by brooklinmon at 2014-03-04 14:00:51
Running from C:\Users\brooklinmon\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

µTorrent (HKCU\...\uTorrent) (Version: 3.3.2.30260 - BitTorrent Inc.)
7-Zip 9.20 (HKLM\...\7-Zip) (Version:  - )
Adobe AIR (HKLM\...\Adobe AIR) (Version: 4.0.0.1390 - Adobe Systems Incorporated)
Adobe AIR (Version: 4.0.0.1390 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 11 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 11.7.700.224 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 12.0.0.70 - Adobe Systems Incorporated)
Adobe Photoshop Lightroom 5.2 (HKLM\...\{12A54F16-7F2E-4D42-BBCA-E0CC3CBF0457}) (Version: 5.2.1 - Adobe)
Alfa eBooks Manager 4 (HKLM\...\{89CA723D-1F92-4888-A326-1943579C8BFC}) (Version: 4.9.0 - Alfa.NetSoft)
Amazon Cloud Player (HKCU\...\Amazon Amazon Cloud Player) (Version: 2.2.0.399 - Amazon Services LLC)
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.3.338 - Avira)
Canon Utilities Digital Photo Professional 3.10 (HKLM\...\DPP) (Version: 3.10.2.0 - Canon Inc.)
Canon Utilities EOS Utility (HKLM\...\EOS Utility) (Version: 2.10.2.0 - Canon Inc.)
Canon Utilities Movie Uploader for YouTube (HKLM\...\MovieUploaderForYouTube) (Version: 1.2.0.7 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM\...\PhotoStitch) (Version: 3.1.22.46 - Canon Inc.)
Canon Utilities Picture Style Editor (HKLM\...\Picture Style Editor) (Version: 1.9.0.0 - Canon Inc.)
CloudReading (HKLM\...\{41914D8B-9D6E-4764-A1F9-BC43FB6782C1}_is1) (Version: 1.1.47.1220 - Foxit Corporation)
Common Desktop Agent (Version: 1.62.0 - OEM) Hidden
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Digitale Bibliothek (HKLM\...\Digitale Bibliothek) (Version:  - )
Dr. Hardware 2013 13.6d (HKLM\...\Dr. Hardware 2013_is1) (Version:  - Peter A. Gebhard)
EaseUS Partition Master 9.3.0 (HKLM\...\EaseUS Partition Master_is1) (Version:  - EaseUS)
EaseUS Todo Backup Free 6.1 (HKLM\...\EaseUS Todo Backup Free 6.1_is1) (Version: 6.1 - CHENGDU YIWO Tech Development Co., Ltd)
foobar2000 v1.3.1 (HKLM\...\foobar2000) (Version: 1.3.1 - Peter Pawlowski)
Fotogalerie (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Foxit Reader (HKLM\...\Foxit Reader_is1) (Version: 6.1.2.1224 - Foxit Corporation)
Free Audio Converter version 5.0.33.213 (HKLM\...\Free Audio Converter_is1) (Version: 5.0.33.213 - DVDVideoSoft Ltd.)
Free Disc Burner version 3.0.19.925 (HKLM\...\Free Disc Burner_is1) (Version: 3.0.19.925 - DVDVideoSoft Ltd.)
FreeCommander 2009.02b (HKLM\...\FreeCommander_is1) (Version: 2009.02 - Marek Jasinski)
Freemake Video Converter Version 4.0.1 (HKLM\...\Freemake Video Converter_is1) (Version: 4.0.1 - Ellora Assets Corporation)
GMX MailCheck für Internet Explorer (HKLM\...\1&1 Mail & Media GmbH Toolbar IE8) (Version: 2.4.0.0 - 1&1 Mail & Media GmbH)
GMX MediaCenter 1.5.2192.0 (HKCU\...\GMX Application {sync-000021}) (Version: 1.5.2192.0 - 1&1 Mail & Media GmbH)
GMX SMS-Manager (HKLM\...\com.unitedinternet.ums.sms-mms-manager) (Version: 3.2.4 - 1 und 1 Internet AG)
GMX SMS-Manager (Version: 3.2.4 - 1 und 1 Internet AG) Hidden
GMX Softwareaktualisierung (HKLM\...\1&1 Mail & Media GmbH 1und1Softwareaktualisierung) (Version: 3.0.0.55 - 1&1 Mail & Media GmbH)
GMX Softwareaktualisierung CE (HKCU\...\1&1 Mail & Media GmbH 1und1Softwareaktualisierung) (Version: 3.0.1.0 - 1&1 Mail & Media GmbH)
Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (Version: 1.3.22.5 - Google Inc.) Hidden
Hamster Free EbookConverter (HKLM\...\{441AC599-200D-4E04-B274-C6B7B50C281D}_is1) (Version: 1.0.0.13 - HamsterSoft)
Hightail Desktop App (HKLM\...\{74EE14D5-0E12-49C2-9C46-5C1F908BA0FC}) (Version: 2.4.7.1621 - Hightail)
Java Auto Updater (Version: 2.0.3.1 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 24 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216024FF}) (Version: 6.0.240 - Oracle)
KooBits 4.0 (HKLM\...\koobits.koobits4.com) (Version: 4.0.1.7 - UNKNOWN)
KooBits 4.0 (Version: 4.0.1 - UNKNOWN) Hidden
