| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Windows 7: Startseite Nation Zoom einfach nicht entfernbarWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
05.12.2013, 19:15
| #1 |
| |  Windows 7: Startseite Nation Zoom einfach nicht entfernbar Guten Abend Leute, bin sehr froh, auf dieses Forum zu stoßen, super Sache! Nun zum Problem: Nachdem ich ausversehen eine nutzlose Datei installiert habe, erscheint als Startseite immer wieder "Nation Zoom". Auch diverse Programme haben sich einfach auf meinem PC installiert und sind immer wieder unter "Erweiterungen" bei Google Chrome zu finden. Was ich bisher unternommen habe: AntiVir scan - keine Funde Ich habe im Internet Explorer und in Google Chrome alle Erweiterungen entfernt, Startseite wieder auf Google gesetzt - hilft nicht, Nation Zoom erscheint weiterhin als Startseite Außerdem habe ich bereits 3 mal meinen PC mit dem ADW Cleaner und Malwarebytes durchsucht, Sachen wurden gelöscht, aber Nation Zoom erscheint immer wieder als Startseite. Die Programme, die sich selbst installiert haben, habe ich alle deinstalliert. Aktuelle logdateien: Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.12.04.06 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16721 XY :: XY-PC [Administrator] 05.12.2013 17:30:29 mbam-log-2013-12-05 (17-30-29).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 230157 Laufzeit: 8 Minute(n), 29 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) ADW Cleaner: # AdwCleaner v3.014 - Bericht erstellt am 05/12/2013 um 19:00:19 # Updated 01/12/2013 von Xplode # Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits) # Benutzername : XY - XY -PC # Gestartet von : C:\Users\XY\Downloads\adwcleaner.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** Datei Gelöscht : C:\Windows\System32\Tasks\NCH Software ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.16428 -\\ Google Chrome v [ Datei : C:\Users\XY\AppData\Local\Google\Chrome\User Data\Default\preferences ] ************************* AdwCleaner[R0].txt - [30140 octets] - [03/09/2013 14:15:13] AdwCleaner[R1].txt - [11975 octets] - [04/12/2013 19:53:41] AdwCleaner[R2].txt - [4126 octets] - [04/12/2013 20:14:38] AdwCleaner[R3].txt - [1258 octets] - [04/12/2013 23:45:53] AdwCleaner[R4].txt - [1349 octets] - [05/12/2013 17:22:08] AdwCleaner[R5].txt - [1470 octets] - [05/12/2013 18:59:27] AdwCleaner[S0].txt - [29088 octets] - [03/09/2013 14:17:26] AdwCleaner[S1].txt - [11584 octets] - [04/12/2013 19:54:46] AdwCleaner[S2].txt - [3691 octets] - [04/12/2013 20:16:11] AdwCleaner[S3].txt - [1324 octets] - [04/12/2013 23:47:07] AdwCleaner[S4].txt - [1411 octets] - [05/12/2013 17:25:06] AdwCleaner[S5].txt - [1391 octets] - [05/12/2013 19:00:19] ########## EOF - C:\AdwCleaner\AdwCleaner[S5].txt - [1451 octets] ########## Beste Grüße, Rob |
|
06.12.2013, 08:36
| #2 |
| /// the machine /// TB-Ausbilder    | Windows 7: Startseite Nation Zoom einfach nicht entfernbar hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
06.12.2013, 11:33
| #3 |
| | Windows 7: Startseite Nation Zoom einfach nicht entfernbar Danke für die schnelle Aw, FRST:
__________________FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-12-2013
Ran by Robert Jakob (administrator) on ROBERTJAKOB-PC on 06-12-2013 11:27:08
Running from C:\Users\Robert Jakob\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Acer) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Dropbox, Inc.) C:\Users\Robert Jakob\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Google Inc.) C:\Users\Robert Jakob\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Robert Jakob\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Robert Jakob\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Robert Jakob\AppData\Local\Google\Chrome\Application\chrome.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Microsoft Corporation) C:\Windows\System32\prevhost.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [hkcmd] - C:\Users\Robert Jakob\AppData\Roaming\Microsoft\system\hkcmd.exe
HKCU\...\Run: [Google Update] - C:\Users\Robert Jakob\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-06-17] (Google Inc.)
HKCU\...\Run: [AdobeBridge] - [x]
HKCU\...\Run: [Real Desktop] - "C:\Program Files (x86)\Real Desktop\rdesc.exe"
MountPoints2: E - E:\laucher.exe
MountPoints2: G - G:\laucher.exe
MountPoints2: {6eec68d5-1e9a-11e2-a726-705ab6d3acbc} - E:\laucher.exe
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [683576 2013-11-19] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2009-12-24] ()
AppInit_DLLs: [ ] ()
Startup: C:\Users\Robert Jakob\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Robert Jakob\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1386174428&from=tugs&uid=WDCXWD6400BEVT-22A0RT0_WD-WXC1A20T0329T0329&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1386174428&from=tugs&uid=WDCXWD6400BEVT-22A0RT0_WD-WXC1A20T0329T0329&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1386174428&from=tugs&uid=WDCXWD6400BEVT-22A0RT0_WD-WXC1A20T0329T0329&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.nationzoom.com/?type=hp&ts=1386174428&from=tugs&uid=WDCXWD6400BEVT-22A0RT0_WD-WXC1A20T0329T0329
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.nationzoom.com/?type=hp&ts=1386174428&from=tugs&uid=WDCXWD6400BEVT-22A0RT0_WD-WXC1A20T0329T0329
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1386174428&from=tugs&uid=WDCXWD6400BEVT-22A0RT0_WD-WXC1A20T0329T0329&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1386174428&from=tugs&uid=WDCXWD6400BEVT-22A0RT0_WD-WXC1A20T0329T0329&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Chrome:
=======
CHR Extension: (Google Docs) - C:\Users\Robert Jakob\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Robert Jakob\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Robert Jakob\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Robert Jakob\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (DVDVideoSoft Browser Extension) - C:\Users\Robert Jakob\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.2_0
CHR Extension: (Google Wallet) - C:\Users\Robert Jakob\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR Extension: (Gmail) - C:\Users\Robert Jakob\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR StartMenuInternet: Google Chrome - C:\Users\Robert Jakob\AppData\Local\Google\Chrome\Application\chrome.exe hxxp://www.nationzoom.com/?type=sc&ts=1386174428&from=tugs&uid=WDCXWD6400BEVT-22A0RT0_WD-WXC1A20T0329T0329
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-11-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-19] (Avira Operations GmbH & Co. KG)
S3 MWLService; C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [305448 2009-09-10] (Egis Technology Inc.)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2012-06-18] ()
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [107416 2013-12-05] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-11-19] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-07] (Avira Operations GmbH & Co. KG)
S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [32512 2013-12-05] ()
S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-11-02] ()
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-06 11:27 - 2013-12-06 11:27 - 00011209 _____ C:\Users\Robert Jakob\Downloads\FRST.txt
2013-12-06 11:26 - 2013-12-06 11:27 - 01925140 _____ (Farbar) C:\Users\Robert Jakob\Downloads\FRST64.exe
2013-12-05 19:40 - 2013-12-06 11:26 - 00000000 ____D C:\Users\Robert Jakob\Desktop\Malware
2013-12-05 18:27 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-12-05 18:22 - 2013-12-05 18:22 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-05 18:22 - 2013-12-05 18:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-05 18:22 - 2013-12-05 18:22 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-05 18:22 - 2013-12-05 18:22 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-05 18:22 - 2013-12-05 18:22 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-05 18:22 - 2013-12-05 18:22 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-05 18:22 - 2013-12-05 18:22 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-05 18:22 - 2013-12-05 18:22 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-05 18:22 - 2013-12-05 18:22 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-05 18:22 - 2013-12-05 18:22 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-05 18:22 - 2013-12-05 18:22 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-05 18:20 - 2013-12-05 18:27 - 00010277 _____ C:\Windows\IE11_main.log
2013-12-05 17:48 - 2013-12-05 17:48 - 00032512 _____ C:\Windows\system32\Drivers\hitmanpro37.sys
2013-12-05 00:31 - 2013-12-05 00:31 - 00001500 _____ C:\Windows\system32\.crusader
2013-12-05 00:04 - 2013-12-05 00:32 - 00000000 ____D C:\ProgramData\HitmanPro
2013-12-05 00:04 - 2013-12-05 00:04 - 00000000 ____D C:\Program Files\HitmanPro
2013-12-04 23:44 - 2013-12-04 23:44 - 10264904 _____ (SurfRight B.V.) C:\Users\Robert Jakob\Downloads\HitmanPro_x64.exe
2013-12-04 23:33 - 2013-12-04 23:33 - 07921688 _____ (VS Revo Group ) C:\Users\Robert Jakob\Downloads\RevoUninProSetup259.exe
2013-12-04 23:33 - 2013-12-04 23:33 - 00000000 ____D C:\Users\Robert Jakob\AppData\Local\VS Revo Group
2013-12-04 23:33 - 2013-12-04 23:33 - 00000000 ____D C:\Program Files\VS Revo Group
2013-12-04 23:33 - 2009-12-30 11:21 - 00031800 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys
2013-12-04 20:14 - 2013-12-04 20:14 - 01110034 _____ C:\Users\Robert Jakob\Downloads\MainOffer1.exe
2013-12-04 20:04 - 2013-12-06 11:20 - 00000000 ____D C:\FRST
