Windows 7: Interpol Virus. Farbars Recovery Log

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-12-2013 01
Ran by SYSTEM on MININT-LB2FDNQ on 07-12-2013 17:35:42
Running from G:\
Windows 7 Home Premium (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11543656 2010-10-26] (Realtek Semiconductor)
HKLM\...\Run: [UMonit] - C:\Windows\SysWOW64\UMonit.exe [49152 2011-05-25] ()
HKLM\...\Run: [Eraser] - C:\Program Files\Eraser\Eraser.exe [980920 2012-05-22] (The Eraser Project)
HKLM\...\Runonce: [GrpConv] - grpconv -o
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware ] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation)
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware  (cleanup)] - rundll32.exe "C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll",ProcessCleanupScript [1127496 2013-04-04] (Malwarebytes Corporation)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2011-08-18] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] - C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [1686528 2012-03-27] (Wondershare)
HKLM-x32\...\Run: [Smart File Advisor] - C:\Program Files (x86)\Smart File Advisor\sfa.exe [280824 2011-04-04] (Filefacts.net)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
HKU\Robrahn\...\Run: [Wisdom-soft AutoScreenRecorder 3.1 Pro] - 0
HKU\Robrahn\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [18706176 2013-01-08] (Skype Technologies S.A.)
HKU\Robrahn\...\Run: [Wisdom-soft AutoScreenRecorder 3.1 Free] - 0
HKU\Robrahn\...\Run: [EPSON SX620FW Series] - C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGBE.EXE /FU "C:\Users\Robrahn\AppData\Local\Temp\E_SC026.tmp" /EF "HKCU"
HKU\Robrahn\...\Run: [EPLTarget\P0000000000000001] - C:\Windows\System32\spool\drivers\x64\3\E_IATILGE.EXE [297024 2013-01-24] (SEIKO EPSON CORPORATION)
AppInit_DLLs:   [ ] ()
Startup: C:\Users\Robrahn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk ->  (No File)
Startup: C:\Users\Robrahn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\jilfj0zj.lnk
ShortcutTarget: jilfj0zj.lnk -> C:\PROGRA~3\jz0jflij.jss (No File)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Services (Whitelisted) =================

S2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [144560 2012-05-16] (Seiko Epson Corporation)
S2 NAV; C:\Program Files (x86)\Norton AntiVirus\Engine\21.1.0.18\NAV.exe [262288 2013-10-08] (Symantec Corporation)
S2 NCO; C:\Program Files (x86)\Norton Identity Safe\Engine\2014.6.0.27\NST.exe [129424 2013-10-06] (Symantec Corporation)
S2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
S2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
S2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)
S2 SystemStoreService; C:\Program Files (x86)\SoftwareUpdater\SystemStore.exe [278016 2013-07-08] ()

