Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   System durch verschiedenes infiziert (https://www.trojaner-board.de/148424-system-verschiedenes-infiziert.html)

KitsuneNoir 22.01.2014 15:54

System durch verschiedenes infiziert
 
Hallo,
sicherlich habt ihr von diesem Datenklau gehört bei dem an die 16Mio. Nutzerdaten geklaut wurden. Nun ich bin einer davon wie ich beim BSI getestet habe.
Passwörter von diversen Accounts und Banking habe ich bereits geändert, jetzt bleibt nur noch die Bereinigung meines Notebooks.

Vor 4 Tagen sind mir erste Anzeichen aufgefallen: Secure Banking poppte ständing auf und meldete eine Malware in Chrome.exe, die Schrift im Browser wechselte von scharf zu unscharf, der gesamte rechner hängte sich auf und alles war ganz langsam, der mauszeiger zuckte wild herum, die Firewall und mein Bitdefender Total Security 2014 wurden einfach deaktiviert und bei updates von diverser Software traten Fehler auf und es war und ist nicht möglich updates vorzunehmen.

Ich habe versucht die Schritte zu befolgen doch nach erfolgreichem frst scan wurden die logs gelöscht und windows blockt frst immerzu. daher habe ich nur einen mbam log von vor einigen Tagen.
Bitdefender findet auch keine Infektionen und wenn schon lässt sich nichts machen.

Ich habe Windows 8.1 und nutze Google Chrome als Browser, Bitdefender Total Security 2014


mbam-log

Code:

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.01.17.04

Windows 8 x64 NTFS
Internet Explorer 11.0.9600.16476
****** :: ****** [Administrator]

20.01.2014 09:03:51
mbam-log-2014-01-20 (09-03-51).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 626275
Laufzeit: 2 Stunde(n), 13 Minute(n), 25 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 1
C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\File System\003\t\00\00000000 (PUP.Optional.InstalleRex) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

defogger
Code:

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 12:30 on 22/01/2014 (*****)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
HKCU:DAEMON Tools Lite -> Removed

Checking for services/drivers...


-=E.O.F=-

secure banking
Code:

========================================
[16.01.2014 - 13:24:11] Malware gefunden!
----------------------------------------
Malware: Unbekannt
----------------------------------------
Infizierter Prozess: chrome.exe
----------------------------------------
Infizierte Funktionen:
WSASend: JMP 0x5AFF2E51
send: JMP 0x5AFF2DC1
========================================

========================================
[16.01.2014 - 13:57:18] Malware gefunden!
----------------------------------------
Malware: Unbekannt
----------------------------------------
Infizierter Prozess: chrome.exe
----------------------------------------
Infizierte Funktionen:
WSASend: JMP 0x73E72E51
send: JMP 0x73E72DC1
========================================

Ich hoffe ihr könnt mir helfen

Gruß KitsuneNoir

sunjojo 22.01.2014 15:56

:hallo:

Ich habe dein Thema in Arbeit und melde mich so schnell als möglich mit weiteren Anweisungen.

Bitte beachte, dass alle meine Antworten zuerst von einem Ausbilder freigegeben werden müssen, bevor ich diese hier posten darf. Dies garantiert, dass Du Hilfe von einem ausgebildeten Helfer bekommst.

Ich bedanke mich für deine Geduld :)

KitsuneNoir 22.01.2014 17:18

Hi danke für die schnelle Reaktion :)

sunjojo 22.01.2014 19:53

Hallo KitsuneNoir, :hallo:

mein Name ist Jonas und ich werde dir bei deiner Bereinigung helfen. Diese kann mit viel Arbeit für dich verbunden sein. Bevor wir anfangen können, lies bitte die Bereinigungsregeln und Hinweise:
Regeln zum Ablauf der Bereinigung
  • Arbeite die Anleitungen und Schritte sorgfältig und nacheinander ab.
  • Wenn du etwas nicht verstehst oder du dir unsicher bist, frage nach und schildere das Problem, so gut es geht. Handle nicht auf eigene Faust.
    • Die Ausführung diverser Bereinigungsprogramme (mit Scripts aus anderen Threads) können dein Betriebssystem zerschießen!
  • Die Bereinigung eines Rechners in verschiedenen Foren zur selben Zeit ist verboten (Crossposting).
  • Installiere oder deinstalliere keine zusätzlichen Programme, lösche keine Dateien und führe nicht selbstständig Systemupdates durch.
  • Die Symptome können verschwunden sein, jedoch bedeutet das Verschwinden von äußeren Merkmalen einer Infektion nicht, dass du wieder clean bist.
    • Ich werde dir ein eindeutiges Clean geben, solange arbeite bitte mit.
Hinweise
  • Ich kann dir nie eine Garantie geben, dass alles entfernt wurde. Die Formatierung der Festplatte und das Neuinstallieren deines Betriebssystems ist immer sicherer und meistens schneller.
  • Die von uns benutzten Programme erstellen meist ein Ergebnisprotokoll (Logfile genannt). Bitte füge alle von mir in einem Schritt geforderten Logfiles in einer Antwort/einem Post ein.
Wenn du alles gelesen hast, kann es losgehen. Bitte speichere alle Programme auf dem Desktop und führe sie von dort aus. :)



Führe bitte folgenden Schritt im Abgesicherten Modus mit Netzwerktreibern durch (Anleitung: http://www.trojaner-board.de/63335-w...tml#post387730) und berichte mir, ob dieser funktioniert hat.
Schritt 1
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


Poste folgende Logfiles in deiner nächsten Antwort:
  • FRST-Scan

KitsuneNoir 22.01.2014 21:45

Hi

FRST Logfile:

FRST Logfile:
Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-01-2014 02
Ran by Lucien (administrator) on LUCIENSNOTE on 22-01-2014 21:41:25
Running from C:\Users\Lucien\Desktop
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Safe Mode (with Networking)



==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Windows\HelpPane.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13530184 2013-04-22] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1278024 2013-03-08] (Realtek Semiconductor)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-09-25] (Adobe Systems Incorporated)
HKLM\...\Run: [PrnStatusMX] - C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe [1240064 2012-07-04] (Marvell Semiconductor, Inc.)
HKLM\...\Run: [ShadowPlay] - C:\WINDOWS\system32\nvspcap64.dll [1100248 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [Bdagent] - C:\Program Files\Bitdefender\Bitdefender\bdagent.exe [1735872 2014-01-13] (Bitdefender)
HKLM-x32\...\Run: [ASUSPRP] - C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-04-26] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-01-15] (cyberlink)
HKLM-x32\...\Run: [ASUS InstantKey] - C:\Program Files (x86)\ASUS\ASUS Instant Key\Ikey_start.exe [13936 2013-04-16] (ASUS)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2237328 2013-11-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-04-24] ( (Atheros Communications))
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\steam.exe [1815464 2014-01-07] (Valve Corporation)
HKCU\...\Run: [SecureBanking] - C:\Program Files (x86)\Secure Banking\SecureBanking.exe [507904 2013-06-30] (Secure Banking)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Lucien\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-10] (Spotify Ltd)
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
HKCU\...\Run: [Bitdefender-Geldbörse-Agent] - C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [561672 2014-01-13] (Bitdefender)
HKCU\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] - C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [612696 2014-01-13] (Bitdefender)
HKU\Gast\...\Run: [Spotify] - C:\Users\Gast\AppData\Roaming\Spotify\Spotify.exe [6118400 2014-01-20] (Spotify Ltd)
HKU\Gast\...\Run: [Spotify Web Helper] - C:\Users\Gast\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-01-20] (Spotify Ltd)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [168616 2013-11-14] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [141336 2013-11-14] (NVIDIA Corporation)
Startup: C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\pmbxie.dll (Bitdefender)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxie.dll (Bitdefender)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Chrome:
=======
CHR HomePage: hxxp://www.google.de/
CHR Extension: (Google Docs) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-14]
CHR Extension: (Google Drive) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-19]
CHR Extension: (YouTube) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-19]
CHR Extension: (Bitdefender Wallet) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccahoghmggldkcdjiebjkidpfongdfbl [2014-01-13]
CHR Extension: (Google Search) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-19]
CHR Extension: (Google Wallet) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR Extension: (Gmail) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-19]
CHR HKLM-x32\...\Chrome\Extension: [ccahoghmggldkcdjiebjkidpfongdfbl] - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxcr.crx [2014-01-13]

==================== Services (Whitelisted) =================

U3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-12-18] (Adobe Systems)
U2 ASUS InstantOn; C:\Program Files\ASUS\P4G\InsOnSrv.exe [277120 2013-04-29] (ASUS)
U2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [310400 2013-04-24] (Windows (R) Win 7 DDK provider)
U4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender\bdparentalservice.exe [77632 2013-11-21] (Bitdefender)
U2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [247768 2013-01-15] (CyberLink)
U3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
U2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-04-11] (Intel Corporation)
U2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
U2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
U2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
U2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
U2 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [94624 2013-07-08] (Bitdefender)
U2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe [67320 2013-10-07] (Bitdefender)
U2 VSSERV; C:\Program Files\Bitdefender\Bitdefender\vsserv.exe [1507248 2013-11-15] (Bitdefender)
U3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
U3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
U2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [18384 2013-09-04] (Intel(R) Corporation)
U2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-04-24] (Atheros)

==================== Drivers (Whitelisted) ====================

U0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
U3 ATP; C:\Windows\System32\drivers\AsusTP.sys [70416 2013-09-23] (ASUS Corporation)
U0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [727592 2013-07-19] (BitDefender)
U3 avchv; C:\Windows\system32\DRIVERS\avchv.sys [261056 2014-01-13] (BitDefender)
U3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [601360 2013-07-19] (BitDefender)
U3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
U0 bdelam; C:\Windows\System32\drivers\bdelam.sys [23568 2013-09-08] (Bitdefender)
U1 BdfNdisf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys [98768 2013-07-24] (BitDefender LLC)
U1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107008 2013-07-29] (BitDefender LLC)
U3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-07-02] (Bitdefender SRL)
U3 BDSandBox; C:\WINDOWS\system32\drivers\bdsandbox.sys [82824 2013-11-04] (BitDefender SRL)
U1 BDVEDISK; C:\Windows\system32\DRIVERS\bdvedisk.sys [79192 2013-07-30] (BitDefender)
U3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-04-24] (Qualcomm Atheros)
U3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
U3 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2013-09-01] (DT Soft Ltd)
U0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [150256 2013-08-23] (BitDefender LLC)
U3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
U3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
U0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
U0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)
U2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [26328 2013-07-23] (Intel Corporation)
U3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
U0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
U3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
U3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-07-26] (Intel Corporation)
U3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
U3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
U3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
U3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
U0 rtcrfilt64; C:\Windows\System32\DRIVERS\rtcrfilt64.sys [19600 2000-01-01] (Realtek Semiconductor Corp.)
U3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)
U0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
U3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16152 2013-09-03] ()
U0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [389240 2013-08-07] (BitDefender S.R.L.)
U3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
U3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
U3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [x]
U3 GPU-Z; \??\C:\Users\Lucien\AppData\Local\Temp\GPU-Z.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-22 21:41 - 2014-01-22 21:41 - 00014376 _____ C:\Users\Lucien\Desktop\FRST.txt
2014-01-22 21:41 - 2014-01-22 21:41 - 00000000 ____D C:\Users\Lucien\Desktop\FRST-OlderVersion
2014-01-22 21:23 - 2014-01-22 21:23 - 00022688 _____ C:\Users\Lucien\Downloads\Addition.txt
2014-01-22 21:22 - 2014-01-22 21:23 - 00046051 _____ C:\Users\Lucien\Downloads\FRST.txt
2014-01-22 13:59 - 2014-01-22 21:41 - 02077696 _____ (Farbar) C:\Users\Lucien\Desktop\FRST64.exe
2014-01-22 13:49 - 2014-01-22 13:49 - 00003576 _____ C:\WINDOWS\System32\Tasks\Bitdefender Auto-Scan
2014-01-22 13:47 - 2014-01-22 13:47 - 00631815 _____ C:\Users\Lucien\Desktop\gmer.txt
2014-01-22 12:30 - 2014-01-22 12:30 - 00000544 _____ C:\Users\Lucien\Desktop\defogger_disable.log
2014-01-22 12:30 - 2014-01-22 12:30 - 00000168 _____ C:\Users\Lucien\defogger_reenable
2014-01-22 00:11 - 2014-01-17 20:25 - 00379904 _____ C:\Users\Lucien\Desktop\gmer.exe
2014-01-22 00:10 - 2012-12-19 16:10 - 00000000 ____D C:\Users\Lucien\Desktop\data
2014-01-22 00:10 - 2011-10-24 13:35 - 00000000 ____D C:\Users\Lucien\Desktop\Tweaking.com - Windows Repair
2014-01-22 00:10 - 2009-10-20 21:47 - 00055936 _____ () C:\Users\Lucien\Desktop\Setup.exe
2014-01-21 23:54 - 2014-01-22 21:41 - 00000000 ____D C:\FRST
2014-01-21 22:19 - 2014-01-21 22:19 - 00000000 ____D C:\WINDOWS\LastGood
2014-01-21 15:06 - 2014-01-21 15:06 - 01037068 _____ (Thisisu) C:\Users\Lucien\Desktop\JRT.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00987425 _____ C:\Users\Lucien\Desktop\SecurityCheck.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00448512 _____ (OldTimer Tools) C:\Users\Lucien\Desktop\TFC.exe
2014-01-21 15:05 - 2014-01-21 15:05 - 01236282 _____ C:\Users\Lucien\Desktop\adwcleaner.exe
2014-01-21 15:00 - 2014-01-21 15:01 - 02347384 _____ (ESET) C:\Users\Lucien\Desktop\esetsmartinstaller_enu.exe
2014-01-21 13:15 - 2014-01-21 13:25 - 24859352 _____ (Microsoft Corporation) C:\Users\Gast\Downloads\Windows-KB890830-x64-V5.8.exe
2014-01-21 10:40 - 2014-01-22 14:01 - 00000000 ____D C:\Users\Gast\AppData\Local\My Games
2014-01-21 10:18 - 2014-01-21 10:18 - 00050477 _____ C:\Users\Lucien\Desktop\Defogger.exe
2014-01-21 10:12 - 2014-01-21 10:12 - 00000000 ____D C:\Users\Gast\AppData\Roaming\QuickScan
2014-01-21 09:39 - 2014-01-21 09:39 - 00003258 _____ C:\WINDOWS\System32\Tasks\SomotoUpdateCheckerAutoStart
2014-01-21 09:38 - 2014-01-21 09:38 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Spotydl
2014-01-21 08:33 - 2014-01-21 08:33 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2014-01-20 16:10 - 2013-12-03 13:49 - 00000000 ____D C:\Users\Gast\Downloads\settings
2014-01-20 15:53 - 2014-01-20 15:53 - 00000000 ____D C:\Users\Gast\AppData\Local\NVIDIA Corporation
2014-01-20 15:52 - 2014-01-21 08:37 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Bitdefender
2014-01-20 15:52 - 2014-01-20 15:52 - 00000385 _____ C:\Users\Gast\AppData\Roaminguser_gensett.xml
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\Documents\Bluetooth Folder
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\AppData\Local\BMExplorer
2014-01-20 15:51 - 2014-01-20 15:51 - 00000000 ____D C:\Users\Lucien\Documents\AdobeStockPhotos
2014-01-19 21:21 - 2014-01-19 08:38 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-01-19 18:22 - 2014-01-19 18:22 - 00305304 _____ C:\WINDOWS\Minidump\011914-32203-01.dmp
2014-01-19 18:22 - 2014-01-19 18:22 - 00000000 ____D C:\WINDOWS\Minidump
2014-01-17 15:05 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2014-01-17 15:05 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2014-01-17 13:50 - 2014-01-20 13:49 - 00000000 ____D C:\Users\Lucien\Downloads\backups
2014-01-17 13:42 - 2014-01-19 18:46 - 00012554 _____ C:\Users\Lucien\Downloads\hijackthis.log
2014-01-17 13:42 - 2014-01-17 13:42 - 00388608 _____ (Trend Micro Inc.) C:\Users\Lucien\Downloads\HiJackThis204.exe
2014-01-17 09:54 - 2014-01-17 09:54 - 00000385 _____ C:\Users\Lucien\AppData\Roaminguser_gensett.xml
2014-01-16 14:05 - 2013-12-11 08:55 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-01-16 14:05 - 2013-12-09 01:34 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-01-16 14:05 - 2013-12-09 01:04 - 00980480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-01-16 14:05 - 2013-11-27 16:34 - 03210528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2014-01-16 14:05 - 2013-11-27 16:27 - 00809872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-01-16 14:05 - 2013-11-27 15:00 - 00663680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-01-16 14:05 - 2013-11-27 14:47 - 02804528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2014-01-16 14:05 - 2013-11-27 13:02 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ipnat.sys
2014-01-16 14:05 - 2013-11-27 11:54 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-01-16 14:05 - 2013-11-27 11:24 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll
2014-01-16 14:05 - 2013-11-27 11:08 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-01-16 14:05 - 2013-11-27 10:46 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll
2014-01-16 14:05 - 2013-11-27 10:41 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2014-01-16 14:05 - 2013-11-27 10:17 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-01-16 14:05 - 2013-11-27 10:10 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2014-01-16 14:05 - 2013-11-27 09:58 - 01503232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-01-16 14:05 - 2013-11-27 09:56 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll
2014-01-16 14:05 - 2013-11-27 09:20 - 04106240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-01-16 14:05 - 2013-11-27 05:01 - 00385614 _____ C:\WINDOWS\system32\ApnDatabase.xml
2014-01-16 14:05 - 2013-11-26 14:22 - 01928144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2014-01-16 14:05 - 2013-11-26 14:20 - 02131120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-01-16 14:05 - 2013-11-26 14:20 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-01-16 14:05 - 2013-11-26 14:20 - 01374384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-01-16 14:05 - 2013-11-26 12:50 - 01371312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2014-01-16 14:05 - 2013-11-26 12:44 - 02142936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-01-16 14:05 - 2013-11-26 12:44 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-01-16 14:05 - 2013-11-26 11:13 - 04191232 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-01-16 14:05 - 2013-11-26 10:21 - 18577920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-01-16 14:05 - 2013-11-26 09:28 - 13925888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-01-16 14:05 - 2013-11-25 02:45 - 00142680 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-01-16 14:05 - 2013-11-25 02:32 - 01119064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2014-01-16 14:05 - 2013-11-25 00:30 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2014-01-16 14:05 - 2013-11-25 00:28 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2014-01-16 14:05 - 2013-11-23 13:47 - 00032088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-01-16 14:05 - 2013-11-23 12:49 - 21196664 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-01-16 14:05 - 2013-11-23 09:19 - 18642504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-01-16 14:05 - 2013-11-23 08:13 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\bi.dll
2014-01-16 14:05 - 2013-11-23 08:13 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys
2014-01-16 14:05 - 2013-11-23 08:08 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-01-16 14:05 - 2013-11-23 05:50 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-01-16 14:05 - 2013-11-23 04:57 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2014-01-16 14:05 - 2013-11-23 04:48 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2014-01-16 14:05 - 2013-11-23 04:25 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2014-01-16 14:05 - 2013-11-23 04:25 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2014-01-16 14:05 - 2013-11-23 04:19 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-01-16 14:05 - 2013-11-23 04:15 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-01-16 14:05 - 2013-11-21 07:58 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceregistration.dll
2014-01-16 14:05 - 2013-11-21 07:26 - 01415680 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-01-16 14:05 - 2013-11-16 06:11 - 00764856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-01-16 14:05 - 2013-11-15 19:19 - 00669344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-01-16 14:05 - 2013-11-15 15:59 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2014-01-16 14:05 - 2013-11-15 15:25 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2014-01-16 14:05 - 2013-11-15 15:08 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-01-16 14:05 - 2013-11-15 14:24 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-01-16 14:05 - 2013-11-05 21:12 - 02551128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-01-16 14:05 - 2013-10-31 01:29 - 00745336 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-01-16 14:05 - 2013-10-31 00:41 - 00552624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2014-01-15 23:39 - 2013-12-09 01:15 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-01-15 23:39 - 2013-11-27 16:36 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-01-15 23:39 - 2013-11-27 12:41 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe
2014-01-15 23:39 - 2013-11-27 11:34 - 00138240 _____ C:\WINDOWS\system32\OEMLicense.dll
2014-01-15 23:39 - 2013-11-27 10:54 - 00103936 _____ C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-01-15 23:39 - 2013-11-27 09:48 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 23:39 - 2013-11-27 09:45 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-01-15 23:39 - 2013-11-27 09:40 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 23:39 - 2013-11-27 09:38 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-01-15 23:39 - 2013-11-27 09:17 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-01-15 23:39 - 2013-11-27 09:12 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-01-13 23:23 - 2014-01-13 23:23 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\system32\bdsandboxuiskin32.dll
2014-01-13 23:20 - 2014-01-19 16:08 - 00000000 ____D C:\Program Files (x86)\McAfee Security Scan
2014-01-13 23:20 - 2014-01-13 23:20 - 00002041 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-13 22:54 - 2014-01-13 22:54 - 00620542 _____ C:\ProgramData\1389649682.bdinstall.bin
2014-01-13 22:54 - 2014-01-13 22:54 - 00000385 _____ C:\WINDOWS\system32\user_gensett.xml
2014-01-13 22:53 - 2014-01-13 23:23 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\SysWOW64\bdsandboxuiskin32.dll
2014-01-13 22:53 - 2014-01-13 22:54 - 00000000 ____D C:\ProgramData\BDLogging
2014-01-13 22:53 - 2014-01-13 22:53 - 00002212 _____ C:\Users\Public\Desktop\Bitdefender Safepay.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00002164 _____ C:\Users\Public\Desktop\Bitdefender Total Security.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2014-01-13 22:53 - 2013-11-04 15:47 - 00082824 _____ (BitDefender SRL) C:\WINDOWS\system32\Drivers\bdsandbox.sys
2014-01-13 22:53 - 2013-09-08 19:04 - 00023568 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bdelam.sys
2014-01-13 22:53 - 2013-07-30 17:41 - 00079192 _____ (BitDefender) C:\WINDOWS\system32\Drivers\bdvedisk.sys
2014-01-13 22:53 - 2013-07-24 17:19 - 00098768 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\bdfndisf6.sys
2014-01-13 22:53 - 2007-04-11 10:11 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\capicom.dll
2014-01-13 22:52 - 2014-01-13 23:23 - 00261056 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avchv.sys
2014-01-13 22:52 - 2014-01-13 22:54 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Bitdefender
2014-01-13 22:52 - 2013-07-19 17:08 - 00601360 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avckf.sys
2014-01-13 22:52 - 2013-07-19 17:04 - 00727592 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avc3.sys
2014-01-13 22:48 - 2014-01-13 23:23 - 00000000 ____D C:\ProgramData\Bitdefender
2014-01-13 22:48 - 2014-01-13 22:52 - 00000000 ____D C:\Program Files\Bitdefender
2014-01-13 22:48 - 2014-01-13 22:48 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\QuickScan
2014-01-13 22:48 - 2013-11-04 15:47 - 00084848 _____ (BitDefender SRL) C:\WINDOWS\system32\BDSandBoxUISkin.dll
2014-01-13 22:48 - 2013-11-04 15:46 - 00034384 _____ (BitDefender SRL) C:\WINDOWS\system32\BDSandBoxUH.dll
2014-01-13 22:48 - 2013-08-23 12:48 - 00150256 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\gzflt.sys
2014-01-13 22:48 - 2013-08-07 12:46 - 00389240 _____ (BitDefender S.R.L.) C:\WINDOWS\system32\Drivers\trufos.sys
2014-01-12 22:56 - 2014-01-13 22:48 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2014-01-12 22:29 - 2014-01-12 22:29 - 07171632 _____ C:\Users\Lucien\Downloads\bitdefender_tsecurity.exe
2014-01-09 12:00 - 2014-01-13 14:27 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Bioshock
2014-01-09 12:00 - 2014-01-09 12:12 - 00000000 ____D C:\Users\Lucien\Documents\Bioshock
2014-01-07 21:35 - 2014-01-07 21:35 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\WINDOWS\SysWOW64\GPhotos.scr
2014-01-06 13:29 - 2014-01-21 22:13 - 00000000 ____D C:\Users\Lucien\Documents\Rockstar Games
2014-01-06 13:11 - 2014-01-06 13:11 - 00000000 __SHD C:\ProgramData\SecuROM
2014-01-06 13:10 - 2014-01-06 13:10 - 00000000 ____D C:\Users\Lucien\AppData\Local\Rockstar Games
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\WINDOWS\SysWOW64\xlive
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\Users\Lucien\Documents\Games for Windows - LIVE Demos
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2014-01-06 13:08 - 2014-01-06 13:08 - 00642712 _____ (Microsoft Corporation) C:\Users\Lucien\Downloads\gfwlivesetup.exe
2013-12-28 20:07 - 2013-12-28 20:10 - 70638408 _____ (Apple Inc.) C:\Users\Lucien\Downloads\iCloudSetup.exe
2013-12-27 10:35 - 2014-01-08 11:53 - 00000000 ___RD C:\Users\Lucien\Downloads\Microsoft.SkypeApp_kzf8qxf38zg5c!App