2013-12-04 19:52 - 2013-12-04 19:52 - 00000000 ____D C:\Users\Robert Jakob\AppData\Roaming\Mozilla
2013-12-04 19:51 - 2013-12-04 19:51 - 01110034 _____ C:\Users\Robert Jakob\Downloads\MainOffer.exe
2013-12-04 18:08 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-12-04 18:08 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-12-04 18:07 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-12-04 18:07 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-12-04 18:07 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-12-04 18:07 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-12-04 18:07 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-12-04 18:07 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-12-04 18:07 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-12-04 18:06 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-12-04 18:06 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-12-04 18:06 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-12-04 18:06 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-12-04 18:06 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-12-04 18:06 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-12-04 18:06 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-12-04 18:06 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-12-04 18:06 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-12-04 18:06 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-12-04 18:06 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-12-04 18:06 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-12-04 18:06 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-12-04 18:06 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-12-04 18:06 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-12-04 18:06 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-12-04 18:05 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-12-04 18:05 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-12-04 18:05 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-12-04 18:05 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-12-04 18:05 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-12-04 17:47 - 2013-12-04 17:47 - 00000000 ____D C:\Users\Robert Jakob\AppData\Roaming\Malwarebytes
2013-12-04 17:46 - 2013-12-04 17:46 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-04 17:46 - 2013-12-04 17:46 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-04 17:46 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-04 17:45 - 2013-12-04 17:45 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Robert Jakob\Downloads\mbam-setup-1.75.0.1300.exe
2013-12-04 17:31 - 2013-12-05 18:29 - 01591306 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-04 17:29 - 2013-12-04 17:29 - 00000554 _____ C:\Windows\KB893803v2.log
2013-12-04 17:27 - 2013-12-04 17:29 - 00000000 ____D C:\ProgramData\WPM
2013-12-03 22:27 - 2013-12-03 22:27 - 00018345 _____ C:\Users\Robert Jakob\AppData\Local\recently-used.xbel
2013-11-28 17:35 - 2013-11-28 17:35 - 15933986 _____ C:\Users\Robert Jakob\Downloads\iZotope_Vinyl_v1_73c (2).dmg
2013-11-25 09:20 - 2013-12-04 23:48 - 00021308 _____ C:\Windows\PFRO.log
2013-11-24 17:43 - 2013-11-24 17:44 - 19192342 _____ C:\Users\Robert Jakob\Downloads\Windows_7_TOP50Gadgets.zip
2013-11-24 17:34 - 2013-11-24 17:34 - 00000000 ____D C:\Users\Robert Jakob\AppData\Roaming\LibreOffice
2013-11-24 17:31 - 2013-11-24 17:32 - 00000000 ____D C:\Program Files (x86)\LibreOffice 4
2013-11-24 17:05 - 2013-11-24 17:10 - 215306240 _____ C:\Users\Robert Jakob\Downloads\LibreOffice_4.1.3_Win_x86.msi
2013-11-24 13:35 - 2013-11-24 13:36 - 00000000 ____D C:\Users\Robert Jakob\Documents\PDF
2013-11-24 13:34 - 2013-11-24 17:03 - 00000000 ____D C:\Users\Robert Jakob\Documents\GIMP
2013-11-24 13:34 - 2013-11-24 13:36 - 00000000 ____D C:\Users\Robert Jakob\Documents\Texte
2013-11-24 13:33 - 2013-11-24 13:35 - 00000000 ____D C:\Users\Robert Jakob\Documents\Design Pro 5
2013-11-24 13:32 - 2013-11-24 13:33 - 00000000 ____D C:\Users\Robert Jakob\Documents\Sonstige
2013-11-24 12:04 - 2013-11-24 12:04 - 00000000 ____D C:\Users\Robert Jakob\Desktop\Album
2013-11-22 20:01 - 2013-11-22 20:01 - 00000000 ____D C:\Program Files\Common Files\Avid
2013-11-22 17:31 - 2013-11-22 17:31 - 00000000 __HDC C:\ProgramData\{DA41B533-8916-419A-971A-1203C2CA5793}
2013-11-22 17:23 - 2013-11-22 17:23 - 00000000 __HDC C:\ProgramData\{ECEB696F-D119-48DB-8D62-E8C1E165F5CE}
2013-11-22 15:48 - 2013-11-22 16:02 - 782744906 _____ C:\Users\Robert Jakob\Downloads\DrumMicA (1).zip
2013-11-22 15:42 - 2013-11-22 20:03 - 00000000 __HDC C:\ProgramData\{51219C66-4A99-4FA4-9EE9-2ACA1ED441D1}
2013-11-21 17:45 - 2013-11-21 17:45 - 00000000 ____D C:\Users\Robert Jakob\Downloads\DrumMicA (2)
2013-11-21 14:22 - 2013-11-21 16:25 - 783785041 _____ C:\Users\Robert Jakob\Downloads\DrumMicA (2).zip
2013-11-21 00:31 - 2013-11-21 00:31 - 00000000 ____D C:\Users\Robert Jakob\AppData\Local\Native Instruments
2013-11-21 00:23 - 2013-11-21 00:23 - 00000000 __HDC C:\ProgramData\{57A1F65A-0C85-4002-9121-DF864126D485}
2013-11-20 21:35 - 2013-11-22 20:01 - 00000000 ____D C:\Program Files\Native Instruments
2013-11-20 21:35 - 2013-11-22 17:25 - 00000000 ____D C:\Program Files\Common Files\Native Instruments
2013-11-20 21:35 - 2013-11-20 21:35 - 00000000 ____D C:\ProgramData\Native Instruments
2013-11-20 14:27 - 2013-11-20 18:24 - 813692928 _____ C:\Users\Robert Jakob\Downloads\DrumMicA (1).iso
2013-11-19 11:30 - 2013-11-19 11:30 - 00302412 _____ C:\Users\Robert Jakob\Downloads\Vorgaben Assignment 3 Blogeinträge
2013-11-14 17:30 - 2013-11-14 17:30 - 00000705 _____ C:\Users\Robert Jakob\Downloads\FFPluginSuite-License-2013-11-14 (1).fnlf
2013-11-14 17:22 - 2013-11-14 17:22 - 00000705 _____ C:\Users\Robert Jakob\Downloads\FFPluginSuite-License-2013-11-14.fnlf
2013-11-12 18:44 - 2013-11-12 18:45 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-11-12 18:44 - 2013-11-12 18:45 - 00000000 ____D C:\Program Files\iTunes
2013-11-12 18:44 - 2013-11-12 18:45 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-11-12 18:44 - 2013-11-12 18:44 - 00000000 ____D C:\Program Files\iPod
2013-11-11 21:34 - 2013-11-19 11:32 - 00000000 ___RD C:\Users\Robert Jakob\Desktop\Schreibstile 11.13
==================== One Month Modified Files and Folders =======
2013-12-06 11:27 - 2013-12-06 11:27 - 00011209 _____ C:\Users\Robert Jakob\Downloads\FRST.txt
2013-12-06 11:27 - 2013-12-06 11:26 - 01925140 _____ (Farbar) C:\Users\Robert Jakob\Downloads\FRST64.exe
2013-12-06 11:27 - 2012-06-23 13:51 - 00000000 ____D C:\Users\Robert Jakob\AppData\Local\Adobe
2013-12-06 11:26 - 2013-12-05 19:40 - 00000000 ____D C:\Users\Robert Jakob\Desktop\Malware
2013-12-06 11:24 - 2009-07-14 05:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-06 11:24 - 2009-07-14 05:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-06 11:23 - 2012-06-16 17:38 - 01782805 _____ C:\Windows\WindowsUpdate.log
2013-12-06 11:20 - 2013-12-04 20:04 - 00000000 ____D C:\FRST
2013-12-06 11:17 - 2012-06-25 15:29 - 00000000 ___RD C:\Users\Robert Jakob\Dropbox
2013-12-06 11:17 - 2012-06-25 15:27 - 00000000 ____D C:\Users\Robert Jakob\AppData\Roaming\Dropbox
2013-12-06 11:16 - 2013-10-15 19:54 - 00004704 _____ C:\Windows\setupact.log
2013-12-06 11:16 - 2012-06-17 13:51 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-06 11:16 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-06 01:00 - 2012-12-02 15:09 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-06 00:56 - 2012-06-17 13:51 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-06 00:47 - 2012-06-17 13:49 - 00001148 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-791847664-310780734-331296173-1001UA.job
2013-12-05 23:50 - 2013-06-08 13:56 - 00000000 ____D C:\Users\Robert Jakob\Desktop\SAE Stuff
2013-12-05 20:42 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-05 20:15 - 2013-03-30 20:39 - 00107416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-05 19:43 - 2013-09-23 22:01 - 00000000 ____D C:\Users\Robert Jakob\Desktop\English interviews
2013-12-05 19:41 - 2013-09-03 14:15 - 00000000 ____D C:\AdwCleaner
2013-12-05 18:58 - 2012-10-11 13:19 - 00000662 _____ C:\Windows\Tasks\WebContent AutoUpdate 2012.job
2013-12-05 18:53 - 2012-06-16 17:47 - 00001635 _____ C:\Users\Robert Jakob\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-05 18:49 - 2010-03-02 11:33 - 00000000 ____D C:\Windows\Panther
2013-12-05 18:46 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-12-05 18:29 - 2013-12-04 17:31 - 01591306 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-05 18:29 - 2012-06-17 03:30 - 00697098 _____ C:\Windows\system32\perfh007.dat
2013-12-05 18:29 - 2012-06-17 03:30 - 00148362 _____ C:\Windows\system32\perfc007.dat
2013-12-05 18:29 - 2009-07-14 06:13 - 01591306 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-05 18:27 - 2013-12-05 18:20 - 00010277 _____ C:\Windows\IE11_main.log
2013-12-05 18:22 - 2013-12-05 18:22 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-05 18:22 - 2013-12-05 18:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-05 18:22 - 2013-12-05 18:22 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-05 18:22 - 2013-12-05 18:22 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-05 18:22 - 2013-12-05 18:22 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-05 18:22 - 2013-12-05 18:22 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-05 18:22 - 2013-12-05 18:22 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-05 18:22 - 2013-12-05 18:22 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-05 18:22 - 2013-12-05 18:22 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-05 18:22 - 2013-12-05 18:22 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-05 18:22 - 2013-12-05 18:22 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-05 18:20 - 2010-03-02 11:55 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-05 17:48 - 2013-12-05 17:48 - 00032512 _____ C:\Windows\system32\Drivers\hitmanpro37.sys