LightZone 4.0.0 (HKLM\...\3263-1164-2624-0047) (Version: 4.0.0 - LightZone Project)
Liveupdate4 (HKLM\...\Liveupdate4_is1) (Version:  - MSI, Inc.)
Logitech Unifying-Software 2.10 (HKLM\...\Logitech Unifying) (Version: 2.10.37 - Logitech)
MartView (HKLM\...\MartView) (Version: 2.52 - MartView)
MartView (Version: 2.52 - MartView) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Movie Maker (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 27.0.1 (x86 de) (HKLM\...\Mozilla Firefox 27.0.1 (x86 de)) (Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 27.0.1 - Mozilla)
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (Version: 16.4.1108.0727 - Microsoft) Hidden
MyPhoneExplorer (HKLM\...\MPE) (Version: 1.8.5 - F.J. Wechselberger)
NetSpeedMonitor 2.5.4.0 x86 (HKLM\...\{86501894-E722-4385-A792-B7C2F28FAE7B}) (Version: 2.5.4.0 - Florian Gilles)
NVIDIA Control Panel 307.83 (Version: 307.83 - NVIDIA Corporation) Hidden
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.5 - NVIDIA Corporation)
NVIDIA Graphics Driver 307.83 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 307.83 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.109.706 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (HKLM\...\NVIDIAStereo) (Version: 7.15.11.9038 - NVIDIA Corporation)
NVIDIA Update 1.10.8 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.10.8 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.10.8 - NVIDIA Corporation) Hidden
OpenOffice 4.0.1 (HKLM\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Photo Common (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Photo Gallery (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
RawTherapee Version 4.0.11 (HKLM\...\{128459AB-59A7-430A-8BD0-3D8803D50400}_is1) (Version: 4.0.11 - rawtherapee.com)
Reader for PC (HKLM\...\{71FB3127-E6B2-4058-ACEE-99813554FAB6}) (Version: 2.2.00.11270 - Sony Corporation)
Realtek Ethernet Controller Driver For Windows 7 (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.53.216.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7116 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.34.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (Version: 2.0.34.0 - Renesas Electronics Corporation) Hidden
ResultsAlpha (HKLM\...\ResultsAlpha) (Version: 2014.02.26.045520 - ResultsAlpha)
RetroShare (HKLM\...\RetroShare) (Version:  - )
Samsung Easy Printer Manager (HKLM\...\Samsung Easy Printer Manager) (Version: 1.03.72.00(20.09.2013) - Samsung Electronics Co., Ltd.)
Simply Good Pictures 2 (HKLM\...\{DD2FEA6F-5AC2-46B2-0001-C2A0C077FD2C}) (Version: 2.0.13.115 - Engelmann Media GmbH)
Skype Click to Call (HKLM\...\{BB285C9F-C821-4770-8970-56C4AB52C87E}) (Version: 7.0.14735.1561 - Microsoft Corporation)
Skype™ 6.11 (HKLM\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
SleepTimer Ultimate 1.2 (HKLM\...\{0EE56463-49B2-45E1-B74F-3E0139DBC986}_is1) (Version:  - Christian Handorf)
SlimDrivers (HKLM\...\{E1D00057-82F0-4EA1-91C2-270682EB9C98}) (Version: 2.2.30423 - SlimWare Utilities, Inc.)
SopCast 3.8.2 (HKLM\...\SopCast) (Version: 3.8.2 - www.sopcast.com)
SSD Fresh (HKLM\...\SSD Fresh_is1) (Version: 2014 - Abelssoft)
SSDlife Free (HKLM\...\{F371CE3B-8994-44E3-9518-92B22EE4A7FF}) (Version: 2.3.56 - BinarySense Inc.)
Torrent Stream 2.0 (HKCU\...\TorrentStream) (Version: 2.0 - Torrent Stream)
UBCD4Win 3.60 (HKLM\...\UBCD4Win_is1) (Version:  - UBCD4Win Team - Benjamin Burrows)
VIS (HKLM\...\VIS) (Version:  - ) <==== ATTENTION
VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)
Winamp (HKLM\...\Winamp) (Version: 5.65  - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows Live Communications Platform (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
Windows Live Essentials (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
World of Warplanes (HKLM\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C813EU}_is1) (Version:  - Wargaming.net)
XnView 2.04 (HKLM\...\XnView_is1) (Version: 2.04 - Gougelet Pierre-e)