==================== One Month Modified Files and Folders =======

2014-01-22 21:41 - 2014-01-22 21:41 - 00014376 _____ C:\Users\Lucien\Desktop\FRST.txt
2014-01-22 21:41 - 2014-01-22 21:41 - 00000000 ____D C:\Users\Lucien\Desktop\FRST-OlderVersion
2014-01-22 21:41 - 2014-01-22 13:59 - 02077696 _____ (Farbar) C:\Users\Lucien\Desktop\FRST64.exe
2014-01-22 21:41 - 2014-01-21 23:54 - 00000000 ____D C:\FRST
2014-01-22 21:26 - 2013-09-30 05:14 - 01804156 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2014-01-22 21:26 - 2013-09-30 04:56 - 00774346 _____ C:\WINDOWS\system32\perfh007.dat
2014-01-22 21:26 - 2013-09-30 04:56 - 00163568 _____ C:\WINDOWS\system32\perfc007.dat
2014-01-22 21:23 - 2014-01-22 21:23 - 00022688 _____ C:\Users\Lucien\Downloads\Addition.txt
2014-01-22 21:23 - 2014-01-22 21:22 - 00046051 _____ C:\Users\Lucien\Downloads\FRST.txt
2014-01-22 21:21 - 2013-11-05 21:47 - 00000000 ____D C:\Users\Lucien
2014-01-22 21:07 - 2013-09-29 20:04 - 09441346 _____ C:\WINDOWS\PFRO.log
2014-01-22 21:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\sru
2014-01-22 14:34 - 2013-07-18 20:55 - 00003600 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3506778915-1287356822-3408950579-1002
2014-01-22 14:01 - 2014-01-21 10:40 - 00000000 ____D C:\Users\Gast\AppData\Local\My Games
2014-01-22 14:01 - 2013-10-01 15:03 - 00000000 ____D C:\Users\Gast\Documents\My Games
2014-01-22 14:01 - 2013-09-01 19:44 - 00000000 ____D C:\Users\Lucien\AppData\Local\My Games
2014-01-22 14:01 - 2013-08-20 09:54 - 00000000 ____D C:\Users\Lucien\Documents\My Games
2014-01-22 13:52 - 2013-09-12 10:02 - 00296960 ___SH C:\Users\Lucien\Downloads\Thumbs.db
2014-01-22 13:49 - 2014-01-22 13:49 - 00003576 _____ C:\WINDOWS\System32\Tasks\Bitdefender Auto-Scan
2014-01-22 13:47 - 2014-01-22 13:47 - 00631815 _____ C:\Users\Lucien\Desktop\gmer.txt
2014-01-22 12:34 - 2013-09-10 15:25 - 00164352 ___SH C:\Users\Lucien\Desktop\Thumbs.db
2014-01-22 12:30 - 2014-01-22 12:30 - 00000544 _____ C:\Users\Lucien\Desktop\defogger_disable.log
2014-01-22 12:30 - 2014-01-22 12:30 - 00000168 _____ C:\Users\Lucien\defogger_reenable
2014-01-22 12:28 - 2013-08-19 19:07 - 00001134 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-22 12:08 - 2013-06-26 08:07 - 00003474 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1
2014-01-22 12:08 - 2013-06-26 08:07 - 00003464 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2
2014-01-22 11:43 - 2013-11-05 21:43 - 01314176 _____ C:\WINDOWS\WindowsUpdate.log
2014-01-22 11:20 - 2013-08-22 11:25 - 00000000 ____D C:\Users\Lucien\AppData\Local\Adobe
2014-01-22 11:19 - 2013-11-05 22:24 - 00000000 __RDO C:\Users\Lucien\SkyDrive
2014-01-22 11:18 - 2013-08-19 19:08 - 00002197 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-22 11:18 - 2013-08-19 19:06 - 00001130 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-22 11:18 - 2013-07-18 20:49 - 00000074 _____ C:\Users\Lucien\AppData\Roaming\sp_data.sys
2014-01-22 00:07 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2014-01-22 00:04 - 2013-08-22 14:25 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2014-01-22 00:03 - 2013-08-31 15:58 - 00000000 ____D C:\AdwCleaner
2014-01-21 22:19 - 2014-01-21 22:19 - 00000000 ____D C:\WINDOWS\LastGood
2014-01-21 22:13 - 2014-01-06 13:29 - 00000000 ____D C:\Users\Lucien\Documents\Rockstar Games
2014-01-21 22:13 - 2013-09-04 07:48 - 00000000 ____D C:\Users\Lucien\Documents\Blender
2014-01-21 22:00 - 2013-11-04 09:24 - 00069120 ___SH C:\Users\Gast\Downloads\Thumbs.db
2014-01-21 22:00 - 2013-08-22 15:46 - 00380728 _____ C:\WINDOWS\setupact.log
2014-01-21 15:06 - 2014-01-21 15:06 - 01037068 _____ (Thisisu) C:\Users\Lucien\Desktop\JRT.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00987425 _____ C:\Users\Lucien\Desktop\SecurityCheck.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00448512 _____ (OldTimer Tools) C:\Users\Lucien\Desktop\TFC.exe
2014-01-21 15:05 - 2014-01-21 15:05 - 01236282 _____ C:\Users\Lucien\Desktop\adwcleaner.exe
2014-01-21 15:01 - 2014-01-21 15:00 - 02347384 _____ (ESET) C:\Users\Lucien\Desktop\esetsmartinstaller_enu.exe
2014-01-21 14:51 - 2013-10-19 09:42 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Spotify
2014-01-21 13:25 - 2014-01-21 13:15 - 24859352 _____ (Microsoft Corporation) C:\Users\Gast\Downloads\Windows-KB890830-x64-V5.8.exe
2014-01-21 10:38 - 2013-09-01 18:18 - 00281688 _____ C:\WINDOWS\SysWOW64\PnkBstrB.xtr
2014-01-21 10:18 - 2014-01-21 10:18 - 00050477 _____ C:\Users\Lucien\Desktop\Defogger.exe
2014-01-21 10:12 - 2014-01-21 10:12 - 00000000 ____D C:\Users\Gast\AppData\Roaming\QuickScan
2014-01-21 09:39 - 2014-01-21 09:39 - 00003258 _____ C:\WINDOWS\System32\Tasks\SomotoUpdateCheckerAutoStart
2014-01-21 09:38 - 2014-01-21 09:38 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Spotydl
2014-01-21 09:37 - 2013-09-26 11:23 - 00000000 ____D C:\Users\Gast\AppData\Local\VirtualStore
2014-01-21 08:38 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2014-01-21 08:37 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Bitdefender
2014-01-21 08:37 - 2013-09-26 11:23 - 00000062 _____ C:\Users\Gast\AppData\Roaming\sp_data.sys
2014-01-21 08:36 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2014-01-21 08:33 - 2014-01-21 08:33 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2014-01-20 15:53 - 2014-01-20 15:53 - 00000000 ____D C:\Users\Gast\AppData\Local\NVIDIA Corporation
2014-01-20 15:53 - 2013-06-26 08:06 - 00000000 ____D C:\ProgramData\Atheros
2014-01-20 15:52 - 2014-01-20 15:52 - 00000385 _____ C:\Users\Gast\AppData\Roaminguser_gensett.xml
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\Documents\Bluetooth Folder
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\AppData\Local\BMExplorer
2014-01-20 15:52 - 2013-10-29 11:55 - 00000000 ____D C:\Users\Gast\AppData\Local\NVIDIA
2014-01-20 15:52 - 2013-10-19 09:42 - 00000000 ____D C:\Users\Gast\AppData\Local\Spotify
2014-01-20 15:52 - 2013-09-26 11:24 - 00000000 ___RD C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-20 15:52 - 2013-09-26 11:24 - 00000000 ___RD C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-20 15:51 - 2014-01-20 15:51 - 00000000 ____D C:\Users\Lucien\Documents\AdobeStockPhotos
2014-01-20 15:51 - 2013-07-18 20:48 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Adobe
2014-01-20 13:49 - 2014-01-17 13:50 - 00000000 ____D C:\Users\Lucien\Downloads\backups
2014-01-20 12:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache
2014-01-19 18:46 - 2014-01-17 13:42 - 00012554 _____ C:\Users\Lucien\Downloads\hijackthis.log
2014-01-19 18:22 - 2014-01-19 18:22 - 00305304 _____ C:\WINDOWS\Minidump\011914-32203-01.dmp
2014-01-19 18:22 - 2014-01-19 18:22 - 00000000 ____D C:\WINDOWS\Minidump
2014-01-19 18:22 - 2013-09-13 12:11 - 1134103589 _____ C:\WINDOWS\MEMORY.DMP
2014-01-19 16:08 - 2014-01-13 23:20 - 00000000 ____D C:\Program Files (x86)\McAfee Security Scan
2014-01-19 08:38 - 2014-01-19 21:21 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-01-17 20:25 - 2014-01-22 00:11 - 00379904 _____ C:\Users\Lucien\Desktop\gmer.exe
2014-01-17 13:42 - 2014-01-17 13:42 - 00388608 _____ (Trend Micro Inc.) C:\Users\Lucien\Downloads\HiJackThis204.exe
2014-01-17 13:42 - 2013-07-18 20:48 - 00000000 ____D C:\Users\Lucien\AppData\Local\VirtualStore
2014-01-17 09:54 - 2014-01-17 09:54 - 00000385 _____ C:\Users\Lucien\AppData\Roaminguser_gensett.xml
2014-01-17 09:54 - 2013-07-18 20:49 - 00000000 ___RD C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-17 09:54 - 2013-07-18 20:49 - 00000000 ___RD C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-16 16:41 - 2013-08-22 15:44 - 05147912 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\MediaViewer
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\FileManager
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Camera
2014-01-16 16:37 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2014-01-16 16:37 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\Dism
2014-01-16 14:31 - 2013-08-23 10:50 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-16 13:51 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\WinStore
2014-01-16 13:29 - 2013-08-19 19:19 - 00000000 ____D C:\WINDOWS\system32\MRT
2014-01-13 23:23 - 2014-01-13 23:23 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\system32\bdsandboxuiskin32.dll
2014-01-13 23:23 - 2014-01-13 22:53 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\SysWOW64\bdsandboxuiskin32.dll
2014-01-13 23:23 - 2014-01-13 22:52 - 00261056 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avchv.sys
2014-01-13 23:23 - 2014-01-13 22:48 - 00000000 ____D C:\ProgramData\Bitdefender
2014-01-13 23:20 - 2014-01-13 23:20 - 00002041 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-13 23:20 - 2013-04-26 00:18 - 00000000 ____D C:\ProgramData\McAfee
2014-01-13 23:19 - 2013-04-26 00:15 - 00000000 ____D C:\ProgramData\Adobe
2014-01-13 23:19 - 2013-04-26 00:15 - 00000000 ____D C:\Program Files (x86)\Adobe
2014-01-13 22:54 - 2014-01-13 22:54 - 00620542 _____ C:\ProgramData\1389649682.bdinstall.bin
2014-01-13 22:54 - 2014-01-13 22:54 - 00000385 _____ C:\WINDOWS\system32\user_gensett.xml
2014-01-13 22:54 - 2014-01-13 22:53 - 00000000 ____D C:\ProgramData\BDLogging
2014-01-13 22:54 - 2014-01-13 22:52 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Bitdefender
2014-01-13 22:53 - 2014-01-13 22:53 - 00002212 _____ C:\Users\Public\Desktop\Bitdefender Safepay.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00002164 _____ C:\Users\Public\Desktop\Bitdefender Total Security.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2014-01-13 22:52 - 2014-01-13 22:48 - 00000000 ____D C:\Program Files\Bitdefender
2014-01-13 22:48 - 2014-01-13 22:48 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\QuickScan
2014-01-13 22:48 - 2014-01-12 22:56 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2014-01-13 22:46 - 2013-08-30 00:06 - 00000000 ____D C:\avast! sandbox
2014-01-13 22:45 - 2013-08-19 19:05 - 00000000 ____D C:\Program Files\AVAST Software
2014-01-13 22:45 - 2013-08-19 19:04 - 00000000 ____D C:\ProgramData\AVAST Software
2014-01-13 22:44 - 2013-08-19 19:06 - 00000000 _____ C:\WINDOWS\SysWOW64\config.nt
2014-01-13 14:27 - 2014-01-09 12:00 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Bioshock
2014-01-12 22:29 - 2014-01-12 22:29 - 07171632 _____ C:\Users\Lucien\Downloads\bitdefender_tsecurity.exe
2014-01-09 12:12 - 2014-01-09 12:00 - 00000000 ____D C:\Users\Lucien\Documents\Bioshock
2014-01-09 11:59 - 2013-04-26 00:16 - 00502089 _____ C:\WINDOWS\DirectX.log
2014-01-08 12:09 - 2013-10-14 09:56 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Spotify
2014-01-08 11:53 - 2013-12-27 10:35 - 00000000 ___RD C:\Users\Lucien\Downloads\Microsoft.SkypeApp_kzf8qxf38zg5c!App
2014-01-07 21:35 - 2014-01-07 21:35 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2014-01-07 21:05 - 2013-11-22 17:15 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-01-06 23:31 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-01-06 23:31 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\WINDOWS\SysWOW64\GPhotos.scr
2014-01-06 16:20 - 2013-08-19 19:19 - 86054176 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-01-06 13:11 - 2014-01-06 13:11 - 00000000 __SHD C:\ProgramData\SecuROM
2014-01-06 13:10 - 2014-01-06 13:10 - 00000000 ____D C:\Users\Lucien\AppData\Local\Rockstar Games
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\WINDOWS\SysWOW64\xlive
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\Users\Lucien\Documents\Games for Windows - LIVE Demos
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2014-01-06 13:08 - 2014-01-06 13:08 - 00642712 _____ (Microsoft Corporation) C:\Users\Lucien\Downloads\gfwlivesetup.exe
2014-01-03 18:23 - 2013-09-09 20:00 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\vlc
2013-12-30 23:47 - 2013-10-14 09:58 - 00000000 ____D C:\Users\Lucien\AppData\Local\Spotify
2013-12-29 16:19 - 2013-11-29 21:45 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\dvdcss
2013-12-29 13:36 - 2013-08-20 22:12 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Apple Computer
2013-12-29 13:34 - 2013-08-20 22:12 - 00000000 ____D C:\Users\Lucien\AppData\Local\Apple Computer
2013-12-28 20:12 - 2013-08-20 22:10 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-12-28 20:10 - 2013-12-28 20:07 - 70638408 _____ (Apple Inc.) C:\Users\Lucien\Downloads\iCloudSetup.exe

Files to move or delete:
====================
C:\ProgramData\SetStretch.exe
C:\ProgramData\SetStretch.VBS


Some content of TEMP:
====================
C:\Users\Gast\AppData\Local\Temp\drm_dyndata_7390004.dll
C:\Users\Gast\AppData\Local\Temp\ubiB23E.tmp.exe
C:\Users\Lucien\AppData\Local\Temp\UpdateCheckerSetup.exe
C:\Users\Lucien\AppData\Local\Temp\wajam_download.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-21 11:44

==================== End Of Log ============================

--- --- ---

--- --- ---



Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-01-2014 02
Ran by Lucien at 2014-01-22 21:41:49
Running from C:\Users\Lucien\Desktop
Boot Mode: Safe Mode (with Networking)
==========================================================


==================== Security Center ========================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Bitdefender Antivirus (Enabled - Up to date) {9B5F5313-CAF9-DD97-C460-E778420237B4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Bitdefender Spyware-Schutz (Enabled - Up to date) {203EB2F7-ECC3-D219-FED0-DC0A39857D09}
FW: Bitdefender Firewall (Enabled) {A364D236-8096-DCCF-EF3F-4E4DBCD170CF}

==================== Installed Programs ======================

 ASUS Console (Version: 1.0.0 - ASUS)
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0 - Igor Pavlov)
Adobe AIR (x32 Version: 3.9.0.1380 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.9.0.1380 - Adobe Systems Incorporated) Hidden
Adobe Bridge 1.0 (x32 Version: 001.000.001 - Adobe Systems) Hidden
Adobe Common File Installer (x32 Version: 1.00.001 - Adobe System Incorporated) Hidden
Adobe Creative Cloud (x32 Version: 2.2.1.260 - Adobe Systems Incorporated)
Adobe Help Center 1.0 (x32 Version: 1.0.1 - Adobe Systems) Hidden
Adobe InDesign CS2 (x32 Version: 004.000.000 - Adobe Systems Incorporated)
Adobe InDesign CS2 (x32 Version: 004.000.000 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS2 (x32 Version: 9.0 - Adobe Systems, Inc.)
Adobe Photoshop CS2 (x32 Version: 9.0 - Adobe Systems, Inc.) Hidden
Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated)
Adobe Stock Photos 1.0 (x32 Version: 1.0.1 - Adobe Systems) Hidden
Adobe® Content Viewer (x32 Version: 3.3.0 - Adobe Systems Incorporated)
Adobe® Content Viewer (x32 Version: 3.3.0 - Adobe Systems Incorporated) Hidden
Akamai NetSession Interface (HKCU Version:  - Akamai Technologies, Inc)
Apple Application Support (x32 Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
Assassin's Creed (x32 Version:  - Ubisoft Montreal)
ASUS FaceKey (x32 Version: 4.1.0.0 - )
ASUS Instant Key (x32 Version: 1.1.1 - ASUS)
ASUS Live Update (x32 Version: 3.2.2 - ASUS)
ASUS Power4Gear Hybrid (Version: 3.0.2 - ASUS)
ASUS Screen Saver (Version: 1.0.1 - ASUS)
ASUS Smart Gesture (x32 Version: 2.2.5 - ASUS)
ASUS Splendid Video Enhancement Technology (x32 Version: 2.01.0005 - ASUS)
ASUS USB Charger Plus (x32 Version: 3.1.0 - ASUS)
ASUS Video DSP (x32 Version: 1.0.000 - )
ASUSDVD (x32 Version: 10.0.4924.52 - CyberLink Corp.)
ASUSDVD (x32 Version: 10.0.4924.52 - CyberLink Corp.) Hidden
AsusVibe2.0 (x32 Version: 2.0.12.309 - ASUSTEK)
ATK Package (x32 Version: 1.0.0030 - ASUS)
Azteca (x32 Version: 2.2.0.97 - WildTangent) Hidden
Bejeweled 3 (x32 Version: 2.2.0.97 - WildTangent) Hidden
BioShock (x32 Version:  - 2K Boston)
BioShock 2 (x32 Version:  - 2K Marin)
BioShock Infinite (x32 Version:  - Irrational Games)
Bitdefender Total Security (Version: 17.23.0.996 - Bitdefender)
Blender (Version: 2.68a - Blender Foundation)
Bonjour (Version: 3.0.0.10 - Apple Inc.)
Combat Arms EU (x32 Version:  - )
Crysis (x32 Version:  - Crytek)
Crysis 2 Maximum Edition (x32 Version:  - Crytek Studios)
Crysis Warhead (x32 Version:  - Crytek)
Cut the Rope (x32 Version: 3.0.2.38 - WildTangent) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (x32 Version: 4.47.1.0333 - Disc Soft Ltd)
Fallout: New Vegas (x32 Version:  - Obsidian Entertainment)
Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Galerie de photos (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
GameSpy Comrade (x32 Version: 1.5.0.156 - GameSpy)
Geeks3D FurMark 1.11.0 (x32 Version:  - Geeks3D)
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
Google Chrome (x32 Version: 32.0.1700.76 - Google Inc.)
Google Earth Plug-in (x32 Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
Google+ Auto Backup (x32 Version: 1.0.21.81 - Google)
Grand Theft Auto IV (x32 Version:  - Rockstar North)
iCloud (Version: 3.1.0.40 - Apple Inc.)
Intel Extreme Tuning Utility (x32 Version: 4.2.0.8 - Intel Corporation)
Intel Extreme Tuning Utility (x32 Version: 4.2.0.8 - Intel Corporation) Hidden
Intel(R) Management Engine Components (x32 Version: 9.5.10.1658 - Intel Corporation)
Intel(R) Processor Graphics (x32 Version: 10.18.10.3308 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 3.0.0.63463 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.27.798.1 - Intel Corporation) Hidden
Intel® Watchdog Timer Driver (Intel® WDT) (x32 Version:  - Intel Corporation)
iTunes (Version: 11.1.3.8 - Apple Inc.)
Java 7 Update 40 (x32 Version: 7.0.400 - Oracle)
Java 7 Update 45 (64-bit) (Version: 7.0.450 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JDownloader 0.9 (x32 Version: 0.9 - AppWork GmbH)
Kyocera Product Library (Version: 3.3.0728 - KYOCERA Document Solutions Inc.)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322 - Microsoft)
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.67.0 - Microsoft Corporation)
Microsoft Office (x32 Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft SkyDrive (HKCU Version: 17.0.2015.0811 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (x32 Version: 3.5.8080.0 - Microsoft Corporation) Hidden
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (Version: 3.5.8080.0 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (Version: 2.2.173.0 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (Version: 2.2.173.0 - Microsoft Corporation) Hidden
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Maintenance Service (x32 Version: 24.2.0 - Mozilla)
Mozilla Thunderbird 24.2.0 (x86 en-US) (x32 Version: 24.2.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MyBitCast 2.0 (x32 Version: 2.0 - ASUS)
NVIDIA GeForce Experience 1.8.1 (Version: 1.8.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 331.82 (Version: 331.82 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.142.992 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Optimus Update 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA ShadowPlay 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 331.82 (Version: 331.82 - NVIDIA Corporation) Hidden
NVIDIA Update 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.19 (Version: 1.2.19 - NVIDIA Corporation)
OpenOffice 4.0.0 (x32 Version: 4.00.9702 - Apache Software Foundation)
PDF Settings CC (x32 Version: 12.0 - Adobe Systems Incorporated) Hidden
Peggle (x32 Version: 2.2.0.95 - WildTangent) Hidden
Penguins! (x32 Version: 2.2.0.98 - WildTangent) Hidden
Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Picasa 3 (x32 Version: 3.9 - Google, Inc.)
Qualcomm Atheros Bluetooth Suite (64) (Version: 8.0.0.226 - Qualcomm Atheros Communications)
Qualcomm Atheros Client Installation Program (x32 Version: 10.0 - Qualcomm Atheros)
Raccolta foto (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (x32 Version: 8.11.201.2013 - Realtek)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6890 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (x32 Version: 6.2.8400.39032 - Realtek Semiconductor Corp.)
Secure Banking Version 1.5.2 (x32 Version: 1.5.2 - Hopfgartner Niklas)
Shared C Run-time for x64 (Version: 10.0.0 - McAfee)
SHIELD Streaming (Version: 1.6.85 - NVIDIA Corporation) Hidden
Spotify (HKCU Version: 0.9.6.81.gd359a796 - Spotify AB)
Steam (x32 Version: 1.0.0.0 - Valve Corporation)
SweetFX Configurator (HKCU Version: 1.3.3.32 - SweetFX Configurator)
Tales of Lagoona (x32 Version: 2.2.0.110 - WildTangent) Hidden
TechPowerUp GPU-Z (x32 Version:  - TechPowerUp)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Uplay (x32 Version: 2.0 - Ubisoft)
VLC media player 2.1.1 (Version: 2.1.1 - VideoLAN)
WildTangent Games (x32 Version: 1.0.0.0 - WildTangent)
WildTangent Games App (x32 Version: 4.0.10.5 - WildTangent) Hidden
Windows Driver Package - Cambridge Silicon Radio Ltd. (CSRBC) USB  (04/21/2011 01.0.0.0) (Version: 04/21/2011 01.0.0.0 - Cambridge Silicon Radio Ltd.)
Windows Live (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows-Treiberpaket - ASUS (ATP) Mouse  (09/17/2013 1.0.0.186) (Version: 09/17/2013 1.0.0.186 - ASUS)
WinFlash (x32 Version: 2.42.0 - ASUS)
WinRAR 5.00 (64-bit) (Version: 5.00.0 - win.rar GmbH)
XnView 2.05 (x32 Version: 2.05 - Gougelet Pierre-e)

==================== Restore Points  =========================

09-01-2014 10:58:22 DirectX wurde installiert
12-01-2014 21:31:58 avast! antivirus system restore point
16-01-2014 09:29:12 Windows Update
17-01-2014 14:06:26 DirectX wurde installiert
22-01-2014 13:00:14 Entfernt Far Cry 3

==================== Hosts content: ==========================

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {24D65D33-1BB6-4218-8C9A-93BAD5F7AD58} - System32\Tasks\AdobeAAMUpdater-1.0-LuciensNote-Gastkonto => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-09-25] (Adobe Systems Incorporated)
Task: {2AF41336-0150-4FC9-B1C4-303AEA8AB2F7} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2013-04-29] (ASUS)
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {2DFE22E7-DDC9-4DF6-979F-0F0302665CED} - System32\Tasks\Bitdefender Auto-Scan => C:\Program Files\Bitdefender\Bitdefender\mtasklaunch.exe [2013-06-19] (Bitdefender)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3A11AC82-0061-4F37-9E53-8E776FA1AF63} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {4A723241-2A57-419E-88DB-131E0F4EE453} - System32\Tasks\ASUS InstantOn Config => C:\Program Files\ASUS\P4G\InsOnCfg.exe
Task: {588E869A-469C-4E6A-9158-E9C69DF40653} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2013-03-20] (ASUSTeK Computer Inc.)
Task: {5C446892-083C-441F-B1A1-ACCD00580988} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-05-13] (Microsoft)
Task: {67D0BA4D-D8A0-4BE4-9946-9D1B29003D15} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2013-03-26] (ASUSTek Computer Inc.)
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {71CF2ACD-5ECE-44AF-B70E-0FB86EFAD5E5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-19] (Google Inc.)
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77C3AEEE-3C58-4A38-ACD3-672BDA247D8E} - System32\Tasks\AsusVibeSchedule => C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe [2013-01-04] ()
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {A813CD6F-CBF7-44E8-8680-9351C17F9CD4} - System32\Tasks\AdobeAAMUpdater-1.0-LuciensNote-Lucien => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-09-25] (Adobe Systems Incorporated)
Task: {A96BC286-FCDE-4AB0-9AD9-0101AB9992A7} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {AB1225C5-F405-4879-86FC-01567E0BE790} - System32\Tasks\ASUS Splendid ColorU => C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe [2013-02-26] (ASUSTeK Computer Inc.)
Task: {B15AD5C5-8842-43CF-8012-7BB0A738725D} - System32\Tasks\SomotoUpdateCheckerAutoStart => C:\Users\Lucien\AppData\Local\FilesFrog Update Checker\update_checker.exe <==== ATTENTION
Task: {B50DB3E1-90FE-41F6-8364-55236F316E7E} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2013-09-23] (AsusTek)
Task: {B9BDCE1F-9E3D-4592-B896-2362E5B7542D} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {C5DC00DB-616B-464F-BC49-6AF0D0337FB8} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
Task: {CD4FDD82-8274-4996-9887-36AD37BEAFAA} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2012-11-28] (ASUS)
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {DA8DF7E5-FD16-4EF9-8B88-FCA784BEFFEB} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-01-06] (Microsoft Corporation)
Task: {DD395EDC-2C10-4EEC-80EC-DA41AB982423} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-19] (Google Inc.)
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {EE52212A-8910-4CEF-B193-410CBAED2F8C} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2013-03-20] (ASUSTeK Computer Inc.)
Task: {F782D995-86D7-4704-A400-0D45AF92B7AB} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {FD2BBDEB-EFC8-49FB-94A4-305C0766547A} - System32\Tasks\ASUS Console => C:\Program Files\ASUS\ASUS Console\ASUS Console Starter.exe [2013-04-12] (ASUSTek Computer Inc.)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-10-16 18:02 - 2013-10-16 18:02 - 03358064 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll
2014-01-13 22:53 - 2013-06-19 11:45 - 00265080 _____ () C:\Program Files\Bitdefender\Bitdefender\txmlutil.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\Gast\Downloads\Windows-KB890830-x64-V5.8.exe:BDU
AlternateDataStreams: C:\Users\Lucien\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\Lucien\Desktop\adwcleaner.exe:BDU
AlternateDataStreams: C:\Users\Lucien\Desktop\Defogger.exe:BDU
AlternateDataStreams: C:\Users\Lucien\Desktop\esetsmartinstaller_enu.exe:BDU
AlternateDataStreams: C:\Users\Lucien\Desktop\JRT.exe:BDU
AlternateDataStreams: C:\Users\Lucien\Desktop\SecurityCheck.exe:BDU
AlternateDataStreams: C:\Users\Lucien\Desktop\TFC.exe:BDU
AlternateDataStreams: C:\Users\Lucien\Downloads\HiJackThis204.exe:BDU

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Could not start eventlog service, could not read events.

Der angeforderte Dienst wurde bereits gestartet.

Sie erhalten weitere Hilfe, wenn Sie NET HELPMSG 2182 eingeben.


==================== Memory info ===========================

Percentage of memory in use: 13%
Total physical RAM: 8075.37 MB
Available physical RAM: 7023.35 MB
Total Pagefile: 16267.37 MB
Available Pagefile: 15314.97 MB
Total Virtual: 131072 MB
Available Virtual: 131071.82 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:372.26 GB) (Free:261.49 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (DATA) (Fixed) (Total:537.6 GB) (Free:424.58 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 115DA0F7)

Partition: GPT Partition Type
==================== End Of Log ============================

Gruß KitsuneNoir

sunjojo 23.01.2014 23:27

Code:

C:\Users\Lucien\Desktop\gmer.txt
Laut deinen Logfiles hast du bereits einen Scan mit GMER durchgeführt. Poste mir bitte dieses Logfile.

Code:

(Thisisu) C:\Users\Lucien\Desktop\JRT.exe
C:\Users\Lucien\Desktop\adwcleaner.exe
(ESET) C:\Users\Lucien\Desktop\esetsmartinstaller_enu.exe

Hast du mit dem AdwCleaner, ESET oder JRT bereits Scans druchgeführt? Wenn ja, poste bitte die entsprechenden Logfiles :).



Führe folgenden Schritt im Abgesicherten Modus mit Netzwerktreibern durch.
Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

2014-01-21 09:39 - 2014-01-21 09:39 - 00003258 _____ C:\WINDOWS\System32\Tasks\SomotoUpdateCheckerAutoStart
C:\ProgramData\SetStretch.exe
cmd: type "C:\ProgramData\SetStretch.VBS"
C:\ProgramData\SetStretch.VBS


Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.

Führe folgende Schritte im Normalen Modus durch (berichte mir, ob diese funktioniert haben).

Schritt 2
Downloade dir bitte Farbar Service Scanner Farbar Service Scanner
  • Starte das Tool mit Doppelklick auf die FSS.exe
  • Gehe sicher, dass folgende Optionen angehakt sind.
    • Internet Services
    • Windows Firewall
    • System Restore
    • Security Center/Action Center
    • Windows Update
    • Windows Defender
    • Other Services
  • Klicke auf Scan.
  • Wenn das Tool fertig ist, wird es eine FSS.txt in dem Verzeichnis erstellen, wo das Tool gelaufen ist.

Poste bitte den Inhalt hier.


Schritt 3
Starte noch einmal FRST.
  • Ändere keine der Voreinstellungen und drücke auf Scan.
  • Wenn der Scan abgeschlossen ist, wird ein neues Logfile FRST.txt erstellt und auf dem Desktop gespeichert.
  • Poste den Inhalt dieses Logfiles bitte hier in deinen Thread.

Hast du noch die oben beschriebenen Probleme?



Poste folgende Logfiles in deiner nächsten Antwort:
  • FRST-Fix
  • FSS-Scan
  • FRST-Scan

KitsuneNoir 24.01.2014 19:40

Hey,
also erstmal die gmer als zip und die adw,jrt und eset logs...

AdwCleaner[S0]
AdwCleaner Logfile:
Code:

# AdwCleaner v3.001 - Report created 31/08/2013 at 17:00:11
# Updated 24/08/2013 by Xplode
# Operating System : Windows 8  (64 bits)
# Username : Lucien - LUCIENSNOTE
# Running from : C:\Users\Lucien\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\Program Files (x86)\Conduit
Folder Deleted : C:\Program Files (x86)\Common Files\AVG Secure Search
Folder Deleted : C:\Users\Lucien\AppData\Local\cre
Folder Deleted : C:\Users\Lucien\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Lucien\AppData\LocalLow\SimplyTech
Folder Deleted : C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
File Deleted : C:\END

***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Deleted : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\Software\AVG Security Toolbar

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16660


-\\ Google Chrome v29.0.1547.62

[ File : C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [4386 octets] - [31/08/2013 16:59:00]
AdwCleaner[S0].txt - [4290 octets] - [31/08/2013 17:00:11]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4350 octets] ##########

--- --- ---
AdwCleaner Logfile:
Code:

# AdwCleaner v3.017 - Bericht erstellt am 22/01/2014 um 00:03:25
# Aktualisiert 12/01/2014 von Xplode
# Betriebssystem : Windows 8.1  (64 bits)
# Benutzername : Lucien - LUCIENSNOTE
# Gestartet von : C:\Users\Lucien\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****

AdwCleaner[R0]
Code:

# AdwCleaner v3.001 - Report created 31/08/2013 at 16:59:00
# Updated 24/08/2013 by Xplode
# Operating System : Windows 8  (64 bits)
# Username : Lucien - LUCIENSNOTE
# Running from : C:\Users\Lucien\Desktop\adwcleaner.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

File Found : C:\END
Folder Found : C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Folder Found C:\Program Files (x86)\Common Files\AVG Secure Search
Folder Found C:\Program Files (x86)\Conduit
Folder Found C:\ProgramData\Babylon
Folder Found C:\Users\Lucien\AppData\Local\cre
Folder Found C:\Users\Lucien\AppData\LocalLow\Conduit
Folder Found C:\Users\Lucien\AppData\LocalLow\SimplyTech

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKLM\Software\AVG Security Toolbar
Key Found : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Found : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Found : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Found : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Found : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Found : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Found : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Found : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Found : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Found : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16660


-\\ Google Chrome v29.0.1547.62

[ File : C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [4238 octets] - [31/08/2013 16:59:00]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [4298 octets] ##########

--- --- ---
AdwCleaner Logfile:
Code:

# AdwCleaner v3.017 - Bericht erstellt am 22/01/2014 um 00:01:42
# Aktualisiert 12/01/2014 von Xplode
# Betriebssystem : Windows 8.1  (64 bits)
# Benutzername : Lucien - LUCIENSNOTE
# Gestartet von : C:\Users\Lucien\Desktop\adwcleaner.exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Datei Gefunden : C:\END
Datei Gefunden : C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_app.mam.conduit.com_0.localstorage
Datei Gefunden : C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_app.mam.conduit.com_0.localstorage-journal
Datei Gefunden : C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www2.delta-search.com_0.localstorage
Datei Gefunden : C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www2.delta-search.com_0.localstorage-journal
Datei Gefunden : C:\WINDOWS\System32\roboot64.exe
Ordner Gefunden C:\Program Files (x86)\Mobogenie
Ordner Gefunden C:\Program Files (x86)\MyPC Backup
Ordner Gefunden C:\Program Files (x86)\Wajam
Ordner Gefunden C:\ProgramData\Babylon
Ordner Gefunden C:\ProgramData\boost_interprocess
Ordner Gefunden C:\Users\Lucien\AppData\Local\Babylon
Ordner Gefunden C:\Users\Lucien\AppData\Local\FilesFrog Update Checker
Ordner Gefunden C:\Users\Lucien\AppData\Local\Mobogenie
Ordner Gefunden C:\Users\Lucien\AppData\LocalLow\Softonic
Ordner Gefunden C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker
Ordner Gefunden C:\Users\Lucien\AppData\Roaming\Systweak
Ordner Gefunden C:\Users\Lucien\Documents\Mobogenie

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gefunden : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gefunden : HKCU\Software\Softonic
Schlüssel Gefunden : HKCU\Software\Somoto
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gefunden : [x64] HKCU\Software\Softonic
Schlüssel Gefunden : [x64] HKCU\Software\Somoto
Schlüssel Gefunden : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gefunden : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FilesFrog Update Checker
Schlüssel Gefunden : HKLM\Software\systweak
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon]

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16384


-\\ Google Chrome v32.0.1700.76

[ Datei : C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ Datei : C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [8302 octets] - [31/08/2013 15:59:00]
AdwCleaner[S0].txt - [4434 octets] - [31/08/2013 16:00:11]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [8422 octets] ##########

--- --- ---


Eset
Code:

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=fb51889e9531004db1d4bd0fb39b748e
# engine=16781
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-01-24 05:55:57
# local_time=2014-01-24 06:55:57 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.2.9200 NT
# compatibility_mode=5893 16776574 100 94 10071555 15467450 0 0
# scanned=279688
# found=1
# cleaned=1
# scan_time=26257
sh=54CC556CE00024BFE21CE105A292522EF4B8E257 ft=0 fh=0000000000000000 vn="HTML/ScrInject.B.Gen virus (deleted - quarantined)" ac=C fn="C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Cache\f_007465"

JRT
Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.0 (01.07.2014:1)
OS: Windows 8.1 x64
Ran by Lucien on 24.01.2014 at 10:53:50,13
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 24.01.2014 at 11:10:03,42
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Gruß KitsuneNoir :)

KitsuneNoir 25.01.2014 16:14

1.
Code:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 22-01-2014 02
Ran by Lucien at 2014-01-24 19:16:02 Run:1
Running from C:\Users\Lucien\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
2014-01-21 09:39 - 2014-01-21 09:39 - 00003258 _____ C:\WINDOWS\System32\Tasks\SomotoUpdateCheckerAutoStart
C:\ProgramData\SetStretch.exe
cmd: type "C:\ProgramData\SetStretch.VBS"
C:\ProgramData\SetStretch.VBS
*****************

C:\WINDOWS\System32\Tasks\SomotoUpdateCheckerAutoStart => Moved successfully.
C:\ProgramData\SetStretch.exe => Moved successfully.