2013-12-05 00:32 - 2013-12-05 00:04 - 00000000 ____D C:\ProgramData\HitmanPro
2013-12-05 00:31 - 2013-12-05 00:31 - 00001500 _____ C:\Windows\system32\.crusader
2013-12-05 00:31 - 2012-06-16 17:47 - 00000000 ___RD C:\Users\Robert Jakob\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-05 00:04 - 2013-12-05 00:04 - 00000000 ____D C:\Program Files\HitmanPro
2013-12-04 23:48 - 2013-11-25 09:20 - 00021308 _____ C:\Windows\PFRO.log
2013-12-04 23:44 - 2013-12-04 23:44 - 10264904 _____ (SurfRight B.V.) C:\Users\Robert Jakob\Downloads\HitmanPro_x64.exe
2013-12-04 23:36 - 2012-06-17 13:50 - 00000000 ____D C:\Users\Robert Jakob\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2013-12-04 23:33 - 2013-12-04 23:33 - 07921688 _____ (VS Revo Group ) C:\Users\Robert Jakob\Downloads\RevoUninProSetup259.exe
2013-12-04 23:33 - 2013-12-04 23:33 - 00000000 ____D C:\Users\Robert Jakob\AppData\Local\VS Revo Group
2013-12-04 23:33 - 2013-12-04 23:33 - 00000000 ____D C:\Program Files\VS Revo Group
2013-12-04 20:17 - 2010-03-02 12:03 - 00000000 ____D C:\Program Files\Google
2013-12-04 20:17 - 2010-03-02 12:03 - 00000000 ____D C:\Program Files (x86)\Google
2013-12-04 20:14 - 2013-12-04 20:14 - 01110034 _____ C:\Users\Robert Jakob\Downloads\MainOffer1.exe
2013-12-04 20:12 - 2012-06-17 13:48 - 00000000 ____D C:\Users\Robert Jakob\AppData\Local\Google
2013-12-04 20:12 - 2010-03-02 12:03 - 00000000 ____D C:\ProgramData\Google
2013-12-04 19:52 - 2013-12-04 19:52 - 00000000 ____D C:\Users\Robert Jakob\AppData\Roaming\Mozilla
2013-12-04 19:51 - 2013-12-04 19:51 - 01110034 _____ C:\Users\Robert Jakob\Downloads\MainOffer.exe
2013-12-04 19:51 - 2012-06-17 13:51 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-04 19:51 - 2012-06-17 13:51 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-04 18:12 - 2013-09-03 10:32 - 00000000 ____D C:\Windows\system32\MRT
2013-12-04 18:09 - 2013-09-03 10:32 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-04 17:47 - 2013-12-04 17:47 - 00000000 ____D C:\Users\Robert Jakob\AppData\Roaming\Malwarebytes
2013-12-04 17:46 - 2013-12-04 17:46 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-04 17:46 - 2013-12-04 17:46 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-04 17:45 - 2013-12-04 17:45 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Robert Jakob\Downloads\mbam-setup-1.75.0.1300.exe
2013-12-04 17:29 - 2013-12-04 17:29 - 00000554 _____ C:\Windows\KB893803v2.log
2013-12-04 17:29 - 2013-12-04 17:27 - 00000000 ____D C:\ProgramData\WPM
2013-12-04 17:27 - 2012-06-17 13:50 - 00002642 _____ C:\Users\Robert Jakob\Desktop\Google Chrome.lnk
2013-12-04 16:47 - 2012-06-17 13:49 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-791847664-310780734-331296173-1001Core.job
2013-12-03 22:27 - 2013-12-03 22:27 - 00018345 _____ C:\Users\Robert Jakob\AppData\Local\recently-used.xbel
2013-12-03 22:27 - 2012-07-14 19:33 - 00000000 ____D C:\Users\Robert Jakob\.gimp-2.8
2013-11-30 23:56 - 2013-06-09 17:40 - 00000000 ____D C:\Users\Robert Jakob\Desktop\Musik
2013-11-28 17:35 - 2013-11-28 17:35 - 15933986 _____ C:\Users\Robert Jakob\Downloads\iZotope_Vinyl_v1_73c (2).dmg
2013-11-26 20:32 - 2012-09-24 16:40 - 00000000 ____D C:\Users\Robert Jakob\Desktop\Wichtige Dokumente
2013-11-25 09:21 - 2009-07-14 05:45 - 05130136 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-24 17:59 - 2012-06-16 17:44 - 00000000 ____D C:\Users\Robert Jakob
2013-11-24 17:44 - 2013-11-24 17:43 - 19192342 _____ C:\Users\Robert Jakob\Downloads\Windows_7_TOP50Gadgets.zip
2013-11-24 17:43 - 2012-06-16 17:45 - 00142344 _____ C:\Users\Robert Jakob\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-24 17:38 - 2012-07-02 20:19 - 00000000 ___RD C:\Users\Robert Jakob\Desktop\Programme
2013-11-24 17:34 - 2013-11-24 17:34 - 00000000 ____D C:\Users\Robert Jakob\AppData\Roaming\LibreOffice
2013-11-24 17:32 - 2013-11-24 17:31 - 00000000 ____D C:\Program Files (x86)\LibreOffice 4
2013-11-24 17:10 - 2013-11-24 17:05 - 215306240 _____ C:\Users\Robert Jakob\Downloads\LibreOffice_4.1.3_Win_x86.msi
2013-11-24 17:03 - 2013-11-24 13:34 - 00000000 ____D C:\Users\Robert Jakob\Documents\GIMP
2013-11-24 13:42 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-11-24 13:36 - 2013-11-24 13:35 - 00000000 ____D C:\Users\Robert Jakob\Documents\PDF
2013-11-24 13:36 - 2013-11-24 13:34 - 00000000 ____D C:\Users\Robert Jakob\Documents\Texte
2013-11-24 13:35 - 2013-11-24 13:33 - 00000000 ____D C:\Users\Robert Jakob\Documents\Design Pro 5
2013-11-24 13:33 - 2013-11-24 13:32 - 00000000 ____D C:\Users\Robert Jakob\Documents\Sonstige
2013-11-24 13:26 - 2012-07-02 13:59 - 00007990 _____ C:\Users\Robert Jakob\AppData\Roaming\wklnhst.dat
2013-11-24 12:04 - 2013-11-24 12:04 - 00000000 ____D C:\Users\Robert Jakob\Desktop\Album
2013-11-24 11:59 - 2013-10-07 11:32 - 00000000 ____D C:\Users\Robert Jakob\Desktop\EP 2013
2013-11-22 20:03 - 2013-11-22 15:42 - 00000000 __HDC C:\ProgramData\{51219C66-4A99-4FA4-9EE9-2ACA1ED441D1}
2013-11-22 20:01 - 2013-11-22 20:01 - 00000000 ____D C:\Program Files\Common Files\Avid
2013-11-22 20:01 - 2013-11-20 21:35 - 00000000 ____D C:\Program Files\Native Instruments
2013-11-22 20:01 - 2012-06-25 20:03 - 00000000 ____D C:\Program Files (x86)\VstPlugins
2013-11-22 17:31 - 2013-11-22 17:31 - 00000000 __HDC C:\ProgramData\{DA41B533-8916-419A-971A-1203C2CA5793}
2013-11-22 17:25 - 2013-11-20 21:35 - 00000000 ____D C:\Program Files\Common Files\Native Instruments
2013-11-22 17:23 - 2013-11-22 17:23 - 00000000 __HDC C:\ProgramData\{ECEB696F-D119-48DB-8D62-E8C1E165F5CE}
2013-11-22 16:02 - 2013-11-22 15:48 - 782744906 _____ C:\Users\Robert Jakob\Downloads\DrumMicA (1).zip
2013-11-21 17:45 - 2013-11-21 17:45 - 00000000 ____D C:\Users\Robert Jakob\Downloads\DrumMicA (2)
2013-11-21 16:25 - 2013-11-21 14:22 - 783785041 _____ C:\Users\Robert Jakob\Downloads\DrumMicA (2).zip
2013-11-21 08:02 - 2012-10-11 13:19 - 00000506 _____ C:\Windows\Tasks\AutoUpdate Allplan 2012.job
2013-11-21 00:31 - 2013-11-21 00:31 - 00000000 ____D C:\Users\Robert Jakob\AppData\Local\Native Instruments
2013-11-21 00:23 - 2013-11-21 00:23 - 00000000 __HDC C:\ProgramData\{57A1F65A-0C85-4002-9121-DF864126D485}
2013-11-20 21:35 - 2013-11-20 21:35 - 00000000 ____D C:\ProgramData\Native Instruments
2013-11-20 18:24 - 2013-11-20 14:27 - 813692928 _____ C:\Users\Robert Jakob\Downloads\DrumMicA (1).iso
2013-11-20 14:30 - 2012-09-15 12:16 - 31365332 _____ C:\Users\Robert Jakob\Downloads\Incomplete - -Incomplete- EP.zip
2013-11-19 11:32 - 2013-11-11 21:34 - 00000000 ___RD C:\Users\Robert Jakob\Desktop\Schreibstile 11.13
2013-11-19 11:30 - 2013-11-19 11:30 - 00302412 _____ C:\Users\Robert Jakob\Downloads\Vorgaben Assignment 3 Blogeinträge
2013-11-19 10:56 - 2013-03-30 20:39 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-11-14 17:30 - 2013-11-14 17:30 - 00000705 _____ C:\Users\Robert Jakob\Downloads\FFPluginSuite-License-2013-11-14 (1).fnlf
2013-11-14 17:22 - 2013-11-14 17:22 - 00000705 _____ C:\Users\Robert Jakob\Downloads\FFPluginSuite-License-2013-11-14.fnlf
2013-11-12 18:45 - 2013-11-12 18:44 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-11-12 18:45 - 2013-11-12 18:44 - 00000000 ____D C:\Program Files\iTunes
2013-11-12 18:45 - 2013-11-12 18:44 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-11-12 18:44 - 2013-11-12 18:44 - 00000000 ____D C:\Program Files\iPod
2013-11-12 18:44 - 2012-06-29 16:20 - 00000000 ____D C:\ProgramData\Apple Computer
2013-11-11 21:31 - 2012-08-07 18:06 - 00000000 ____D C:\Users\Robert Jakob\Desktop\Games
2013-11-11 19:43 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration
2013-11-11 19:43 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\AppCompat
Some content of TEMP:
====================
C:\Users\Robert Jakob\AppData\Local\Temp\avgnt.exe
C:\Users\Robert Jakob\AppData\Local\Temp\BackupSetup.exe
C:\Users\Robert Jakob\AppData\Local\Temp\bi_cleaner.exe
C:\Users\Robert Jakob\AppData\Local\Temp\EnableExtDll.dll
C:\Users\Robert Jakob\AppData\Local\Temp\Quarantine.exe
C:\Users\Robert Jakob\AppData\Local\Temp\RDeskFree2.0-setup.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-11-30 13:32
==================== End Of Log ============================
Addition: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 05-12-2013
Ran by Robert Jakob at 2013-12-06 11:28:29
Running from C:\Users\Robert Jakob\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
Update for Microsoft Office 2007 (KB2508958) (x32)
3ga to mp3 Converter version 1.1 (x32 Version: 1.1)
7-PDF Maker Version 1.2.0 (Build 119) (x32 Version: 7-PDF Maker - Version 1.2.0 (Build 119))
Acer Crystal Eye webcam (x32 Version: 1.0.1.4)
Acer ePower Management (x32 Version: 5.00.3002)
Acer eRecovery Management (x32 Version: 4.05.3006)
Acer GameZone Console (x32 Version: 5.1.0.2)
Acer Registration (x32 Version: 1.02.3006)
Acer ScreenSaver (x32 Version: 1.1.0105.2010)
Acer Updater (x32 Version: 1.01.3017)
Acrobat.com (x32 Version: 1.6.65)
Adobe AIR (x32 Version: 3.5.0.1060)
Adobe CS6 Design and Web Premium (x32 Version: 6)
Adobe Download Assistant (x32 Version: 1.2.5)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117)
Adobe Help Manager (x32 Version: 4.0.244)
Adobe Reader 9.5.2 MUI (x32 Version: 9.5.2)