==================== Restore Points  =========================

17-02-2014 23:37:13 SSD Tweaker restore point
17-02-2014 23:41:58 Installed SSDlife Free
18-02-2014 01:05:07 SSD Tweaker restore point
18-02-2014 01:07:14 SSD Tweaker restore point
19-02-2014 09:11:13 Windows Update
20-02-2014 09:50:42 Installiert Renesas Electronics USB 3.0 Host Controller Driver
25-02-2014 14:52:57 Windows Update
28-02-2014 16:30:15 Windows Update
02-03-2014 08:13:05 Driver Booster : Realtek High Definition Audio
04-03-2014 06:24:04 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {1B975B81-1F49-47BD-978B-D5CD79FD41A3} - System32\Tasks\Registration 1und1 Task => C:\Program Files\1und1Softwareaktualisierung\cdsupdclient.exe [2013-06-18] (1&1 Mail & Media GmbH)
Task: {43DE88ED-CDDA-44E6-AE5F-75949ED4A29C} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {6E18C6F4-BCDB-448D-880B-DD415B67D65A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-09-25] (Google Inc.)
Task: {97B6E8F4-5055-422E-A367-4B920FAE2BA2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-09-25] (Google Inc.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2006-12-09 12:54 - 2006-12-09 12:54 - 00022723 _____ () C:\Windows\System32\sugg1l3.dll
2013-06-05 10:41 - 2013-01-25 18:25 - 00397704 _____ () C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll
2013-12-14 00:59 - 2013-09-04 11:19 - 00098888 _____ () C:\Program Files\EaseUS\Todo Backup\bin\CodeLog.dll
2013-12-14 00:59 - 2013-11-14 14:59 - 00031304 _____ () C:\Program Files\EaseUS\Todo Backup\bin\CheckTool.dll
2013-12-14 00:59 - 2013-09-04 11:19 - 00029768 _____ () C:\Program Files\EaseUS\Todo Backup\bin\CompressFile.dll
2013-12-14 00:59 - 2008-11-25 17:18 - 01291264 _____ () C:\Program Files\EaseUS\Todo Backup\bin\libxml2.dll
2013-12-14 00:59 - 2004-10-05 03:08 - 00055808 _____ () C:\Program Files\EaseUS\Todo Backup\bin\zlib1.dll
2013-12-14 00:59 - 2013-09-04 11:19 - 00050248 _____ () C:\Program Files\EaseUS\Todo Backup\bin\TBGetRemoteNetInfo.dll
2013-12-14 00:59 - 2013-10-24 17:46 - 00106568 _____ () C:\Program Files\EaseUS\Todo Backup\bin\ActivationOnline.dll
2013-12-14 00:59 - 2013-09-04 11:19 - 00249928 _____ () C:\Program Files\EaseUS\Todo Backup\bin\uexper.dll
2013-12-14 00:59 - 2013-09-04 11:19 - 00030280 _____ () C:\Program Files\EaseUS\Todo Backup\bin\DiskSearchImg.dll
2013-12-14 00:59 - 2013-09-04 11:19 - 00293960 _____ () C:\Program Files\EaseUS\Todo Backup\bin\ExchBackupSize.dll
2013-12-14 00:59 - 2013-09-04 11:19 - 00578632 _____ () C:\Program Files\EaseUS\Todo Backup\bin\ExImage.dll
2013-12-14 00:59 - 2013-09-04 11:19 - 00468040 _____ () C:\Program Files\EaseUS\Todo Backup\bin\ExchBackupSizeEx.dll
2013-12-14 00:59 - 2013-09-04 11:19 - 00192072 _____ () C:\Program Files\EaseUS\Todo Backup\bin\EmailBackupSize.dll
2013-12-14 00:59 - 2013-09-04 11:19 - 00068680 _____ () C:\Program Files\EaseUS\Todo Backup\bin\EnumTapeDevice.dll
2013-12-14 00:59 - 2013-09-04 11:19 - 00069192 _____ () C:\Program Files\EaseUS\Todo Backup\bin\TbTapeBrowse.dll
2013-12-14 00:59 - 2013-09-04 11:19 - 00022600 _____ () C:\Program Files\EaseUS\Todo Backup\bin\AccountManager.dll
2013-12-14 00:59 - 2013-09-04 11:19 - 00115784 _____ () C:\Program Files\EaseUS\Todo Backup\bin\NasOperator.dll