=========  type "C:\ProgramData\SetStretch.VBS" =========

set exe=CreateObject("WScript.shell")
res=exe.run("cmd.exe /c C:\ProgramData\SetStretch.cmd",k,true)

========= End of CMD: =========

C:\ProgramData\SetStretch.VBS => Moved successfully.

==== End of Fixlog ====

2.
Code:

Farbar Service Scanner Version: 08-01-2014
Ran by Lucien (administrator) on 24-01-2014 at 19:19:43
Running from "C:\Users\Lucien\Desktop"
Microsoft Windows 8.1  (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Attempt to access Google IP returned error. Google IP is offline
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall"=DWORD:0


System Restore:
============

System Restore Disabled Policy:
========================


Action Center:
============


Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend: ""%ProgramFiles%\Windows Defender\MsMpEng.exe"".


Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll
[2013-08-22 14:25] - [2013-08-22 14:25] - 0029184 ____A (Microsoft Corporation) 6E2271ED0C3E95B8E29F3752B91B9E84

C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys
[2014-01-16 14:05] - [2013-11-05 21:12] - 2551128 ____A (Microsoft Corporation) 3D9A5AC880D7AA2305812D665D24ED23

C:\Windows\System32\dnsrslvr.dll
[2013-11-17 15:12] - [2013-10-08 06:48] - 0255488 ____A (Microsoft Corporation) 5BAF7714E68F93515A937A3FA8587EF9

C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll
[2013-11-13 09:20] - [2013-10-12 22:48] - 0828416 ____A (Microsoft Corporation) 6468B696C65775D51A06615830E0E79D

C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll
[2013-11-17 15:12] - [2013-10-07 03:13] - 3532288 ____A (Microsoft Corporation) 86D0BF4F792053A50D6EE43DFA5837A5

C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MsMpEng.exe => MD5 is legit
C:\Windows\System32\ipnathlp.dll
[2013-11-17 15:12] - [2013-09-14 10:11] - 0433664 ____A (Microsoft Corporation) F4414F57DF2CECB8FC969AA43A6B0D50

C:\Windows\System32\iphlpsvc.dll
[2013-11-17 15:12] - [2013-10-08 05:50] - 0903168 ____A (Microsoft Corporation) DFC4050D58565ADBEE793A8D4AEBDAE6

C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****

3.

FRST Logfile:

FRST Logfile:
Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-01-2014 02
Ran by Lucien (administrator) on LUCIENSNOTE on 24-01-2014 19:21:38
Running from C:\Users\Lucien\Desktop
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\vsserv.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(ASUS) C:\Program Files\ASUS\P4G\InsOnSrv.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender Safebox\safeboxservice.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files\ASUS\P4G\InsOnWMI.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe\livecomm.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS Console\ASUS Console Starter.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\bdagent.exe
(Secure Banking) C:\Program Files (x86)\Secure Banking\SecureBanking.exe
(Akamai Technologies, Inc.) C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe
() C:\Program Files (x86)\Secure Banking\sbservice.exe
(Akamai Technologies, Inc.) C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13530184 2013-04-22] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1278024 2013-03-08] (Realtek Semiconductor)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-09-25] (Adobe Systems Incorporated)
HKLM\...\Run: [PrnStatusMX] - C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe [1240064 2012-07-04] (Marvell Semiconductor, Inc.)
HKLM\...\Run: [ShadowPlay] - C:\WINDOWS\system32\nvspcap64.dll [1100248 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [Bdagent] - C:\Program Files\Bitdefender\Bitdefender\bdagent.exe [1735872 2014-01-13] (Bitdefender)
HKLM-x32\...\Run: [ASUSPRP] - C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-04-26] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-01-15] (cyberlink)
HKLM-x32\...\Run: [ASUS InstantKey] - C:\Program Files (x86)\ASUS\ASUS Instant Key\Ikey_start.exe [13936 2013-04-16] (ASUS)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2237328 2013-11-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-04-24] ( (Atheros Communications))
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\steam.exe [1815464 2014-01-07] (Valve Corporation)
HKCU\...\Run: [SecureBanking] - C:\Program Files (x86)\Secure Banking\SecureBanking.exe [507904 2013-06-30] (Secure Banking)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Lucien\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-10] (Spotify Ltd)
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
HKCU\...\Run: [Bitdefender-Geldbörse-Agent] - C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [561672 2014-01-13] (Bitdefender)
HKCU\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] - C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [612696 2014-01-13] (Bitdefender)
HKU\Gast\...\Run: [Spotify] - C:\Users\Gast\AppData\Roaming\Spotify\Spotify.exe [6118400 2014-01-20] (Spotify Ltd)
HKU\Gast\...\Run: [Spotify Web Helper] - C:\Users\Gast\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-01-20] (Spotify Ltd)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [168616 2013-11-14] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [141336 2013-11-14] (NVIDIA Corporation)
Startup: C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;form=IE10TR&amp;src=IE10TR&amp;pc=ASU2JS
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;form=IE10TR&amp;src=IE10TR&amp;pc=ASU2JS
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\pmbxie.dll (Bitdefender)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxie.dll (Bitdefender)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Chrome:
=======
CHR HomePage: hxxp://www.google.de/
CHR Extension: (Google Docs) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-14]
CHR Extension: (Google Drive) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-19]
CHR Extension: (YouTube) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-19]
CHR Extension: (Bitdefender Wallet) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccahoghmggldkcdjiebjkidpfongdfbl [2014-01-13]
CHR Extension: (Google Search) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-19]
CHR Extension: (Google Wallet) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR Extension: (Gmail) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-19]
CHR HKLM-x32\...\Chrome\Extension: [ccahoghmggldkcdjiebjkidpfongdfbl] - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxcr.crx [2014-01-13]

==================== Services (Whitelisted) =================

U3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-12-18] (Adobe Systems)
U2 ASUS InstantOn; C:\Program Files\ASUS\P4G\InsOnSrv.exe [277120 2013-04-29] (ASUS)
U2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [310400 2013-04-24] (Windows (R) Win 7 DDK provider)
U4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender\bdparentalservice.exe [77632 2013-11-21] (Bitdefender)
U2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [247768 2013-01-15] (CyberLink)
U3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
U2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-04-11] (Intel Corporation)
U2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
U2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
U2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
U2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
U2 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [94624 2013-07-08] (Bitdefender)
U2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe [67320 2013-10-07] (Bitdefender)
U2 VSSERV; C:\Program Files\Bitdefender\Bitdefender\vsserv.exe [1507248 2013-11-15] (Bitdefender)
U3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
U3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
U2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [18384 2013-09-04] (Intel(R) Corporation)
U2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-04-24] (Atheros)

==================== Drivers (Whitelisted) ====================

U0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
U3 ATP; C:\Windows\System32\drivers\AsusTP.sys [70416 2013-09-23] (ASUS Corporation)
U0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [727592 2013-07-19] (BitDefender)
U3 avchv; C:\Windows\system32\DRIVERS\avchv.sys [261056 2014-01-13] (BitDefender)
U3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [601360 2013-07-19] (BitDefender)
U3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
U0 bdelam; C:\Windows\System32\drivers\bdelam.sys [23568 2013-09-08] (Bitdefender)
U1 BdfNdisf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys [98768 2013-07-24] (BitDefender LLC)
U1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107008 2013-07-29] (BitDefender LLC)
U3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-07-02] (Bitdefender SRL)
U3 BDSandBox; C:\WINDOWS\system32\drivers\bdsandbox.sys [82824 2013-11-04] (BitDefender SRL)
U1 BDVEDISK; C:\Windows\system32\DRIVERS\bdvedisk.sys [79192 2013-07-30] (BitDefender)
U3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-04-24] (Qualcomm Atheros)
U3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
U3 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2013-09-01] (DT Soft Ltd)
U0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [150256 2013-08-23] (BitDefender LLC)
U3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
U3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
U0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
U0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)
U2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [26328 2013-07-23] (Intel Corporation)
U3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
U0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
U3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
U3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-07-26] (Intel Corporation)
U3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
U3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
U3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
U3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
U0 rtcrfilt64; C:\Windows\System32\DRIVERS\rtcrfilt64.sys [19600 2000-01-01] (Realtek Semiconductor Corp.)
U3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)
U0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
U3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16152 2013-09-03] ()
U0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [389240 2013-08-07] (BitDefender S.R.L.)
U3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
U3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
U3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [x]
U3 GPU-Z; \??\C:\Users\Lucien\AppData\Local\Temp\GPU-Z.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-24 19:21 - 2014-01-24 19:21 - 00000000 ____D C:\Users\Lucien\Desktop\Logs alt
2014-01-24 19:19 - 2014-01-24 19:19 - 00003293 _____ C:\Users\Lucien\Desktop\FSS.txt
2014-01-24 19:17 - 2014-01-24 19:17 - 00361185 _____ (Farbar) C:\Users\Lucien\Desktop\FSS.exe
2014-01-24 19:12 - 2014-01-22 00:03 - 00008373 _____ C:\Users\Lucien\Desktop\AdwCleaner[S0].txt
2014-01-24 19:12 - 2014-01-22 00:02 - 00008522 _____ C:\Users\Lucien\Desktop\AdwCleaner[R0].txt
2014-01-24 16:48 - 2014-01-24 16:48 - 00032847 _____ C:\Users\Lucien\Desktop\gmer.zip
2014-01-24 11:34 - 2014-01-24 11:34 - 00000000 ____D C:\Program Files (x86)\ESET
2014-01-24 11:10 - 2014-01-24 11:10 - 00000749 _____ C:\Users\Lucien\Desktop\JRT.txt
2014-01-24 10:53 - 2014-01-24 10:53 - 00000000 ____D C:\WINDOWS\ERUNT
2014-01-22 21:41 - 2014-01-24 19:21 - 00020296 _____ C:\Users\Lucien\Desktop\FRST.txt
2014-01-22 21:41 - 2014-01-22 21:41 - 00000000 ____D C:\Users\Lucien\Desktop\FRST-OlderVersion
2014-01-22 21:23 - 2014-01-22 21:23 - 00022688 _____ C:\Users\Lucien\Downloads\Addition.txt
2014-01-22 21:22 - 2014-01-22 21:23 - 00046051 _____ C:\Users\Lucien\Downloads\FRST.txt
2014-01-22 13:59 - 2014-01-22 21:41 - 02077696 _____ (Farbar) C:\Users\Lucien\Desktop\FRST64.exe
2014-01-22 13:49 - 2014-01-22 13:49 - 00003576 _____ C:\WINDOWS\System32\Tasks\Bitdefender Auto-Scan
2014-01-22 12:30 - 2014-01-22 12:30 - 00000168 _____ C:\Users\Lucien\defogger_reenable
2014-01-22 00:11 - 2014-01-17 20:25 - 00379904 _____ C:\Users\Lucien\Desktop\gmer.exe
2014-01-22 00:10 - 2012-12-19 16:10 - 00000000 ____D C:\Users\Lucien\Desktop\data
2014-01-22 00:10 - 2011-10-24 13:35 - 00000000 ____D C:\Users\Lucien\Desktop\Tweaking.com - Windows Repair
2014-01-22 00:10 - 2009-10-20 21:47 - 00055936 _____ () C:\Users\Lucien\Desktop\Setup.exe
2014-01-21 23:54 - 2014-01-22 21:41 - 00000000 ____D C:\FRST
2014-01-21 22:19 - 2014-01-21 22:19 - 00000000 ____D C:\WINDOWS\LastGood
2014-01-21 15:06 - 2014-01-21 15:06 - 01037068 _____ (Thisisu) C:\Users\Lucien\Desktop\JRT.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00987425 _____ C:\Users\Lucien\Desktop\SecurityCheck.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00448512 _____ (OldTimer Tools) C:\Users\Lucien\Desktop\TFC.exe
2014-01-21 15:05 - 2014-01-21 15:05 - 01236282 _____ C:\Users\Lucien\Desktop\adwcleaner.exe
2014-01-21 15:00 - 2014-01-21 15:01 - 02347384 _____ (ESET) C:\Users\Lucien\Desktop\esetsmartinstaller_enu.exe
2014-01-21 13:15 - 2014-01-21 13:25 - 24859352 _____ (Microsoft Corporation) C:\Users\Gast\Downloads\Windows-KB890830-x64-V5.8.exe
2014-01-21 10:40 - 2014-01-22 14:01 - 00000000 ____D C:\Users\Gast\AppData\Local\My Games
2014-01-21 10:18 - 2014-01-21 10:18 - 00050477 _____ C:\Users\Lucien\Desktop\Defogger.exe
2014-01-21 10:12 - 2014-01-21 10:12 - 00000000 ____D C:\Users\Gast\AppData\Roaming\QuickScan
2014-01-21 09:38 - 2014-01-21 09:38 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Spotydl
2014-01-21 08:33 - 2014-01-21 08:33 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2014-01-20 16:10 - 2013-12-03 13:49 - 00000000 ____D C:\Users\Gast\Downloads\settings
2014-01-20 15:53 - 2014-01-20 15:53 - 00000000 ____D C:\Users\Gast\AppData\Local\NVIDIA Corporation
2014-01-20 15:52 - 2014-01-21 08:37 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Bitdefender
2014-01-20 15:52 - 2014-01-20 15:52 - 00000385 _____ C:\Users\Gast\AppData\Roaminguser_gensett.xml
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\Documents\Bluetooth Folder
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\AppData\Local\BMExplorer
2014-01-20 15:51 - 2014-01-20 15:51 - 00000000 ____D C:\Users\Lucien\Documents\AdobeStockPhotos
2014-01-19 21:21 - 2014-01-19 08:38 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-01-19 18:22 - 2014-01-19 18:22 - 00305304 _____ C:\WINDOWS\Minidump\011914-32203-01.dmp
2014-01-19 18:22 - 2014-01-19 18:22 - 00000000 ____D C:\WINDOWS\Minidump
2014-01-17 15:05 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2014-01-17 15:05 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2014-01-17 13:50 - 2014-01-20 13:49 - 00000000 ____D C:\Users\Lucien\Downloads\backups
2014-01-17 13:42 - 2014-01-19 18:46 - 00012554 _____ C:\Users\Lucien\Downloads\hijackthis.log
2014-01-17 13:42 - 2014-01-17 13:42 - 00388608 _____ (Trend Micro Inc.) C:\Users\Lucien\Downloads\HiJackThis204.exe
2014-01-17 09:54 - 2014-01-17 09:54 - 00000385 _____ C:\Users\Lucien\AppData\Roaminguser_gensett.xml
2014-01-16 14:05 - 2013-12-11 08:55 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-01-16 14:05 - 2013-12-09 01:34 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-01-16 14:05 - 2013-12-09 01:04 - 00980480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-01-16 14:05 - 2013-11-27 16:34 - 03210528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2014-01-16 14:05 - 2013-11-27 16:27 - 00809872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-01-16 14:05 - 2013-11-27 15:00 - 00663680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-01-16 14:05 - 2013-11-27 14:47 - 02804528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2014-01-16 14:05 - 2013-11-27 13:02 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ipnat.sys
2014-01-16 14:05 - 2013-11-27 11:54 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-01-16 14:05 - 2013-11-27 11:24 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll
2014-01-16 14:05 - 2013-11-27 11:08 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-01-16 14:05 - 2013-11-27 10:46 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll
2014-01-16 14:05 - 2013-11-27 10:41 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2014-01-16 14:05 - 2013-11-27 10:17 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-01-16 14:05 - 2013-11-27 10:10 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2014-01-16 14:05 - 2013-11-27 09:58 - 01503232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-01-16 14:05 - 2013-11-27 09:56 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll
2014-01-16 14:05 - 2013-11-27 09:20 - 04106240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-01-16 14:05 - 2013-11-27 05:01 - 00385614 _____ C:\WINDOWS\system32\ApnDatabase.xml
2014-01-16 14:05 - 2013-11-26 14:22 - 01928144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2014-01-16 14:05 - 2013-11-26 14:20 - 02131120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-01-16 14:05 - 2013-11-26 14:20 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-01-16 14:05 - 2013-11-26 14:20 - 01374384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-01-16 14:05 - 2013-11-26 12:50 - 01371312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2014-01-16 14:05 - 2013-11-26 12:44 - 02142936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-01-16 14:05 - 2013-11-26 12:44 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-01-16 14:05 - 2013-11-26 11:13 - 04191232 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-01-16 14:05 - 2013-11-26 10:21 - 18577920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-01-16 14:05 - 2013-11-26 09:28 - 13925888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-01-16 14:05 - 2013-11-25 02:45 - 00142680 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-01-16 14:05 - 2013-11-25 02:32 - 01119064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2014-01-16 14:05 - 2013-11-25 00:30 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2014-01-16 14:05 - 2013-11-25 00:28 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2014-01-16 14:05 - 2013-11-23 13:47 - 00032088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-01-16 14:05 - 2013-11-23 12:49 - 21196664 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-01-16 14:05 - 2013-11-23 09:19 - 18642504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-01-16 14:05 - 2013-11-23 08:13 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\bi.dll
2014-01-16 14:05 - 2013-11-23 08:13 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys
2014-01-16 14:05 - 2013-11-23 08:08 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-01-16 14:05 - 2013-11-23 05:50 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-01-16 14:05 - 2013-11-23 04:57 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2014-01-16 14:05 - 2013-11-23 04:48 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2014-01-16 14:05 - 2013-11-23 04:25 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2014-01-16 14:05 - 2013-11-23 04:25 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2014-01-16 14:05 - 2013-11-23 04:19 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-01-16 14:05 - 2013-11-23 04:15 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-01-16 14:05 - 2013-11-21 07:58 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceregistration.dll
2014-01-16 14:05 - 2013-11-21 07:26 - 01415680 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-01-16 14:05 - 2013-11-16 06:11 - 00764856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-01-16 14:05 - 2013-11-15 19:19 - 00669344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-01-16 14:05 - 2013-11-15 15:59 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2014-01-16 14:05 - 2013-11-15 15:25 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2014-01-16 14:05 - 2013-11-15 15:08 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-01-16 14:05 - 2013-11-15 14:24 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-01-16 14:05 - 2013-11-05 21:12 - 02551128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-01-16 14:05 - 2013-10-31 01:29 - 00745336 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-01-16 14:05 - 2013-10-31 00:41 - 00552624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2014-01-15 23:39 - 2013-12-09 01:15 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-01-15 23:39 - 2013-11-27 16:36 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-01-15 23:39 - 2013-11-27 12:41 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe
2014-01-15 23:39 - 2013-11-27 11:34 - 00138240 _____ C:\WINDOWS\system32\OEMLicense.dll
2014-01-15 23:39 - 2013-11-27 10:54 - 00103936 _____ C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-01-15 23:39 - 2013-11-27 09:48 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 23:39 - 2013-11-27 09:45 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-01-15 23:39 - 2013-11-27 09:40 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 23:39 - 2013-11-27 09:38 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-01-15 23:39 - 2013-11-27 09:17 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-01-15 23:39 - 2013-11-27 09:12 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-01-13 23:23 - 2014-01-13 23:23 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\system32\bdsandboxuiskin32.dll
2014-01-13 23:20 - 2014-01-19 16:08 - 00000000 ____D C:\Program Files (x86)\McAfee Security Scan
2014-01-13 23:20 - 2014-01-13 23:20 - 00002041 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-13 22:54 - 2014-01-13 22:54 - 00620542 _____ C:\ProgramData\1389649682.bdinstall.bin
2014-01-13 22:54 - 2014-01-13 22:54 - 00000385 _____ C:\WINDOWS\system32\user_gensett.xml
2014-01-13 22:53 - 2014-01-13 23:23 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\SysWOW64\bdsandboxuiskin32.dll
2014-01-13 22:53 - 2014-01-13 22:54 - 00000000 ____D C:\ProgramData\BDLogging
2014-01-13 22:53 - 2014-01-13 22:53 - 00002212 _____ C:\Users\Public\Desktop\Bitdefender Safepay.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00002164 _____ C:\Users\Public\Desktop\Bitdefender Total Security.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2014-01-13 22:53 - 2013-11-04 15:47 - 00082824 _____ (BitDefender SRL) C:\WINDOWS\system32\Drivers\bdsandbox.sys
2014-01-13 22:53 - 2013-09-08 19:04 - 00023568 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bdelam.sys
2014-01-13 22:53 - 2013-07-30 17:41 - 00079192 _____ (BitDefender) C:\WINDOWS\system32\Drivers\bdvedisk.sys
2014-01-13 22:53 - 2013-07-24 17:19 - 00098768 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\bdfndisf6.sys
2014-01-13 22:53 - 2007-04-11 10:11 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\capicom.dll
2014-01-13 22:52 - 2014-01-13 23:23 - 00261056 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avchv.sys
2014-01-13 22:52 - 2014-01-13 22:54 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Bitdefender
2014-01-13 22:52 - 2013-07-19 17:08 - 00601360 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avckf.sys
2014-01-13 22:52 - 2013-07-19 17:04 - 00727592 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avc3.sys
2014-01-13 22:48 - 2014-01-13 23:23 - 00000000 ____D C:\ProgramData\Bitdefender
2014-01-13 22:48 - 2014-01-13 22:52 - 00000000 ____D C:\Program Files\Bitdefender
2014-01-13 22:48 - 2014-01-13 22:48 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\QuickScan
2014-01-13 22:48 - 2013-11-04 15:47 - 00084848 _____ (BitDefender SRL) C:\WINDOWS\system32\BDSandBoxUISkin.dll
2014-01-13 22:48 - 2013-11-04 15:46 - 00034384 _____ (BitDefender SRL) C:\WINDOWS\system32\BDSandBoxUH.dll
2014-01-13 22:48 - 2013-08-23 12:48 - 00150256 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\gzflt.sys
2014-01-13 22:48 - 2013-08-07 12:46 - 00389240 _____ (BitDefender S.R.L.) C:\WINDOWS\system32\Drivers\trufos.sys
2014-01-12 22:56 - 2014-01-13 22:48 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2014-01-12 22:29 - 2014-01-12 22:29 - 07171632 _____ C:\Users\Lucien\Downloads\bitdefender_tsecurity.exe
2014-01-09 12:00 - 2014-01-13 14:27 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Bioshock
2014-01-09 12:00 - 2014-01-09 12:12 - 00000000 ____D C:\Users\Lucien\Documents\Bioshock
2014-01-07 21:35 - 2014-01-07 21:35 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\WINDOWS\SysWOW64\GPhotos.scr
2014-01-06 13:29 - 2014-01-21 22:13 - 00000000 ____D C:\Users\Lucien\Documents\Rockstar Games
2014-01-06 13:11 - 2014-01-06 13:11 - 00000000 __SHD C:\ProgramData\SecuROM
2014-01-06 13:10 - 2014-01-06 13:10 - 00000000 ____D C:\Users\Lucien\AppData\Local\Rockstar Games
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\WINDOWS\SysWOW64\xlive
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\Users\Lucien\Documents\Games for Windows - LIVE Demos
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2014-01-06 13:08 - 2014-01-06 13:08 - 00642712 _____ (Microsoft Corporation) C:\Users\Lucien\Downloads\gfwlivesetup.exe
2013-12-28 20:07 - 2013-12-28 20:10 - 70638408 _____ (Apple Inc.) C:\Users\Lucien\Downloads\iCloudSetup.exe
2013-12-27 10:35 - 2014-01-08 11:53 - 00000000 ___RD C:\Users\Lucien\Downloads\Microsoft.SkypeApp_kzf8qxf38zg5c!App