==================== Drivers (Whitelisted) ====================

S1 BHDrvx64; C:\Program Files (x86)\Norton AntiVirus\NortonData\21.1.0.18\Definitions\BASHDefs\20131203.001\BHDrvx64.sys [1526488 2013-12-03] (Symantec Corporation)
S1 ccSet_NAV; C:\Windows\system32\drivers\NAVx64\1501000.012\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
S1 ccSet_NST; C:\Windows\system32\drivers\NSTx64\7DE06000.01B\ccSetx64.sys [162392 2013-09-27] (Symantec Corporation)
S1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-11-21] (Symantec Corporation)
S3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-11-21] (Symantec Corporation)
S3 GeneStor; C:\Windows\System32\DRIVERS\GeneStor.sys [58368 2011-05-18] (GenesysLogic)
S1 IDSVia64; C:\Program Files (x86)\Norton AntiVirus\NortonData\21.1.0.18\Definitions\IPSDefs\20131205.001\IDSvia64.sys [521816 2013-11-13] (Symantec Corporation)
S3 NAVENG; C:\Program Files (x86)\Norton AntiVirus\NortonData\21.1.0.18\Definitions\VirusDefs\20131206.002\ENG64.SYS [126040 2013-11-13] (Symantec Corporation)
S3 NAVEX15; C:\Program Files (x86)\Norton AntiVirus\NortonData\21.1.0.18\Definitions\VirusDefs\20131206.002\EX64.SYS [2099288 2013-11-13] (Symantec Corporation)
S3 SRTSP; C:\Windows\System32\Drivers\NAVx64\1501000.012\SRTSP64.SYS [858200 2013-09-27] (Symantec Corporation)
S1 SRTSPX; C:\Windows\system32\drivers\NAVx64\1501000.012\SRTSPX64.SYS [36952 2013-09-10] (Symantec Corporation)
S0 SymDS; C:\Windows\System32\drivers\NAVx64\1501000.012\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
S0 SymEFA; C:\Windows\System32\drivers\NAVx64\1501000.012\SYMEFA64.SYS [1147480 2013-09-27] (Symantec Corporation)
S3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-11-13] (Symantec Corporation)
S1 SymIRON; C:\Windows\system32\drivers\NAVx64\1501000.012\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation)
S1 SymNetS; C:\Windows\System32\Drivers\NAVx64\1501000.012\SYMNETS.SYS [590936 2013-09-26] (Symantec Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-07 17:35 - 2013-12-07 17:35 - 00000000 ____D C:\FRST
2013-12-07 17:26 - 2013-12-07 17:26 - 00001379 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-12-07 17:26 - 2013-12-07 17:26 - 00000656 _____ C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job
2013-12-07 17:26 - 2013-12-07 17:26 - 00000628 _____ C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job
2013-12-07 17:26 - 2013-12-07 17:26 - 00000458 _____ C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job
2013-12-07 17:26 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\System32\sdnclean64.exe
2013-12-07 17:11 - 2013-12-07 17:18 - 40658208 _____ (Safer-Networking Ltd.                                       ) C:\Users\Robrahn\Downloads\spybot-2.2.exe
2013-12-07 17:10 - 2013-12-07 17:10 - 00000085 _____ C:\Windows\wininit.ini
2013-12-07 16:45 - 2013-12-07 16:45 - 01526976 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-07 16:24 - 2013-12-07 17:29 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-12-07 16:24 - 2013-12-07 17:26 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-12-07 16:22 - 2013-12-07 16:22 - 00614784 _____ C:\Users\Robrahn\Downloads\SpyBot Search Destroy - CHIP-Downloader.exe
2013-12-07 15:52 - 2013-12-07 16:30 - 00000000 ____D C:\Windows\CD09642E061D4844BA37ED1480916404.TMP
2013-12-07 15:52 - 2013-12-07 15:52 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Robrahn\Downloads\SpyHunter-Installer.exe
2013-12-07 02:32 - 2013-12-07 04:27 - 00015940 _____ C:\Users\Robrahn\Documents\Festivals.xlsx
2013-12-06 22:11 - 2013-12-07 12:45 - 95025368 ____T C:\ProgramData\jilfj0zj.fee
2013-12-06 22:11 - 2013-12-07 12:45 - 00000285 _____ C:\ProgramData\jilfj0zj.reg
2013-12-06 22:11 - 2013-12-07 12:44 - 00000000 _____ C:\ProgramData\jilfj0zj.odd
2013-12-06 22:11 - 2013-12-06 22:11 - 00061556 ____T (Microsoft Corporation) C:\ProgramData\jilfj0zj.zvv
2013-12-05 18:53 - 2013-12-05 18:53 - 00000000 ____D C:\Users\Robrahn\AppData\Roaming\Wayforward Technologies
2013-12-03 05:10 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\System32\IEUDINIT.EXE
2013-12-03 05:07 - 2013-12-03 05:07 - 23212032 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 12995584 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 05765120 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 02764288 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-03 05:07 - 2013-12-03 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-12-03 05:07 - 2013-12-03 05:07 - 02332160 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 01993728 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-12-03 05:07 - 2013-12-03 05:07 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-03 05:07 - 2013-12-03 05:07 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 01394176 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 01228800 _____ (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00942592 _____ (Microsoft Corporation) C:\Windows\System32\jsIntl.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00940032 _____ (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-12-03 05:07 - 2013-12-03 05:07 - 00817664 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00774144 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00708608 _____ (Microsoft Corporation) C:\Windows\System32\jscript9diag.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00626176 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-03 05:07 - 2013-12-03 05:07 - 00616104 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-12-03 05:07 - 2013-12-03 05:07 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00574976 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00548352 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00453120 _____ (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00413696 _____ (Microsoft Corporation) C:\Windows\System32\html.iec