2013-12-14 00:59 - 2013-09-04 11:19 - 00192584 _____ () C:\Program Files\EaseUS\Todo Backup\bin\EmailBrowser.dll
2013-12-14 00:59 - 2013-09-04 11:19 - 00135752 _____ () C:\Program Files\EaseUS\Todo Backup\bin\CloudOperator.dll
2013-12-14 00:59 - 2013-10-22 17:31 - 00037960 _____ () C:\Program Files\EaseUS\Todo Backup\bin\ActiveOnline.dll
2013-12-14 00:59 - 2013-09-04 11:19 - 00135240 _____ () C:\Program Files\EaseUS\Todo Backup\bin\VMConfig.dll
2013-12-14 00:59 - 2013-09-04 11:19 - 00096840 _____ () C:\Program Files\EaseUS\Todo Backup\bin\TBFireWall.dll
2012-03-09 09:58 - 2012-03-09 09:58 - 00350072 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
2012-03-09 09:58 - 2012-03-09 09:58 - 00056696 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll
2013-11-27 20:48 - 2013-11-27 20:48 - 00880640 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\fsk.dll
2013-11-27 20:49 - 2013-11-27 20:49 - 00040264 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\FskMediaPlayers.dll
2013-11-27 20:49 - 2013-11-27 20:49 - 00239944 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\Fskin.dll
2013-11-27 20:49 - 2013-11-27 20:49 - 00026952 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\FskinLocalize.dll
2013-11-26 11:34 - 2013-11-26 11:34 - 00798720 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\FskSecurity.dll
2013-11-27 20:49 - 2013-11-27 20:49 - 00125256 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\FskDocumentViewer.dll
2013-11-27 20:49 - 2013-11-27 20:49 - 00016200 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\FskPower.dll
2013-11-27 20:49 - 2013-11-27 20:49 - 00024904 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\FskNetInterface.dll
2013-11-27 20:49 - 2013-11-27 20:49 - 00017224 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\FskMobileMediaDevice.dll
2013-11-27 20:49 - 2013-11-27 20:49 - 00015176 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\FskTimeHardware.dll
2013-11-27 20:49 - 2013-11-27 20:49 - 00034632 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\ticket.dll
2013-11-27 20:49 - 2013-11-27 20:49 - 00018760 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\ebookDeviceNotifier.dll
2013-11-27 20:49 - 2013-11-27 20:49 - 00092488 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\ebookUsb.dll
2013-11-27 20:49 - 2013-11-27 20:49 - 00149832 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\readerAppHelper.dll
2013-11-27 20:49 - 2013-11-27 20:49 - 00178504 _____ () C:\Program Files\Sony\ReaderDesktop\appHelper\USBDetector.dll
2014-02-28 23:19 - 2014-02-28 23:19 - 00012800 _____ () C:\ProgramData\dlprotect.exe
2014-02-15 12:42 - 2014-02-15 12:42 - 03578992 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupreg: EaseUS EPM tray => C:\Program Files\EaseUS\EaseUS Partition Master 9.3.0\bin\EpmNews.exe
MSCONFIG\startupreg: EaseUs Tray => "C:\Program Files\EaseUS\Todo Backup\bin\TrayNotify.exe"
MSCONFIG\startupreg: EaseUs Watch => "C:\Program Files\EaseUS\Todo Backup\bin\EuWatch.exe"
MSCONFIG\startupreg: Hightail Sync Agent => "C:\Program Files\Hightail Desktop App\Hightail.exe"
MSCONFIG\startupreg: MailCheck IE Broker => "C:\Program Files\GMX MailCheck\IE\GMX_MailCheck_Broker.exe"
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