==================== One Month Modified Files and Folders =======

2014-01-24 19:22 - 2014-01-22 21:41 - 00020296 _____ C:\Users\Lucien\Desktop\FRST.txt
2014-01-24 19:21 - 2014-01-24 19:21 - 00000000 ____D C:\Users\Lucien\Desktop\Logs alt
2014-01-24 19:19 - 2014-01-24 19:19 - 00003293 _____ C:\Users\Lucien\Desktop\FSS.txt
2014-01-24 19:17 - 2014-01-24 19:17 - 00361185 _____ (Farbar) C:\Users\Lucien\Desktop\FSS.exe
2014-01-24 19:16 - 2013-07-18 20:55 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3506778915-1287356822-3408950579-1002
2014-01-24 19:15 - 2013-11-05 22:24 - 00000000 __RDO C:\Users\Lucien\SkyDrive
2014-01-24 19:15 - 2013-09-30 05:14 - 01804156 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2014-01-24 19:15 - 2013-09-30 04:56 - 00775588 _____ C:\WINDOWS\system32\perfh007.dat
2014-01-24 19:15 - 2013-09-30 04:56 - 00163774 _____ C:\WINDOWS\system32\perfc007.dat
2014-01-24 19:13 - 2013-08-19 19:08 - 00002197 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-24 19:11 - 2013-08-19 19:06 - 00001130 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-24 19:11 - 2013-07-18 20:49 - 00000074 _____ C:\Users\Lucien\AppData\Roaming\sp_data.sys
2014-01-24 19:10 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2014-01-24 19:07 - 2013-11-05 21:43 - 01465992 _____ C:\WINDOWS\WindowsUpdate.log
2014-01-24 19:07 - 2013-08-22 14:25 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2014-01-24 19:06 - 2013-08-31 15:58 - 00000000 ____D C:\AdwCleaner
2014-01-24 19:02 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\sru
2014-01-24 16:48 - 2014-01-24 16:48 - 00032847 _____ C:\Users\Lucien\Desktop\gmer.zip
2014-01-24 16:28 - 2013-08-19 19:07 - 00001134 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-24 12:00 - 2013-06-26 08:07 - 00003474 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1
2014-01-24 12:00 - 2013-06-26 08:07 - 00003464 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2
2014-01-24 11:43 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2014-01-24 11:35 - 2013-08-22 11:25 - 00000000 ____D C:\Users\Lucien\AppData\Local\Adobe
2014-01-24 11:34 - 2014-01-24 11:34 - 00000000 ____D C:\Program Files (x86)\ESET
2014-01-24 11:10 - 2014-01-24 11:10 - 00000749 _____ C:\Users\Lucien\Desktop\JRT.txt
2014-01-24 10:53 - 2014-01-24 10:53 - 00000000 ____D C:\WINDOWS\ERUNT
2014-01-23 22:15 - 2013-09-10 15:25 - 00164352 ___SH C:\Users\Lucien\Desktop\Thumbs.db
2014-01-23 21:47 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2014-01-22 21:41 - 2014-01-22 21:41 - 00000000 ____D C:\Users\Lucien\Desktop\FRST-OlderVersion
2014-01-22 21:41 - 2014-01-22 13:59 - 02077696 _____ (Farbar) C:\Users\Lucien\Desktop\FRST64.exe
2014-01-22 21:41 - 2014-01-21 23:54 - 00000000 ____D C:\FRST
2014-01-22 21:23 - 2014-01-22 21:23 - 00022688 _____ C:\Users\Lucien\Downloads\Addition.txt
2014-01-22 21:23 - 2014-01-22 21:22 - 00046051 _____ C:\Users\Lucien\Downloads\FRST.txt
2014-01-22 21:21 - 2013-11-05 21:47 - 00000000 ____D C:\Users\Lucien
2014-01-22 21:07 - 2013-09-29 20:04 - 09441346 _____ C:\WINDOWS\PFRO.log
2014-01-22 14:01 - 2014-01-21 10:40 - 00000000 ____D C:\Users\Gast\AppData\Local\My Games
2014-01-22 14:01 - 2013-10-01 15:03 - 00000000 ____D C:\Users\Gast\Documents\My Games
2014-01-22 14:01 - 2013-09-01 19:44 - 00000000 ____D C:\Users\Lucien\AppData\Local\My Games
2014-01-22 14:01 - 2013-08-20 09:54 - 00000000 ____D C:\Users\Lucien\Documents\My Games
2014-01-22 13:52 - 2013-09-12 10:02 - 00296960 ___SH C:\Users\Lucien\Downloads\Thumbs.db
2014-01-22 13:49 - 2014-01-22 13:49 - 00003576 _____ C:\WINDOWS\System32\Tasks\Bitdefender Auto-Scan
2014-01-22 12:30 - 2014-01-22 12:30 - 00000168 _____ C:\Users\Lucien\defogger_reenable
2014-01-22 00:03 - 2014-01-24 19:12 - 00008373 _____ C:\Users\Lucien\Desktop\AdwCleaner[S0].txt
2014-01-22 00:02 - 2014-01-24 19:12 - 00008522 _____ C:\Users\Lucien\Desktop\AdwCleaner[R0].txt
2014-01-21 22:19 - 2014-01-21 22:19 - 00000000 ____D C:\WINDOWS\LastGood
2014-01-21 22:13 - 2014-01-06 13:29 - 00000000 ____D C:\Users\Lucien\Documents\Rockstar Games
2014-01-21 22:13 - 2013-09-04 07:48 - 00000000 ____D C:\Users\Lucien\Documents\Blender
2014-01-21 22:00 - 2013-11-04 09:24 - 00069120 ___SH C:\Users\Gast\Downloads\Thumbs.db
2014-01-21 22:00 - 2013-08-22 15:46 - 00380728 _____ C:\WINDOWS\setupact.log
2014-01-21 15:06 - 2014-01-21 15:06 - 01037068 _____ (Thisisu) C:\Users\Lucien\Desktop\JRT.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00987425 _____ C:\Users\Lucien\Desktop\SecurityCheck.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00448512 _____ (OldTimer Tools) C:\Users\Lucien\Desktop\TFC.exe
2014-01-21 15:05 - 2014-01-21 15:05 - 01236282 _____ C:\Users\Lucien\Desktop\adwcleaner.exe
2014-01-21 15:01 - 2014-01-21 15:00 - 02347384 _____ (ESET) C:\Users\Lucien\Desktop\esetsmartinstaller_enu.exe
2014-01-21 14:51 - 2013-10-19 09:42 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Spotify
2014-01-21 13:25 - 2014-01-21 13:15 - 24859352 _____ (Microsoft Corporation) C:\Users\Gast\Downloads\Windows-KB890830-x64-V5.8.exe
2014-01-21 10:38 - 2013-09-01 18:18 - 00281688 _____ C:\WINDOWS\SysWOW64\PnkBstrB.xtr
2014-01-21 10:18 - 2014-01-21 10:18 - 00050477 _____ C:\Users\Lucien\Desktop\Defogger.exe
2014-01-21 10:12 - 2014-01-21 10:12 - 00000000 ____D C:\Users\Gast\AppData\Roaming\QuickScan
2014-01-21 09:38 - 2014-01-21 09:38 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Spotydl
2014-01-21 09:37 - 2013-09-26 11:23 - 00000000 ____D C:\Users\Gast\AppData\Local\VirtualStore
2014-01-21 08:37 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Bitdefender
2014-01-21 08:37 - 2013-09-26 11:23 - 00000062 _____ C:\Users\Gast\AppData\Roaming\sp_data.sys
2014-01-21 08:33 - 2014-01-21 08:33 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2014-01-20 15:53 - 2014-01-20 15:53 - 00000000 ____D C:\Users\Gast\AppData\Local\NVIDIA Corporation
2014-01-20 15:53 - 2013-06-26 08:06 - 00000000 ____D C:\ProgramData\Atheros
2014-01-20 15:52 - 2014-01-20 15:52 - 00000385 _____ C:\Users\Gast\AppData\Roaminguser_gensett.xml
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\Documents\Bluetooth Folder
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\AppData\Local\BMExplorer
2014-01-20 15:52 - 2013-10-29 11:55 - 00000000 ____D C:\Users\Gast\AppData\Local\NVIDIA
2014-01-20 15:52 - 2013-10-19 09:42 - 00000000 ____D C:\Users\Gast\AppData\Local\Spotify
2014-01-20 15:52 - 2013-09-26 11:24 - 00000000 ___RD C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-20 15:52 - 2013-09-26 11:24 - 00000000 ___RD C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-20 15:51 - 2014-01-20 15:51 - 00000000 ____D C:\Users\Lucien\Documents\AdobeStockPhotos
2014-01-20 15:51 - 2013-07-18 20:48 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Adobe
2014-01-20 13:49 - 2014-01-17 13:50 - 00000000 ____D C:\Users\Lucien\Downloads\backups
2014-01-20 12:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache
2014-01-19 18:46 - 2014-01-17 13:42 - 00012554 _____ C:\Users\Lucien\Downloads\hijackthis.log
2014-01-19 18:22 - 2014-01-19 18:22 - 00305304 _____ C:\WINDOWS\Minidump\011914-32203-01.dmp
2014-01-19 18:22 - 2014-01-19 18:22 - 00000000 ____D C:\WINDOWS\Minidump
2014-01-19 18:22 - 2013-09-13 12:11 - 1134103589 _____ C:\WINDOWS\MEMORY.DMP
2014-01-19 16:08 - 2014-01-13 23:20 - 00000000 ____D C:\Program Files (x86)\McAfee Security Scan
2014-01-19 08:38 - 2014-01-19 21:21 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-01-17 20:25 - 2014-01-22 00:11 - 00379904 _____ C:\Users\Lucien\Desktop\gmer.exe
2014-01-17 13:42 - 2014-01-17 13:42 - 00388608 _____ (Trend Micro Inc.) C:\Users\Lucien\Downloads\HiJackThis204.exe
2014-01-17 13:42 - 2013-07-18 20:48 - 00000000 ____D C:\Users\Lucien\AppData\Local\VirtualStore
2014-01-17 09:54 - 2014-01-17 09:54 - 00000385 _____ C:\Users\Lucien\AppData\Roaminguser_gensett.xml
2014-01-17 09:54 - 2013-07-18 20:49 - 00000000 ___RD C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-17 09:54 - 2013-07-18 20:49 - 00000000 ___RD C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-16 16:41 - 2013-08-22 15:44 - 05147912 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\MediaViewer
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\FileManager
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Camera
2014-01-16 16:37 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2014-01-16 16:37 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\Dism
2014-01-16 14:31 - 2013-08-23 10:50 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-16 13:51 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\WinStore
2014-01-16 13:29 - 2013-08-19 19:19 - 00000000 ____D C:\WINDOWS\system32\MRT
2014-01-13 23:23 - 2014-01-13 23:23 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\system32\bdsandboxuiskin32.dll
2014-01-13 23:23 - 2014-01-13 22:53 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\SysWOW64\bdsandboxuiskin32.dll
2014-01-13 23:23 - 2014-01-13 22:52 - 00261056 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avchv.sys
2014-01-13 23:23 - 2014-01-13 22:48 - 00000000 ____D C:\ProgramData\Bitdefender
2014-01-13 23:20 - 2014-01-13 23:20 - 00002041 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-13 23:20 - 2013-04-26 00:18 - 00000000 ____D C:\ProgramData\McAfee
2014-01-13 23:19 - 2013-04-26 00:15 - 00000000 ____D C:\ProgramData\Adobe
2014-01-13 23:19 - 2013-04-26 00:15 - 00000000 ____D C:\Program Files (x86)\Adobe
2014-01-13 22:54 - 2014-01-13 22:54 - 00620542 _____ C:\ProgramData\1389649682.bdinstall.bin
2014-01-13 22:54 - 2014-01-13 22:54 - 00000385 _____ C:\WINDOWS\system32\user_gensett.xml
2014-01-13 22:54 - 2014-01-13 22:53 - 00000000 ____D C:\ProgramData\BDLogging
2014-01-13 22:54 - 2014-01-13 22:52 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Bitdefender
2014-01-13 22:53 - 2014-01-13 22:53 - 00002212 _____ C:\Users\Public\Desktop\Bitdefender Safepay.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00002164 _____ C:\Users\Public\Desktop\Bitdefender Total Security.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2014-01-13 22:52 - 2014-01-13 22:48 - 00000000 ____D C:\Program Files\Bitdefender
2014-01-13 22:48 - 2014-01-13 22:48 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\QuickScan
2014-01-13 22:48 - 2014-01-12 22:56 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2014-01-13 22:46 - 2013-08-30 00:06 - 00000000 ____D C:\avast! sandbox
2014-01-13 22:45 - 2013-08-19 19:05 - 00000000 ____D C:\Program Files\AVAST Software
2014-01-13 22:45 - 2013-08-19 19:04 - 00000000 ____D C:\ProgramData\AVAST Software
2014-01-13 22:44 - 2013-08-19 19:06 - 00000000 _____ C:\WINDOWS\SysWOW64\config.nt
2014-01-13 14:27 - 2014-01-09 12:00 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Bioshock
2014-01-12 22:29 - 2014-01-12 22:29 - 07171632 _____ C:\Users\Lucien\Downloads\bitdefender_tsecurity.exe
2014-01-09 12:12 - 2014-01-09 12:00 - 00000000 ____D C:\Users\Lucien\Documents\Bioshock
2014-01-09 11:59 - 2013-04-26 00:16 - 00502089 _____ C:\WINDOWS\DirectX.log
2014-01-08 12:09 - 2013-10-14 09:56 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Spotify
2014-01-08 11:53 - 2013-12-27 10:35 - 00000000 ___RD C:\Users\Lucien\Downloads\Microsoft.SkypeApp_kzf8qxf38zg5c!App
2014-01-07 21:35 - 2014-01-07 21:35 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2014-01-07 21:05 - 2013-11-22 17:15 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-01-06 23:31 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-01-06 23:31 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\WINDOWS\SysWOW64\GPhotos.scr
2014-01-06 16:20 - 2013-08-19 19:19 - 86054176 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-01-06 13:11 - 2014-01-06 13:11 - 00000000 __SHD C:\ProgramData\SecuROM
2014-01-06 13:10 - 2014-01-06 13:10 - 00000000 ____D C:\Users\Lucien\AppData\Local\Rockstar Games
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\WINDOWS\SysWOW64\xlive
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\Users\Lucien\Documents\Games for Windows - LIVE Demos
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2014-01-06 13:08 - 2014-01-06 13:08 - 00642712 _____ (Microsoft Corporation) C:\Users\Lucien\Downloads\gfwlivesetup.exe
2014-01-03 18:23 - 2013-09-09 20:00 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\vlc
2013-12-30 23:47 - 2013-10-14 09:58 - 00000000 ____D C:\Users\Lucien\AppData\Local\Spotify
2013-12-29 16:19 - 2013-11-29 21:45 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\dvdcss
2013-12-29 13:36 - 2013-08-20 22:12 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Apple Computer
2013-12-29 13:34 - 2013-08-20 22:12 - 00000000 ____D C:\Users\Lucien\AppData\Local\Apple Computer
2013-12-28 20:12 - 2013-08-20 22:10 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-12-28 20:10 - 2013-12-28 20:07 - 70638408 _____ (Apple Inc.) C:\Users\Lucien\Downloads\iCloudSetup.exe

Some content of TEMP:
====================
C:\Users\Gast\AppData\Local\Temp\drm_dyndata_7390004.dll
C:\Users\Gast\AppData\Local\Temp\ubiB23E.tmp.exe
C:\Users\Lucien\AppData\Local\Temp\Quarantine.exe
C:\Users\Lucien\AppData\Local\Temp\UpdateCheckerSetup.exe
C:\Users\Lucien\AppData\Local\Temp\wajam_download.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-24 11:44

==================== End Of Log ============================

--- --- ---

--- --- ---


Secure Banking meldet weiterhin nach jedem Browserstart die Maleware in chrome.exe
er ist immer noch relativ langsam und nvidia treiber lässt sich trotz de-& wieder neuinstallation nicht aufs aktuelle updaten, da tritt immer ein fehler auf wie bei einigen anderen treibern auch

allerdings lässt sich bitdefender wieder updaten

danke soweit schonmal!
Gruß KitsuneNoir

mir ist noch was aufgefallen, ich werde sehr oft willkürlich dazu aufgefordert den pc neuzustarten. das ist doch nicht normal oder?

sunjojo 27.01.2014 16:19

Zitat:

Secure Banking meldet weiterhin nach jedem Browserstart die Maleware in chrome.exe
er ist immer noch relativ langsam
Das Securebanking diese Meldung anzeigt, könnte auch an Bitdefender liegen. Bitte deaktivere einmal komplett Bitdefender und überprüfe, ob die Meldung von Securebanking noch angezeigt wird. Ist Google Chrome dann immernoch relativ langsam?

Zitat:

nvidia treiber lässt sich trotz de-& wieder neuinstallation nicht aufs aktuelle updaten, da tritt immer ein fehler auf wie bei einigen anderen treibern auch
Kannst du den Fehler beschreiben, der auftritt? Welche weiteren Treiber sind davon auch betroffen?

Zitat:

mir ist noch was aufgefallen, ich werde sehr oft willkürlich dazu aufgefordert den pc neuzustarten. das ist doch nicht normal oder?
Nein, das ist nicht normal. Wann wirst du aufgefordert, den Rechner neuzustarten (wenn du bestimmte Programme geöffnet hast)?



Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

cmd: type "C:\ProgramData\SetStretch.cmd"
C:\ProgramData\SetStretch.cmd
Reg: reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile" /v EnableFirewall /t REG_DWORD /d 0x00000001 /f
Reg: reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinDefend" /v Start /t REG_DWORD /d 0x00000002 /f
Reg: reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender" /v DisableAntiSpyware /t REG_DWORD /d 0x00000000 /f


Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.

Schritt 2
Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Schritt 3
Starte noch einmal FRST.
  • Ändere keine der Voreinstellungen und drücke auf Scan.
  • Wenn der Scan abgeschlossen ist, wird ein neues Logfile FRST.txt erstellt und auf dem Desktop gespeichert.
  • Poste den Inhalt dieses Logfiles bitte hier in deinen Thread.



Poste folgende Logfiles in deiner nächsten Antwort:
  • FRST-Fix
  • MBAR-Scan
  • FRST-Scan

KitsuneNoir 27.01.2014 20:54

Hi,
- also Secure Banking meldet sich nach wie vor bei jedem Browserstart und meckert rum, ob mit oder ohne Bitdefender
- beim Updateversuch des nvidia Treibers kommt die Nachricht: "Die Verbindung mit Nvidia kann nicht hergestellt werden - Überprüfen Sie Ihren Internetanschluss"
aber Internet ist vorhanden und auf diese Nachricht habe ich im Internet auch keine weiteren Problemlösungen gefunden.
--> andere Treiber sind Adobe Reader, der Realtek audiotreiber und nvidia grafikkartentreiber da kommt immer die Meldung "Try again later"
- Die Aufforderung zum Neustart kommt wie gesagt sehr willkürlich, also ich kann das Gerät auch ohne etwas zu tun 1-2h anlassen bis die Meldung erscheint. Und manchmal erscheint sie nachdem ich den Browser schließe, oder in Open Office gearbeitet habe. Ich soll dann einen Neustart machen, damit die Installation von Dingen abgeschlossen werden kann.



FIRST-Fix:
Code:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 27-01-2014
Ran by Lucien at 2014-01-27 19:49:39 Run:2
Running from C:\Users\Lucien\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
cmd: type "C:\ProgramData\SetStretch.cmd"
C:\ProgramData\SetStretch.cmd
Reg: reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile" /v EnableFirewall /t REG_DWORD /d 0x00000001 /f
Reg: reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinDefend" /v Start /t REG_DWORD /d 0x00000002 /f
Reg: reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender" /v DisableAntiSpyware /t REG_DWORD /d 0x00000000 /f
       
*****************


=========  type "C:\ProgramData\SetStretch.cmd" =========

start /w C:\ProgramData\SetStretch.exe /stretch
rem regedit /s c:\windows\delsetwallpaper.reg
del /q C:\ProgramData\SetStretch.exe
rem del /q C:\ProgramData\delsetwallpaper.reg
del /q C:\ProgramData\SetStretch.cmd
attrib C:\ProgramData\SetStretch.* +h
========= End of CMD: =========

C:\ProgramData\SetStretch.cmd => Moved successfully.

========= reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile" /v EnableFirewall /t REG_DWORD /d 0x00000001 /f =========

Der Vorgang wurde erfolgreich beendet.



========= End of Reg: =========


========= reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinDefend" /v Start /t REG_DWORD /d 0x00000002 /f =========

Der Vorgang wurde erfolgreich beendet.



========= End of Reg: =========


========= reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender" /v DisableAntiSpyware /t REG_DWORD /d 0x00000000 /f =========

FEHLER: Zugriff verweigert



========= End of Reg: =========


==== End of Fixlog ====

MBAR-Scan:
Code:

Malwarebytes Anti-Rootkit BETA 1.07.0.1009
www.malwarebytes.org

Database version: v2014.01.27.08

Windows 8 x64 NTFS
Internet Explorer 11.0.9600.16476
Lucien :: LUCIENSNOTE [administrator]

27.01.2014 19:54:40
mbar-log-2014-01-27 (19-54-40).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 274486
Time elapsed: 36 minute(s), 49 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

FRST Logfile:

FRST Logfile:
Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-01-2014
Ran by Lucien (administrator) on LUCIENSNOTE on 27-01-2014 20:36:19
Running from C:\Users\Lucien\Desktop
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\vsserv.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(ASUS) C:\Program Files\ASUS\P4G\InsOnSrv.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender Safebox\safeboxservice.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files\ASUS\P4G\InsOnWMI.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe\livecomm.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS Console\ASUS Console Starter.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\bdagent.exe
(Secure Banking) C:\Program Files (x86)\Secure Banking\SecureBanking.exe
() C:\Program Files (x86)\Secure Banking\sbservice.exe
(Akamai Technologies, Inc.) C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe
(Akamai Technologies, Inc.) C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\seccenter.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Spotify Ltd) C:\Users\Lucien\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(VideoLAN) C:\Program Files\VideoLAN\VLC\vlc.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13530184 2013-04-22] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1278024 2013-03-08] (Realtek Semiconductor)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-09-25] (Adobe Systems Incorporated)
HKLM\...\Run: [PrnStatusMX] - C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe [1240064 2012-07-04] (Marvell Semiconductor, Inc.)
HKLM\...\Run: [ShadowPlay] - C:\WINDOWS\system32\nvspcap64.dll [1100248 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [Bdagent] - C:\Program Files\Bitdefender\Bitdefender\bdagent.exe [1735872 2014-01-13] (Bitdefender)
HKLM-x32\...\Run: [ASUSPRP] - C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-04-26] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-01-15] (cyberlink)
HKLM-x32\...\Run: [ASUS InstantKey] - C:\Program Files (x86)\ASUS\ASUS Instant Key\Ikey_start.exe [13936 2013-04-16] (ASUS)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2237328 2013-11-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-04-24] ( (Atheros Communications))
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\steam.exe [1815464 2014-01-07] (Valve Corporation)
HKCU\...\Run: [SecureBanking] - C:\Program Files (x86)\Secure Banking\SecureBanking.exe [507904 2013-06-30] (Secure Banking)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Lucien\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-10] (Spotify Ltd)
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
HKCU\...\Run: [Bitdefender-Geldbörse-Agent] - C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [561672 2014-01-13] (Bitdefender)
HKCU\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] - C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [612696 2014-01-13] (Bitdefender)
HKCU\...\Run: [Bitdefender-Geldbörse] - C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe [1001512 2014-01-13] (Bitdefender)
HKU\Gast\...\Run: [Spotify] - C:\Users\Gast\AppData\Roaming\Spotify\Spotify.exe [6118400 2014-01-20] (Spotify Ltd)
HKU\Gast\...\Run: [Spotify Web Helper] - C:\Users\Gast\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-01-20] (Spotify Ltd)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [168616 2013-11-14] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [141336 2013-11-14] (NVIDIA Corporation)
Startup: C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;form=IE10TR&amp;src=IE10TR&amp;pc=ASU2JS
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;form=IE10TR&amp;src=IE10TR&amp;pc=ASU2JS
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\pmbxie.dll (Bitdefender)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxie.dll (Bitdefender)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Chrome:
=======
CHR HomePage: hxxp://www.google.de/
CHR Extension: (Google Docs) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-14]
CHR Extension: (Google Drive) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-19]
CHR Extension: (YouTube) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-19]
CHR Extension: (Bitdefender Wallet) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccahoghmggldkcdjiebjkidpfongdfbl [2014-01-13]
CHR Extension: (Google-Suche) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-19]
CHR Extension: (Google Wallet) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR Extension: (Google Mail) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-19]
CHR HKLM-x32\...\Chrome\Extension: [ccahoghmggldkcdjiebjkidpfongdfbl] - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxcr.crx [2014-01-13]

==================== Services (Whitelisted) =================

U3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-12-18] (Adobe Systems)
U2 ASUS InstantOn; C:\Program Files\ASUS\P4G\InsOnSrv.exe [277120 2013-04-29] (ASUS)
U2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [310400 2013-04-24] (Windows (R) Win 7 DDK provider)
U4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender\bdparentalservice.exe [77632 2013-11-21] (Bitdefender)
U2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [247768 2013-01-15] (CyberLink)
U3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
U2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-04-11] (Intel Corporation)
U2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
U2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
U2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
U2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
U2 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [94624 2013-07-08] (Bitdefender)
U2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe [67320 2013-10-07] (Bitdefender)
U2 VSSERV; C:\Program Files\Bitdefender\Bitdefender\vsserv.exe [1507248 2013-11-15] (Bitdefender)
U3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
U2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
U2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [18384 2013-09-04] (Intel(R) Corporation)
U2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-04-24] (Atheros)

==================== Drivers (Whitelisted) ====================

U0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
U3 ATP; C:\Windows\System32\drivers\AsusTP.sys [70416 2013-09-23] (ASUS Corporation)
U0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [727592 2013-07-19] (BitDefender)
U3 avchv; C:\Windows\system32\DRIVERS\avchv.sys [261056 2014-01-13] (BitDefender)
U3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [601360 2013-07-19] (BitDefender)
U3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
U0 bdelam; C:\Windows\System32\drivers\bdelam.sys [23568 2013-09-08] (Bitdefender)
U1 BdfNdisf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys [98768 2013-07-24] (BitDefender LLC)
U1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107008 2013-07-29] (BitDefender LLC)
U4 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-07-02] (Bitdefender SRL)
U3 BDSandBox; C:\WINDOWS\system32\drivers\bdsandbox.sys [82824 2013-11-04] (BitDefender SRL)
U1 BDVEDISK; C:\Windows\system32\DRIVERS\bdvedisk.sys [79192 2013-07-30] (BitDefender)
U3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-04-24] (Qualcomm Atheros)
U3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
U3 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2013-09-01] (DT Soft Ltd)
U0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [150256 2013-08-23] (BitDefender LLC)
U3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
U3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
U0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
U0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)
U2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [26328 2013-07-23] (Intel Corporation)
U3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
U0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
U3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
U3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-07-26] (Intel Corporation)
U3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
U3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
U3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
U3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
U0 rtcrfilt64; C:\Windows\System32\DRIVERS\rtcrfilt64.sys [19600 2000-01-01] (Realtek Semiconductor Corp.)
U3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)
U0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
U3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16152 2013-09-03] ()
U0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [389240 2013-08-07] (BitDefender S.R.L.)
U3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
U3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
U3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [x]
U3 GPU-Z; \??\C:\Users\Lucien\AppData\Local\Temp\GPU-Z.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-27 20:36 - 2014-01-27 20:36 - 00020519 _____ C:\Users\Lucien\Desktop\FRST.txt
2014-01-27 19:59 - 2014-01-27 19:59 - 00059392 _____ C:\Users\Lucien\Desktop\30-31.01.2014 Teilnehmerliste.xls
2014-01-27 19:54 - 2014-01-27 20:33 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-27 19:54 - 2014-01-27 19:54 - 00119000 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-01-27 19:53 - 2014-01-27 19:53 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-01-27 19:52 - 2014-01-27 19:52 - 00000000 ____D C:\Users\Lucien\Desktop\mbar
2014-01-27 19:47 - 2014-01-27 19:48 - 00000000 ____D C:\Users\Lucien\Desktop\Logs2
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2014-01-27 18:56 - 2014-01-27 18:56 - 00003576 _____ C:\WINDOWS\System32\Tasks\Bitdefender Auto-Scan
2014-01-26 20:53 - 2014-01-26 20:53 - 00003186 _____ C:\WINDOWS\System32\Tasks\{E66DEEF7-845B-48C8-BBEE-CE6EA6F2EE96}
2014-01-26 19:26 - 2014-01-26 19:26 - 00003362 _____ C:\WINDOWS\System32\Tasks\{63C03234-5B71-4184-AD48-4EE22D315F87}
2014-01-25 15:01 - 2014-01-25 15:01 - 00000000 ____H C:\Users\Lucien\Documents\Default.rdp
2014-01-24 20:12 - 2014-01-24 20:12 - 02002088 _____ (PC Drivers HeadQuarters) C:\Users\Lucien\Downloads\DriverDetective.exe
2014-01-24 19:21 - 2014-01-24 19:21 - 00000000 ____D C:\Users\Lucien\Desktop\Logs alt
2014-01-24 19:17 - 2014-01-24 19:17 - 00361185 _____ (Farbar) C:\Users\Lucien\Desktop\FSS.exe
2014-01-24 16:48 - 2014-01-24 16:48 - 00032847 _____ C:\Users\Lucien\Desktop\gmer.zip
2014-01-24 11:34 - 2014-01-24 11:34 - 00000000 ____D C:\Program Files (x86)\ESET
2014-01-24 10:53 - 2014-01-24 10:53 - 00000000 ____D C:\WINDOWS\ERUNT
2014-01-22 21:41 - 2014-01-27 19:49 - 00000000 ____D C:\Users\Lucien\Desktop\FRST-OlderVersion
2014-01-22 21:23 - 2014-01-22 21:23 - 00022688 _____ C:\Users\Lucien\Downloads\Addition.txt
2014-01-22 21:22 - 2014-01-22 21:23 - 00046051 _____ C:\Users\Lucien\Downloads\FRST.txt
2014-01-22 13:59 - 2014-01-27 19:49 - 02078208 _____ (Farbar) C:\Users\Lucien\Desktop\FRST64.exe
2014-01-22 12:30 - 2014-01-22 12:30 - 00000168 _____ C:\Users\Lucien\defogger_reenable
2014-01-22 00:11 - 2014-01-17 20:25 - 00379904 _____ C:\Users\Lucien\Desktop\gmer.exe
2014-01-22 00:10 - 2012-12-19 16:10 - 00000000 ____D C:\Users\Lucien\Desktop\data
2014-01-22 00:10 - 2011-10-24 13:35 - 00000000 ____D C:\Users\Lucien\Desktop\Tweaking.com - Windows Repair
2014-01-22 00:10 - 2009-10-20 21:47 - 00055936 _____ () C:\Users\Lucien\Desktop\Setup.exe
2014-01-21 23:54 - 2014-01-27 19:49 - 00000000 ____D C:\FRST
2014-01-21 22:19 - 2014-01-21 22:19 - 00000000 ____D C:\WINDOWS\LastGood
2014-01-21 15:06 - 2014-01-21 15:06 - 01037068 _____ (Thisisu) C:\Users\Lucien\Desktop\JRT.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00987425 _____ C:\Users\Lucien\Desktop\SecurityCheck.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00448512 _____ (OldTimer Tools) C:\Users\Lucien\Desktop\TFC.exe
2014-01-21 15:05 - 2014-01-21 15:05 - 01236282 _____ C:\Users\Lucien\Desktop\adwcleaner.exe
2014-01-21 15:00 - 2014-01-21 15:01 - 02347384 _____ (ESET) C:\Users\Lucien\Desktop\esetsmartinstaller_enu.exe
2014-01-21 13:15 - 2014-01-21 13:25 - 24859352 _____ (Microsoft Corporation) C:\Users\Gast\Downloads\Windows-KB890830-x64-V5.8.exe
2014-01-21 10:40 - 2014-01-22 14:01 - 00000000 ____D C:\Users\Gast\AppData\Local\My Games
2014-01-21 10:18 - 2014-01-21 10:18 - 00050477 _____ C:\Users\Lucien\Desktop\Defogger.exe
2014-01-21 10:12 - 2014-01-21 10:12 - 00000000 ____D C:\Users\Gast\AppData\Roaming\QuickScan
2014-01-21 09:38 - 2014-01-21 09:38 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Spotydl
2014-01-21 08:33 - 2014-01-21 08:33 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2014-01-20 16:10 - 2013-12-03 13:49 - 00000000 ____D C:\Users\Gast\Downloads\settings
2014-01-20 15:53 - 2014-01-20 15:53 - 00000000 ____D C:\Users\Gast\AppData\Local\NVIDIA Corporation
2014-01-20 15:52 - 2014-01-21 08:37 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Bitdefender
2014-01-20 15:52 - 2014-01-20 15:52 - 00000385 _____ C:\Users\Gast\AppData\Roaminguser_gensett.xml
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\Documents\Bluetooth Folder
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\AppData\Local\BMExplorer
2014-01-20 15:51 - 2014-01-20 15:51 - 00000000 ____D C:\Users\Lucien\Documents\AdobeStockPhotos
2014-01-19 21:21 - 2014-01-19 08:38 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-01-19 18:22 - 2014-01-19 18:22 - 00305304 _____ C:\WINDOWS\Minidump\011914-32203-01.dmp
2014-01-19 18:22 - 2014-01-19 18:22 - 00000000 ____D C:\WINDOWS\Minidump
2014-01-17 15:05 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2014-01-17 15:05 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2014-01-17 13:50 - 2014-01-20 13:49 - 00000000 ____D C:\Users\Lucien\Downloads\backups
2014-01-17 13:42 - 2014-01-19 18:46 - 00012554 _____ C:\Users\Lucien\Downloads\hijackthis.log
2014-01-17 13:42 - 2014-01-17 13:42 - 00388608 _____ (Trend Micro Inc.) C:\Users\Lucien\Downloads\HiJackThis204.exe
2014-01-17 09:54 - 2014-01-17 09:54 - 00000385 _____ C:\Users\Lucien\AppData\Roaminguser_gensett.xml
2014-01-16 14:05 - 2013-12-11 08:55 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-01-16 14:05 - 2013-12-09 01:34 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-01-16 14:05 - 2013-12-09 01:04 - 00980480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-01-16 14:05 - 2013-11-27 16:34 - 03210528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2014-01-16 14:05 - 2013-11-27 16:27 - 00809872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-01-16 14:05 - 2013-11-27 15:00 - 00663680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-01-16 14:05 - 2013-11-27 14:47 - 02804528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2014-01-16 14:05 - 2013-11-27 13:02 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ipnat.sys
2014-01-16 14:05 - 2013-11-27 11:54 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-01-16 14:05 - 2013-11-27 11:24 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll
2014-01-16 14:05 - 2013-11-27 11:08 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-01-16 14:05 - 2013-11-27 10:46 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll
2014-01-16 14:05 - 2013-11-27 10:41 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2014-01-16 14:05 - 2013-11-27 10:17 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-01-16 14:05 - 2013-11-27 10:10 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2014-01-16 14:05 - 2013-11-27 09:58 - 01503232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-01-16 14:05 - 2013-11-27 09:56 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll
2014-01-16 14:05 - 2013-11-27 09:20 - 04106240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-01-16 14:05 - 2013-11-27 05:01 - 00385614 _____ C:\WINDOWS\system32\ApnDatabase.xml
2014-01-16 14:05 - 2013-11-26 14:22 - 01928144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2014-01-16 14:05 - 2013-11-26 14:20 - 02131120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-01-16 14:05 - 2013-11-26 14:20 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-01-16 14:05 - 2013-11-26 14:20 - 01374384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-01-16 14:05 - 2013-11-26 12:50 - 01371312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2014-01-16 14:05 - 2013-11-26 12:44 - 02142936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-01-16 14:05 - 2013-11-26 12:44 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-01-16 14:05 - 2013-11-26 11:13 - 04191232 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-01-16 14:05 - 2013-11-26 10:21 - 18577920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-01-16 14:05 - 2013-11-26 09:28 - 13925888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-01-16 14:05 - 2013-11-25 02:45 - 00142680 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-01-16 14:05 - 2013-11-25 02:32 - 01119064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2014-01-16 14:05 - 2013-11-25 00:30 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2014-01-16 14:05 - 2013-11-25 00:28 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2014-01-16 14:05 - 2013-11-23 13:47 - 00032088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-01-16 14:05 - 2013-11-23 12:49 - 21196664 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-01-16 14:05 - 2013-11-23 09:19 - 18642504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-01-16 14:05 - 2013-11-23 08:13 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\bi.dll
2014-01-16 14:05 - 2013-11-23 08:13 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys
2014-01-16 14:05 - 2013-11-23 08:08 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-01-16 14:05 - 2013-11-23 05:50 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-01-16 14:05 - 2013-11-23 04:57 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2014-01-16 14:05 - 2013-11-23 04:48 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2014-01-16 14:05 - 2013-11-23 04:25 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2014-01-16 14:05 - 2013-11-23 04:25 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2014-01-16 14:05 - 2013-11-23 04:19 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-01-16 14:05 - 2013-11-23 04:15 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-01-16 14:05 - 2013-11-21 07:58 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceregistration.dll
2014-01-16 14:05 - 2013-11-21 07:26 - 01415680 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-01-16 14:05 - 2013-11-16 06:11 - 00764856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-01-16 14:05 - 2013-11-15 19:19 - 00669344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-01-16 14:05 - 2013-11-15 15:59 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2014-01-16 14:05 - 2013-11-15 15:25 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2014-01-16 14:05 - 2013-11-15 15:08 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-01-16 14:05 - 2013-11-15 14:24 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-01-16 14:05 - 2013-11-05 21:12 - 02551128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-01-16 14:05 - 2013-10-31 01:29 - 00745336 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-01-16 14:05 - 2013-10-31 00:41 - 00552624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2014-01-15 23:39 - 2013-12-09 01:15 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-01-15 23:39 - 2013-11-27 16:36 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-01-15 23:39 - 2013-11-27 12:41 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe
2014-01-15 23:39 - 2013-11-27 11:34 - 00138240 _____ C:\WINDOWS\system32\OEMLicense.dll
2014-01-15 23:39 - 2013-11-27 10:54 - 00103936 _____ C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-01-15 23:39 - 2013-11-27 09:48 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 23:39 - 2013-11-27 09:45 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-01-15 23:39 - 2013-11-27 09:40 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 23:39 - 2013-11-27 09:38 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-01-15 23:39 - 2013-11-27 09:17 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-01-15 23:39 - 2013-11-27 09:12 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-01-13 23:23 - 2014-01-13 23:23 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\system32\bdsandboxuiskin32.dll
2014-01-13 23:20 - 2014-01-19 16:08 - 00000000 ____D C:\Program Files (x86)\McAfee Security Scan
2014-01-13 23:20 - 2014-01-13 23:20 - 00002041 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-13 22:54 - 2014-01-13 22:54 - 00620542 _____ C:\ProgramData\1389649682.bdinstall.bin
2014-01-13 22:54 - 2014-01-13 22:54 - 00000385 _____ C:\WINDOWS\system32\user_gensett.xml
2014-01-13 22:53 - 2014-01-13 23:23 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\SysWOW64\bdsandboxuiskin32.dll
2014-01-13 22:53 - 2014-01-13 22:54 - 00000000 ____D C:\ProgramData\BDLogging
2014-01-13 22:53 - 2014-01-13 22:53 - 00002212 _____ C:\Users\Public\Desktop\Bitdefender Safepay.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00002164 _____ C:\Users\Public\Desktop\Bitdefender Total Security.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2014-01-13 22:53 - 2013-11-04 15:47 - 00082824 _____ (BitDefender SRL) C:\WINDOWS\system32\Drivers\bdsandbox.sys
2014-01-13 22:53 - 2013-09-08 19:04 - 00023568 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bdelam.sys
2014-01-13 22:53 - 2013-07-30 17:41 - 00079192 _____ (BitDefender) C:\WINDOWS\system32\Drivers\bdvedisk.sys
2014-01-13 22:53 - 2013-07-24 17:19 - 00098768 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\bdfndisf6.sys
2014-01-13 22:53 - 2007-04-11 10:11 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\capicom.dll
2014-01-13 22:52 - 2014-01-13 23:23 - 00261056 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avchv.sys
2014-01-13 22:52 - 2014-01-13 22:54 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Bitdefender
2014-01-13 22:52 - 2013-07-19 17:08 - 00601360 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avckf.sys
2014-01-13 22:52 - 2013-07-19 17:04 - 00727592 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avc3.sys
2014-01-13 22:48 - 2014-01-13 23:23 - 00000000 ____D C:\ProgramData\Bitdefender
2014-01-13 22:48 - 2014-01-13 22:52 - 00000000 ____D C:\Program Files\Bitdefender
2014-01-13 22:48 - 2014-01-13 22:48 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\QuickScan
2014-01-13 22:48 - 2013-11-04 15:47 - 00084848 _____ (BitDefender SRL) C:\WINDOWS\system32\BDSandBoxUISkin.dll
2014-01-13 22:48 - 2013-11-04 15:46 - 00034384 _____ (BitDefender SRL) C:\WINDOWS\system32\BDSandBoxUH.dll
2014-01-13 22:48 - 2013-08-23 12:48 - 00150256 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\gzflt.sys
2014-01-13 22:48 - 2013-08-07 12:46 - 00389240 _____ (BitDefender S.R.L.) C:\WINDOWS\system32\Drivers\trufos.sys
2014-01-12 22:56 - 2014-01-13 22:48 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2014-01-12 22:29 - 2014-01-12 22:29 - 07171632 _____ C:\Users\Lucien\Downloads\bitdefender_tsecurity.exe
2014-01-09 12:00 - 2014-01-13 14:27 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Bioshock
2014-01-09 12:00 - 2014-01-09 12:12 - 00000000 ____D C:\Users\Lucien\Documents\Bioshock
2014-01-07 21:35 - 2014-01-07 21:35 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\WINDOWS\SysWOW64\GPhotos.scr
2014-01-06 13:29 - 2014-01-21 22:13 - 00000000 ____D C:\Users\Lucien\Documents\Rockstar Games
2014-01-06 13:11 - 2014-01-06 13:11 - 00000000 __SHD C:\ProgramData\SecuROM
2014-01-06 13:10 - 2014-01-06 13:10 - 00000000 ____D C:\Users\Lucien\AppData\Local\Rockstar Games
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\WINDOWS\SysWOW64\xlive
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\Users\Lucien\Documents\Games for Windows - LIVE Demos
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2014-01-06 13:08 - 2014-01-06 13:08 - 00642712 _____ (Microsoft Corporation) C:\Users\Lucien\Downloads\gfwlivesetup.exe
2013-12-28 20:07 - 2013-12-28 20:10 - 70638408 _____ (Apple Inc.) C:\Users\Lucien\Downloads\iCloudSetup.exe