2013-12-03 05:07 - 2013-12-03 05:07 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-03 05:07 - 2013-12-03 05:07 - 00296960 _____ (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00263376 _____ (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00247808 _____ (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00243200 _____ (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\System32\url.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00235008 _____ (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00218624 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-12-03 05:07 - 2013-12-03 05:07 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00195584 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00167424 _____ (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-12-03 05:07 - 2013-12-03 05:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-03 05:07 - 2013-12-03 05:07 - 00147968 _____ (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00143872 _____ (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-12-03 05:07 - 2013-12-03 05:07 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-03 05:07 - 2013-12-03 05:07 - 00139264 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-12-03 05:07 - 2013-12-03 05:07 - 00135680 _____ (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00131072 _____ (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-03 05:07 - 2013-12-03 05:07 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00111616 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollector.exe
2013-12-03 05:07 - 2013-12-03 05:07 - 00105984 _____ (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00101376 _____ (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00090112 _____ (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-12-03 05:07 - 2013-12-03 05:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-12-03 05:07 - 2013-12-03 05:07 - 00084992 _____ (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00083968 _____ (Microsoft Corporation) C:\Windows\System32\MshtmlDac.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00081408 _____ (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00077312 _____ (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-12-03 05:07 - 2013-12-03 05:07 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-03 05:07 - 2013-12-03 05:07 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-03 05:07 - 2013-12-03 05:07 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-03 05:07 - 2013-12-03 05:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00053760 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00052224 _____ (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\ieetwproxystub.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00048128 _____ (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00040448 _____ (Microsoft Corporation) C:\Windows\System32\JavaScriptCollectionAgent.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00033792 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00030208 _____ (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00013824 _____ (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-12-03 05:07 - 2013-12-03 05:07 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-03 05:07 - 2013-12-03 05:07 - 00013312 _____ (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-12-03 05:07 - 2013-12-03 05:07 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-03 05:07 - 2013-12-03 05:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollectorres.dll
2013-12-03 05:05 - 2013-12-03 05:10 - 00010277 _____ C:\Windows\IE11_main.log
2013-11-24 01:22 - 2013-11-24 01:22 - 00000000 ____D C:\Program Files (x86)\MP4ToMP3Converter
2013-11-24 01:21 - 2013-11-24 01:21 - 00618912 _____ C:\Users\Robrahn\Downloads\mp4-to-mp3-converter-3-0-4.exe
2013-11-16 01:51 - 2013-11-16 01:51 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-14 00:12 - 2013-11-14 00:12 - 00000000 ____D C:\Windows\System32\Tasks\Norton AntiVirus
2013-11-13 21:19 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-11-13 21:19 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-13 21:19 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\System32\SmartcardCredentialProvider.dll
2013-11-13 21:19 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\System32\credui.dll
2013-11-13 21:19 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\System32\authui.dll
2013-11-13 21:19 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-13 21:19 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-13 21:19 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-13 21:19 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\System32\gdi32.dll
2013-11-13 21:19 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-13 21:19 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\afd.sys
2013-11-13 21:19 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecpkg.sys
2013-11-13 21:19 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecdd.sys
2013-11-13 21:19 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\System32\sspicli.dll
2013-11-13 21:19 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\System32\sspisrv.dll
2013-11-13 21:19 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\System32\secur32.dll
2013-11-13 21:19 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\System32\schannel.dll
2013-11-13 21:19 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\System32\lsasrv.dll
2013-11-13 21:19 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\System32\ncrypt.dll
2013-11-13 21:19 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-13 21:19 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-13 21:19 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-13 21:19 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-13 21:19 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\System32\lsass.exe
2013-11-13 21:19 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\cng.sys
2013-11-13 21:18 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\System32\nshwfp.dll
2013-11-13 21:18 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\System32\IKEEXT.DLL
2013-11-13 21:18 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\System32\FWPUCLNT.DLL
2013-11-13 21:18 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-13 21:18 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-12 14:13 - 2013-11-12 14:13 - 00000000 ____D C:\Users\Robrahn\Documents\Sweet Addy