==================== Faulty Device Manager Devices =============

Name: WAN Miniport (IKEv2)
Description: WAN Miniport (IKEv2)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: RasAgileVpn
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver


==================== Event log errors: =========================

Application errors:
==================
Error: (03/04/2014 00:00:42 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Dependent Assembly Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (03/04/2014 11:36:46 AM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Dependent Assembly Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (03/02/2014 00:27:50 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Dependent Assembly Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (03/02/2014 09:13:04 AM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface.  hr = 0x80070005, Access is denied.
.
This is often caused by incorrect security settings in either the writer or requestor process.


Operation:
   Gathering Writer Data

Context:
   Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
   Writer Name: System Writer
   Writer Instance ID: {e0d4d091-93a6-4b71-be3d-53a6cb0358ee}

Error: (03/01/2014 02:24:49 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Dependent Assembly Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (02/27/2014 02:45:26 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Dependent Assembly Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (02/25/2014 02:28:45 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Dependent Assembly Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (02/23/2014 05:58:20 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (02/23/2014 05:58:20 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (02/23/2014 05:58:20 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.


System errors:
=============
Error: (03/04/2014 01:38:12 PM) (Source: EventLog) (User: )
Description: The previous system shutdown at 13:37:33 on ‎04.‎03.‎2014 was unexpected.

Error: (03/04/2014 10:23:56 AM) (Source: Disk) (User: )
Description: The driver detected a controller error on \Device\Harddisk0\DR0.

Error: (03/04/2014 10:23:56 AM) (Source: nvstor32) (User: )
Description: Data error on device.



Device: \Device\RaidPort0

Model: M4-CT128M4SSD2

Firmware Version: 000F

Serial Number: 000000001217090992B0

Port: 1

Error: (03/04/2014 10:22:23 AM) (Source: Disk) (User: )
Description: The driver detected a controller error on \Device\Harddisk0\DR0.

Error: (03/04/2014 10:22:23 AM) (Source: nvstor32) (User: )
Description: Data error on device.



Device: \Device\RaidPort0

Model: M4-CT128M4SSD2

Firmware Version: 000F

Serial Number: 000000001217090992B0

Port: 1

Error: (03/04/2014 07:48:10 AM) (Source: Service Control Manager) (User: )
Description: The Software Protection service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

Error: (03/04/2014 07:48:10 AM) (Source: Service Control Manager) (User: )
Description: The Windows Live ID Sign-in Assistant service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (03/04/2014 07:48:10 AM) (Source: Service Control Manager) (User: )
Description: The Skype Click to Call PNR Service service terminated unexpectedly.  It has done this 1 time(s).

Error: (03/04/2014 07:48:10 AM) (Source: Service Control Manager) (User: )
Description: The Skype Click to Call Updater service terminated unexpectedly.  It has done this 1 time(s).

Error: (03/04/2014 07:48:10 AM) (Source: Service Control Manager) (User: )
Description: The NVIDIA Display Driver Service service terminated unexpectedly.  It has done this 1 time(s).


Microsoft Office Sessions:
=========================
Error: (03/04/2014 00:00:42 PM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\IObit\driver booster\DpInst\x64\dpinst.exe

Error: (03/04/2014 11:36:46 AM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\IObit\driver booster\DpInst\x64\dpinst.exe

Error: (03/02/2014 00:27:50 PM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\IObit\driver booster\DpInst\x64\dpinst.exe

Error: (03/02/2014 09:13:04 AM) (Source: VSS)(User: )
Description: 0x80070005, Access is denied.