Adobe Shockwave Player 11.6 (x32 Version: 11.6.5.635)
Adobe Widget Browser (x32 Version: 2.0 Build 348)
Adobe Widget Browser (x32 Version: 2.0.348)
Alice Greenfingers (x32)
Amazonia (x32)
APB Reloaded (x32 Version: 1.4.1.587574)
Apple Application Support (x32 Version: 2.3.6)
Apple Mobile Device Support (Version: 7.0.0.117)
Apple Software Update (x32 Version: 2.1.3.127)
ASIO4ALL (x32 Version: 2.10)
Avira Free Antivirus (x32 Version: 14.0.1.759)
Bonjour (Version: 3.0.0.10)
Broadcom Gigabit NetLink Controller (Version: 12.52.01)
Canon Easy-PhotoPrint EX (x32)
Canon Easy-WebPrint EX (x32)
Canon MG5200 series Benutzerregistrierung (x32)
Canon MG5200 series MP Drivers
Canon MP Navigator EX 4.0 (x32)
Canon My Printer (x32)
Canon Solution Menu EX (x32)
CCleaner (Version: 4.00)
CD-LabelPrint (x32)
Chicken Invaders 2 (x32)
Compatibility Pack für 2007 Office System (x32 Version: 12.0.6612.1000)
CyberLink PowerDVD 9 (x32 Version: 9.0.2529.50)
Dairy Dash (x32)
DesignPro 5 (x32 Version: 5.5.708)
Dream Day First Home (x32)
Dropbox (HKCU Version: 2.0.22)
EAX4 Unified Redist (x32 Version: 4.001)
eBay Worldwide (x32 Version: 2.1.0901)
eSobi v2 (x32 Version: 2.0.4.000274)
ESS Energie Indikator (x32 Version: 2012.0)
Express Zip File Compression Software (x32)
Farm Frenzy 2 (x32)
Firebird SQL Server - MAGIX Edition (x32 Version: 2.1.27.0)
FL Studio 10 (x32)
Free YouTube Download version 3.2.12.827 (x32 Version: 3.2.12.827)
Free YouTube to MP3 Converter version 3.12.0.128 (x32 Version: 3.12.0.128)
GamersFirst LIVE! (x32)
General Runtime Files for Allplan 2012-1 Release (x32 Version: 1.6.0.0)
General Runtime Files for Nemetschek Softlock 2006 (x32 Version: 1.3.0.0)
General Runtime Files for Nemetschek Softlock 2006 64 (Version: 1.2.0.0)
GIMP 2.8.2 (Version: 2.8.2)
Google Chrome (HKCU Version: 31.0.1650.57)
Google Update Helper (x32 Version: 1.3.22.3)
Granny In Paradise (x32)
Heroes of Hellas (x32)
HitmanPro 3.7 (Version: 3.7.8.208)
Identity Card (x32 Version: 1.00.3003)
IL Download Manager (x32)
IL Shared Libraries (x32)
Iminent (x32 Version: 5.26.21.0) <==== ATTENTION
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Management Engine Components (x32 Version: 6.0.0.1179)
Intel(R) Rapid Storage Technology (x32 Version: 9.5.6.1001)
Intel(R) Turbo Boost Technology Driver (x32 Version: 01.00.01.1002)
iTunes (Version: 11.1.3.8)
Java 7 Update 9 (x32 Version: 7.0.90)
Java Auto Updater (x32 Version: 2.1.9.0)
JavaFX 2.1.1 (x32 Version: 2.1.1)
Junk Mail filter update (x32 Version: 14.0.8089.726)
Launch Manager (x32 Version: 4.0.6)
Left 4 Dead 2 (x32)
LibreOffice 4.1.3.2 (x32 Version: 4.1.3.2)
MAGIX Burn routines (64-Bit) (Version: 9.0.0.212)
MAGIX Low Latency Driver (64-Bit) (Version: 2.10.2011.0)
MAGIX Screenshare (x32 Version: 4.3.6.1987)
MAGIX Speed burnR (MSI) (x32 Version: 7.0.2.6)
MAGIX Video deluxe MX Plus (x32 Version: 11.0.0.38)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Merriam Websters Spell Jam (x32)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Choice Guard (x32 Version: 2.0.48.0)
Microsoft Office 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Excel MUI (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Language Pack 2007 - German/Deutsch (x32 Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office O MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint Viewer 2007 (German) (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Spanish) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proofing (English) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Shared 64-bit MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Shared Setup Metadata MUI (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office SharePoint Designer 2007 Service Pack 3 (SP3) (x32)
Microsoft Office SharePoint Designer MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Suite Activation Assistant (x32 Version: 2.9)
Microsoft Office Word MUI (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office X MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Report Viewer Redistributable 2008 (KB971119) (x32 Version: 9.0.30731)
Microsoft Report Viewer Redistributable 2008 (KB971119) (x32)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Works (x32 Version: 9.7.0621)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)
MSVCRT (x32 Version: 14.0.1468.721)
MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (KB973685) (x32 Version: 4.30.2107.0)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)
MyWinLocker (x32 Version: 3.1.76.0)
Native Instruments DrumMicA (Version: 1.0.0.002)
Native Instruments DrumMicA (x32)
Native Instruments Kontakt 5 (Version: 5.3.0.6464)
Native Instruments Kontakt 5 (x32 Version: 5.3.0.6464)
Native Instruments Service Center (Version: 2.4.1.1158)
Native Instruments Service Center (x32 Version: 2.4.1.1158)
Nemetschek Allplan 2012 (x32 Version: 2012.0)
Nemetschek SoftLock 2006 (x32 Version: 1.26.55)
Norton Online Backup (x32 Version: 1.2.0.36)
NTI Backup Now 5 (x32 Version: 5.1.2.616)
NTI Backup Now Standard (x32 Version: 5.1.2.616)
NTI Media Maker 8 (x32 Version: 8.0.2.6509)
NVIDIA Grafiktreiber 301.42 (Version: 301.42)
NVIDIA HD-Audiotreiber 1.3.16.0 (Version: 1.3.16.0)
NVIDIA Install Application (Version: 2.1002.75.420)
NVIDIA PhysX (x32 Version: 9.12.0213)
NVIDIA PhysX-Systemsoftware 9.12.0213 (Version: 9.12.0213)
NVIDIA Systemsteuerung 301.42 (Version: 301.42)
NVIDIA Update 1.8.15 (Version: 1.8.15)
NVIDIA Update Components (Version: 1.8.15)
OpenOffice.org 3.4.1 (x32 Version: 3.41.9593)
Pando Media Booster (x32 Version: 2.6.0.8)
PDF Architect (x32 Version: 1.1.83.9982)
PDF Settings CS6 (x32 Version: 11.0)
PDFCreator (x32 Version: 1.7.0)
Picasa 3 (x32 Version: 3.8)
PunkBuster Services (x32 Version: 0.993)
QuickTime (x32 Version: 7.74.80.86)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6015)
Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30113)
Revo Uninstaller Pro 2.5.9 (Version: 2.5.9)
Samplitude Pro X Silver (x32 Version: 12.0.2.115)
Samplitude Pro X Silver 64-Bit Addon for Samplitude Pro X Silver (x32 Version: 1.3.0.0)
Steam (x32 Version: 1.0.0.0)
Switch Sound File Converter (x32)
swMSM (x32 Version: 12.0.0.1)
Synaptics Pointing Device Driver (Version: 14.0.19.0)
Tibia (x32 Version: 10.10)
Tom Clancy's Splinter Cell Double Agent (x32 Version: 1.00.0000)
Überwachungstool für die Intel® Turbo-Boost-Technik (Version: 1.0.186.6)
Unity Web Player (HKCU Version: )
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft Office 2007 Help for Common Features (KB963673) (x32)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update for Microsoft Office Excel 2007 Help (KB963678) (x32)
Update for Microsoft Office OneNote 2007 Help (KB963670) (x32)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32)
Update for Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update for Microsoft Office Script Editor Help (KB963671) (x32)
Update for Microsoft Office Word 2007 Help (KB963665) (x32)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32)
Update für Microsoft Office Outlook 2007 Help (KB963677) (x32)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update für Microsoft Office Word 2007 Help (KB963665) (x32)
WAV To MP3 V2 (x32)
Welcome Center (x32 Version: 1.00.3012)
Windows Live Anmelde-Assistent (x32 Version: 5.000.818.5)
Windows Live Call (x32 Version: 14.0.8064.0206)
Windows Live Communications Platform (x32 Version: 14.0.8064.206)
Windows Live Essentials (x32 Version: 14.0.8089.0726)
Windows Live Essentials (x32 Version: 14.0.8089.726)
Windows Live Fotogalerie (x32 Version: 14.0.8081.709)
Windows Live Mail (x32 Version: 14.0.8089.0726)
Windows Live Messenger (x32 Version: 14.0.8089.0726)
Windows Live Movie Maker (x32 Version: 14.0.8091.0730)
Windows Live Sync (x32 Version: 14.0.8089.726)
Windows Live Writer (x32 Version: 14.0.8089.0726)
Windows Live-Uploadtool (x32 Version: 14.0.8014.1029)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)
XenoBot (x32 Version: 3.3.6)
==================== Restore Points =========================
30-11-2013 12:39:40 Geplanter Prüfpunkt
04-12-2013 17:00:18 Windows Update
04-12-2013 22:37:36 Revo Uninstaller Pro's restore point - Updater
04-12-2013 22:39:08 Revo Uninstaller Pro's restore point - Updater
05-12-2013 17:00:41 Windows Update
==================== Hosts content: ==========================
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {14EE3455-174D-4A8E-8AFA-256B515DED93} - \EPUpdater No Task File
Task: {27C12A4C-6644-4787-A5D7-6C26A55A38B8} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-03-25] (Piriform Ltd)
Task: {28937007-FABC-4280-9AAF-26F867E3478D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-17] (Google Inc.)
Task: {28A4B72F-A5FF-45D0-9C0B-A93483A1BD1E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-17] (Google Inc.)
Task: {62BBB288-5297-48E3-BC9E-C7EC7DDB48C7} - System32\Tasks\AutoUpdate Allplan 2012 => C:\Program Files (x86)\Nemetschek\Allplan\Prg\NemDownloadHandler.exe [2012-03-21] (Nemetschek Allplan GmbH)
Task: {69227825-9334-4197-B557-2AD0EDCE9AA2} - \BrowserDefendert No Task File
Task: {6BE7AE03-7E80-459A-82CD-6A18E23D70EF} - System32\Tasks\WebContent AutoUpdate 2012 => C:\Program Files (x86)\Nemetschek\Allplan\Prg\NemDownloadHandler.exe [2012-03-21] (Nemetschek Allplan GmbH)
Task: {8BB452D6-EFD6-4925-A1E4-98FECC5FC450} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-09] (Adobe Systems Incorporated)
Task: {91F39061-6FE2-428E-8932-7BE775C913B2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-791847664-310780734-331296173-1001UA => C:\Users\Robert Jakob\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-17] (Google Inc.)