==================== One Month Modified Files and Folders =======

2013-12-07 17:35 - 2013-12-07 17:35 - 00000000 ____D C:\FRST
2013-12-07 17:29 - 2013-12-07 16:24 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-12-07 17:29 - 2009-07-14 18:58 - 00657698 _____ C:\Windows\System32\perfh007.dat
2013-12-07 17:29 - 2009-07-14 18:58 - 00131070 _____ C:\Windows\System32\perfc007.dat
2013-12-07 17:29 - 2009-07-14 06:13 - 01507502 _____ C:\Windows\System32\PerfStringBackup.INI
2013-12-07 17:26 - 2013-12-07 17:26 - 00001379 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-12-07 17:26 - 2013-12-07 17:26 - 00000656 _____ C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job
2013-12-07 17:26 - 2013-12-07 17:26 - 00000628 _____ C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job
2013-12-07 17:26 - 2013-12-07 17:26 - 00000458 _____ C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job
2013-12-07 17:26 - 2013-12-07 16:24 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-12-07 17:25 - 2012-12-03 01:39 - 00033386 _____ C:\Windows\PFRO.log
2013-12-07 17:18 - 2013-12-07 17:11 - 40658208 _____ (Safer-Networking Ltd.                                       ) C:\Users\Robrahn\Downloads\spybot-2.2.exe
2013-12-07 17:10 - 2013-12-07 17:10 - 00000085 _____ C:\Windows\wininit.ini
2013-12-07 16:52 - 2013-09-23 10:42 - 00000000 ____D C:\Users\Robrahn\AppData\Local\FilesFrog Update Checker
2013-12-07 16:45 - 2013-12-07 16:45 - 01526976 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-07 16:36 - 2012-12-03 11:01 - 00000000 ____D C:\Users\Robrahn\AppData\Roaming\foobar2000
2013-12-07 16:30 - 2013-12-07 15:52 - 00000000 ____D C:\Windows\CD09642E061D4844BA37ED1480916404.TMP
2013-12-07 16:22 - 2013-12-07 16:22 - 00614784 _____ C:\Users\Robrahn\Downloads\SpyBot Search Destroy - CHIP-Downloader.exe
2013-12-07 16:06 - 2012-12-04 11:18 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-07 15:52 - 2013-12-07 15:52 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Robrahn\Downloads\SpyHunter-Installer.exe
2013-12-07 12:45 - 2013-12-06 22:11 - 95025368 ____T C:\ProgramData\jilfj0zj.fee
2013-12-07 12:45 - 2013-12-06 22:11 - 00000285 _____ C:\ProgramData\jilfj0zj.reg
2013-12-07 12:45 - 2013-09-05 13:34 - 00001112 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-07 12:45 - 2012-12-02 13:58 - 00000000 ___RD C:\Users\Robrahn\Dropbox
2013-12-07 12:45 - 2012-12-02 13:56 - 00000000 ____D C:\Users\Robrahn\AppData\Roaming\Dropbox
2013-12-07 12:44 - 2013-12-06 22:11 - 00000000 _____ C:\ProgramData\jilfj0zj.odd
2013-12-07 12:44 - 2013-09-05 13:34 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-07 12:44 - 2012-11-22 16:34 - 00037620 _____ C:\Windows\setupact.log
2013-12-07 12:44 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-07 11:48 - 2013-09-22 18:15 - 00000000 ____D C:\Spiele
2013-12-07 11:41 - 2013-02-10 01:00 - 00000000 ____D C:\Users\Robrahn\AppData\Roaming\Skype
2013-12-07 04:28 - 2011-11-08 10:14 - 01307195 _____ C:\Windows\WindowsUpdate.log
2013-12-07 04:27 - 2013-12-07 02:32 - 00015940 _____ C:\Users\Robrahn\Documents\Festivals.xlsx
2013-12-07 04:21 - 2013-02-28 10:06 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-07 04:14 - 2013-10-26 12:14 - 00000725 _____ C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {5EC0525C-D9C3-4C42-AFB8-CA962A6FE28E}.job
2013-12-07 04:14 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\System32\FxsTmp
2013-12-07 04:13 - 2013-10-26 12:13 - 00000911 _____ C:\Windows\Tasks\EPSON XP-215 217 Series Update {5EC0525C-D9C3-4C42-AFB8-CA962A6FE28E}.job
2013-12-07 01:46 - 2012-12-02 12:27 - 00000000 ____D C:\Users\Robrahn\AppData\Roaming\vlc
2013-12-06 22:11 - 2013-12-06 22:11 - 00061556 ____T (Microsoft Corporation) C:\ProgramData\jilfj0zj.zvv
2013-12-06 22:11 - 2013-07-03 19:40 - 00000000 ____D C:\Users\Robrahn\AppData\Local\CrashDumps
2013-12-06 20:46 - 2013-01-04 00:20 - 00069183 _____ C:\Users\Robrahn\Documents\Ausgaben 2013.xlsx
2013-12-06 20:33 - 2009-07-14 05:45 - 00018592 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-06 20:33 - 2009-07-14 05:45 - 00018592 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-06 20:29 - 2013-04-24 23:47 - 00004208 _____ C:\Windows\System32\Tasks\Software Updater
2013-12-06 14:21 - 2012-12-14 22:19 - 00000000 ____D C:\Users\Robrahn\AppData\Roaming\BitTorrent
2013-12-05 18:53 - 2013-12-05 18:53 - 00000000 ____D C:\Users\Robrahn\AppData\Roaming\Wayforward Technologies