==================== One Month Modified Files and Folders =======

2014-01-27 20:36 - 2014-01-27 20:36 - 00020519 _____ C:\Users\Lucien\Desktop\FRST.txt
2014-01-27 20:33 - 2014-01-27 19:54 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-27 20:29 - 2013-08-19 19:07 - 00001134 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-27 20:26 - 2013-09-09 20:00 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\vlc
2014-01-27 20:20 - 2013-09-12 10:02 - 00296960 ___SH C:\Users\Lucien\Downloads\Thumbs.db
2014-01-27 20:07 - 2013-11-05 21:43 - 02083185 _____ C:\WINDOWS\WindowsUpdate.log
2014-01-27 20:01 - 2013-10-14 09:56 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Spotify
2014-01-27 20:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\sru
2014-01-27 19:59 - 2014-01-27 19:59 - 00059392 _____ C:\Users\Lucien\Desktop\30-31.01.2014 Teilnehmerliste.xls
2014-01-27 19:54 - 2014-01-27 19:54 - 00119000 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-01-27 19:53 - 2014-01-27 19:53 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-01-27 19:52 - 2014-01-27 19:52 - 00000000 ____D C:\Users\Lucien\Desktop\mbar
2014-01-27 19:49 - 2014-01-22 21:41 - 00000000 ____D C:\Users\Lucien\Desktop\FRST-OlderVersion
2014-01-27 19:49 - 2014-01-22 13:59 - 02078208 _____ (Farbar) C:\Users\Lucien\Desktop\FRST64.exe
2014-01-27 19:49 - 2014-01-21 23:54 - 00000000 ____D C:\FRST
2014-01-27 19:48 - 2014-01-27 19:47 - 00000000 ____D C:\Users\Lucien\Desktop\Logs2
2014-01-27 19:08 - 2013-07-18 20:55 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3506778915-1287356822-3408950579-1002
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2014-01-27 18:56 - 2014-01-27 18:56 - 00003576 _____ C:\WINDOWS\System32\Tasks\Bitdefender Auto-Scan
2014-01-27 18:54 - 2013-08-22 11:25 - 00000000 ____D C:\Users\Lucien\AppData\Local\Adobe
2014-01-27 18:54 - 2013-06-26 08:07 - 00003474 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1
2014-01-27 18:54 - 2013-06-26 08:07 - 00003464 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2
2014-01-27 18:51 - 2013-08-19 19:08 - 00002197 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-27 18:51 - 2013-07-18 20:49 - 00000074 _____ C:\Users\Lucien\AppData\Roaming\sp_data.sys
2014-01-27 18:50 - 2013-08-19 19:06 - 00001130 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-26 21:38 - 2013-08-23 10:50 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-26 20:53 - 2014-01-26 20:53 - 00003186 _____ C:\WINDOWS\System32\Tasks\{E66DEEF7-845B-48C8-BBEE-CE6EA6F2EE96}
2014-01-26 19:26 - 2014-01-26 19:26 - 00003362 _____ C:\WINDOWS\System32\Tasks\{63C03234-5B71-4184-AD48-4EE22D315F87}
2014-01-26 19:01 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2014-01-25 15:05 - 2013-09-10 15:25 - 00179200 ___SH C:\Users\Lucien\Desktop\Thumbs.db
2014-01-25 15:01 - 2014-01-25 15:01 - 00000000 ____H C:\Users\Lucien\Documents\Default.rdp
2014-01-25 14:26 - 2013-09-30 05:14 - 01804156 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2014-01-25 14:26 - 2013-09-30 04:56 - 00775588 _____ C:\WINDOWS\system32\perfh007.dat
2014-01-25 14:26 - 2013-09-30 04:56 - 00163774 _____ C:\WINDOWS\system32\perfc007.dat
2014-01-25 14:22 - 2013-08-22 15:46 - 00381523 _____ C:\WINDOWS\setupact.log
2014-01-25 13:55 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2014-01-25 13:53 - 2013-11-05 22:24 - 00000000 __RDO C:\Users\Lucien\SkyDrive
2014-01-25 13:51 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2014-01-25 13:48 - 2013-08-22 14:25 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2014-01-24 20:12 - 2014-01-24 20:12 - 02002088 _____ (PC Drivers HeadQuarters) C:\Users\Lucien\Downloads\DriverDetective.exe
2014-01-24 19:21 - 2014-01-24 19:21 - 00000000 ____D C:\Users\Lucien\Desktop\Logs alt
2014-01-24 19:17 - 2014-01-24 19:17 - 00361185 _____ (Farbar) C:\Users\Lucien\Desktop\FSS.exe
2014-01-24 19:06 - 2013-08-31 15:58 - 00000000 ____D C:\AdwCleaner
2014-01-24 16:48 - 2014-01-24 16:48 - 00032847 _____ C:\Users\Lucien\Desktop\gmer.zip
2014-01-24 11:34 - 2014-01-24 11:34 - 00000000 ____D C:\Program Files (x86)\ESET
2014-01-24 10:53 - 2014-01-24 10:53 - 00000000 ____D C:\WINDOWS\ERUNT
2014-01-23 21:47 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2014-01-22 21:23 - 2014-01-22 21:23 - 00022688 _____ C:\Users\Lucien\Downloads\Addition.txt
2014-01-22 21:23 - 2014-01-22 21:22 - 00046051 _____ C:\Users\Lucien\Downloads\FRST.txt
2014-01-22 21:21 - 2013-11-05 21:47 - 00000000 ____D C:\Users\Lucien
2014-01-22 21:07 - 2013-09-29 20:04 - 09441346 _____ C:\WINDOWS\PFRO.log
2014-01-22 14:01 - 2014-01-21 10:40 - 00000000 ____D C:\Users\Gast\AppData\Local\My Games
2014-01-22 14:01 - 2013-10-01 15:03 - 00000000 ____D C:\Users\Gast\Documents\My Games
2014-01-22 14:01 - 2013-09-01 19:44 - 00000000 ____D C:\Users\Lucien\AppData\Local\My Games
2014-01-22 14:01 - 2013-08-20 09:54 - 00000000 ____D C:\Users\Lucien\Documents\My Games
2014-01-22 12:30 - 2014-01-22 12:30 - 00000168 _____ C:\Users\Lucien\defogger_reenable
2014-01-21 22:19 - 2014-01-21 22:19 - 00000000 ____D C:\WINDOWS\LastGood
2014-01-21 22:13 - 2014-01-06 13:29 - 00000000 ____D C:\Users\Lucien\Documents\Rockstar Games
2014-01-21 22:13 - 2013-09-04 07:48 - 00000000 ____D C:\Users\Lucien\Documents\Blender
2014-01-21 22:00 - 2013-11-04 09:24 - 00069120 ___SH C:\Users\Gast\Downloads\Thumbs.db
2014-01-21 15:06 - 2014-01-21 15:06 - 01037068 _____ (Thisisu) C:\Users\Lucien\Desktop\JRT.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00987425 _____ C:\Users\Lucien\Desktop\SecurityCheck.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00448512 _____ (OldTimer Tools) C:\Users\Lucien\Desktop\TFC.exe
2014-01-21 15:05 - 2014-01-21 15:05 - 01236282 _____ C:\Users\Lucien\Desktop\adwcleaner.exe
2014-01-21 15:01 - 2014-01-21 15:00 - 02347384 _____ (ESET) C:\Users\Lucien\Desktop\esetsmartinstaller_enu.exe
2014-01-21 14:51 - 2013-10-19 09:42 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Spotify
2014-01-21 13:25 - 2014-01-21 13:15 - 24859352 _____ (Microsoft Corporation) C:\Users\Gast\Downloads\Windows-KB890830-x64-V5.8.exe
2014-01-21 10:38 - 2013-09-01 18:18 - 00281688 _____ C:\WINDOWS\SysWOW64\PnkBstrB.xtr
2014-01-21 10:18 - 2014-01-21 10:18 - 00050477 _____ C:\Users\Lucien\Desktop\Defogger.exe
2014-01-21 10:12 - 2014-01-21 10:12 - 00000000 ____D C:\Users\Gast\AppData\Roaming\QuickScan
2014-01-21 09:38 - 2014-01-21 09:38 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Spotydl
2014-01-21 09:37 - 2013-09-26 11:23 - 00000000 ____D C:\Users\Gast\AppData\Local\VirtualStore
2014-01-21 08:37 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Bitdefender
2014-01-21 08:37 - 2013-09-26 11:23 - 00000062 _____ C:\Users\Gast\AppData\Roaming\sp_data.sys
2014-01-21 08:33 - 2014-01-21 08:33 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2014-01-20 15:53 - 2014-01-20 15:53 - 00000000 ____D C:\Users\Gast\AppData\Local\NVIDIA Corporation
2014-01-20 15:53 - 2013-06-26 08:06 - 00000000 ____D C:\ProgramData\Atheros
2014-01-20 15:52 - 2014-01-20 15:52 - 00000385 _____ C:\Users\Gast\AppData\Roaminguser_gensett.xml
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\Documents\Bluetooth Folder
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\AppData\Local\BMExplorer
2014-01-20 15:52 - 2013-10-29 11:55 - 00000000 ____D C:\Users\Gast\AppData\Local\NVIDIA
2014-01-20 15:52 - 2013-10-19 09:42 - 00000000 ____D C:\Users\Gast\AppData\Local\Spotify
2014-01-20 15:52 - 2013-09-26 11:24 - 00000000 ___RD C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-20 15:52 - 2013-09-26 11:24 - 00000000 ___RD C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-20 15:51 - 2014-01-20 15:51 - 00000000 ____D C:\Users\Lucien\Documents\AdobeStockPhotos
2014-01-20 15:51 - 2013-07-18 20:48 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Adobe
2014-01-20 13:49 - 2014-01-17 13:50 - 00000000 ____D C:\Users\Lucien\Downloads\backups
2014-01-20 12:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache
2014-01-19 18:46 - 2014-01-17 13:42 - 00012554 _____ C:\Users\Lucien\Downloads\hijackthis.log
2014-01-19 18:22 - 2014-01-19 18:22 - 00305304 _____ C:\WINDOWS\Minidump\011914-32203-01.dmp
2014-01-19 18:22 - 2014-01-19 18:22 - 00000000 ____D C:\WINDOWS\Minidump
2014-01-19 18:22 - 2013-09-13 12:11 - 1134103589 _____ C:\WINDOWS\MEMORY.DMP
2014-01-19 16:08 - 2014-01-13 23:20 - 00000000 ____D C:\Program Files (x86)\McAfee Security Scan
2014-01-19 08:38 - 2014-01-19 21:21 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-01-17 20:25 - 2014-01-22 00:11 - 00379904 _____ C:\Users\Lucien\Desktop\gmer.exe
2014-01-17 13:42 - 2014-01-17 13:42 - 00388608 _____ (Trend Micro Inc.) C:\Users\Lucien\Downloads\HiJackThis204.exe
2014-01-17 13:42 - 2013-07-18 20:48 - 00000000 ____D C:\Users\Lucien\AppData\Local\VirtualStore
2014-01-17 09:54 - 2014-01-17 09:54 - 00000385 _____ C:\Users\Lucien\AppData\Roaminguser_gensett.xml
2014-01-17 09:54 - 2013-07-18 20:49 - 00000000 ___RD C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-17 09:54 - 2013-07-18 20:49 - 00000000 ___RD C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-16 16:41 - 2013-08-22 15:44 - 05147912 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\MediaViewer
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\FileManager
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Camera
2014-01-16 16:37 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2014-01-16 16:37 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\Dism
2014-01-16 13:51 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\WinStore
2014-01-16 13:29 - 2013-08-19 19:19 - 00000000 ____D C:\WINDOWS\system32\MRT
2014-01-13 23:23 - 2014-01-13 23:23 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\system32\bdsandboxuiskin32.dll
2014-01-13 23:23 - 2014-01-13 22:53 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\SysWOW64\bdsandboxuiskin32.dll
2014-01-13 23:23 - 2014-01-13 22:52 - 00261056 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avchv.sys
2014-01-13 23:23 - 2014-01-13 22:48 - 00000000 ____D C:\ProgramData\Bitdefender
2014-01-13 23:20 - 2014-01-13 23:20 - 00002041 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-13 23:20 - 2013-04-26 00:18 - 00000000 ____D C:\ProgramData\McAfee
2014-01-13 23:19 - 2013-04-26 00:15 - 00000000 ____D C:\ProgramData\Adobe
2014-01-13 23:19 - 2013-04-26 00:15 - 00000000 ____D C:\Program Files (x86)\Adobe
2014-01-13 22:54 - 2014-01-13 22:54 - 00620542 _____ C:\ProgramData\1389649682.bdinstall.bin
2014-01-13 22:54 - 2014-01-13 22:54 - 00000385 _____ C:\WINDOWS\system32\user_gensett.xml
2014-01-13 22:54 - 2014-01-13 22:53 - 00000000 ____D C:\ProgramData\BDLogging
2014-01-13 22:54 - 2014-01-13 22:52 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Bitdefender
2014-01-13 22:53 - 2014-01-13 22:53 - 00002212 _____ C:\Users\Public\Desktop\Bitdefender Safepay.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00002164 _____ C:\Users\Public\Desktop\Bitdefender Total Security.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2014-01-13 22:52 - 2014-01-13 22:48 - 00000000 ____D C:\Program Files\Bitdefender
2014-01-13 22:48 - 2014-01-13 22:48 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\QuickScan
2014-01-13 22:48 - 2014-01-12 22:56 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2014-01-13 22:46 - 2013-08-30 00:06 - 00000000 ____D C:\avast! sandbox
2014-01-13 22:45 - 2013-08-19 19:05 - 00000000 ____D C:\Program Files\AVAST Software
2014-01-13 22:45 - 2013-08-19 19:04 - 00000000 ____D C:\ProgramData\AVAST Software
2014-01-13 22:44 - 2013-08-19 19:06 - 00000000 _____ C:\WINDOWS\SysWOW64\config.nt
2014-01-13 14:27 - 2014-01-09 12:00 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Bioshock
2014-01-12 22:29 - 2014-01-12 22:29 - 07171632 _____ C:\Users\Lucien\Downloads\bitdefender_tsecurity.exe
2014-01-09 12:12 - 2014-01-09 12:00 - 00000000 ____D C:\Users\Lucien\Documents\Bioshock
2014-01-09 11:59 - 2013-04-26 00:16 - 00502089 _____ C:\WINDOWS\DirectX.log
2014-01-08 11:53 - 2013-12-27 10:35 - 00000000 ___RD C:\Users\Lucien\Downloads\Microsoft.SkypeApp_kzf8qxf38zg5c!App
2014-01-07 21:35 - 2014-01-07 21:35 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2014-01-07 21:05 - 2013-11-22 17:15 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-01-06 23:31 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-01-06 23:31 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\WINDOWS\SysWOW64\GPhotos.scr
2014-01-06 16:20 - 2013-08-19 19:19 - 86054176 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-01-06 13:11 - 2014-01-06 13:11 - 00000000 __SHD C:\ProgramData\SecuROM
2014-01-06 13:10 - 2014-01-06 13:10 - 00000000 ____D C:\Users\Lucien\AppData\Local\Rockstar Games
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\WINDOWS\SysWOW64\xlive
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\Users\Lucien\Documents\Games for Windows - LIVE Demos
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2014-01-06 13:08 - 2014-01-06 13:08 - 00642712 _____ (Microsoft Corporation) C:\Users\Lucien\Downloads\gfwlivesetup.exe
2013-12-30 23:47 - 2013-10-14 09:58 - 00000000 ____D C:\Users\Lucien\AppData\Local\Spotify
2013-12-29 16:19 - 2013-11-29 21:45 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\dvdcss
2013-12-29 13:36 - 2013-08-20 22:12 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Apple Computer
2013-12-29 13:34 - 2013-08-20 22:12 - 00000000 ____D C:\Users\Lucien\AppData\Local\Apple Computer
2013-12-28 20:12 - 2013-08-20 22:10 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-12-28 20:10 - 2013-12-28 20:07 - 70638408 _____ (Apple Inc.) C:\Users\Lucien\Downloads\iCloudSetup.exe

Some content of TEMP:
====================
C:\Users\Gast\AppData\Local\Temp\drm_dyndata_7390004.dll
C:\Users\Gast\AppData\Local\Temp\ubiB23E.tmp.exe
C:\Users\Lucien\AppData\Local\Temp\Quarantine.exe
C:\Users\Lucien\AppData\Local\Temp\UpdateCheckerSetup.exe
C:\Users\Lucien\AppData\Local\Temp\wajam_download.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-27 19:46

==================== End Of Log ============================

--- --- ---

--- --- ---

KitsuneNoir 28.01.2014 13:16

Liste der Anhänge anzeigen (Anzahl: 1)
Ich hab den nvidia treiber installieren können und auch die anderen.
Im abgesicherten modus gings dann :)

aber das problem mit dem neustart (siehe bild im anhang) und secure banking besteht noch.

sunjojo 28.01.2014 18:22

Zitat:

also Secure Banking meldet sich nach wie vor bei jedem Browserstart und meckert rum, ob mit oder ohne Bitdefender
Ok, hab nochmal nachgeguckt, reicht doch nicht, diesen einfach nur zu deaktivieren. Bitte führe Schritt 1 (entnommen aus dem Secure Banking Thread) aus und gucke, ob die Fehlermeldung weg ist. Wenn nicht, würde ich den Programmierer von Secure Banking um Rat bitten :).
Schritt 1
  • Gehe bei Bitdefender in die Antivirus-Einstellungen
  • Wähle den Tab "Ausschlüsse" aus
  • Setzt den Regler bei "Ausschlüsse für Dateien" auf ON
  • Klicke dann auf Ausgeschlossene Prozesse - Hinzufügen -
  • Navigiere in das Installationsverzeichnis von Secure Banking (Standardmäßig: "C:/programme/secure banking software/secure banking")
  • Füge die Datei sbservice.exe und vorsichtshalber auch SecureBanking.exe hinzu
Falls die Meldung von Secure Banking trotz den Einstellung nicht weg sind, deinstalliere bitte Chrome einmal vollständig und installiere diesen wieder. Berichte mir, ob das funktioniert hat.


Schritt 2
Downloade dir bitte Windows Repair (All In One) von hier.
Schritt 3
Starte noch einmal FRST.
  • Ändere keine der Voreinstellungen und drücke auf Scan.
  • Wenn der Scan abgeschlossen ist, wird ein neues Logfile FRST.txt erstellt und auf dem Desktop gespeichert.
  • Poste den Inhalt dieses Logfiles bitte hier in deinen Thread.

Wenn das Fenster mit der Aufforderung zum Neustart erscheint, kannst du erkennen, ob Updates installiert wurden, bzw. was installiert wurde?



Poste folgende Logfiles in deiner nächsten Antwort:
  • FRST-Scan

KitsuneNoir 29.01.2014 16:24

Hi,
also Secure Banking meldet sich trotz aller befolgten Schritte weiterhin mit einer Malware.
Und bei dem Neustartfenster war nicht bemerkbar ob etwas geupdatet oder installiert wurde :/


FRST Logfile:
Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-01-2014 01
Ran by Lucien (administrator) on LUCIENSNOTE on 29-01-2014 16:21:01
Running from C:\Users\Lucien\Desktop
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\vsserv.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(ASUS) C:\Program Files\ASUS\P4G\InsOnSrv.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender Safebox\safeboxservice.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files\ASUS\P4G\InsOnWMI.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe\livecomm.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS Console\ASUS Console Starter.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\bdagent.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Secure Banking) C:\Program Files (x86)\Secure Banking\SecureBanking.exe
() C:\Program Files (x86)\Secure Banking\sbservice.exe
(Akamai Technologies, Inc.) C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe
(Akamai Technologies, Inc.) C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-09-25] (Adobe Systems Incorporated)
HKLM\...\Run: [PrnStatusMX] - C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe [1240064 2012-07-04] (Marvell Semiconductor, Inc.)
HKLM\...\Run: [Bdagent] - C:\Program Files\Bitdefender\Bitdefender\bdagent.exe [1735872 2014-01-13] (Bitdefender)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\WINDOWS\system32\nvspcap64.dll [1179576 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [BTMTrayAgent] - C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [7818040 2013-09-19] (Motorola Solutions, Inc.)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1361112 2013-11-05] (Realtek Semiconductor)
HKLM-x32\...\Run: [ASUSPRP] - C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-04-26] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-01-15] (cyberlink)
HKLM-x32\...\Run: [ASUS InstantKey] - C:\Program Files (x86)\ASUS\ASUS Instant Key\Ikey_start.exe [13936 2013-04-16] (ASUS)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2237328 2013-11-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-09-25] ( (Atheros Communications))
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\steam.exe [1815464 2014-01-07] (Valve Corporation)
HKCU\...\Run: [SecureBanking] - C:\Program Files (x86)\Secure Banking\SecureBanking.exe [507904 2013-06-30] (Secure Banking)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Lucien\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-10] (Spotify Ltd)
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
HKCU\...\Run: [Bitdefender-Geldbörse-Agent] - C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [561672 2014-01-13] (Bitdefender)
HKCU\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] - C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [612696 2014-01-13] (Bitdefender)
HKU\Gast\...\Run: [Spotify] - C:\Users\Gast\AppData\Roaming\Spotify\Spotify.exe [6118400 2014-01-20] (Spotify Ltd)
HKU\Gast\...\Run: [Spotify Web Helper] - C:\Users\Gast\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-01-20] (Spotify Ltd)
HKU\Gast\...\Run: [Steam] - C:\Program Files (x86)\Steam\steam.exe [1815464 2014-01-07] (Valve Corporation)
HKU\Gast\...\Run: [SecureBanking] - C:\Program Files (x86)\Secure Banking\SecureBanking.exe [507904 2013-06-30] (Secure Banking)
HKU\Gast\...\Run: [Akamai NetSession Interface] - C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKU\Gast\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKU\Gast\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
HKU\Gast\...\Run: [Bitdefender-Geldbörse-Agent] - C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [561672 2014-01-13] (Bitdefender)
HKU\Gast\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] - C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [612696 2014-01-13] (Bitdefender)
HKU\Gast\...\Run: [Bitdefender-Geldbörse] - C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe [1001512 2014-01-13] (Bitdefender)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [168616 2013-12-19] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll,C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [141336 2013-12-19] (NVIDIA Corporation)
Startup: C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;form=IE10TR&amp;src=IE10TR&amp;pc=ASU2JS
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;form=IE10TR&amp;src=IE10TR&amp;pc=ASU2JS
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\pmbxie.dll (Bitdefender)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxie.dll (Bitdefender)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Chrome:
=======
CHR HomePage: hxxp://www.google.de/
CHR Extension: (Google Docs) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-14]
CHR Extension: (Google Drive) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-19]
CHR Extension: (YouTube) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-19]
CHR Extension: (Bitdefender Wallet) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccahoghmggldkcdjiebjkidpfongdfbl [2014-01-13]
CHR Extension: (Google-Suche) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-19]
CHR Extension: (Google Wallet) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR Extension: (Google Mail) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-19]
CHR HKLM-x32\...\Chrome\Extension: [ccahoghmggldkcdjiebjkidpfongdfbl] - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxcr.crx [2014-01-13]

==================== Services (Whitelisted) =================

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-12-18] (Adobe Systems)
R2 ASUS InstantOn; C:\Program Files\ASUS\P4G\InsOnSrv.exe [277120 2013-04-29] (ASUS)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-09-25] (Windows (R) Win 7 DDK provider)
S4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender\bdparentalservice.exe [77632 2013-11-21] (Bitdefender)
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [247768 2013-01-15] (CyberLink)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-04-11] (Intel Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-09-18] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16939296 2014-01-21] (NVIDIA Corporation)
R2 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [94624 2013-07-08] (Bitdefender)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe [67320 2013-10-07] (Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender\vsserv.exe [1507248 2013-11-15] (Bitdefender)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [18384 2013-09-04] (Intel(R) Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-09-25] (Atheros)