Operation:
   Gathering Writer Data

Context:
   Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
   Writer Name: System Writer
   Writer Instance ID: {e0d4d091-93a6-4b71-be3d-53a6cb0358ee}

Error: (03/01/2014 02:24:49 PM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\IObit\driver booster\DpInst\x64\dpinst.exe

Error: (02/27/2014 02:45:26 PM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\IObit\driver booster\DpInst\x64\dpinst.exe

Error: (02/25/2014 02:28:45 PM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\IObit\driver booster\DpInst\x64\dpinst.exe

Error: (02/23/2014 05:58:20 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.4053_none_cbf21254470d8752\MFC80U.DLL

Error: (02/23/2014 05:58:20 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.4053_none_cbf21254470d8752\MFC80U.DLL

Error: (02/23/2014 05:58:20 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.4053_none_cbf21254470d8752\MFC80U.DLL


==================== Memory info =========================== 

Percentage of memory in use: 46%
Total physical RAM: 2815.24 MB
Available physical RAM: 1495.42 MB
Total Pagefile: 5628.77 MB
Available Pagefile: 4116.12 MB
Total Virtual: 2047.88 MB
Available Virtual: 1891.72 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:119.14 GB) (Free:27.57 GB) NTFS
Drive d: (Volume) (Fixed) (Total:458.01 GB) (Free:105.59 GB) NTFS
Drive f: (backup) (Fixed) (Total:185.21 GB) (Free:5.87 GB) NTFS
Drive g: (seagate 3tb no 1) (Fixed) (Total:1228.67 GB) (Free:90.56 GB) NTFS
Drive h: (seagate 3tb no 2) (Fixed) (Total:1245.73 GB) (Free:921.77 GB) NTFS
Drive z: (DB31) (CDROM) (Total:0.59 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119 GB) (Disk ID: 5BAD3F0E)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=119 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 2795 GB) (Disk ID: 829E62A5)

Partition: GPT Partition Type.

========================================================
Disk: 2 (Size: 466 GB) (Disk ID: B986B986)

Partition: GPT Partition Type.

==================== End Of Log ============================
3. GMER

Code:
ATTFilter
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-03-04 14:16:13
Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\00000068 M4-CT128 rev.000F 119,24GB
Running: Gmer-19357.exe; Driver: C:\Users\BROOKL~1\AppData\Local\Temp\uwldqpog.sys


---- System - GMER 2.1 ----

SSDT            8D4E0696                                  ZwCreateSection
SSDT            8D4E06A0                                  ZwRequestWaitReplyPort
SSDT            8D4E069B                                  ZwSetContextThread
SSDT            8D4E06A5                                  ZwSetSecurityObject
SSDT            8D4E06AA                                  ZwSystemDebugControl
SSDT            8D4E0637                                  ZwTerminateProcess

---- Kernel code sections - GMER 2.1 ----

.text           ntkrnlpa.exe!ZwRollbackEnlistment + 142D  8327FA15 1 Byte  [06]
.text           ntkrnlpa.exe!KiDispatchInterrupt + 5A2    832B9212 19 Bytes  [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text           ntkrnlpa.exe!KeRemoveQueueEx + 11F7       832C058C 4 Bytes  [96, 06, 4E, 8D]
.text           ntkrnlpa.exe!KeRemoveQueueEx + 1553       832C08E8 4 Bytes  [A0, 06, 4E, 8D]
.text           ntkrnlpa.exe!KeRemoveQueueEx + 1597       832C092C 4 Bytes  [9B, 06, 4E, 8D]
.text           ntkrnlpa.exe!KeRemoveQueueEx + 1613       832C09A8 4 Bytes  [A5, 06, 4E, 8D]
.text           ntkrnlpa.exe!KeRemoveQueueEx + 1667       832C09FC 4 Bytes  [AA, 06, 4E, 8D]
.text           ...                                       
?               system32\DRIVERS\78521225.sys             The system cannot find the path specified. !

---- Devices - GMER 2.1 ----

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume1    EUBKMON.sys
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume1    eubakup.sys
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume2    EUBKMON.sys
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume2    eubakup.sys
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume3    EUBKMON.sys
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume3    eubakup.sys
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume4    EUBKMON.sys
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume4    eubakup.sys
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume5    EUBKMON.sys
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume5    eubakup.sys
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume6    EUBKMON.sys
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume6    eubakup.sys
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume7    EUBKMON.sys
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume7    eubakup.sys
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume8    EUBKMON.sys
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume8    eubakup.sys

---- EOF - GMER 2.1 ----
So, das wars erstmal von mir, bin hoffnungsvoll gespannt - und bereits vorsorglich dankbar - für die Zeit und Mühe, die sich (hoffentlich...) jemand nimmt/macht, um mir zu helfen!