2013-12-04 09:29 - 2013-02-28 10:06 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-04 09:29 - 2012-12-02 14:54 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-04 09:29 - 2012-12-02 14:54 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-04 09:28 - 2012-11-14 17:58 - 00000000 ____D C:\Users\Robrahn\AppData\Local\Adobe
2013-12-03 12:00 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-03 10:59 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-12-03 05:10 - 2013-12-03 05:05 - 00010277 _____ C:\Windows\IE11_main.log
2013-12-03 05:07 - 2013-12-03 05:07 - 23212032 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 12995584 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 05765120 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 02764288 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-03 05:07 - 2013-12-03 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-12-03 05:07 - 2013-12-03 05:07 - 02332160 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 01993728 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-12-03 05:07 - 2013-12-03 05:07 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-03 05:07 - 2013-12-03 05:07 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 01394176 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 01228800 _____ (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00942592 _____ (Microsoft Corporation) C:\Windows\System32\jsIntl.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00940032 _____ (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-12-03 05:07 - 2013-12-03 05:07 - 00817664 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00774144 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00708608 _____ (Microsoft Corporation) C:\Windows\System32\jscript9diag.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00626176 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-03 05:07 - 2013-12-03 05:07 - 00616104 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-12-03 05:07 - 2013-12-03 05:07 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00574976 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00548352 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00453120 _____ (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00413696 _____ (Microsoft Corporation) C:\Windows\System32\html.iec
2013-12-03 05:07 - 2013-12-03 05:07 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-03 05:07 - 2013-12-03 05:07 - 00296960 _____ (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00263376 _____ (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00247808 _____ (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00243200 _____ (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\System32\url.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00235008 _____ (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00218624 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-12-03 05:07 - 2013-12-03 05:07 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00195584 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00167424 _____ (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-12-03 05:07 - 2013-12-03 05:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-03 05:07 - 2013-12-03 05:07 - 00147968 _____ (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00143872 _____ (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-12-03 05:07 - 2013-12-03 05:07 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-03 05:07 - 2013-12-03 05:07 - 00139264 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-12-03 05:07 - 2013-12-03 05:07 - 00135680 _____ (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00131072 _____ (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-03 05:07 - 2013-12-03 05:07 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00111616 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollector.exe