Task: {AD899128-7BF3-4188-9992-3410588C536E} - System32\Tasks\AdobeAAMUpdater-1.0-RobertJakob-PC-Robert Jakob => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [2012-04-04] (Adobe Systems Incorporated)
Task: {BA1B8378-8FFF-4B89-832E-F23FF35F11D4} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-791847664-310780734-331296173-1001Core => C:\Users\Robert Jakob\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-17] (Google Inc.)
Task: {BADA724B-51C1-485F-8134-049236233230} - \NCH Software\ExpressZipReminder No Task File
Task: {CD82B5D9-8246-4600-8EB1-D7171E184DA9} - \NCH Software\ExpressZipDowngrade No Task File
Task: {E77F35F8-A5EA-4A6C-A798-DADE63CEF41E} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AutoUpdate Allplan 2012.job => C:\Program Files (x86)\Nemetschek\Allplan\prg\NemDownloadHandler.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-791847664-310780734-331296173-1001Core.job => C:\Users\Robert Jakob\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-791847664-310780734-331296173-1001UA.job => C:\Users\Robert Jakob\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\WebContent AutoUpdate 2012.job => C:\Program Files (x86)\Nemetschek\Allplan\prg\NemDownloadHandler.exe
==================== Loaded Modules (whitelisted) =============
2012-07-17 12:27 - 2012-05-15 10:28 - 00085824 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2013-01-11 21:38 - 2012-09-19 18:17 - 00397088 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2012-02-20 20:29 - 2012-02-20 20:29 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-02-20 20:28 - 2012-02-20 20:28 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2010-03-02 11:40 - 2009-12-24 02:32 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2013-03-13 21:48 - 2013-03-13 21:48 - 24978944 _____ () C:\Users\Robert Jakob\AppData\Roaming\Dropbox\bin\libcef.dll
2013-11-16 18:49 - 2013-11-14 12:28 - 00702416 _____ () C:\Users\Robert Jakob\AppData\Local\Google\Chrome\Application\31.0.1650.57\libglesv2.dll
2013-11-16 18:49 - 2013-11-14 12:28 - 00099792 _____ () C:\Users\Robert Jakob\AppData\Local\Google\Chrome\Application\31.0.1650.57\libegl.dll
2013-11-16 18:49 - 2013-11-14 12:29 - 04055504 _____ () C:\Users\Robert Jakob\AppData\Local\Google\Chrome\Application\31.0.1650.57\pdf.dll
2013-11-16 18:49 - 2013-11-14 12:29 - 00399312 _____ () C:\Users\Robert Jakob\AppData\Local\Google\Chrome\Application\31.0.1650.57\ppGoogleNaClPluginChrome.dll
2013-11-16 18:49 - 2013-11-14 12:28 - 01619408 _____ () C:\Users\Robert Jakob\AppData\Local\Google\Chrome\Application\31.0.1650.57\ffmpegsumo.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\Temp:373E1720
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (12/06/2013 11:22:41 AM) (Source: Application Hang) (User: )
Description: Programm FRST64.exe, Version 3.3.8.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 8c4
Startzeit: 01cef26cd42c67c7
Endzeit: 4
Anwendungspfad: C:\Users\Robert Jakob\Desktop\Malware\FRST64.exe
Berichts-ID: 47793615-5e60-11e3-8b3d-705ab6d3acbc
Error: (12/05/2013 09:30:23 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2075
Error: (12/05/2013 09:30:23 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2075
Error: (12/05/2013 09:30:23 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (12/05/2013 09:30:22 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1076
Error: (12/05/2013 09:30:22 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1076
Error: (12/05/2013 09:30:22 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (12/04/2013 11:37:34 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {96bddeae-fbbc-4c56-a9e4-f4ae74beadf9}
Error: (12/04/2013 06:52:14 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 14305
Error: (12/04/2013 06:52:14 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 14305
System errors:
=============
Error: (12/05/2013 06:53:04 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Kumulatives Sicherheitsupdate für Internet Explorer 10 unter Windows 7 Service Pack 1 für x64-basierte Systeme (KB2888505)
Error: (12/05/2013 05:10:11 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "HitmanPro 3.7 Crusader (Boot)" wurde mit folgendem dienstspezifischem Fehler beendet: %%0.
Error: (12/04/2013 11:48:49 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst SysMain erreicht.
Error: (12/04/2013 10:44:42 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Search Protect by Conduit Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (12/04/2013 08:17:30 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Search Protect by Conduit Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (11/30/2013 08:48:07 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden.
Error: (11/30/2013 08:48:06 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden.
Error: (11/30/2013 08:48:02 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden.
Error: (11/30/2013 06:47:28 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden.
Error: (11/30/2013 06:47:25 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden.
Microsoft Office Sessions:
=========================
==================== Memory info ===========================
Percentage of memory in use: 41%
Total physical RAM: 3958.71 MB
Available physical RAM: 2333.01 MB
Total Pagefile: 7915.6 MB
Available Pagefile: 5922.23 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB
==================== Drives ================================
Drive c: (Acer) (Fixed) (Total:584.07 GB) (Free:298.5 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596 GB) (Disk ID: C03E4E08)
Partition 1: (Not Active) - (Size=12 GB) - (Type=27)
Partition 2: (Active) - (Size=102 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=584 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
07.12.2013, 11:31
| #4 |
| /// the machine /// TB-Ausbilder | Windows 7: Startseite Nation Zoom einfach nicht entfernbar Lade SystemLook von jpshortstuff von einem der folgenden Spiegel herunter und speichere das Tool auf dem Desktop. SystemLook (64 bit)
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
07.12.2013, 13:16
| #5 |
| | Windows 7: Startseite Nation Zoom einfach nicht entfernbar Alles gemacht :-) : Code:
ATTFilter SystemLook 30.07.11 by jpshortstuff
Log created at 13:13 on 07/12/2013 by Robert Jakob
Administrator - Elevation successful
========== regfind ==========
Searching for "nationzoom"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="hxxp://www.nationzoom.com/web/?type=ds&ts=1386174428&from=tugs&uid=WDCXWD6400BEVT-22A0RT0_WD-WXC1A20T0329T0329&q={searchTerms}"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="hxxp://www.nationzoom.com/web/?type=ds&ts=1386174428&from=tugs&uid=WDCXWD6400BEVT-22A0RT0_WD-WXC1A20T0329T0329&q={searchTerms}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command]
@=""C:\Users\Robert Jakob\AppData\Local\Google\Chrome\Application\chrome.exe" hxxp://www.nationzoom.com/?type=sc&ts=1386174428&from=tugs&uid=WDCXWD6400BEVT-22A0RT0_WD-WXC1A20T0329T0329"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN]
"Default_Search_URL"="hxxp://www.nationzoom.com/web/?type=ds&ts=1386174428&from=tugs&uid=WDCXWD6400BEVT-22A0RT0_WD-WXC1A20T0329T0329&q={searchTerms}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN]
"Default_Page_URL"="hxxp://www.nationzoom.com/?type=hp&ts=1386174428&from=tugs&uid=WDCXWD6400BEVT-22A0RT0_WD-WXC1A20T0329T0329"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN]
"Start Page"="hxxp://www.nationzoom.com/?type=hp&ts=1386174428&from=tugs&uid=WDCXWD6400BEVT-22A0RT0_WD-WXC1A20T0329T0329"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN]
"Search Page"="hxxp://www.nationzoom.com/web/?type=ds&ts=1386174428&from=tugs&uid=WDCXWD6400BEVT-22A0RT0_WD-WXC1A20T0329T0329&q={searchTerms}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN]
"Search Page"="hxxp://www.nationzoom.com/web/?type=ds&ts=1386174428&from=tugs&uid=WDCXWD6400BEVT-22A0RT0_WD-WXC1A20T0329T0329&q={searchTerms}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\Google Chrome\shell\open\command]
@=""C:\Users\Robert Jakob\AppData\Local\Google\Chrome\Application\chrome.exe" hxxp://www.nationzoom.com/?type=sc&ts=1386174428&from=tugs&uid=WDCXWD6400BEVT-22A0RT0_WD-WXC1A20T0329T0329"
[HKEY_USERS\S-1-5-21-791847664-310780734-331296173-1001\Software\Microsoft\Internet Explorer\Main]
"Search Page"="hxxp://www.nationzoom.com/web/?type=ds&ts=1386174428&from=tugs&uid=WDCXWD6400BEVT-22A0RT0_WD-WXC1A20T0329T0329&q={searchTerms}"
[HKEY_USERS\S-1-5-21-791847664-310780734-331296173-1001\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="hxxp://www.nationzoom.com/web/?type=ds&ts=1386174428&from=tugs&uid=WDCXWD6400BEVT-22A0RT0_WD-WXC1A20T0329T0329&q={searchTerms}"
-= EOF =-
|
|
08.12.2013, 06:57
| #6 |
| /// the machine /// TB-Ausbilder | Windows 7: Startseite Nation Zoom einfach nicht entfernbar Kopiere den Text in der Codebox in deinen Editor (z.B. Notepad) und speichere es unter dem Namen regfix.reg (bei Dateityp bitte "alle Dateien" wählen) Code:
ATTFilter Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"=-
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="www.google.de"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"=-
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="www.google.de"
[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command]
@=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command]
@=""C:\Users\Robert Jakob\AppData\Local\Google\Chrome\Application\chrome.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN]
"Default_Search_URL"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN]
"Default_Search_URL"="www.google.de"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN]
"Default_Page_URL"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN]
"Default_Page_URL"="www.google.de"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN]
"Start Page"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN]
"Start Page"="www.google.de"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN]
"Search Page"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN]
"Search Page"="www.google.de"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN]
"Search Page"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN]
"Search Page"="www.google.de"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\Google Chrome\shell\open\command]
@=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\Google Chrome\shell\open\command]
@=""C:\Users\Robert Jakob\AppData\Local\Google\Chrome\Application\chrome.exe"
[HKEY_USERS\S-1-5-21-791847664-310780734-331296173-1001\Software\Microsoft\Internet Explorer\Main]
"Search Page"=-
[HKEY_USERS\S-1-5-21-791847664-310780734-331296173-1001\Software\Microsoft\Internet Explorer\Main]
"Search Page"="www.google.de"
[HKEY_USERS\S-1-5-21-791847664-310780734-331296173-1001\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"=-
[HKEY_USERS\S-1-5-21-791847664-310780734-331296173-1001\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="www.google.de"
__________________ --> Windows 7: Startseite Nation Zoom einfach nicht entfernbar |
|
09.12.2013, 15:19
| #7 |
| | Windows 7: Startseite Nation Zoom einfach nicht entfernbar Nachdem ich die Datei per Doppelklick ausgeführt habe, stand dort etwas wie "Dateischlüssel wurde erfolgreich hinzugefügt" o.ä...habs leider direkt weggeklickt. Sollte es jetzt funktionieren oder folgt noch etwas? |
|
10.12.2013, 09:48
| #8 |
| /// the machine /// TB-Ausbilder | Windows 7: Startseite Nation Zoom einfach nicht entfernbar Sollte jetzt funktionieren. Tut es das? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
10.12.2013, 10:15
| #9 |
| | Windows 7: Startseite Nation Zoom einfach nicht entfernbar Leider nicht, Nation Zoom kommt immernoch als Startseite. Gestern waren in Chrome auch wieder die Erweiterungen zu finden, die ich dann gelöscht habe. Heute sind zwar keine Erweiterungen mehr drin, die Startseite bleibt aber. Best Vodi |
|
10.12.2013, 13:59
| #10 |
| /// the machine /// TB-Ausbilder | Windows 7: Startseite Nation Zoom einfach nicht entfernbar Downloade dir bitte Shortcut Cleaner (by Grinler) auf deinen Desktop.