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [70416 2013-09-23] (ASUS Corporation)
R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [727592 2013-07-19] (BitDefender)
R3 avchv; C:\Windows\system32\DRIVERS\avchv.sys [261056 2014-01-13] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [601360 2013-07-19] (BitDefender)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
S0 bdelam; C:\Windows\System32\drivers\bdelam.sys [23568 2013-09-08] (Bitdefender)
R1 BdfNdisf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys [98768 2013-07-24] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107008 2013-07-29] (BitDefender LLC)
S4 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-07-02] (Bitdefender SRL)
S3 BDSandBox; C:\WINDOWS\system32\drivers\bdsandbox.sys [82824 2013-11-04] (BitDefender SRL)
R1 BDVEDISK; C:\Windows\system32\DRIVERS\bdvedisk.sys [79192 2013-07-30] (BitDefender)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-25] (Qualcomm Atheros)
S3 BthA2DP; C:\Windows\system32\drivers\BthA2DP.sys [131584 2013-08-22] (Microsoft Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [140600 2013-07-22] (Motorola Solutions, Inc.)
R3 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2013-09-01] (DT Soft Ltd)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [150256 2013-08-23] (BitDefender LLC)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)
R2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [26328 2013-07-23] (Intel Corporation)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-07-26] (Intel Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S0 rtcrfilt64; C:\Windows\System32\DRIVERS\rtcrfilt64.sys [19600 2000-01-01] (Realtek Semiconductor Corp.)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
S3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16152 2013-09-03] ()
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [389240 2013-08-07] (BitDefender S.R.L.)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
S3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [x]
S3 GPU-Z; \??\C:\Users\Lucien\AppData\Local\Temp\GPU-Z.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-29 16:06 - 2014-01-29 16:07 - 00298424 _____ C:\WINDOWS\Minidump\012914-53375-01.dmp
2014-01-29 15:41 - 2014-01-29 16:04 - 00181064 _____ (Sysinternals) C:\WINDOWS\PSEXESVC.EXE
2014-01-29 15:37 - 2014-01-29 15:37 - 00000207 _____ C:\WINDOWS\tweaking.com-regbackup-LUCIENSNOTE-Microsoft-Windows-8.1-(64-bit).dat
2014-01-29 15:36 - 2014-01-29 15:36 - 00000000 ____D C:\RegBackup
2014-01-29 15:04 - 2014-01-29 15:04 - 00003296 ____N C:\bootsqm.dat
2014-01-29 14:56 - 2014-01-29 14:56 - 00000000 ____D C:\Users\Lucien\Downloads\Tweaking.com - Windows Repair
2014-01-29 14:48 - 2014-01-29 14:48 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2014-01-29 14:45 - 2013-11-05 19:47 - 03707864 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2014-01-29 14:45 - 2013-11-05 18:54 - 38385664 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
2014-01-29 14:45 - 2013-11-05 15:48 - 00681905 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2014-01-29 14:45 - 2013-11-04 19:26 - 00153304 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2014-01-29 14:45 - 2013-11-04 11:11 - 02587864 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkAPO64.dll
2014-01-29 14:45 - 2013-10-30 16:31 - 00929080 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICAPOSettingsIPC.dll
2014-01-29 14:45 - 2013-10-28 17:29 - 01021656 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2014-01-29 14:45 - 2013-10-25 10:49 - 05751576 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICAPOlfx.dll
2014-01-29 14:45 - 2013-10-18 16:41 - 01286360 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2014-01-29 14:45 - 2013-10-11 11:31 - 00947760 _____ (Sony Corporation) C:\WINDOWS\system32\SFSS_APO.dll
2014-01-29 14:45 - 2013-10-09 20:13 - 01286400 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxSpeechAPO64.dll
2014-01-29 14:45 - 2013-10-09 20:12 - 03714304 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioVnN64.dll
2014-01-29 14:45 - 2013-10-09 20:12 - 02103040 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\WavesGUILib64.dll
2014-01-29 14:45 - 2013-10-07 11:05 - 02810072 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2014-01-29 14:45 - 2013-10-02 17:10 - 00617176 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2014-01-29 14:45 - 2013-09-09 15:32 - 05681192 _____ C:\WINDOWS\system32\Drivers\rtvienna.dat
2014-01-29 14:45 - 2013-08-24 03:14 - 01014016 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\slcnt64.dll
2014-01-29 14:45 - 2013-08-24 03:14 - 00897792 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll
2014-01-29 14:45 - 2013-08-24 03:14 - 00722688 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll
2014-01-29 14:45 - 2013-08-24 03:14 - 00244480 _____ (TODO: <Company name>) C:\WINDOWS\system32\slprp64.dll
2014-01-29 14:45 - 2013-08-14 16:36 - 00662784 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVolumeSDAPO.dll
2014-01-29 14:45 - 2013-08-14 16:35 - 00907008 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO2064.dll
2014-01-29 14:45 - 2013-06-25 12:47 - 00871856 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tossaeapo64.dll
2014-01-29 14:45 - 2013-06-25 12:47 - 00162224 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\toseaeapo64.dll
2014-01-29 14:45 - 2013-06-25 12:46 - 00582056 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosasfapo64.dll
2014-01-29 14:45 - 2013-04-24 17:16 - 01662024 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2014-01-29 14:45 - 2013-04-03 14:13 - 00906800 _____ (Sony Corporation) C:\WINDOWS\system32\MISS_APO.dll
2014-01-29 14:45 - 2012-08-31 19:18 - 07164176 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEP64A.dll
2014-01-29 14:45 - 2012-08-31 19:17 - 00434960 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EED64A.dll
2014-01-29 14:45 - 2012-08-31 19:17 - 00141584 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEL64A.dll
2014-01-29 14:45 - 2012-08-31 19:17 - 00124176 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEA64A.dll
2014-01-29 14:45 - 2012-08-31 19:17 - 00075024 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEG64A.dll
2014-01-29 14:45 - 2012-01-30 11:43 - 00836544 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo264.dll
2014-01-29 14:45 - 2012-01-10 10:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\WINDOWS\system32\tepeqapo64.dll
2014-01-29 14:45 - 2011-12-20 15:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2014-01-29 14:45 - 2011-11-22 16:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2014-01-29 14:45 - 2011-09-02 14:21 - 00221024 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFNHK64.dll
2014-01-29 14:45 - 2011-09-02 14:21 - 00081248 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFCOM64.dll
2014-01-29 14:45 - 2011-09-02 14:21 - 00078688 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFAPO64.dll
2014-01-29 14:45 - 2011-03-17 12:17 - 01361336 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosade.dll
2014-01-29 14:45 - 2011-03-07 17:11 - 00148416 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo.dll
2014-01-29 14:45 - 2010-11-08 07:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2014-01-29 14:45 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2014-01-29 14:45 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2014-01-29 14:45 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2014-01-29 14:45 - 2010-11-08 07:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2014-01-29 14:45 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2014-01-29 14:45 - 2010-11-03 18:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2014-01-29 14:45 - 2010-07-22 16:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\WINDOWS\SysWOW64\SFCOM.dll
2014-01-29 14:45 - 2009-11-24 09:55 - 00518896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2014-01-29 14:45 - 2009-11-24 09:55 - 00211184 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll
2014-01-29 14:45 - 2009-11-24 09:55 - 00198896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll
2014-01-29 14:45 - 2009-11-24 09:55 - 00155888 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2014-01-29 14:44 - 2013-10-16 03:43 - 00209096 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll
2014-01-29 14:44 - 2013-10-11 12:47 - 00113576 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2014-01-29 14:44 - 2013-10-09 20:13 - 01921792 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek264.dll
2014-01-29 14:44 - 2013-10-09 20:13 - 01345280 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO5064.dll
2014-01-29 14:44 - 2013-10-09 20:12 - 27644160 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioVnA64.dll
2014-01-29 14:44 - 2013-10-09 20:12 - 14152960 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek64.dll
2014-01-29 14:44 - 2013-10-09 20:12 - 02036992 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioEQ64.dll
2014-01-29 14:44 - 2013-10-09 20:12 - 01012992 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPOShell64.dll
2014-01-29 14:44 - 2013-10-07 00:26 - 00501184 _____ (DTS) C:\WINDOWS\system32\DTSU2PLFX64.dll
2014-01-29 14:44 - 2013-10-07 00:26 - 00487360 _____ (DTS) C:\WINDOWS\system32\DTSU2PGFX64.dll
2014-01-29 14:44 - 2013-10-07 00:26 - 00415680 _____ (DTS) C:\WINDOWS\system32\DTSU2PREC64.dll
2014-01-29 14:44 - 2013-09-10 04:02 - 06217904 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64A.dll
2014-01-29 14:44 - 2013-09-10 04:02 - 00313520 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64A.dll
2014-01-29 14:44 - 2013-09-10 04:01 - 01938608 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64A.dll
2014-01-29 14:44 - 2013-09-10 04:01 - 00260272 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64.dll
2014-01-29 14:44 - 2013-08-20 17:37 - 00605496 _____ C:\WINDOWS\system32\audioLibVc.dll
2014-01-29 14:44 - 2013-08-14 16:35 - 01084160 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO4064.dll
2014-01-29 14:44 - 2013-08-14 16:35 - 00663296 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO30.dll
2014-01-29 14:44 - 2013-08-05 18:11 - 02743328 _____ (Fortemedia Corporation) C:\WINDOWS\system32\FMAPO64.dll
2014-01-29 14:44 - 2013-07-23 15:39 - 00790272 _____ (Waves Audio Ltd.) C:\WINDOWS\SysWOW64\MaxxAudioAPOShell.dll
2014-01-29 14:44 - 2013-06-21 11:01 - 00109848 _____ C:\WINDOWS\system32\AcpiServiceVnA64.dll
2014-01-29 14:44 - 2012-03-08 11:47 - 00108640 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll
2014-01-29 14:44 - 2011-08-23 17:00 - 00603984 _____ (Knowles Acoustics ) C:\WINDOWS\system32\KAAPORT64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 01756264 _____ (DTS) C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 01568360 _____ (DTS) C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 01486952 _____ (DTS) C:\WINDOWS\system32\DTSBoostDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00728680 _____ (DTS) C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00712296 _____ (DTS) C:\WINDOWS\system32\DTSSymmetryDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00693352 _____ (DTS) C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00491112 _____ (DTS) C:\WINDOWS\system32\DTSNeoPCDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00432744 _____ (DTS) C:\WINDOWS\system32\DTSLimiterDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00428648 _____ (DTS) C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\WINDOWS\system32\DTSLFXAPO64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPO64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00241768 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPONS64.dll
2014-01-29 14:44 - 2010-09-27 09:34 - 00318808 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO20.dll
2014-01-29 14:29 - 2014-01-29 14:37 - 109595877 _____ C:\Users\Lucien\Downloads\Audio_Realtek_Win81_64_VER6017083.zip
2014-01-29 14:20 - 2014-01-29 14:20 - 02903255 _____ C:\Users\Lucien\Downloads\tweaking.com_windows_repair_aio.zip
2014-01-29 13:10 - 2014-01-29 16:18 - 00002197 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-29 13:09 - 2014-01-29 14:46 - 00000000 ____D C:\Program Files (x86)\GUMCBFB.tmp
2014-01-29 13:05 - 2014-01-29 13:07 - 37739976 _____ (Google Inc.) C:\Users\Lucien\Downloads\ChromeStandalone32Setup.exe
2014-01-29 13:02 - 2014-01-29 13:02 - 00000000 ____D C:\Users\Lucien\AppData\Local\Deployment
2014-01-29 12:56 - 2014-01-29 12:56 - 00000000 ____D C:\Users\Lucien\Desktop\chrome default
2014-01-29 12:49 - 2014-01-29 12:49 - 00001124 _____ C:\Users\Lucien\Desktop\Absolute Uninstaller.lnk
2014-01-29 12:49 - 2014-01-29 12:49 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\GlarySoft
2014-01-29 12:48 - 2014-01-29 12:48 - 02194784 _____ (Glarysoft.com                                              ) C:\Users\Lucien\Downloads\au29setup.exe
2014-01-29 09:54 - 2014-01-29 09:54 - 00048629 _____ C:\Users\Lucien\Documents\Namenschilder%20fertig.ppt_0.odp
2014-01-29 09:40 - 2014-01-29 14:55 - 00000000 ____D C:\ProgramData\Atheros
2014-01-29 09:40 - 2014-01-29 09:40 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Atheros
2014-01-28 14:00 - 2014-01-28 14:05 - 00000000 ____D C:\Program Files\Common Files\QCA_Bluetooth
2014-01-28 13:56 - 2014-01-28 13:56 - 00000000 ____D C:\Users\Lucien\Downloads\Win8 Key
2014-01-28 13:51 - 2014-01-28 13:52 - 00000000 ____D C:\Users\Lucien\Downloads\wlan
2014-01-28 13:51 - 2014-01-28 13:51 - 00000000 ____D C:\Users\Lucien\Downloads\lan
2014-01-28 13:50 - 2014-01-28 13:50 - 00000000 ____D C:\Users\Lucien\Downloads\bluetooth
2014-01-28 13:48 - 2014-01-28 13:49 - 00000000 ____D C:\Users\Lucien\Downloads\audio
2014-01-28 13:46 - 2014-01-28 13:46 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_btmaux_01009.Wdf
2014-01-28 13:45 - 2014-01-28 13:45 - 00000000 ____D C:\Users\Lucien\Downloads\blue
2014-01-28 13:44 - 2014-01-28 13:45 - 00000000 ____D C:\Users\Lucien\Downloads\Lang
2014-01-28 12:12 - 2014-01-28 12:12 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2014-01-28 12:11 - 2014-01-29 09:40 - 00000000 ____D C:\WINDOWS\SysWOW64\NV
2014-01-28 12:11 - 2014-01-29 09:39 - 00000000 ____D C:\WINDOWS\system32\NV
2014-01-28 12:10 - 2013-12-19 21:33 - 30372640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 25257248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 22960416 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 18310112 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 18222008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 17560352 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 15877216 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 15230352 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 12645664 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2014-01-28 12:10 - 2013-12-19 21:33 - 11605752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 11554264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 09700224 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 09657464 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 03132704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 03125024 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvenc.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 02947872 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 02747680 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvenc.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00882464 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00879392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00852768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00847648 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00479520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00405280 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00317472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00266984 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00032544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys
2014-01-28 11:40 - 2014-01-28 11:40 - 00001369 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2014-01-28 11:40 - 2014-01-28 11:40 - 00000000 ____D C:\Users\Lucien\AppData\Local\NVIDIA Corporation
2014-01-28 11:39 - 2014-01-28 11:41 - 00000000 ____D C:\Users\Lucien\AppData\Local\NVIDIA
2014-01-28 11:39 - 2014-01-21 03:54 - 01179576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2014-01-28 11:39 - 2014-01-21 03:54 - 01048152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2014-01-28 11:39 - 2013-12-27 19:42 - 00039200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2014-01-28 11:39 - 2013-12-27 19:42 - 00035104 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2014-01-28 11:39 - 2013-12-27 19:42 - 00033056 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2014-01-28 10:55 - 2014-01-28 12:11 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-28 10:55 - 2013-12-19 19:53 - 06671648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2014-01-28 10:55 - 2013-12-19 19:53 - 03490080 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2014-01-28 10:55 - 2013-12-19 19:53 - 02559776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2014-01-28 10:55 - 2013-12-19 19:53 - 01065248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2014-01-28 10:55 - 2013-12-19 19:53 - 00922912 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2014-01-28 10:55 - 2013-12-19 19:53 - 00386336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2014-01-28 10:55 - 2013-12-19 19:53 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2014-01-28 10:55 - 2013-12-19 19:53 - 00063776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2014-01-28 10:55 - 2013-12-19 06:01 - 03539040 _____ C:\WINDOWS\system32\nvcoproc.bin
2014-01-28 10:54 - 2014-01-28 11:40 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2014-01-28 10:53 - 2014-01-28 10:53 - 00000000 ____D C:\NVIDIA
2014-01-28 10:41 - 2014-01-28 10:41 - 00000000 ____D C:\WINDOWS\pss
2014-01-28 09:59 - 2014-01-28 10:01 - 31475128 _____ (NVIDIA Corporation) C:\Users\Lucien\Downloads\GeForce_Experience_v1.8.2.0.exe
2014-01-27 23:55 - 2013-12-19 21:33 - 01884448 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6433221.dll
2014-01-27 23:55 - 2013-12-19 21:33 - 01511712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6433221.dll
2014-01-27 23:55 - 2013-12-19 21:33 - 00357152 _____ C:\WINDOWS\system32\NvIFROpenGL.dll
2014-01-27 23:55 - 2013-12-19 21:33 - 00314656 _____ C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2014-01-27 22:46 - 2014-01-27 22:59 - 266633424 _____ (NVIDIA Corporation) C:\Users\Lucien\Downloads\332.21-notebook-win8-win7-64bit-international-whql.exe
2014-01-27 20:36 - 2014-01-29 16:21 - 00021288 _____ C:\Users\Lucien\Desktop\FRST.txt
2014-01-27 19:54 - 2014-01-27 20:33 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-27 19:53 - 2014-01-27 19:53 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-01-27 19:52 - 2014-01-27 19:52 - 00000000 ____D C:\Users\Lucien\Desktop\mbar
2014-01-27 19:47 - 2014-01-27 19:48 - 00000000 ____D C:\Users\Lucien\Desktop\Logs2
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2014-01-26 20:53 - 2014-01-26 20:53 - 00003186 _____ C:\WINDOWS\System32\Tasks\{E66DEEF7-845B-48C8-BBEE-CE6EA6F2EE96}
2014-01-26 19:26 - 2014-01-26 19:26 - 00003362 _____ C:\WINDOWS\System32\Tasks\{63C03234-5B71-4184-AD48-4EE22D315F87}
2014-01-25 15:01 - 2014-01-25 15:01 - 00000000 ____H C:\Users\Lucien\Documents\Default.rdp
2014-01-24 19:21 - 2014-01-24 19:21 - 00000000 ____D C:\Users\Lucien\Desktop\Logs alt
2014-01-24 19:17 - 2014-01-24 19:17 - 00361185 _____ (Farbar) C:\Users\Lucien\Desktop\FSS.exe
2014-01-24 16:48 - 2014-01-24 16:48 - 00032847 _____ C:\Users\Lucien\Desktop\gmer.zip
2014-01-24 11:34 - 2014-01-24 11:34 - 00000000 ____D C:\Program Files (x86)\ESET
2014-01-24 10:53 - 2014-01-24 10:53 - 00000000 ____D C:\WINDOWS\ERUNT
2014-01-22 21:41 - 2014-01-29 16:20 - 00000000 ____D C:\Users\Lucien\Desktop\FRST-OlderVersion
2014-01-22 21:23 - 2014-01-22 21:23 - 00022688 _____ C:\Users\Lucien\Downloads\Addition.txt
2014-01-22 21:22 - 2014-01-22 21:23 - 00046051 _____ C:\Users\Lucien\Downloads\FRST.txt
2014-01-22 13:59 - 2014-01-29 16:20 - 02079744 _____ (Farbar) C:\Users\Lucien\Desktop\FRST64.exe
2014-01-22 12:30 - 2014-01-22 12:30 - 00000168 _____ C:\Users\Lucien\defogger_reenable
2014-01-22 00:11 - 2014-01-17 20:25 - 00379904 _____ C:\Users\Lucien\Desktop\gmer.exe
2014-01-22 00:10 - 2014-01-29 14:54 - 00000000 ____D C:\Users\Lucien\Desktop\Tweaking.com - Windows Repair
2014-01-22 00:10 - 2012-12-19 16:10 - 00000000 ____D C:\Users\Lucien\Desktop\data
2014-01-22 00:10 - 2009-10-20 21:47 - 00055936 _____ () C:\Users\Lucien\Desktop\Setup.exe
2014-01-21 23:54 - 2014-01-29 16:20 - 00000000 ____D C:\FRST
2014-01-21 22:19 - 2014-01-29 14:47 - 00000000 ____D C:\WINDOWS\LastGood
2014-01-21 15:06 - 2014-01-21 15:06 - 01037068 _____ (Thisisu) C:\Users\Lucien\Desktop\JRT.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00987425 _____ C:\Users\Lucien\Desktop\SecurityCheck.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00448512 _____ (OldTimer Tools) C:\Users\Lucien\Desktop\TFC.exe
2014-01-21 15:05 - 2014-01-21 15:05 - 01236282 _____ C:\Users\Lucien\Desktop\adwcleaner.exe
2014-01-21 15:00 - 2014-01-21 15:01 - 02347384 _____ (ESET) C:\Users\Lucien\Desktop\esetsmartinstaller_enu.exe
2014-01-21 13:15 - 2014-01-21 13:25 - 24859352 _____ (Microsoft Corporation) C:\Users\Gast\Downloads\Windows-KB890830-x64-V5.8.exe
2014-01-21 10:40 - 2014-01-22 14:01 - 00000000 ____D C:\Users\Gast\AppData\Local\My Games
2014-01-21 10:18 - 2014-01-21 10:18 - 00050477 _____ C:\Users\Lucien\Desktop\Defogger.exe
2014-01-21 10:12 - 2014-01-21 10:12 - 00000000 ____D C:\Users\Gast\AppData\Roaming\QuickScan
2014-01-21 09:38 - 2014-01-21 09:38 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Spotydl
2014-01-21 08:33 - 2014-01-21 08:33 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2014-01-20 16:10 - 2013-12-03 13:49 - 00000000 ____D C:\Users\Gast\Downloads\settings
2014-01-20 15:53 - 2014-01-20 15:53 - 00000000 ____D C:\Users\Gast\AppData\Local\NVIDIA Corporation
2014-01-20 15:52 - 2014-01-21 08:37 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Bitdefender
2014-01-20 15:52 - 2014-01-20 15:52 - 00000385 _____ C:\Users\Gast\AppData\Roaminguser_gensett.xml
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\Documents\Bluetooth Folder
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\AppData\Local\BMExplorer
2014-01-20 15:51 - 2014-01-20 15:51 - 00000000 ____D C:\Users\Lucien\Documents\AdobeStockPhotos
2014-01-19 21:21 - 2014-01-19 08:38 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-01-19 18:22 - 2014-01-29 16:06 - 00000000 ____D C:\WINDOWS\Minidump
2014-01-19 18:22 - 2014-01-19 18:22 - 00305304 _____ C:\WINDOWS\Minidump\011914-32203-01.dmp
2014-01-17 13:50 - 2014-01-20 13:49 - 00000000 ____D C:\Users\Lucien\Downloads\backups
2014-01-17 13:42 - 2014-01-19 18:46 - 00012554 _____ C:\Users\Lucien\Downloads\hijackthis.log
2014-01-17 13:42 - 2014-01-17 13:42 - 00388608 _____ (Trend Micro Inc.) C:\Users\Lucien\Downloads\HiJackThis204.exe
2014-01-17 09:54 - 2014-01-17 09:54 - 00000385 _____ C:\Users\Lucien\AppData\Roaminguser_gensett.xml
2014-01-16 14:05 - 2013-12-11 08:55 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-01-16 14:05 - 2013-12-09 01:34 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-01-16 14:05 - 2013-12-09 01:04 - 00980480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-01-16 14:05 - 2013-11-27 16:34 - 03210528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2014-01-16 14:05 - 2013-11-27 16:27 - 00809872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-01-16 14:05 - 2013-11-27 15:00 - 00663680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-01-16 14:05 - 2013-11-27 14:47 - 02804528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2014-01-16 14:05 - 2013-11-27 13:02 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ipnat.sys
2014-01-16 14:05 - 2013-11-27 11:54 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-01-16 14:05 - 2013-11-27 11:24 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll
2014-01-16 14:05 - 2013-11-27 11:08 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-01-16 14:05 - 2013-11-27 10:46 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll
2014-01-16 14:05 - 2013-11-27 10:41 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2014-01-16 14:05 - 2013-11-27 10:17 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-01-16 14:05 - 2013-11-27 10:10 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2014-01-16 14:05 - 2013-11-27 09:58 - 01503232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-01-16 14:05 - 2013-11-27 09:56 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll
2014-01-16 14:05 - 2013-11-27 09:20 - 04106240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-01-16 14:05 - 2013-11-27 05:01 - 00385614 _____ C:\WINDOWS\system32\ApnDatabase.xml
2014-01-16 14:05 - 2013-11-26 14:22 - 01928144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2014-01-16 14:05 - 2013-11-26 14:20 - 02131120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-01-16 14:05 - 2013-11-26 14:20 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-01-16 14:05 - 2013-11-26 14:20 - 01374384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-01-16 14:05 - 2013-11-26 12:50 - 01371312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2014-01-16 14:05 - 2013-11-26 12:44 - 02142936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-01-16 14:05 - 2013-11-26 12:44 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-01-16 14:05 - 2013-11-26 11:13 - 04191232 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-01-16 14:05 - 2013-11-26 10:21 - 18577920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-01-16 14:05 - 2013-11-26 09:28 - 13925888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-01-16 14:05 - 2013-11-25 02:45 - 00142680 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-01-16 14:05 - 2013-11-25 02:32 - 01119064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2014-01-16 14:05 - 2013-11-25 00:30 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2014-01-16 14:05 - 2013-11-25 00:28 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2014-01-16 14:05 - 2013-11-23 13:47 - 00032088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-01-16 14:05 - 2013-11-23 12:49 - 21196664 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-01-16 14:05 - 2013-11-23 09:19 - 18642504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-01-16 14:05 - 2013-11-23 08:13 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\bi.dll
2014-01-16 14:05 - 2013-11-23 08:13 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys
2014-01-16 14:05 - 2013-11-23 08:08 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-01-16 14:05 - 2013-11-23 05:50 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-01-16 14:05 - 2013-11-23 04:57 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2014-01-16 14:05 - 2013-11-23 04:48 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2014-01-16 14:05 - 2013-11-23 04:25 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2014-01-16 14:05 - 2013-11-23 04:25 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2014-01-16 14:05 - 2013-11-23 04:19 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-01-16 14:05 - 2013-11-23 04:15 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-01-16 14:05 - 2013-11-21 07:58 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceregistration.dll
2014-01-16 14:05 - 2013-11-21 07:26 - 01415680 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-01-16 14:05 - 2013-11-16 06:11 - 00764856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-01-16 14:05 - 2013-11-15 19:19 - 00669344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-01-16 14:05 - 2013-11-15 15:59 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2014-01-16 14:05 - 2013-11-15 15:25 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2014-01-16 14:05 - 2013-11-15 15:08 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-01-16 14:05 - 2013-11-15 14:24 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-01-16 14:05 - 2013-11-05 21:12 - 02551128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-01-16 14:05 - 2013-10-31 01:29 - 00745336 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-01-16 14:05 - 2013-10-31 00:41 - 00552624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2014-01-15 23:39 - 2013-12-09 01:15 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-01-15 23:39 - 2013-11-27 16:36 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-01-15 23:39 - 2013-11-27 12:41 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe
2014-01-15 23:39 - 2013-11-27 11:34 - 00138240 _____ C:\WINDOWS\system32\OEMLicense.dll
2014-01-15 23:39 - 2013-11-27 10:54 - 00103936 _____ C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-01-15 23:39 - 2013-11-27 09:48 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 23:39 - 2013-11-27 09:45 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-01-15 23:39 - 2013-11-27 09:40 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 23:39 - 2013-11-27 09:38 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-01-15 23:39 - 2013-11-27 09:17 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-01-15 23:39 - 2013-11-27 09:12 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-01-13 23:23 - 2014-01-13 23:23 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\system32\bdsandboxuiskin32.dll
2014-01-13 23:20 - 2014-01-19 16:08 - 00000000 ____D C:\Program Files (x86)\McAfee Security Scan
2014-01-13 23:20 - 2014-01-13 23:20 - 00002041 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-13 22:54 - 2014-01-13 22:54 - 00620542 _____ C:\ProgramData\1389649682.bdinstall.bin
2014-01-13 22:54 - 2014-01-13 22:54 - 00000385 _____ C:\WINDOWS\system32\user_gensett.xml
2014-01-13 22:53 - 2014-01-13 23:23 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\SysWOW64\bdsandboxuiskin32.dll
2014-01-13 22:53 - 2014-01-13 22:54 - 00000000 ____D C:\ProgramData\BDLogging
2014-01-13 22:53 - 2014-01-13 22:53 - 00002212 _____ C:\Users\Public\Desktop\Bitdefender Safepay.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00002164 _____ C:\Users\Public\Desktop\Bitdefender Total Security.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2014-01-13 22:53 - 2013-11-04 15:47 - 00082824 _____ (BitDefender SRL) C:\WINDOWS\system32\Drivers\bdsandbox.sys
2014-01-13 22:53 - 2013-09-08 19:04 - 00023568 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bdelam.sys
2014-01-13 22:53 - 2013-07-30 17:41 - 00079192 _____ (BitDefender) C:\WINDOWS\system32\Drivers\bdvedisk.sys
2014-01-13 22:53 - 2013-07-24 17:19 - 00098768 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\bdfndisf6.sys
2014-01-13 22:53 - 2007-04-11 10:11 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\capicom.dll
2014-01-13 22:52 - 2014-01-13 23:23 - 00261056 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avchv.sys
2014-01-13 22:52 - 2014-01-13 22:54 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Bitdefender
2014-01-13 22:52 - 2013-07-19 17:08 - 00601360 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avckf.sys
2014-01-13 22:52 - 2013-07-19 17:04 - 00727592 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avc3.sys
2014-01-13 22:48 - 2014-01-13 23:23 - 00000000 ____D C:\ProgramData\Bitdefender
2014-01-13 22:48 - 2014-01-13 22:52 - 00000000 ____D C:\Program Files\Bitdefender
2014-01-13 22:48 - 2014-01-13 22:48 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\QuickScan
2014-01-13 22:48 - 2013-11-04 15:47 - 00084848 _____ (BitDefender SRL) C:\WINDOWS\system32\BDSandBoxUISkin.dll
2014-01-13 22:48 - 2013-11-04 15:46 - 00034384 _____ (BitDefender SRL) C:\WINDOWS\system32\BDSandBoxUH.dll
2014-01-13 22:48 - 2013-08-23 12:48 - 00150256 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\gzflt.sys
2014-01-13 22:48 - 2013-08-07 12:46 - 00389240 _____ (BitDefender S.R.L.) C:\WINDOWS\system32\Drivers\trufos.sys
2014-01-12 22:56 - 2014-01-13 22:48 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2014-01-12 22:29 - 2014-01-12 22:29 - 07171632 _____ C:\Users\Lucien\Downloads\bitdefender_tsecurity.exe
2014-01-09 12:00 - 2014-01-13 14:27 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Bioshock
2014-01-09 12:00 - 2014-01-09 12:12 - 00000000 ____D C:\Users\Lucien\Documents\Bioshock
2014-01-07 21:35 - 2014-01-07 21:35 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\WINDOWS\SysWOW64\GPhotos.scr
2014-01-06 13:29 - 2014-01-21 22:13 - 00000000 ____D C:\Users\Lucien\Documents\Rockstar Games
2014-01-06 13:11 - 2014-01-06 13:11 - 00000000 __SHD C:\ProgramData\SecuROM
2014-01-06 13:10 - 2014-01-06 13:10 - 00000000 ____D C:\Users\Lucien\AppData\Local\Rockstar Games
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\WINDOWS\SysWOW64\xlive
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\Users\Lucien\Documents\Games for Windows - LIVE Demos
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2014-01-06 13:08 - 2014-01-06 13:08 - 00642712 _____ (Microsoft Corporation) C:\Users\Lucien\Downloads\gfwlivesetup.exe