Liebe Grüße,
Rainer

 

Themen zu Windows 7, Rechner friert ein, ist dlprotect.exe schuld?
4d36e972-e325-11ce-bfc1-08002be10318, antivir, askbar, browser, dlprotect.exe, download protect, driver booster, dvdvideosoft ltd., einfrieren, failed, goodgame, google, hacktool.agent, mozilla, pup.optional.conduit.a, pup.optional.opencandy, pup.optional.resultsalpha.a, pup.optional.softonic.a, realtek, required, security, svchost.exe, system, win32/speedingupmypc.b, win32/startpage.oph


« Windows8, Popups, Werbung im Browser, | Firefox lässt sich nicht mehr starten, auch nicht nach Neuinstallation (Win 7 prof. 64-Bit) »


Ähnliche Themen: Windows 7, Rechner friert ein, ist dlprotect.exe schuld?


  1. Windows 8: automatische Updatefunktion in den Diensten fehlt, Rechner friert gelegentlich ein/wird extrem langsam
    Log-Analyse und Auswertung - 07.07.2015 (1)
  2. Win 7: Rechner friert ein
    Log-Analyse und Auswertung - 09.02.2015 (17)
  3. Windows 8: dlprotect und snap do
    Log-Analyse und Auswertung - 28.03.2014 (17)
  4. Rechner "friert ein" - Entdeckung dlprotect.exe im Infobereich als Ursache?
    Plagegeister aller Art und deren Bekämpfung - 12.03.2014 (19)
  5. Windows 7 64bit - Rechner friert ein
    Log-Analyse und Auswertung - 01.10.2013 (1)
  6. Mein Rechner lädt so langsam in letzter Zeit Toolbar Quickshare daran schuld? (Snapshot.do virus? )
    Plagegeister aller Art und deren Bekämpfung - 27.08.2013 (13)
  7. [Windows 7] Rechner friert plötzlich ein
    Netzwerk und Hardware - 28.10.2012 (33)
  8. Ist Windows 8 Schuld?
    Alles rund um Windows - 19.07.2012 (4)
  9. Bin ich, bzw ist mein Rechner schuld?
    Diskussionsforum - 25.12.2011 (1)
  10. Rechner booted immer wieder neu - vermutlich Virus JAVA/Dldr.Agent.L daran Schuld
    Plagegeister aller Art und deren Bekämpfung - 06.04.2010 (9)
  11. Laptop sehr langsam und friert ein. Trojaner TR/Crypt.XPACK.Gen schuld?
    Plagegeister aller Art und deren Bekämpfung - 23.02.2010 (9)
  12. Windows 7 Absturz, schwerer Ausnahmefehler! Rechner friert ein.
    Alles rund um Windows - 28.12.2009 (1)
  13. I-Explorer friert ein/Antivir schuld?
    Log-Analyse und Auswertung - 21.07.2008 (2)
  14. Probleme mit Hotmail und Windows-Webseiten - Malware schuld?
    Plagegeister aller Art und deren Bekämpfung - 21.01.2008 (4)
  15. Rechner friert ein
    Netzwerk und Hardware - 23.09.2007 (5)
  16. Rechner friert ein
    Log-Analyse und Auswertung - 28.07.2007 (7)
  17. sp.exe schuld das windows nicht mehr startet?
    Plagegeister aller Art und deren Bekämpfung - 15.03.2005 (5)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Windows 7, Rechner friert ein, ist dlprotect.exe schuld? - Hallo, habe seit kurzem das Problem, dass der Rechner hin und wieder einfriert. Scanne mein System regelmäßig mit Avira (ist auch mein Echtzeitschutz/Scanner), hatte aber keinen Sucherfolg. Heute habe ich - Windows 7, Rechner friert ein, ist dlprotect.exe schuld?...
Archiv
Du betrachtest: Windows 7, Rechner friert ein, ist dlprotect.exe schuld? auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131