Dann bitte ein frisches FRST Log und die Browser alle nochmal testen.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
11.12.2013, 10:16
| #11 |
| | Windows 7: Startseite Nation Zoom einfach nicht entfernbar Alles klar. SC: Code:
ATTFilter Shortcut Cleaner 1.2.6 by Lawrence Abrams (Grinler)
hxxp://www.bleepingcomputer.com/
Copyright 2008-2013 BleepingComputer.com
More Information about Shortcut Cleaner can be found at this link:
hxxp://www.bleepingcomputer.com/download/shortcut-cleaner/
Windows Version: Windows 7 Home Premium Service Pack 1
Program started at: 12/11/2013 10:14:23 AM.
Scanning for registry hijacks:
* No issues found in the Registry.
Searching for Hijacked Shortcuts:
Searching C:\Users\Robert Jakob\AppData\Roaming\Microsoft\Windows\Start Menu\
Searching C:\ProgramData\Microsoft\Windows\Start Menu\
Searching C:\Users\Robert Jakob\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\
Searching C:\Users\Public\Desktop\
Searching C:\Users\Robert Jakob\Desktop
0 bad shortcuts found.
Program finished at: 12/11/2013 10:14:24 AM
Execution time: 0 hours(s), 0 minute(s), and 0 seconds(s)
FRST: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-12-2013 01
Ran by Robert Jakob (administrator) on ROBERTJAKOB-PC on 11-12-2013 10:14:00
Running from C:\Users\Robert Jakob\Desktop\Malware
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Acer) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Dropbox, Inc.) C:\Users\Robert Jakob\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Google Inc.) C:\Users\Robert Jakob\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Robert Jakob\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Robert Jakob\AppData\Local\Google\Chrome\Application\chrome.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Google Inc.) C:\Users\Robert Jakob\AppData\Local\Google\Chrome\Application\chrome.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [hkcmd] - C:\Users\Robert Jakob\AppData\Roaming\Microsoft\system\hkcmd.exe
HKCU\...\Run: [Google Update] - C:\Users\Robert Jakob\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-06-17] (Google Inc.)
HKCU\...\Run: [AdobeBridge] - [x]
HKCU\...\Run: [Real Desktop] - "C:\Program Files (x86)\Real Desktop\rdesc.exe"
MountPoints2: E - E:\laucher.exe
MountPoints2: G - G:\laucher.exe
MountPoints2: {6eec68d5-1e9a-11e2-a726-705ab6d3acbc} - E:\laucher.exe
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [683576 2013-11-19] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2009-12-24] ()
AppInit_DLLs: [ ] ()
Startup: C:\Users\Robert Jakob\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Robert Jakob\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.de
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Chrome:
=======
CHR DefaultSearchKeyword: google.de
CHR DefaultSearchProvider: Google
CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultNewTabURL: {google:baseURL}_/chrome/newtab?{google:RLZ}{google:instantExtendedEnabledParameter}{google:ntpIsThemedParameter}ie={inputEncoding}
CHR Extension: (Google Drive) - C:\Users\Robert Jakob\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Robert Jakob\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Robert Jakob\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Google Wallet) - C:\Users\Robert Jakob\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR Extension: (Gmail) - C:\Users\Robert Jakob\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-11-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-19] (Avira Operations GmbH & Co. KG)
S3 MWLService; C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [305448 2009-09-10] (Egis Technology Inc.)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2012-06-18] ()
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [107416 2013-12-05] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-11-19] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-07] (Avira Operations GmbH & Co. KG)
S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [32512 2013-12-05] ()
S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-11-02] ()
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-11 10:12 - 2013-12-11 10:12 - 01928212 _____ (Farbar) C:\Users\Robert Jakob\Downloads\FRST64 (1).exe
2013-12-11 10:09 - 2013-12-11 10:10 - 00001838 _____ C:\sc-cleaner.txt
2013-12-10 13:44 - 2013-12-10 14:14 - 272627888 _____ C:\Users\Robert Jakob\Desktop\Jimi Zepelin RJ.MP4
2013-12-09 15:16 - 2013-12-09 15:17 - 00000000 ____D C:\Users\Robert Jakob\AppData\Roaming\Notepad++
2013-12-09 15:16 - 2013-12-09 15:16 - 00001059 _____ C:\Users\UpdatusUser\Desktop\Notepad++.lnk
2013-12-09 15:16 - 2013-12-09 15:16 - 00000000 ____D C:\Users\Robert Jakob\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
2013-12-09 15:16 - 2013-12-09 15:16 - 00000000 ____D C:\Program Files (x86)\Notepad++
2013-12-09 15:15 - 2013-12-09 15:16 - 07520740 _____ C:\Users\Robert Jakob\Downloads\npp.6.5.1.Installer.exe
2013-12-06 11:27 - 2013-12-11 10:13 - 00008502 _____ C:\Users\Robert Jakob\Downloads\FRST.txt
2013-12-05 19:40 - 2013-12-11 10:14 - 00000000 ____D C:\Users\Robert Jakob\Desktop\Malware
2013-12-05 18:27 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-12-05 18:22 - 2013-12-05 18:22 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-05 18:22 - 2013-12-05 18:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-05 18:22 - 2013-12-05 18:22 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-05 18:22 - 2013-12-05 18:22 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-05 18:22 - 2013-12-05 18:22 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-05 18:22 - 2013-12-05 18:22 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-05 18:22 - 2013-12-05 18:22 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-05 18:22 - 2013-12-05 18:22 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-05 18:22 - 2013-12-05 18:22 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-05 18:22 - 2013-12-05 18:22 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-05 18:22 - 2013-12-05 18:22 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-05 18:20 - 2013-12-05 18:27 - 00010277 _____ C:\Windows\IE11_main.log
2013-12-05 17:48 - 2013-12-05 17:48 - 00032512 _____ C:\Windows\system32\Drivers\hitmanpro37.sys
2013-12-05 00:31 - 2013-12-05 00:31 - 00001500 _____ C:\Windows\system32\.crusader
2013-12-05 00:04 - 2013-12-05 00:32 - 00000000 ____D C:\ProgramData\HitmanPro
2013-12-05 00:04 - 2013-12-05 00:04 - 00000000 ____D C:\Program Files\HitmanPro
2013-12-04 23:44 - 2013-12-04 23:44 - 10264904 _____ (SurfRight B.V.) C:\Users\Robert Jakob\Downloads\HitmanPro_x64.exe
2013-12-04 23:33 - 2013-12-04 23:33 - 07921688 _____ (VS Revo Group ) C:\Users\Robert Jakob\Downloads\RevoUninProSetup259.exe
2013-12-04 23:33 - 2013-12-04 23:33 - 00000000 ____D C:\Users\Robert Jakob\AppData\Local\VS Revo Group
2013-12-04 23:33 - 2013-12-04 23:33 - 00000000 ____D C:\Program Files\VS Revo Group
2013-12-04 23:33 - 2009-12-30 11:21 - 00031800 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys
2013-12-04 20:14 - 2013-12-04 20:14 - 01110034 _____ C:\Users\Robert Jakob\Downloads\MainOffer1.exe
2013-12-04 20:04 - 2013-12-11 10:13 - 00000000 ____D C:\FRST
2013-12-04 19:52 - 2013-12-04 19:52 - 00000000 ____D C:\Users\Robert Jakob\AppData\Roaming\Mozilla
2013-12-04 19:51 - 2013-12-04 19:51 - 01110034 _____ C:\Users\Robert Jakob\Downloads\MainOffer.exe
2013-12-04 18:08 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-12-04 18:08 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-12-04 18:07 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-12-04 18:07 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-12-04 18:07 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-12-04 18:07 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-12-04 18:07 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-12-04 18:07 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-12-04 18:07 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-12-04 18:06 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-12-04 18:06 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-12-04 18:06 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-12-04 18:06 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-12-04 18:06 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-12-04 18:06 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-12-04 18:06 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-12-04 18:06 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-12-04 18:06 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-12-04 18:06 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-12-04 18:06 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-12-04 18:06 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-12-04 18:06 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-12-04 18:06 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-12-04 18:06 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-12-04 18:06 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-12-04 18:05 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-12-04 18:05 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-12-04 18:05 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-12-04 18:05 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-12-04 18:05 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-12-04 17:47 - 2013-12-04 17:47 - 00000000 ____D C:\Users\Robert Jakob\AppData\Roaming\Malwarebytes