==================== One Month Modified Files and Folders =======

2014-01-29 16:21 - 2014-01-27 20:36 - 00021288 _____ C:\Users\Lucien\Desktop\FRST.txt
2014-01-29 16:21 - 2014-01-21 23:54 - 00000000 ____D C:\FRST
2014-01-29 16:20 - 2014-01-22 21:41 - 00000000 ____D C:\Users\Lucien\Desktop\FRST-OlderVersion
2014-01-29 16:20 - 2014-01-22 13:59 - 02079744 _____ (Farbar) C:\Users\Lucien\Desktop\FRST64.exe
2014-01-29 16:18 - 2014-01-29 13:10 - 00002197 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-29 16:18 - 2013-08-19 19:06 - 00001130 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-29 16:17 - 2013-11-05 21:47 - 00000000 ____D C:\Users\Lucien
2014-01-29 16:11 - 2013-09-30 05:14 - 01804156 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2014-01-29 16:11 - 2013-09-30 04:56 - 00761880 _____ C:\WINDOWS\system32\perfh007.dat
2014-01-29 16:11 - 2013-09-30 04:56 - 00159758 _____ C:\WINDOWS\system32\perfc007.dat
2014-01-29 16:10 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2014-01-29 16:07 - 2014-01-29 16:06 - 00298424 _____ C:\WINDOWS\Minidump\012914-53375-01.dmp
2014-01-29 16:07 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2014-01-29 16:06 - 2014-01-19 18:22 - 00000000 ____D C:\WINDOWS\Minidump
2014-01-29 16:06 - 2013-09-13 12:11 - 894753829 _____ C:\WINDOWS\MEMORY.DMP
2014-01-29 16:06 - 2013-08-22 15:44 - 05147912 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2014-01-29 16:04 - 2014-01-29 15:41 - 00181064 _____ (Sysinternals) C:\WINDOWS\PSEXESVC.EXE
2014-01-29 16:04 - 2013-08-20 17:50 - 00000000 ____D C:\Users\Lucien\AppData\Local\CrashDumps
2014-01-29 16:03 - 2012-07-26 06:26 - 00000160 _____ C:\WINDOWS\win.ini
2014-01-29 16:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\sru
2014-01-29 15:37 - 2014-01-29 15:37 - 00000207 _____ C:\WINDOWS\tweaking.com-regbackup-LUCIENSNOTE-Microsoft-Windows-8.1-(64-bit).dat
2014-01-29 15:36 - 2014-01-29 15:36 - 00000000 ____D C:\RegBackup
2014-01-29 15:28 - 2013-08-19 19:07 - 00001134 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-29 15:22 - 2013-11-05 21:43 - 01402911 _____ C:\WINDOWS\WindowsUpdate.log
2014-01-29 15:15 - 2013-07-18 20:55 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3506778915-1287356822-3408950579-1002
2014-01-29 15:11 - 2013-07-18 20:49 - 00000074 _____ C:\Users\Lucien\AppData\Roaming\sp_data.sys
2014-01-29 15:04 - 2014-01-29 15:04 - 00003296 ____N C:\bootsqm.dat
2014-01-29 14:58 - 2013-08-22 14:25 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2014-01-29 14:56 - 2014-01-29 14:56 - 00000000 ____D C:\Users\Lucien\Downloads\Tweaking.com - Windows Repair
2014-01-29 14:55 - 2014-01-29 09:40 - 00000000 ____D C:\ProgramData\Atheros
2014-01-29 14:54 - 2014-01-22 00:10 - 00000000 ____D C:\Users\Lucien\Desktop\Tweaking.com - Windows Repair
2014-01-29 14:54 - 2013-11-05 22:24 - 00000000 __RDO C:\Users\Lucien\SkyDrive
2014-01-29 14:48 - 2014-01-29 14:48 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2014-01-29 14:48 - 2013-11-05 21:42 - 00109524 _____ C:\WINDOWS\system32\Drivers\RTWAVES30.dat
2014-01-29 14:48 - 2013-11-05 21:41 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2014-01-29 14:48 - 2013-08-22 15:46 - 00384808 _____ C:\WINDOWS\setupact.log
2014-01-29 14:47 - 2014-01-21 22:19 - 00000000 ____D C:\WINDOWS\LastGood
2014-01-29 14:47 - 2013-08-22 15:46 - 00000974 _____ C:\WINDOWS\setuperr.log
2014-01-29 14:46 - 2014-01-29 13:09 - 00000000 ____D C:\Program Files (x86)\GUMCBFB.tmp
2014-01-29 14:46 - 2013-09-29 20:04 - 09446394 _____ C:\WINDOWS\PFRO.log
2014-01-29 14:37 - 2014-01-29 14:29 - 109595877 _____ C:\Users\Lucien\Downloads\Audio_Realtek_Win81_64_VER6017083.zip
2014-01-29 14:34 - 2013-06-26 07:58 - 00000000 ____D C:\Program Files (x86)\Realtek
2014-01-29 14:34 - 2013-06-26 07:51 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2014-01-29 14:20 - 2014-01-29 14:20 - 02903255 _____ C:\Users\Lucien\Downloads\tweaking.com_windows_repair_aio.zip
2014-01-29 13:07 - 2014-01-29 13:05 - 37739976 _____ (Google Inc.) C:\Users\Lucien\Downloads\ChromeStandalone32Setup.exe
2014-01-29 13:06 - 2013-04-26 00:19 - 00000000 ____D C:\ProgramData\WildTangent
2014-01-29 13:02 - 2014-01-29 13:02 - 00000000 ____D C:\Users\Lucien\AppData\Local\Deployment
2014-01-29 13:01 - 2013-08-22 11:25 - 00000000 ____D C:\Users\Lucien\AppData\Local\Adobe
2014-01-29 12:56 - 2014-01-29 12:56 - 00000000 ____D C:\Users\Lucien\Desktop\chrome default
2014-01-29 12:49 - 2014-01-29 12:49 - 00001124 _____ C:\Users\Lucien\Desktop\Absolute Uninstaller.lnk
2014-01-29 12:49 - 2014-01-29 12:49 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\GlarySoft
2014-01-29 12:48 - 2014-01-29 12:48 - 02194784 _____ (Glarysoft.com                                              ) C:\Users\Lucien\Downloads\au29setup.exe
2014-01-29 12:02 - 2013-06-26 08:07 - 00003474 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1
2014-01-29 12:02 - 2013-06-26 08:07 - 00003464 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2
2014-01-29 09:54 - 2014-01-29 09:54 - 00048629 _____ C:\Users\Lucien\Documents\Namenschilder%20fertig.ppt_0.odp
2014-01-29 09:40 - 2014-01-29 09:40 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Atheros
2014-01-29 09:40 - 2014-01-28 12:11 - 00000000 ____D C:\WINDOWS\SysWOW64\NV
2014-01-29 09:39 - 2014-01-28 12:11 - 00000000 ____D C:\WINDOWS\system32\NV
2014-01-28 14:05 - 2014-01-28 14:00 - 00000000 ____D C:\Program Files\Common Files\QCA_Bluetooth
2014-01-28 14:00 - 2013-06-26 08:02 - 00000000 ____D C:\Program Files (x86)\Bluetooth Suite
2014-01-28 13:56 - 2014-01-28 13:56 - 00000000 ____D C:\Users\Lucien\Downloads\Win8 Key
2014-01-28 13:52 - 2014-01-28 13:51 - 00000000 ____D C:\Users\Lucien\Downloads\wlan
2014-01-28 13:51 - 2014-01-28 13:51 - 00000000 ____D C:\Users\Lucien\Downloads\lan
2014-01-28 13:50 - 2014-01-28 13:50 - 00000000 ____D C:\Users\Lucien\Downloads\bluetooth
2014-01-28 13:49 - 2014-01-28 13:48 - 00000000 ____D C:\Users\Lucien\Downloads\audio
2014-01-28 13:46 - 2014-01-28 13:46 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_btmaux_01009.Wdf
2014-01-28 13:46 - 2013-11-05 21:42 - 00000000 ____D C:\Program Files (x86)\Intel
2014-01-28 13:45 - 2014-01-28 13:45 - 00000000 ____D C:\Users\Lucien\Downloads\blue
2014-01-28 13:45 - 2014-01-28 13:44 - 00000000 ____D C:\Users\Lucien\Downloads\Lang
2014-01-28 12:12 - 2014-01-28 12:12 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2014-01-28 12:12 - 2013-11-05 21:42 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2014-01-28 12:11 - 2014-01-28 10:55 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-28 11:41 - 2014-01-28 11:39 - 00000000 ____D C:\Users\Lucien\AppData\Local\NVIDIA
2014-01-28 11:40 - 2014-01-28 11:40 - 00001369 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2014-01-28 11:40 - 2014-01-28 11:40 - 00000000 ____D C:\Users\Lucien\AppData\Local\NVIDIA Corporation
2014-01-28 11:40 - 2014-01-28 10:54 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2014-01-28 11:39 - 2013-11-05 21:42 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2014-01-28 10:53 - 2014-01-28 10:53 - 00000000 ____D C:\NVIDIA
2014-01-28 10:48 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Help
2014-01-28 10:41 - 2014-01-28 10:41 - 00000000 ____D C:\WINDOWS\pss
2014-01-28 10:01 - 2014-01-28 09:59 - 31475128 _____ (NVIDIA Corporation) C:\Users\Lucien\Downloads\GeForce_Experience_v1.8.2.0.exe
2014-01-28 09:25 - 2013-09-10 15:25 - 00179200 ___SH C:\Users\Lucien\Desktop\Thumbs.db
2014-01-27 22:59 - 2014-01-27 22:46 - 266633424 _____ (NVIDIA Corporation) C:\Users\Lucien\Downloads\332.21-notebook-win8-win7-64bit-international-whql.exe
2014-01-27 22:38 - 2013-09-09 20:00 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\vlc
2014-01-27 20:33 - 2014-01-27 19:54 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-27 20:20 - 2013-09-12 10:02 - 00296960 ___SH C:\Users\Lucien\Downloads\Thumbs.db
2014-01-27 20:01 - 2013-10-14 09:56 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Spotify
2014-01-27 19:53 - 2014-01-27 19:53 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-01-27 19:52 - 2014-01-27 19:52 - 00000000 ____D C:\Users\Lucien\Desktop\mbar
2014-01-27 19:48 - 2014-01-27 19:47 - 00000000 ____D C:\Users\Lucien\Desktop\Logs2
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2014-01-26 21:38 - 2013-08-23 10:50 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-26 20:53 - 2014-01-26 20:53 - 00003186 _____ C:\WINDOWS\System32\Tasks\{E66DEEF7-845B-48C8-BBEE-CE6EA6F2EE96}
2014-01-26 19:26 - 2014-01-26 19:26 - 00003362 _____ C:\WINDOWS\System32\Tasks\{63C03234-5B71-4184-AD48-4EE22D315F87}
2014-01-26 19:01 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2014-01-25 15:01 - 2014-01-25 15:01 - 00000000 ____H C:\Users\Lucien\Documents\Default.rdp
2014-01-25 13:55 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2014-01-24 19:21 - 2014-01-24 19:21 - 00000000 ____D C:\Users\Lucien\Desktop\Logs alt
2014-01-24 19:17 - 2014-01-24 19:17 - 00361185 _____ (Farbar) C:\Users\Lucien\Desktop\FSS.exe
2014-01-24 19:06 - 2013-08-31 15:58 - 00000000 ____D C:\AdwCleaner
2014-01-24 16:48 - 2014-01-24 16:48 - 00032847 _____ C:\Users\Lucien\Desktop\gmer.zip
2014-01-24 11:34 - 2014-01-24 11:34 - 00000000 ____D C:\Program Files (x86)\ESET
2014-01-24 10:53 - 2014-01-24 10:53 - 00000000 ____D C:\WINDOWS\ERUNT
2014-01-22 21:23 - 2014-01-22 21:23 - 00022688 _____ C:\Users\Lucien\Downloads\Addition.txt
2014-01-22 21:23 - 2014-01-22 21:22 - 00046051 _____ C:\Users\Lucien\Downloads\FRST.txt
2014-01-22 14:01 - 2014-01-21 10:40 - 00000000 ____D C:\Users\Gast\AppData\Local\My Games
2014-01-22 14:01 - 2013-10-01 15:03 - 00000000 ____D C:\Users\Gast\Documents\My Games
2014-01-22 14:01 - 2013-09-01 19:44 - 00000000 ____D C:\Users\Lucien\AppData\Local\My Games
2014-01-22 14:01 - 2013-08-20 09:54 - 00000000 ____D C:\Users\Lucien\Documents\My Games
2014-01-22 12:30 - 2014-01-22 12:30 - 00000168 _____ C:\Users\Lucien\defogger_reenable
2014-01-21 22:13 - 2014-01-06 13:29 - 00000000 ____D C:\Users\Lucien\Documents\Rockstar Games
2014-01-21 22:13 - 2013-09-04 07:48 - 00000000 ____D C:\Users\Lucien\Documents\Blender
2014-01-21 22:00 - 2013-11-04 09:24 - 00069120 ___SH C:\Users\Gast\Downloads\Thumbs.db
2014-01-21 15:06 - 2014-01-21 15:06 - 01037068 _____ (Thisisu) C:\Users\Lucien\Desktop\JRT.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00987425 _____ C:\Users\Lucien\Desktop\SecurityCheck.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00448512 _____ (OldTimer Tools) C:\Users\Lucien\Desktop\TFC.exe
2014-01-21 15:05 - 2014-01-21 15:05 - 01236282 _____ C:\Users\Lucien\Desktop\adwcleaner.exe
2014-01-21 15:01 - 2014-01-21 15:00 - 02347384 _____ (ESET) C:\Users\Lucien\Desktop\esetsmartinstaller_enu.exe
2014-01-21 14:51 - 2013-10-19 09:42 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Spotify
2014-01-21 13:25 - 2014-01-21 13:15 - 24859352 _____ (Microsoft Corporation) C:\Users\Gast\Downloads\Windows-KB890830-x64-V5.8.exe
2014-01-21 10:38 - 2013-09-01 18:18 - 00281688 _____ C:\WINDOWS\SysWOW64\PnkBstrB.xtr
2014-01-21 10:18 - 2014-01-21 10:18 - 00050477 _____ C:\Users\Lucien\Desktop\Defogger.exe
2014-01-21 10:12 - 2014-01-21 10:12 - 00000000 ____D C:\Users\Gast\AppData\Roaming\QuickScan
2014-01-21 09:38 - 2014-01-21 09:38 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Spotydl
2014-01-21 09:37 - 2013-09-26 11:23 - 00000000 ____D C:\Users\Gast\AppData\Local\VirtualStore
2014-01-21 08:37 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Bitdefender
2014-01-21 08:37 - 2013-09-26 11:23 - 00000062 _____ C:\Users\Gast\AppData\Roaming\sp_data.sys
2014-01-21 08:33 - 2014-01-21 08:33 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2014-01-21 03:54 - 2014-01-28 11:39 - 01179576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2014-01-21 03:54 - 2014-01-28 11:39 - 01048152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2014-01-20 15:53 - 2014-01-20 15:53 - 00000000 ____D C:\Users\Gast\AppData\Local\NVIDIA Corporation
2014-01-20 15:52 - 2014-01-20 15:52 - 00000385 _____ C:\Users\Gast\AppData\Roaminguser_gensett.xml
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\Documents\Bluetooth Folder
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\AppData\Local\BMExplorer
2014-01-20 15:52 - 2013-10-29 11:55 - 00000000 ____D C:\Users\Gast\AppData\Local\NVIDIA
2014-01-20 15:52 - 2013-10-19 09:42 - 00000000 ____D C:\Users\Gast\AppData\Local\Spotify
2014-01-20 15:52 - 2013-09-26 11:24 - 00000000 ___RD C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-20 15:52 - 2013-09-26 11:24 - 00000000 ___RD C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-20 15:51 - 2014-01-20 15:51 - 00000000 ____D C:\Users\Lucien\Documents\AdobeStockPhotos
2014-01-20 15:51 - 2013-07-18 20:48 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Adobe
2014-01-20 13:49 - 2014-01-17 13:50 - 00000000 ____D C:\Users\Lucien\Downloads\backups
2014-01-20 12:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache
2014-01-19 18:46 - 2014-01-17 13:42 - 00012554 _____ C:\Users\Lucien\Downloads\hijackthis.log
2014-01-19 18:22 - 2014-01-19 18:22 - 00305304 _____ C:\WINDOWS\Minidump\011914-32203-01.dmp
2014-01-19 16:08 - 2014-01-13 23:20 - 00000000 ____D C:\Program Files (x86)\McAfee Security Scan
2014-01-19 08:38 - 2014-01-19 21:21 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-01-17 20:25 - 2014-01-22 00:11 - 00379904 _____ C:\Users\Lucien\Desktop\gmer.exe
2014-01-17 13:42 - 2014-01-17 13:42 - 00388608 _____ (Trend Micro Inc.) C:\Users\Lucien\Downloads\HiJackThis204.exe
2014-01-17 13:42 - 2013-07-18 20:48 - 00000000 ____D C:\Users\Lucien\AppData\Local\VirtualStore
2014-01-17 09:54 - 2014-01-17 09:54 - 00000385 _____ C:\Users\Lucien\AppData\Roaminguser_gensett.xml
2014-01-17 09:54 - 2013-07-18 20:49 - 00000000 ___RD C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-17 09:54 - 2013-07-18 20:49 - 00000000 ___RD C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\MediaViewer
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\FileManager
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Camera
2014-01-16 16:37 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2014-01-16 16:37 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\Dism
2014-01-16 13:51 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\WinStore
2014-01-16 13:29 - 2013-08-19 19:19 - 00000000 ____D C:\WINDOWS\system32\MRT
2014-01-13 23:23 - 2014-01-13 23:23 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\system32\bdsandboxuiskin32.dll
2014-01-13 23:23 - 2014-01-13 22:53 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\SysWOW64\bdsandboxuiskin32.dll
2014-01-13 23:23 - 2014-01-13 22:52 - 00261056 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avchv.sys
2014-01-13 23:23 - 2014-01-13 22:48 - 00000000 ____D C:\ProgramData\Bitdefender
2014-01-13 23:20 - 2014-01-13 23:20 - 00002041 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-13 23:20 - 2013-04-26 00:18 - 00000000 ____D C:\ProgramData\McAfee
2014-01-13 23:19 - 2013-04-26 00:15 - 00000000 ____D C:\ProgramData\Adobe
2014-01-13 23:19 - 2013-04-26 00:15 - 00000000 ____D C:\Program Files (x86)\Adobe
2014-01-13 22:54 - 2014-01-13 22:54 - 00620542 _____ C:\ProgramData\1389649682.bdinstall.bin
2014-01-13 22:54 - 2014-01-13 22:54 - 00000385 _____ C:\WINDOWS\system32\user_gensett.xml
2014-01-13 22:54 - 2014-01-13 22:53 - 00000000 ____D C:\ProgramData\BDLogging
2014-01-13 22:54 - 2014-01-13 22:52 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Bitdefender
2014-01-13 22:53 - 2014-01-13 22:53 - 00002212 _____ C:\Users\Public\Desktop\Bitdefender Safepay.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00002164 _____ C:\Users\Public\Desktop\Bitdefender Total Security.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2014-01-13 22:52 - 2014-01-13 22:48 - 00000000 ____D C:\Program Files\Bitdefender
2014-01-13 22:48 - 2014-01-13 22:48 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\QuickScan
2014-01-13 22:48 - 2014-01-12 22:56 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2014-01-13 22:46 - 2013-08-30 00:06 - 00000000 ____D C:\avast! sandbox
2014-01-13 22:45 - 2013-08-19 19:05 - 00000000 ____D C:\Program Files\AVAST Software
2014-01-13 22:45 - 2013-08-19 19:04 - 00000000 ____D C:\ProgramData\AVAST Software
2014-01-13 22:44 - 2013-08-19 19:06 - 00000000 _____ C:\WINDOWS\SysWOW64\config.nt
2014-01-13 14:27 - 2014-01-09 12:00 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Bioshock
2014-01-12 22:29 - 2014-01-12 22:29 - 07171632 _____ C:\Users\Lucien\Downloads\bitdefender_tsecurity.exe
2014-01-09 12:12 - 2014-01-09 12:00 - 00000000 ____D C:\Users\Lucien\Documents\Bioshock
2014-01-09 11:59 - 2013-04-26 00:16 - 00502089 _____ C:\WINDOWS\DirectX.log
2014-01-08 11:53 - 2013-12-27 10:35 - 00000000 ___RD C:\Users\Lucien\Downloads\Microsoft.SkypeApp_kzf8qxf38zg5c!App
2014-01-07 21:35 - 2014-01-07 21:35 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2014-01-07 21:05 - 2013-11-22 17:15 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-01-06 23:31 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-01-06 23:31 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\WINDOWS\SysWOW64\GPhotos.scr
2014-01-06 16:20 - 2013-08-19 19:19 - 86054176 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-01-06 13:11 - 2014-01-06 13:11 - 00000000 __SHD C:\ProgramData\SecuROM
2014-01-06 13:10 - 2014-01-06 13:10 - 00000000 ____D C:\Users\Lucien\AppData\Local\Rockstar Games
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\WINDOWS\SysWOW64\xlive
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\Users\Lucien\Documents\Games for Windows - LIVE Demos
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2014-01-06 13:08 - 2014-01-06 13:08 - 00642712 _____ (Microsoft Corporation) C:\Users\Lucien\Downloads\gfwlivesetup.exe
2013-12-30 23:47 - 2013-10-14 09:58 - 00000000 ____D C:\Users\Lucien\AppData\Local\Spotify

Some content of TEMP:
====================
C:\Users\Gast\AppData\Local\Temp\drm_dyndata_7390004.dll
C:\Users\Gast\AppData\Local\Temp\ubiB23E.tmp.exe
C:\Users\Lucien\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-28 11:14

==================== End Of Log ============================

--- --- ---

SecureBanking 29.01.2014 19:54

Hallo zusammen, ich klink mich hier mal kurz ein.

Hast du alle Module von Bitdefender mal deaktiviert? Speziell die Active Virus Control Engine.
Bringt Secure Banking dann immer noch diese Meldung?

sunjojo 30.01.2014 06:28

Hey,

wegen Secure Banking bist du jetzt in besten Händen. Probiere bitte folgende Anleitung aus, um das Zwangsneustarten nach Updates zu verhinden: Windows 8: Zwangsneustart nach Update verhindern. Beobachte bitte, ob weiterhin ein Fenster mit der Aufforderung zum Neustarten kommt.

sunjojo 02.02.2014 15:26

Hi,

ich hab schon länger keine Antwort mehr von dir erhalten. Brauchst du weiterhin noch Hilfe?

Wenn ich in den nächsten 24 Stunden nichts von dir höre, gehe ich davon aus, dass sich das Thema erledigt hat und lösche es aus meinen Abos.

Hinweis: Wir sind noch nicht fertig! Auch wenn die Symptome verschwunden sein sollten, kann dein System weiterhin infiziert sein und über Sicherheitslücken verfügen, welche eine erneute Infektion möglich machen

KitsuneNoir 03.02.2014 08:19

Hi,
tut mir leid ich war beruflich unterwegs ohne Internet, so war es mir leider nicht möglich hier weiter zu machen. :(

Also den Zangsneustart konnte ich nun beheben :)
aber Secure Banking meldet sich weiterhin.

sunjojo 05.02.2014 15:53

Zitat:

Also den Zangsneustart konnte ich nun beheben
Alles klar :).



Schritt 1
  • Vista und Win7 User mit Rechtsklick "als Administrator starten"
  • Starte Malwarebytes, klicke auf Aktualisierung --> Suche nach Aktualisierung
  • Wenn das Update beendet wurde, aktiviere Quick-Scan durchführen und drücke auf Scannen.
  • Wenn der Scan beendet ist, klicke auf Ergebnisse anzeigen.
  • Versichere Dich, dass alle Funde markiert sind und drücke Entferne Auswahl.
  • Poste das Logfile, welches sich in Notepad öffnet, hier in den Thread.
  • Nachträglich kannst du den Bericht unter "Log Dateien" finden.

Schritt 2
Starte noch einmal FRST.
  • Ändere keine der Voreinstellungen und drücke auf Scan.
  • Wenn der Scan abgeschlossen ist, wird ein neues Logfile FRST.txt erstellt und auf dem Desktop gespeichert.
  • Poste den Inhalt dieses Logfiles bitte hier in deinen Thread.

Hast du noch sonstige Probleme mit dem Computer?



Poste folgende Logfiles in deiner nächsten Antwort:
  • MBAM-Scan
  • FRST-Scan

KitsuneNoir 05.02.2014 17:08

Hi
mbam
Code:

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.02.05.06

Windows 8 x64 NTFS
Internet Explorer 11.0.9600.16476
Lucien :: LUCIENSNOTE [Administrator]

05.02.2014 16:05:28
mbam-log-2014-02-05 (16-05-28).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 246137
Laufzeit: 11 Minute(n), 15 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 1
C:\Users\Gast\AppData\Roaming\DigitalSites\UpdateProc (PUP.Optional.Updater) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateien: 1
C:\Users\Gast\AppData\Roaming\DigitalSites\UpdateProc\UpdateTask.exe (PUP.Optional.Updater) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)


FRST Logfile:
Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-02-2014
Ran by Lucien (administrator) on LUCIENSNOTE on 05-02-2014 16:55:55
Running from C:\Users\Lucien\Desktop
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\vsserv.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(ASUS) C:\Program Files\ASUS\P4G\InsOnSrv.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files\ASUS\P4G\InsOnWMI.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS Console\ASUS Console Starter.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender Safebox\safeboxservice.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe\livecomm.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\bdagent.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Secure Banking) C:\Program Files (x86)\Secure Banking\SecureBanking.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Akamai Technologies, Inc.) C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Akamai Technologies, Inc.) C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe
() C:\Program Files (x86)\Secure Banking\sbservice.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\downloader.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-09-25] (Adobe Systems Incorporated)
HKLM\...\Run: [PrnStatusMX] - C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe [1240064 2012-07-04] (Marvell Semiconductor, Inc.)
HKLM\...\Run: [Bdagent] - C:\Program Files\Bitdefender\Bitdefender\bdagent.exe [1737920 2014-02-03] (Bitdefender)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\WINDOWS\system32\nvspcap64.dll [1179576 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [BTMTrayAgent] - C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [7818040 2013-09-19] (Motorola Solutions, Inc.)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1361112 2013-11-05] (Realtek Semiconductor)
HKLM-x32\...\Run: [ASUSPRP] - C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-04-26] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-01-15] (cyberlink)
HKLM-x32\...\Run: [ASUS InstantKey] - C:\Program Files (x86)\ASUS\ASUS Instant Key\Ikey_start.exe [13936 2013-04-16] (ASUS)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2237328 2013-11-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-09-25] ( (Atheros Communications))
HKU\.DEFAULT\...\Run: [Bitdefender-Geldbörse-Agent] - C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [570448 2014-02-03] (Bitdefender)
HKU\.DEFAULT\...\Run: [Bitdefender-Geldbörse] - C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe [1003608 2014-02-03] (Bitdefender)
HKU\.DEFAULT\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] - C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [613208 2014-02-03] (Bitdefender)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [Steam] - C:\Program Files (x86)\Steam\steam.exe [1815976 2014-01-27] (Valve Corporation)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [SecureBanking] - C:\Program Files (x86)\Secure Banking\SecureBanking.exe [507904 2013-06-30] (Secure Banking)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [Spotify Web Helper] - C:\Users\Lucien\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-10] (Spotify Ltd)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [Akamai NetSession Interface] - C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [Bitdefender-Geldbörse-Agent] - C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [570448 2014-02-03] (Bitdefender)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] - C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [613208 2014-02-03] (Bitdefender)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [168616 2013-12-19] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll, => c:\windows\syswow64\nvinit.dll [141336 2013-12-19] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [141336 2013-12-19] (NVIDIA Corporation)
Startup: C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;form=IE10TR&amp;src=IE10TR&amp;pc=ASU2JS
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;form=IE10TR&amp;src=IE10TR&amp;pc=ASU2JS
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\pmbxie.dll (Bitdefender)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxie.dll (Bitdefender)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.179.1

Chrome:
=======
CHR HomePage: hxxp://www.google.de/
CHR Extension: (Google Docs) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-14]
CHR Extension: (Google Drive) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-19]
CHR Extension: (YouTube) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-19]
CHR Extension: (Bitdefender Wallet) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccahoghmggldkcdjiebjkidpfongdfbl [2014-01-13]
CHR Extension: (Google-Suche) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-19]
CHR Extension: (Google Wallet) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR Extension: (Google Mail) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-19]
CHR HKLM-x32\...\Chrome\Extension: [ccahoghmggldkcdjiebjkidpfongdfbl] - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxcr.crx [2014-01-13]

==================== Services (Whitelisted) =================

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-12-18] (Adobe Systems)
R2 ASUS InstantOn; C:\Program Files\ASUS\P4G\InsOnSrv.exe [277120 2013-04-29] (ASUS)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-09-25] (Windows (R) Win 7 DDK provider)
S4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender\bdparentalservice.exe [77632 2013-11-21] (Bitdefender)
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [247768 2013-01-15] (CyberLink)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-04-11] (Intel Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-09-18] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16939296 2014-01-21] (NVIDIA Corporation)
R2 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [94624 2013-07-08] (Bitdefender)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe [67320 2013-10-07] (Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender\vsserv.exe [1507248 2014-02-03] (Bitdefender)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [18384 2013-09-04] (Intel(R) Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-09-25] (Atheros)