2013-12-03 05:07 - 2013-12-03 05:07 - 00105984 _____ (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00101376 _____ (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00090112 _____ (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-12-03 05:07 - 2013-12-03 05:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-12-03 05:07 - 2013-12-03 05:07 - 00084992 _____ (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00083968 _____ (Microsoft Corporation) C:\Windows\System32\MshtmlDac.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00081408 _____ (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00077312 _____ (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-12-03 05:07 - 2013-12-03 05:07 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-03 05:07 - 2013-12-03 05:07 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-03 05:07 - 2013-12-03 05:07 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-03 05:07 - 2013-12-03 05:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00053760 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00052224 _____ (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\ieetwproxystub.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00048128 _____ (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00040448 _____ (Microsoft Corporation) C:\Windows\System32\JavaScriptCollectionAgent.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00033792 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00030208 _____ (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-03 05:07 - 2013-12-03 05:07 - 00013824 _____ (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-12-03 05:07 - 2013-12-03 05:07 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-03 05:07 - 2013-12-03 05:07 - 00013312 _____ (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-12-03 05:07 - 2013-12-03 05:07 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-03 05:07 - 2013-12-03 05:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollectorres.dll
2013-11-24 01:22 - 2013-11-24 01:22 - 00000000 ____D C:\Program Files (x86)\MP4ToMP3Converter
2013-11-24 01:21 - 2013-11-24 01:21 - 00618912 _____ C:\Users\Robrahn\Downloads\mp4-to-mp3-converter-3-0-4.exe
2013-11-23 23:35 - 2009-07-14 06:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-11-22 03:02 - 2013-01-06 20:35 - 00000000 ____D C:\Program Files (x86)\Subtitle Workshop 2.51
2013-11-17 15:25 - 2012-11-19 15:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-16 01:51 - 2013-11-16 01:51 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-14 02:21 - 2013-07-16 02:03 - 00000000 ____D C:\Windows\System32\MRT
2013-11-14 02:20 - 2012-11-15 10:18 - 82896128 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-11-14 00:12 - 2013-11-14 00:12 - 00000000 ____D C:\Windows\System32\Tasks\Norton AntiVirus
2013-11-14 00:11 - 2013-03-06 10:16 - 00002397 _____ C:\Users\Public\Desktop\Norton AntiVirus.lnk
2013-11-14 00:11 - 2012-12-02 11:37 - 00003218 _____ C:\Windows\System32\Tasks\Norton WSC Integration
2013-11-14 00:11 - 2012-12-02 11:37 - 00000000 ____D C:\Windows\System32\Drivers\NAVx64
2013-11-13 20:10 - 2012-12-02 11:34 - 00000000 ____D C:\ProgramData\Norton
2013-11-13 20:09 - 2012-12-02 11:37 - 00177752 _____ (Symantec Corporation) C:\Windows\System32\Drivers\SYMEVENT64x86.SYS
2013-11-13 20:09 - 2012-12-02 11:37 - 00008222 _____ C:\Windows\System32\Drivers\SYMEVENT64x86.CAT
2013-11-13 20:09 - 2012-12-02 11:37 - 00000000 ____D C:\Program Files (x86)\Norton AntiVirus
2013-11-13 20:05 - 2012-12-02 11:34 - 00000000 ____D C:\Users\Public\Downloads\Norton
2013-11-13 17:13 - 2013-02-08 13:18 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-11-12 14:13 - 2013-11-12 14:13 - 00000000 ____D C:\Users\Robrahn\Documents\Sweet Addy

Files to move or delete:
====================
C:\ProgramData\jilfj0zj.reg


==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================

3
Restore point made on: 2013-11-21 21:55:57
Restore point made on: 2013-11-29 03:41:53
Restore point made on: 2013-12-03 05:05:39

==================== Memory info =========================== 

Percentage of memory in use: 15%
Total physical RAM: 4078.39 MB
Available physical RAM: 3439.65 MB
Total Pagefile: 4076.54 MB
Available Pagefile: 3430.48 MB
Total Virtual: 8192 MB
Available Virtual: 8191.87 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:195.33 GB) (Free:134.18 GB) NTFS
Drive e: (Data) (Fixed) (Total:736.09 GB) (Free:24.53 GB) NTFS
Drive g: (Transcend) (Removable) (Total:3.73 GB) (Free:3.67 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: BC1A064A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=195 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=736 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 4 GB) (Disk ID: 00000000)
Partition 1: (Not Active) - (Size=4 GB) - (Type=0B)


LastRegBack: 2013-12-03 01:22

==================== End Of Log ============================