2013-12-04 17:46 - 2013-12-04 17:46 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-04 17:46 - 2013-12-04 17:46 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-04 17:46 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-04 17:45 - 2013-12-04 17:45 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Robert Jakob\Downloads\mbam-setup-1.75.0.1300.exe
2013-12-04 17:31 - 2013-12-05 18:29 - 01591306 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-04 17:29 - 2013-12-04 17:29 - 00000554 _____ C:\Windows\KB893803v2.log
2013-12-04 17:27 - 2013-12-04 17:29 - 00000000 ____D C:\ProgramData\WPM
2013-12-03 22:27 - 2013-12-03 22:27 - 00018345 _____ C:\Users\Robert Jakob\AppData\Local\recently-used.xbel
2013-11-28 17:35 - 2013-11-28 17:35 - 15933986 _____ C:\Users\Robert Jakob\Downloads\iZotope_Vinyl_v1_73c (2).dmg
2013-11-25 09:20 - 2013-12-04 23:48 - 00021308 _____ C:\Windows\PFRO.log
2013-11-24 17:43 - 2013-11-24 17:44 - 19192342 _____ C:\Users\Robert Jakob\Downloads\Windows_7_TOP50Gadgets.zip
2013-11-24 17:34 - 2013-11-24 17:34 - 00000000 ____D C:\Users\Robert Jakob\AppData\Roaming\LibreOffice
2013-11-24 17:31 - 2013-11-24 17:32 - 00000000 ____D C:\Program Files (x86)\LibreOffice 4
2013-11-24 17:05 - 2013-11-24 17:10 - 215306240 _____ C:\Users\Robert Jakob\Downloads\LibreOffice_4.1.3_Win_x86.msi
2013-11-24 13:35 - 2013-11-24 13:36 - 00000000 ____D C:\Users\Robert Jakob\Documents\PDF
2013-11-24 13:34 - 2013-11-24 17:03 - 00000000 ____D C:\Users\Robert Jakob\Documents\GIMP
2013-11-24 13:34 - 2013-11-24 13:36 - 00000000 ____D C:\Users\Robert Jakob\Documents\Texte
2013-11-24 13:33 - 2013-11-24 13:35 - 00000000 ____D C:\Users\Robert Jakob\Documents\Design Pro 5
2013-11-24 13:32 - 2013-11-24 13:33 - 00000000 ____D C:\Users\Robert Jakob\Documents\Sonstige
2013-11-24 12:04 - 2013-11-24 12:04 - 00000000 ____D C:\Users\Robert Jakob\Desktop\Album
2013-11-22 20:01 - 2013-11-22 20:01 - 00000000 ____D C:\Program Files\Common Files\Avid
2013-11-22 17:31 - 2013-11-22 17:31 - 00000000 __HDC C:\ProgramData\{DA41B533-8916-419A-971A-1203C2CA5793}
2013-11-22 17:23 - 2013-11-22 17:23 - 00000000 __HDC C:\ProgramData\{ECEB696F-D119-48DB-8D62-E8C1E165F5CE}
2013-11-22 15:48 - 2013-11-22 16:02 - 782744906 _____ C:\Users\Robert Jakob\Downloads\DrumMicA (1).zip
2013-11-22 15:42 - 2013-11-22 20:03 - 00000000 __HDC C:\ProgramData\{51219C66-4A99-4FA4-9EE9-2ACA1ED441D1}
2013-11-21 17:45 - 2013-11-21 17:45 - 00000000 ____D C:\Users\Robert Jakob\Downloads\DrumMicA (2)
2013-11-21 14:22 - 2013-11-21 16:25 - 783785041 _____ C:\Users\Robert Jakob\Downloads\DrumMicA (2).zip
2013-11-21 00:31 - 2013-11-21 00:31 - 00000000 ____D C:\Users\Robert Jakob\AppData\Local\Native Instruments
2013-11-21 00:23 - 2013-11-21 00:23 - 00000000 __HDC C:\ProgramData\{57A1F65A-0C85-4002-9121-DF864126D485}
2013-11-20 21:35 - 2013-11-22 20:01 - 00000000 ____D C:\Program Files\Native Instruments
2013-11-20 21:35 - 2013-11-22 17:25 - 00000000 ____D C:\Program Files\Common Files\Native Instruments
2013-11-20 21:35 - 2013-11-20 21:35 - 00000000 ____D C:\ProgramData\Native Instruments
2013-11-20 14:27 - 2013-11-20 18:24 - 813692928 _____ C:\Users\Robert Jakob\Downloads\DrumMicA (1).iso
2013-11-19 11:30 - 2013-11-19 11:30 - 00302412 _____ C:\Users\Robert Jakob\Downloads\Vorgaben Assignment 3 Blogeinträge
2013-11-14 17:30 - 2013-11-14 17:30 - 00000705 _____ C:\Users\Robert Jakob\Downloads\FFPluginSuite-License-2013-11-14 (1).fnlf
2013-11-14 17:22 - 2013-11-14 17:22 - 00000705 _____ C:\Users\Robert Jakob\Downloads\FFPluginSuite-License-2013-11-14.fnlf
2013-11-12 18:44 - 2013-11-12 18:45 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-11-12 18:44 - 2013-11-12 18:45 - 00000000 ____D C:\Program Files\iTunes
2013-11-12 18:44 - 2013-11-12 18:45 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-11-12 18:44 - 2013-11-12 18:44 - 00000000 ____D C:\Program Files\iPod
2013-11-11 21:34 - 2013-11-19 11:32 - 00000000 ___RD C:\Users\Robert Jakob\Desktop\Schreibstile 11.13
==================== One Month Modified Files and Folders =======
2013-12-11 10:14 - 2013-12-05 19:40 - 00000000 ____D C:\Users\Robert Jakob\Desktop\Malware
2013-12-11 10:13 - 2013-12-06 11:27 - 00008502 _____ C:\Users\Robert Jakob\Downloads\FRST.txt
2013-12-11 10:13 - 2013-12-04 20:04 - 00000000 ____D C:\FRST
2013-12-11 10:12 - 2013-12-11 10:12 - 01928212 _____ (Farbar) C:\Users\Robert Jakob\Downloads\FRST64 (1).exe
2013-12-11 10:12 - 2012-06-23 13:51 - 00000000 ____D C:\Users\Robert Jakob\AppData\Local\Adobe
2013-12-11 10:10 - 2013-12-11 10:09 - 00001838 _____ C:\sc-cleaner.txt
2013-12-11 10:10 - 2009-07-14 05:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-11 10:10 - 2009-07-14 05:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-11 10:09 - 2013-10-15 19:54 - 00005040 _____ C:\Windows\setupact.log
2013-12-11 10:09 - 2012-06-16 17:47 - 00001421 _____ C:\Users\Robert Jakob\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-11 10:06 - 2012-06-16 17:38 - 01989455 _____ C:\Windows\WindowsUpdate.log
2013-12-11 10:03 - 2012-06-25 15:27 - 00000000 ____D C:\Users\Robert Jakob\AppData\Roaming\Dropbox
2013-12-11 10:02 - 2012-12-02 15:09 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-11 10:02 - 2012-06-25 15:29 - 00000000 ___RD C:\Users\Robert Jakob\Dropbox
2013-12-11 10:02 - 2012-06-17 13:51 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-11 10:02 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-10 23:56 - 2012-06-17 13:51 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-10 23:20 - 2012-06-17 13:49 - 00001148 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-791847664-310780734-331296173-1001UA.job
2013-12-10 23:20 - 2012-06-17 13:49 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-791847664-310780734-331296173-1001Core.job
2013-12-10 23:15 - 2012-12-02 15:09 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-10 23:15 - 2012-12-02 15:09 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-10 23:15 - 2012-12-02 15:09 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-10 23:15 - 2012-06-17 13:49 - 00004136 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-791847664-310780734-331296173-1001UA
2013-12-10 23:15 - 2012-06-17 13:49 - 00003740 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-791847664-310780734-331296173-1001Core
2013-12-10 23:14 - 2012-10-11 13:19 - 00000662 _____ C:\Windows\Tasks\WebContent AutoUpdate 2012.job
2013-12-10 14:14 - 2013-12-10 13:44 - 272627888 _____ C:\Users\Robert Jakob\Desktop\Jimi Zepelin RJ.MP4
2013-12-09 15:17 - 2013-12-09 15:16 - 00000000 ____D C:\Users\Robert Jakob\AppData\Roaming\Notepad++
2013-12-09 15:16 - 2013-12-09 15:16 - 00001059 _____ C:\Users\UpdatusUser\Desktop\Notepad++.lnk
2013-12-09 15:16 - 2013-12-09 15:16 - 00000000 ____D C:\Users\Robert Jakob\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
2013-12-09 15:16 - 2013-12-09 15:16 - 00000000 ____D C:\Program Files (x86)\Notepad++
2013-12-09 15:16 - 2013-12-09 15:15 - 07520740 _____ C:\Users\Robert Jakob\Downloads\npp.6.5.1.Installer.exe
2013-12-09 15:15 - 2012-06-17 03:30 - 00697098 _____ C:\Windows\system32\perfh007.dat
2013-12-09 15:15 - 2012-06-17 03:30 - 00148362 _____ C:\Windows\system32\perfc007.dat
2013-12-09 15:15 - 2009-07-14 06:13 - 01613412 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-05 23:50 - 2013-06-08 13:56 - 00000000 ____D C:\Users\Robert Jakob\Desktop\SAE Stuff
2013-12-05 20:42 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-05 20:15 - 2013-03-30 20:39 - 00107416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-05 19:43 - 2013-09-23 22:01 - 00000000 ____D C:\Users\Robert Jakob\Desktop\English interviews
2013-12-05 19:41 - 2013-09-03 14:15 - 00000000 ____D C:\AdwCleaner
2013-12-05 18:49 - 2010-03-02 11:33 - 00000000 ____D C:\Windows\Panther
2013-12-05 18:46 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-12-05 18:29 - 2013-12-04 17:31 - 01591306 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-05 18:27 - 2013-12-05 18:20 - 00010277 _____ C:\Windows\IE11_main.log
2013-12-05 18:22 - 2013-12-05 18:22 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-05 18:22 - 2013-12-05 18:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-05 18:22 - 2013-12-05 18:22 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-05 18:22 - 2013-12-05 18:22 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-05 18:22 - 2013-12-05 18:22 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-05 18:22 - 2013-12-05 18:22 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-05 18:22 - 2013-12-05 18:22 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-05 18:22 - 2013-12-05 18:22 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-05 18:22 - 2013-12-05 18:22 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-05 18:22 - 2013-12-05 18:22 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-05 18:22 - 2013-12-05 18:22 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-05 18:22 - 2013-12-05 18:22 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-05 18:22 - 2013-12-05 18:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-05 18:20 - 2010-03-02 11:55 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-05 17:48 - 2013-12-05 17:48 - 00032512 _____ C:\Windows\system32\Drivers\hitmanpro37.sys
2013-12-05 00:32 - 2013-12-05 00:04 - 00000000 ____D C:\ProgramData\HitmanPro
2013-12-05 00:31 - 2013-12-05 00:31 - 00001500 _____ C:\Windows\system32\.crusader
2013-12-05 00:31 - 2012-06-16 17:47 - 00000000 ___RD C:\Users\Robert Jakob\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-05 00:04 - 2013-12-05 00:04 - 00000000 ____D C:\Program Files\HitmanPro
2013-12-04 23:48 - 2013-11-25 09:20 - 00021308 _____ C:\Windows\PFRO.log
2013-12-04 23:44 - 2013-12-04 23:44 - 10264904 _____ (SurfRight B.V.) C:\Users\Robert Jakob\Downloads\HitmanPro_x64.exe
2013-12-04 23:36 - 2012-06-17 13:50 - 00000000 ____D C:\Users\Robert Jakob\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2013-12-04 23:33 - 2013-12-04 23:33 - 07921688 _____ (VS Revo Group ) C:\Users\Robert Jakob\Downloads\RevoUninProSetup259.exe
2013-12-04 23:33 - 2013-12-04 23:33 - 00000000 ____D C:\Users\Robert Jakob\AppData\Local\VS Revo Group
2013-12-04 23:33 - 2013-12-04 23:33 - 00000000 ____D C:\Program Files\VS Revo Group
2013-12-04 20:17 - 2010-03-02 12:03 - 00000000 ____D C:\Program Files\Google
2013-12-04 20:17 - 2010-03-02 12:03 - 00000000 ____D C:\Program Files (x86)\Google
2013-12-04 20:14 - 2013-12-04 20:14 - 01110034 _____ C:\Users\Robert Jakob\Downloads\MainOffer1.exe
2013-12-04 20:12 - 2012-06-17 13:48 - 00000000 ____D C:\Users\Robert Jakob\AppData\Local\Google
2013-12-04 20:12 - 2010-03-02 12:03 - 00000000 ____D C:\ProgramData\Google
2013-12-04 19:52 - 2013-12-04 19:52 - 00000000 ____D C:\Users\Robert Jakob\AppData\Roaming\Mozilla
2013-12-04 19:51 - 2013-12-04 19:51 - 01110034 _____ C:\Users\Robert Jakob\Downloads\MainOffer.exe
2013-12-04 19:51 - 2012-06-17 13:51 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-04 19:51 - 2012-06-17 13:51 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-04 18:12 - 2013-09-03 10:32 - 00000000 ____D C:\Windows\system32\MRT
2013-12-04 18:09 - 2013-09-03 10:32 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-04 17:47 - 2013-12-04 17:47 - 00000000 ____D C:\Users\Robert Jakob\AppData\Roaming\Malwarebytes
2013-12-04 17:46 - 2013-12-04 17:46 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-04 17:46 - 2013-12-04 17:46 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-04 17:45 - 2013-12-04 17:45 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Robert Jakob\Downloads\mbam-setup-1.75.0.1300.exe
2013-12-04 17:29 - 2013-12-04 17:29 - 00000554 _____ C:\Windows\KB893803v2.log
2013-12-04 17:29 - 2013-12-04 17:27 - 00000000 ____D C:\ProgramData\WPM
2013-12-03 22:27 - 2013-12-03 22:27 - 00018345 _____ C:\Users\Robert Jakob\AppData\Local\recently-used.xbel
2013-12-03 22:27 - 2012-07-14 19:33 - 00000000 ____D C:\Users\Robert Jakob\.gimp-2.8
2013-11-30 23:56 - 2013-06-09 17:40 - 00000000 ____D C:\Users\Robert Jakob\Desktop\Musik
2013-11-28 17:35 - 2013-11-28 17:35 - 15933986 _____ C:\Users\Robert Jakob\Downloads\iZotope_Vinyl_v1_73c (2).dmg
2013-11-26 20:32 - 2012-09-24 16:40 - 00000000 ____D C:\Users\Robert Jakob\Desktop\Wichtige Dokumente
2013-11-25 09:21 - 2009-07-14 05:45 - 05130136 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-24 17:59 - 2012-06-16 17:44 - 00000000 ____D C:\Users\Robert Jakob
2013-11-24 17:44 - 2013-11-24 17:43 - 19192342 _____ C:\Users\Robert Jakob\Downloads\Windows_7_TOP50Gadgets.zip
2013-11-24 17:43 - 2012-06-16 17:45 - 00142344 _____ C:\Users\Robert Jakob\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-24 17:38 - 2012-07-02 20:19 - 00000000 ___RD C:\Users\Robert Jakob\Desktop\Programme
2013-11-24 17:34 - 2013-11-24 17:34 - 00000000 ____D C:\Users\Robert Jakob\AppData\Roaming\LibreOffice
2013-11-24 17:32 - 2013-11-24 17:31 - 00000000 ____D C:\Program Files (x86)\LibreOffice 4
2013-11-24 17:10 - 2013-11-24 17:05 - 215306240 _____ C:\Users\Robert Jakob\Downloads\LibreOffice_4.1.3_Win_x86.msi
2013-11-24 17:03 - 2013-11-24 13:34 - 00000000 ____D C:\Users\Robert Jakob\Documents\GIMP
2013-11-24 13:42 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-11-24 13:36 - 2013-11-24 13:35 - 00000000 ____D C:\Users\Robert Jakob\Documents\PDF
2013-11-24 13:36 - 2013-11-24 13:34 - 00000000 ____D C:\Users\Robert Jakob\Documents\Texte
2013-11-24 13:35 - 2013-11-24 13:33 - 00000000 ____D C:\Users\Robert Jakob\Documents\Design Pro 5
2013-11-24 13:33 - 2013-11-24 13:32 - 00000000 ____D C:\Users\Robert Jakob\Documents\Sonstige
2013-11-24 13:26 - 2012-07-02 13:59 - 00007990 _____ C:\Users\Robert Jakob\AppData\Roaming\wklnhst.dat
2013-11-24 12:04 - 2013-11-24 12:04 - 00000000 ____D C:\Users\Robert Jakob\Desktop\Album
2013-11-24 11:59 - 2013-10-07 11:32 - 00000000 ____D C:\Users\Robert Jakob\Desktop\EP 2013
2013-11-22 20:03 - 2013-11-22 15:42 - 00000000 __HDC C:\ProgramData\{51219C66-4A99-4FA4-9EE9-2ACA1ED441D1}
2013-11-22 20:01 - 2013-11-22 20:01 - 00000000 ____D C:\Program Files\Common Files\Avid
2013-11-22 20:01 - 2013-11-20 21:35 - 00000000 ____D C:\Program Files\Native Instruments
2013-11-22 20:01 - 2012-06-25 20:03 - 00000000 ____D C:\Program Files (x86)\VstPlugins
2013-11-22 17:31 - 2013-11-22 17:31 - 00000000 __HDC C:\ProgramData\{DA41B533-8916-419A-971A-1203C2CA5793}
2013-11-22 17:25 - 2013-11-20 21:35 - 00000000 ____D C:\Program Files\Common Files\Native Instruments
2013-11-22 17:23 - 2013-11-22 17:23 - 00000000 __HDC C:\ProgramData\{ECEB696F-D119-48DB-8D62-E8C1E165F5CE}
2013-11-22 16:02 - 2013-11-22 15:48 - 782744906 _____ C:\Users\Robert Jakob\Downloads\DrumMicA (1).zip
2013-11-21 17:45 - 2013-11-21 17:45 - 00000000 ____D C:\Users\Robert Jakob\Downloads\DrumMicA (2)
2013-11-21 16:25 - 2013-11-21 14:22 - 783785041 _____ C:\Users\Robert Jakob\Downloads\DrumMicA (2).zip
2013-11-21 08:02 - 2012-10-11 13:19 - 00000506 _____ C:\Windows\Tasks\AutoUpdate Allplan 2012.job
2013-11-21 00:31 - 2013-11-21 00:31 - 00000000 ____D C:\Users\Robert Jakob\AppData\Local\Native Instruments
2013-11-21 00:23 - 2013-11-21 00:23 - 00000000 __HDC C:\ProgramData\{57A1F65A-0C85-4002-9121-DF864126D485}
2013-11-20 21:35 - 2013-11-20 21:35 - 00000000 ____D C:\ProgramData\Native Instruments
2013-11-20 18:24 - 2013-11-20 14:27 - 813692928 _____ C:\Users\Robert Jakob\Downloads\DrumMicA (1).iso
2013-11-20 14:30 - 2012-09-15 12:16 - 31365332 _____ C:\Users\Robert Jakob\Downloads\Incomplete - -Incomplete- EP.zip
2013-11-19 11:32 - 2013-11-11 21:34 - 00000000 ___RD C:\Users\Robert Jakob\Desktop\Schreibstile 11.13
2013-11-19 11:30 - 2013-11-19 11:30 - 00302412 _____ C:\Users\Robert Jakob\Downloads\Vorgaben Assignment 3 Blogeinträge
2013-11-19 10:56 - 2013-03-30 20:39 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-11-14 17:30 - 2013-11-14 17:30 - 00000705 _____ C:\Users\Robert Jakob\Downloads\FFPluginSuite-License-2013-11-14 (1).fnlf
2013-11-14 17:22 - 2013-11-14 17:22 - 00000705 _____ C:\Users\Robert Jakob\Downloads\FFPluginSuite-License-2013-11-14.fnlf
2013-11-12 18:45 - 2013-11-12 18:44 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-11-12 18:45 - 2013-11-12 18:44 - 00000000 ____D C:\Program Files\iTunes
2013-11-12 18:45 - 2013-11-12 18:44 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-11-12 18:44 - 2013-11-12 18:44 - 00000000 ____D C:\Program Files\iPod
2013-11-12 18:44 - 2012-06-29 16:20 - 00000000 ____D C:\ProgramData\Apple Computer
2013-11-11 21:31 - 2012-08-07 18:06 - 00000000 ____D C:\Users\Robert Jakob\Desktop\Games
2013-11-11 19:43 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration
2013-11-11 19:43 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\AppCompat
Some content of TEMP:
====================
C:\Users\Robert Jakob\AppData\Local\Temp\avgnt.exe
C:\Users\Robert Jakob\AppData\Local\Temp\BackupSetup.exe
C:\Users\Robert Jakob\AppData\Local\Temp\bi_cleaner.exe
C:\Users\Robert Jakob\AppData\Local\Temp\EnableExtDll.dll
C:\Users\Robert Jakob\AppData\Local\Temp\Quarantine.exe
C:\Users\Robert Jakob\AppData\Local\Temp\RDeskFree2.0-setup.exe
C:\Users\Robert Jakob\AppData\Local\Temp\xmlUpdater.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-10 14:57
==================== End Of Log ============================
--- --- --- Best und weg mit dem shit  , VodiUPDATE: Hab gerade nochmal die Browser geöffnet und es ist weg! Super :-))) Danke für die ausführliche Hilfe, werde diese Seite jederzeit weiterempfehlen. Best, Vodi |
|
12.12.2013, 09:01
| #12 |
| /// the machine /// TB-Ausbilder | Windows 7: Startseite Nation Zoom einfach nicht entfernbar Fertig Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Windows 7: Startseite Nation Zoom einfach nicht entfernbar |
| administrator, adw cleaner, anti-malware, appdata, autostart, bericht, browser, datei, diverse, explorer, forum, gelöscht, google, home, internet, internet explorer, malwarebytes, ordner, preferences, problem, programme, registrierungsdatenbank, scan, seite, speicher, startseite, super, system32, windows |
Linear-Darstellung