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [70416 2013-09-23] (ASUS Corporation)
R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [893440 2014-02-03] (BitDefender)
R3 avchv; C:\Windows\system32\DRIVERS\avchv.sys [261056 2014-01-13] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [635392 2014-02-03] (BitDefender)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
S0 bdelam; C:\Windows\System32\drivers\bdelam.sys [23568 2013-09-08] (Bitdefender)
R1 BdfNdisf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys [98768 2013-07-24] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107008 2013-07-29] (BitDefender LLC)
S4 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-07-02] (Bitdefender SRL)
S3 BDSandBox; C:\WINDOWS\system32\drivers\bdsandbox.sys [82824 2013-11-04] (BitDefender SRL)
R1 BDVEDISK; C:\Windows\system32\DRIVERS\bdvedisk.sys [79192 2013-07-30] (BitDefender)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-25] (Qualcomm Atheros)
S3 BthA2DP; C:\Windows\system32\drivers\BthA2DP.sys [131584 2013-08-22] (Microsoft Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [140600 2013-07-22] (Motorola Solutions, Inc.)
R3 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2013-09-01] (DT Soft Ltd)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [150256 2013-08-23] (BitDefender LLC)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)
R2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [26328 2013-07-23] (Intel Corporation)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-07-26] (Intel Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S0 rtcrfilt64; C:\Windows\System32\DRIVERS\rtcrfilt64.sys [19600 2000-01-01] (Realtek Semiconductor Corp.)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
S3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16152 2013-09-03] ()
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [389240 2013-08-07] (BitDefender S.R.L.)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
S3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [X]
S3 GPU-Z; \??\C:\Users\Lucien\AppData\Local\Temp\GPU-Z.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-05 16:12 - 2014-02-05 16:06 - 00000000 ____D () C:\Program Files (x86)\AviSynth 2.5
2014-02-05 16:12 - 2009-09-27 09:39 - 00415744 ___SH (The Public) C:\WINDOWS\SysWOW64\avisynth.dll
2014-02-05 16:12 - 2005-07-14 12:31 - 00032256 ___SH () C:\WINDOWS\SysWOW64\AVSredirect.dll
2014-02-05 16:12 - 2004-02-22 10:11 - 00764416 ___SH (Abysmal Software) C:\WINDOWS\SysWOW64\devil.dll
2014-02-05 16:12 - 2004-01-25 00:00 - 00070656 ___SH (www.helixcommunity.org) C:\WINDOWS\SysWOW64\yv12vfw.dll
2014-02-05 16:12 - 2004-01-25 00:00 - 00070656 ___SH (www.helixcommunity.org) C:\WINDOWS\SysWOW64\i420vfw.dll
2014-02-05 16:11 - 2014-02-05 16:15 - 00000000 ____D () C:\Users\Lucien\Desktop\Indian Summer Westward Ho!
2014-02-05 16:07 - 2014-02-05 16:07 - 00001130 _____ () C:\Users\Public\Desktop\SUPER ©.lnk
2014-02-05 16:07 - 2014-02-05 16:07 - 00000000 ____D () C:\Users\Lucien\Documents\eRightSoft
2014-02-05 16:07 - 2012-10-05 19:54 - 00188416 __RSH () C:\WINDOWS\SysWOW64\winDCE32.dll
2014-02-05 16:07 - 2011-06-15 23:00 - 00163328 __RSH () C:\WINDOWS\SysWOW64\flvDX.dll
2014-02-05 16:07 - 2011-06-14 19:05 - 00121344 __RSH () C:\WINDOWS\SysWOW64\TAKDSDecoder.ax
2014-02-05 16:07 - 2011-02-11 10:26 - 00112128 __RSH () C:\WINDOWS\SysWOW64\OptimFROG.dll
2014-02-05 16:07 - 2010-01-06 23:00 - 00107520 __RSH () C:\WINDOWS\SysWOW64\TAKDSDecoder.dll
2014-02-05 16:07 - 2009-03-17 10:38 - 00070656 __RSH () C:\WINDOWS\SysWOW64\RLAPEDec.ax
2014-02-05 16:07 - 2009-01-18 12:03 - 00107520 __RSH () C:\WINDOWS\SysWOW64\RLMPCDec.ax
2014-02-05 16:07 - 2008-03-16 14:30 - 00216064 __RSH (MONOGRAM Multimedia, s.r.o.) C:\WINDOWS\SysWOW64\nbDX.dll
2014-02-05 16:07 - 2007-02-21 12:47 - 00031232 __RSH (Hans Mayerl) C:\WINDOWS\SysWOW64\msfDX.dll
2014-02-05 16:07 - 2005-02-13 00:00 - 00186880 __RSH (RadLight) C:\WINDOWS\SysWOW64\RLOgg.ax
2014-02-05 16:07 - 2005-02-13 00:00 - 00067584 __RSH (RadLight, LLC) C:\WINDOWS\SysWOW64\RLTheoraDec.ax
2014-02-05 16:07 - 2005-02-13 00:00 - 00051712 __RSH () C:\WINDOWS\SysWOW64\RLSpeexDec.ax
2014-02-05 16:07 - 2005-02-06 00:00 - 00092672 __RSH (RadLight) C:\WINDOWS\SysWOW64\RLVorbisDec.ax
2014-02-05 16:07 - 2004-10-10 09:50 - 00278528 _____ (Real Networks, Inc) C:\WINDOWS\SysWOW64\pncrt.dll
2014-02-05 16:07 - 2004-09-17 04:07 - 00090112 __RSH (-) C:\WINDOWS\SysWOW64\TTADSSplitter.ax
2014-02-05 16:07 - 2004-08-22 11:56 - 00090112 __RSH (-) C:\WINDOWS\SysWOW64\TTADSDecoder.ax
2014-02-05 16:07 - 2004-07-02 16:33 - 00327749 _____ (RealNetworks, Inc.) C:\WINDOWS\SysWOW64\drvc.dll
2014-02-05 16:07 - 2004-04-27 16:03 - 00017408 __RSH (RadLight) C:\WINDOWS\SysWOW64\RLOFRDec.ax
2014-02-05 16:06 - 2014-02-05 16:06 - 00000000 ____D () C:\Program Files (x86)\eRightSoft
2014-02-05 16:06 - 2012-07-11 23:00 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Olepau32.ax
2014-02-05 16:06 - 2009-09-27 23:00 - 00143872 __RSH () C:\WINDOWS\SysWOW64\AviDX.ax
2014-02-05 16:06 - 2009-08-10 23:00 - 00352768 __RSH () C:\WINDOWS\SysWOW64\ac3DX.ax
2014-02-05 16:06 - 2009-01-18 17:15 - 00120832 __RSH () C:\WINDOWS\SysWOW64\MPCDx.ax
2014-02-05 16:06 - 2006-08-16 15:53 - 00175104 __RSH () C:\WINDOWS\SysWOW64\CoreAAC.ax
2014-02-05 16:06 - 2006-03-10 20:21 - 00195584 __RSH () C:\WINDOWS\SysWOW64\MatroskaDX.ax
2014-02-05 16:06 - 2006-01-12 23:00 - 00123904 __RSH (CoreCodec) C:\WINDOWS\SysWOW64\AVCDX.ax
2014-02-05 16:06 - 2005-11-25 21:46 - 00161792 __RSH (Gabest) C:\WINDOWS\SysWOW64\RealMediaDX.ax
2014-02-05 16:06 - 2005-02-22 17:55 - 00081920 __RSH () C:\WINDOWS\SysWOW64\aac_parser.ax
2014-02-05 16:06 - 2005-01-18 00:26 - 00179200 __RSH (Gabest) C:\WINDOWS\SysWOW64\DiracSplitter.ax
2014-02-05 16:06 - 2003-12-07 08:59 - 00097280 __RSH () C:\WINDOWS\SysWOW64\FLACDX.ax
2014-02-05 16:02 - 2014-02-05 16:04 - 64722252 _____ (eRightSoft ) C:\Users\Lucien\Downloads\SUPERsetup.exe
2014-02-05 13:28 - 2014-02-05 16:46 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\DigitalSites
2014-02-05 13:27 - 2014-02-05 13:27 - 00670720 _____ () C:\Users\Gast\Downloads\VideoConverterSetup.exe
2014-02-05 13:26 - 2014-02-05 13:30 - 00000000 ____D () C:\Users\Gast\AppData\Local\CrashDumps
2014-02-05 13:17 - 2014-02-05 13:17 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Atheros
2014-02-05 13:16 - 2014-02-05 13:16 - 00000008 __RSH () C:\Users\Gast\ntuser.pol
2014-02-03 20:21 - 2014-02-03 20:40 - 00102400 _____ () C:\Users\Lucien\Desktop\Namenschilder fertig.ppt
2014-02-03 08:14 - 2014-02-03 08:14 - 00003576 _____ () C:\WINDOWS\System32\Tasks\Bitdefender Auto-Scan
2014-01-29 16:06 - 2014-01-29 16:07 - 00298424 _____ () C:\WINDOWS\Minidump\012914-53375-01.dmp
2014-01-29 15:41 - 2014-01-29 16:04 - 00181064 _____ (Sysinternals) C:\WINDOWS\PSEXESVC.EXE
2014-01-29 15:37 - 2014-01-29 15:37 - 00000207 _____ () C:\WINDOWS\tweaking.com-regbackup-LUCIENSNOTE-Microsoft-Windows-8.1-(64-bit).dat
2014-01-29 15:36 - 2014-01-29 15:36 - 00000000 ____D () C:\RegBackup
2014-01-29 14:56 - 2014-01-29 14:56 - 00000000 ____D () C:\Users\Lucien\Downloads\Tweaking.com - Windows Repair
2014-01-29 14:48 - 2014-01-29 14:48 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2014-01-29 14:45 - 2013-11-05 19:47 - 03707864 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2014-01-29 14:45 - 2013-11-05 18:54 - 38385664 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
2014-01-29 14:45 - 2013-11-05 15:48 - 00681905 _____ () C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2014-01-29 14:45 - 2013-11-04 19:26 - 00153304 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2014-01-29 14:45 - 2013-11-04 11:11 - 02587864 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkAPO64.dll
2014-01-29 14:45 - 2013-10-30 16:31 - 00929080 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICAPOSettingsIPC.dll
2014-01-29 14:45 - 2013-10-28 17:29 - 01021656 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2014-01-29 14:45 - 2013-10-25 10:49 - 05751576 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICAPOlfx.dll
2014-01-29 14:45 - 2013-10-18 16:41 - 01286360 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2014-01-29 14:45 - 2013-10-11 11:31 - 00947760 _____ (Sony Corporation) C:\WINDOWS\system32\SFSS_APO.dll
2014-01-29 14:45 - 2013-10-09 20:13 - 01286400 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxSpeechAPO64.dll
2014-01-29 14:45 - 2013-10-09 20:12 - 03714304 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioVnN64.dll
2014-01-29 14:45 - 2013-10-09 20:12 - 02103040 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\WavesGUILib64.dll
2014-01-29 14:45 - 2013-10-07 11:05 - 02810072 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2014-01-29 14:45 - 2013-10-02 17:10 - 00617176 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2014-01-29 14:45 - 2013-09-09 15:32 - 05681192 _____ () C:\WINDOWS\system32\Drivers\rtvienna.dat
2014-01-29 14:45 - 2013-08-24 03:14 - 01014016 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\slcnt64.dll
2014-01-29 14:45 - 2013-08-24 03:14 - 00897792 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll
2014-01-29 14:45 - 2013-08-24 03:14 - 00722688 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll
2014-01-29 14:45 - 2013-08-24 03:14 - 00244480 _____ (TODO: <Company name>) C:\WINDOWS\system32\slprp64.dll
2014-01-29 14:45 - 2013-08-14 16:36 - 00662784 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVolumeSDAPO.dll
2014-01-29 14:45 - 2013-08-14 16:35 - 00907008 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO2064.dll
2014-01-29 14:45 - 2013-06-25 12:47 - 00871856 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tossaeapo64.dll
2014-01-29 14:45 - 2013-06-25 12:47 - 00162224 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\toseaeapo64.dll
2014-01-29 14:45 - 2013-06-25 12:46 - 00582056 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosasfapo64.dll
2014-01-29 14:45 - 2013-04-24 17:16 - 01662024 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2014-01-29 14:45 - 2013-04-03 14:13 - 00906800 _____ (Sony Corporation) C:\WINDOWS\system32\MISS_APO.dll
2014-01-29 14:45 - 2012-08-31 19:18 - 07164176 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEP64A.dll
2014-01-29 14:45 - 2012-08-31 19:17 - 00434960 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EED64A.dll
2014-01-29 14:45 - 2012-08-31 19:17 - 00141584 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEL64A.dll
2014-01-29 14:45 - 2012-08-31 19:17 - 00124176 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEA64A.dll
2014-01-29 14:45 - 2012-08-31 19:17 - 00075024 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEG64A.dll
2014-01-29 14:45 - 2012-01-30 11:43 - 00836544 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo264.dll
2014-01-29 14:45 - 2012-01-10 10:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\WINDOWS\system32\tepeqapo64.dll
2014-01-29 14:45 - 2011-12-20 15:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2014-01-29 14:45 - 2011-11-22 16:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2014-01-29 14:45 - 2011-09-02 14:21 - 00221024 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFNHK64.dll
2014-01-29 14:45 - 2011-09-02 14:21 - 00081248 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFCOM64.dll
2014-01-29 14:45 - 2011-09-02 14:21 - 00078688 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFAPO64.dll
2014-01-29 14:45 - 2011-03-17 12:17 - 01361336 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosade.dll
2014-01-29 14:45 - 2011-03-07 17:11 - 00148416 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo.dll
2014-01-29 14:45 - 2010-11-08 07:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2014-01-29 14:45 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2014-01-29 14:45 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2014-01-29 14:45 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2014-01-29 14:45 - 2010-11-08 07:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2014-01-29 14:45 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2014-01-29 14:45 - 2010-11-03 18:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2014-01-29 14:45 - 2010-07-22 16:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\WINDOWS\SysWOW64\SFCOM.dll
2014-01-29 14:45 - 2009-11-24 09:55 - 00518896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2014-01-29 14:45 - 2009-11-24 09:55 - 00211184 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll
2014-01-29 14:45 - 2009-11-24 09:55 - 00198896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll
2014-01-29 14:45 - 2009-11-24 09:55 - 00155888 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2014-01-29 14:44 - 2013-10-16 03:43 - 00209096 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll
2014-01-29 14:44 - 2013-10-11 12:47 - 00113576 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2014-01-29 14:44 - 2013-10-09 20:13 - 01921792 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek264.dll
2014-01-29 14:44 - 2013-10-09 20:13 - 01345280 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO5064.dll
2014-01-29 14:44 - 2013-10-09 20:12 - 27644160 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioVnA64.dll
2014-01-29 14:44 - 2013-10-09 20:12 - 14152960 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek64.dll
2014-01-29 14:44 - 2013-10-09 20:12 - 02036992 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioEQ64.dll
2014-01-29 14:44 - 2013-10-09 20:12 - 01012992 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPOShell64.dll
2014-01-29 14:44 - 2013-10-07 00:26 - 00501184 _____ (DTS) C:\WINDOWS\system32\DTSU2PLFX64.dll
2014-01-29 14:44 - 2013-10-07 00:26 - 00487360 _____ (DTS) C:\WINDOWS\system32\DTSU2PGFX64.dll
2014-01-29 14:44 - 2013-10-07 00:26 - 00415680 _____ (DTS) C:\WINDOWS\system32\DTSU2PREC64.dll
2014-01-29 14:44 - 2013-09-10 04:02 - 06217904 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64A.dll
2014-01-29 14:44 - 2013-09-10 04:02 - 00313520 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64A.dll
2014-01-29 14:44 - 2013-09-10 04:01 - 01938608 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64A.dll
2014-01-29 14:44 - 2013-09-10 04:01 - 00260272 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64.dll
2014-01-29 14:44 - 2013-08-20 17:37 - 00605496 _____ () C:\WINDOWS\system32\audioLibVc.dll
2014-01-29 14:44 - 2013-08-14 16:35 - 01084160 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO4064.dll
2014-01-29 14:44 - 2013-08-14 16:35 - 00663296 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO30.dll
2014-01-29 14:44 - 2013-08-05 18:11 - 02743328 _____ (Fortemedia Corporation) C:\WINDOWS\system32\FMAPO64.dll
2014-01-29 14:44 - 2013-07-23 15:39 - 00790272 _____ (Waves Audio Ltd.) C:\WINDOWS\SysWOW64\MaxxAudioAPOShell.dll
2014-01-29 14:44 - 2013-06-21 11:01 - 00109848 _____ () C:\WINDOWS\system32\AcpiServiceVnA64.dll
2014-01-29 14:44 - 2012-03-08 11:47 - 00108640 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll
2014-01-29 14:44 - 2011-08-23 17:00 - 00603984 _____ (Knowles Acoustics ) C:\WINDOWS\system32\KAAPORT64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 01756264 _____ (DTS) C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 01568360 _____ (DTS) C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 01486952 _____ (DTS) C:\WINDOWS\system32\DTSBoostDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00728680 _____ (DTS) C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00712296 _____ (DTS) C:\WINDOWS\system32\DTSSymmetryDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00693352 _____ (DTS) C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00491112 _____ (DTS) C:\WINDOWS\system32\DTSNeoPCDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00432744 _____ (DTS) C:\WINDOWS\system32\DTSLimiterDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00428648 _____ (DTS) C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\WINDOWS\system32\DTSLFXAPO64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPO64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00241768 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPONS64.dll
2014-01-29 14:44 - 2010-09-27 09:34 - 00318808 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO20.dll
2014-01-29 14:29 - 2014-01-29 14:37 - 109595877 _____ () C:\Users\Lucien\Downloads\Audio_Realtek_Win81_64_VER6017083.zip
2014-01-29 14:20 - 2014-01-29 14:20 - 02903255 _____ () C:\Users\Lucien\Downloads\tweaking.com_windows_repair_aio.zip
2014-01-29 13:10 - 2014-02-05 16:53 - 00002197 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-29 13:09 - 2014-01-29 14:46 - 00000000 ____D () C:\Program Files (x86)\GUMCBFB.tmp
2014-01-29 13:05 - 2014-01-29 13:07 - 37739976 _____ (Google Inc.) C:\Users\Lucien\Downloads\ChromeStandalone32Setup.exe
2014-01-29 13:02 - 2014-01-29 13:02 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Deployment
2014-01-29 12:56 - 2014-01-29 12:56 - 00000000 ____D () C:\Users\Lucien\Desktop\chrome default
2014-01-29 12:49 - 2014-01-29 12:49 - 00001124 _____ () C:\Users\Lucien\Desktop\Absolute Uninstaller.lnk
2014-01-29 12:49 - 2014-01-29 12:49 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\GlarySoft
2014-01-29 12:48 - 2014-01-29 12:48 - 02194784 _____ (Glarysoft.com ) C:\Users\Lucien\Downloads\au29setup.exe
2014-01-29 09:54 - 2014-01-29 09:54 - 00048629 _____ () C:\Users\Lucien\Documents\Namenschilder%20fertig.ppt_0.odp
2014-01-29 09:40 - 2014-02-05 13:17 - 00000000 ____D () C:\ProgramData\Atheros
2014-01-29 09:40 - 2014-01-29 09:40 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Atheros
2014-01-28 14:00 - 2014-01-28 14:05 - 00000000 ____D () C:\Program Files\Common Files\QCA_Bluetooth
2014-01-28 13:56 - 2014-01-28 13:56 - 00000000 ____D () C:\Users\Lucien\Downloads\Win8 Key
2014-01-28 13:51 - 2014-01-28 13:52 - 00000000 ____D () C:\Users\Lucien\Downloads\wlan
2014-01-28 13:51 - 2014-01-28 13:51 - 00000000 ____D () C:\Users\Lucien\Downloads\lan
2014-01-28 13:50 - 2014-01-28 13:50 - 00000000 ____D () C:\Users\Lucien\Downloads\bluetooth
2014-01-28 13:48 - 2014-01-28 13:49 - 00000000 ____D () C:\Users\Lucien\Downloads\audio
2014-01-28 13:46 - 2014-01-28 13:46 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_btmaux_01009.Wdf
2014-01-28 13:45 - 2014-01-28 13:45 - 00000000 ____D () C:\Users\Lucien\Downloads\blue
2014-01-28 13:44 - 2014-01-28 13:45 - 00000000 ____D () C:\Users\Lucien\Downloads\Lang
2014-01-28 12:12 - 2014-01-28 12:12 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-01-28 12:11 - 2014-01-29 09:40 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-01-28 12:11 - 2014-01-29 09:39 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-01-28 12:10 - 2013-12-19 21:33 - 30372640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 25257248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 22960416 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 18310112 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 18222008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 17560352 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 15877216 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 15230352 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 12645664 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2014-01-28 12:10 - 2013-12-19 21:33 - 11605752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 11554264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 09700224 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 09657464 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 03132704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 03125024 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvenc.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 02947872 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 02747680 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvenc.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00882464 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00879392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00852768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00847648 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00479520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00405280 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00317472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00266984 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00032544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys
2014-01-28 11:40 - 2014-01-28 11:40 - 00001369 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2014-01-28 11:40 - 2014-01-28 11:40 - 00000000 ____D () C:\Users\Lucien\AppData\Local\NVIDIA Corporation
2014-01-28 11:39 - 2014-01-28 11:41 - 00000000 ____D () C:\Users\Lucien\AppData\Local\NVIDIA
2014-01-28 11:39 - 2014-01-21 03:54 - 01179576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2014-01-28 11:39 - 2014-01-21 03:54 - 01048152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2014-01-28 11:39 - 2013-12-27 19:42 - 00039200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2014-01-28 11:39 - 2013-12-27 19:42 - 00035104 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2014-01-28 11:39 - 2013-12-27 19:42 - 00033056 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2014-01-28 10:55 - 2014-01-28 12:11 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-01-28 10:55 - 2013-12-19 19:53 - 06671648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2014-01-28 10:55 - 2013-12-19 19:53 - 03490080 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2014-01-28 10:55 - 2013-12-19 19:53 - 02559776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2014-01-28 10:55 - 2013-12-19 19:53 - 01065248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2014-01-28 10:55 - 2013-12-19 19:53 - 00922912 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2014-01-28 10:55 - 2013-12-19 19:53 - 00386336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2014-01-28 10:55 - 2013-12-19 19:53 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2014-01-28 10:55 - 2013-12-19 19:53 - 00063776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2014-01-28 10:55 - 2013-12-19 06:01 - 03539040 _____ () C:\WINDOWS\system32\nvcoproc.bin
2014-01-28 10:54 - 2014-01-28 11:40 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-01-28 10:53 - 2014-01-28 10:53 - 00000000 ____D () C:\NVIDIA
2014-01-28 10:41 - 2014-01-28 10:41 - 00000000 ____D () C:\WINDOWS\pss
2014-01-28 09:59 - 2014-01-28 10:01 - 31475128 _____ (NVIDIA Corporation) C:\Users\Lucien\Downloads\GeForce_Experience_v1.8.2.0.exe
2014-01-27 23:55 - 2013-12-19 21:33 - 01884448 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6433221.dll
2014-01-27 23:55 - 2013-12-19 21:33 - 01511712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6433221.dll
2014-01-27 23:55 - 2013-12-19 21:33 - 00357152 _____ () C:\WINDOWS\system32\NvIFROpenGL.dll
2014-01-27 23:55 - 2013-12-19 21:33 - 00314656 _____ () C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2014-01-27 22:46 - 2014-01-27 22:59 - 266633424 _____ (NVIDIA Corporation) C:\Users\Lucien\Downloads\332.21-notebook-win8-win7-64bit-international-whql.exe
2014-01-27 20:36 - 2014-02-05 16:55 - 00020956 _____ () C:\Users\Lucien\Desktop\FRST.txt
2014-01-27 19:54 - 2014-01-27 20:33 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-27 19:53 - 2014-01-27 19:53 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-01-27 19:52 - 2014-01-27 19:52 - 00000000 ____D () C:\Users\Lucien\Desktop\mbar
2014-01-27 19:47 - 2014-01-27 19:48 - 00000000 ____D () C:\Users\Lucien\Desktop\Logs2
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-01-26 20:53 - 2014-01-26 20:53 - 00003186 _____ () C:\WINDOWS\System32\Tasks\{E66DEEF7-845B-48C8-BBEE-CE6EA6F2EE96}
2014-01-26 19:26 - 2014-01-26 19:26 - 00003362 _____ () C:\WINDOWS\System32\Tasks\{63C03234-5B71-4184-AD48-4EE22D315F87}
2014-01-25 15:01 - 2014-01-25 15:01 - 00000000 ____H () C:\Users\Lucien\Documents\Default.rdp
2014-01-24 19:21 - 2014-01-24 19:21 - 00000000 ____D () C:\Users\Lucien\Desktop\Logs alt
2014-01-24 19:17 - 2014-01-24 19:17 - 00361185 _____ (Farbar) C:\Users\Lucien\Desktop\FSS.exe
2014-01-24 16:48 - 2014-01-24 16:48 - 00032847 _____ () C:\Users\Lucien\Desktop\gmer.zip
2014-01-24 11:34 - 2014-01-24 11:34 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-01-24 10:53 - 2014-01-24 10:53 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-01-22 21:41 - 2014-02-05 16:55 - 00000000 ____D () C:\Users\Lucien\Desktop\FRST-OlderVersion
2014-01-22 21:23 - 2014-01-22 21:23 - 00022688 _____ () C:\Users\Lucien\Downloads\Addition.txt
2014-01-22 21:22 - 2014-01-22 21:23 - 00046051 _____ () C:\Users\Lucien\Downloads\FRST.txt
2014-01-22 13:59 - 2014-02-05 16:55 - 02080256 _____ (Farbar) C:\Users\Lucien\Desktop\FRST64.exe
2014-01-22 12:30 - 2014-01-22 12:30 - 00000168 _____ () C:\Users\Lucien\defogger_reenable
2014-01-22 00:11 - 2014-01-17 20:25 - 00379904 _____ () C:\Users\Lucien\Desktop\gmer.exe
2014-01-22 00:10 - 2014-01-29 14:54 - 00000000 ____D () C:\Users\Lucien\Desktop\Tweaking.com - Windows Repair
2014-01-22 00:10 - 2012-12-19 16:10 - 00000000 ____D () C:\Users\Lucien\Desktop\data
2014-01-22 00:10 - 2009-10-20 21:47 - 00055936 _____ () C:\Users\Lucien\Desktop\Setup.exe
2014-01-21 23:54 - 2014-02-05 16:55 - 00000000 ____D () C:\FRST
2014-01-21 15:06 - 2014-01-21 15:06 - 01037068 _____ (Thisisu) C:\Users\Lucien\Desktop\JRT.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00987425 _____ () C:\Users\Lucien\Desktop\SecurityCheck.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00448512 _____ (OldTimer Tools) C:\Users\Lucien\Desktop\TFC.exe
2014-01-21 15:05 - 2014-01-21 15:05 - 01236282 _____ () C:\Users\Lucien\Desktop\adwcleaner.exe
2014-01-21 15:00 - 2014-01-21 15:01 - 02347384 _____ (ESET) C:\Users\Lucien\Desktop\esetsmartinstaller_enu.exe
2014-01-21 13:15 - 2014-01-21 13:25 - 24859352 _____ (Microsoft Corporation) C:\Users\Gast\Downloads\Windows-KB890830-x64-V5.8.exe
2014-01-21 10:40 - 2014-01-22 14:01 - 00000000 ____D () C:\Users\Gast\AppData\Local\My Games
2014-01-21 10:18 - 2014-01-21 10:18 - 00050477 _____ () C:\Users\Lucien\Desktop\Defogger.exe
2014-01-21 10:12 - 2014-01-21 10:12 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\QuickScan
2014-01-21 09:38 - 2014-01-21 09:38 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Spotydl
2014-01-20 16:10 - 2013-12-03 13:49 - 00000000 ____D () C:\Users\Gast\Downloads\settings
2014-01-20 15:53 - 2014-01-20 15:53 - 00000000 ____D () C:\Users\Gast\AppData\Local\NVIDIA Corporation
2014-01-20 15:52 - 2014-02-05 13:17 - 00000000 ____D () C:\Users\Gast\Documents\Bluetooth Folder
2014-01-20 15:52 - 2014-01-21 08:37 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Bitdefender
2014-01-20 15:52 - 2014-01-20 15:52 - 00000385 _____ () C:\Users\Gast\AppData\Roaminguser_gensett.xml
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D () C:\Users\Gast\AppData\Local\BMExplorer
2014-01-20 15:51 - 2014-01-20 15:51 - 00000000 ____D () C:\Users\Lucien\Documents\AdobeStockPhotos
2014-01-19 21:21 - 2014-01-19 08:38 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-01-19 18:22 - 2014-01-29 16:06 - 00000000 ____D () C:\WINDOWS\Minidump
2014-01-19 18:22 - 2014-01-19 18:22 - 00305304 _____ () C:\WINDOWS\Minidump\011914-32203-01.dmp
2014-01-17 13:50 - 2014-01-20 13:49 - 00000000 ____D () C:\Users\Lucien\Downloads\backups
2014-01-17 13:42 - 2014-01-19 18:46 - 00012554 _____ () C:\Users\Lucien\Downloads\hijackthis.log
2014-01-17 13:42 - 2014-01-17 13:42 - 00388608 _____ (Trend Micro Inc.) C:\Users\Lucien\Downloads\HiJackThis204.exe
2014-01-17 09:54 - 2014-01-17 09:54 - 00000385 _____ () C:\Users\Lucien\AppData\Roaminguser_gensett.xml
2014-01-16 14:05 - 2013-12-11 08:55 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-01-16 14:05 - 2013-12-09 01:34 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-01-16 14:05 - 2013-12-09 01:04 - 00980480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-01-16 14:05 - 2013-11-27 16:34 - 03210528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2014-01-16 14:05 - 2013-11-27 16:27 - 00809872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-01-16 14:05 - 2013-11-27 15:00 - 00663680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-01-16 14:05 - 2013-11-27 14:47 - 02804528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2014-01-16 14:05 - 2013-11-27 13:02 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ipnat.sys
2014-01-16 14:05 - 2013-11-27 11:54 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-01-16 14:05 - 2013-11-27 11:24 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll
2014-01-16 14:05 - 2013-11-27 11:08 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-01-16 14:05 - 2013-11-27 10:46 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll
2014-01-16 14:05 - 2013-11-27 10:41 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2014-01-16 14:05 - 2013-11-27 10:17 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-01-16 14:05 - 2013-11-27 10:10 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2014-01-16 14:05 - 2013-11-27 09:58 - 01503232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-01-16 14:05 - 2013-11-27 09:56 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll
2014-01-16 14:05 - 2013-11-27 09:20 - 04106240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-01-16 14:05 - 2013-11-27 05:01 - 00385614 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-01-16 14:05 - 2013-11-26 14:22 - 01928144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2014-01-16 14:05 - 2013-11-26 14:20 - 02131120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-01-16 14:05 - 2013-11-26 14:20 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-01-16 14:05 - 2013-11-26 14:20 - 01374384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-01-16 14:05 - 2013-11-26 12:50 - 01371312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2014-01-16 14:05 - 2013-11-26 12:44 - 02142936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-01-16 14:05 - 2013-11-26 12:44 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-01-16 14:05 - 2013-11-26 11:13 - 04191232 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-01-16 14:05 - 2013-11-26 10:21 - 18577920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-01-16 14:05 - 2013-11-26 09:28 - 13925888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-01-16 14:05 - 2013-11-25 02:45 - 00142680 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-01-16 14:05 - 2013-11-25 02:32 - 01119064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2014-01-16 14:05 - 2013-11-25 00:30 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2014-01-16 14:05 - 2013-11-25 00:28 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2014-01-16 14:05 - 2013-11-23 13:47 - 00032088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-01-16 14:05 - 2013-11-23 12:49 - 21196664 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-01-16 14:05 - 2013-11-23 09:19 - 18642504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-01-16 14:05 - 2013-11-23 08:13 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\bi.dll
2014-01-16 14:05 - 2013-11-23 08:13 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys
2014-01-16 14:05 - 2013-11-23 08:08 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-01-16 14:05 - 2013-11-23 05:50 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-01-16 14:05 - 2013-11-23 04:57 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2014-01-16 14:05 - 2013-11-23 04:48 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2014-01-16 14:05 - 2013-11-23 04:25 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2014-01-16 14:05 - 2013-11-23 04:25 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2014-01-16 14:05 - 2013-11-23 04:19 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-01-16 14:05 - 2013-11-23 04:15 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-01-16 14:05 - 2013-11-21 07:58 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceregistration.dll
2014-01-16 14:05 - 2013-11-21 07:26 - 01415680 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-01-16 14:05 - 2013-11-16 06:11 - 00764856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-01-16 14:05 - 2013-11-15 19:19 - 00669344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-01-16 14:05 - 2013-11-15 15:59 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2014-01-16 14:05 - 2013-11-15 15:25 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2014-01-16 14:05 - 2013-11-15 15:08 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-01-16 14:05 - 2013-11-15 14:24 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-01-16 14:05 - 2013-11-05 21:12 - 02551128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-01-16 14:05 - 2013-10-31 01:29 - 00745336 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-01-16 14:05 - 2013-10-31 00:41 - 00552624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2014-01-15 23:39 - 2013-12-09 01:15 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-01-15 23:39 - 2013-11-27 16:36 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-01-15 23:39 - 2013-11-27 12:41 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe
2014-01-15 23:39 - 2013-11-27 11:34 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll
2014-01-15 23:39 - 2013-11-27 10:54 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-01-15 23:39 - 2013-11-27 09:48 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 23:39 - 2013-11-27 09:45 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-01-15 23:39 - 2013-11-27 09:40 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 23:39 - 2013-11-27 09:38 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-01-15 23:39 - 2013-11-27 09:17 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-01-15 23:39 - 2013-11-27 09:12 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-01-13 23:23 - 2014-01-13 23:23 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\system32\bdsandboxuiskin32.dll
2014-01-13 23:20 - 2014-01-19 16:08 - 00000000 ____D () C:\Program Files (x86)\McAfee Security Scan
2014-01-13 23:20 - 2014-01-13 23:20 - 00002041 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-13 22:54 - 2014-01-13 22:54 - 00620542 _____ () C:\ProgramData\1389649682.bdinstall.bin
2014-01-13 22:54 - 2014-01-13 22:54 - 00000385 _____ () C:\WINDOWS\system32\user_gensett.xml
2014-01-13 22:53 - 2014-01-13 23:23 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\SysWOW64\bdsandboxuiskin32.dll
2014-01-13 22:53 - 2014-01-13 22:54 - 00000000 ____D () C:\ProgramData\BDLogging
2014-01-13 22:53 - 2014-01-13 22:53 - 00002212 _____ () C:\Users\Public\Desktop\Bitdefender Safepay.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00002164 _____ () C:\Users\Public\Desktop\Bitdefender Total Security.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2014-01-13 22:53 - 2013-11-04 15:47 - 00082824 _____ (BitDefender SRL) C:\WINDOWS\system32\Drivers\bdsandbox.sys
2014-01-13 22:53 - 2013-09-08 19:04 - 00023568 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bdelam.sys
2014-01-13 22:53 - 2013-07-30 17:41 - 00079192 _____ (BitDefender) C:\WINDOWS\system32\Drivers\bdvedisk.sys
2014-01-13 22:53 - 2013-07-24 17:19 - 00098768 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\bdfndisf6.sys
2014-01-13 22:53 - 2007-04-11 10:11 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\capicom.dll
2014-01-13 22:52 - 2014-02-03 20:47 - 00893440 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avc3.sys
2014-01-13 22:52 - 2014-02-03 20:45 - 00635392 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avckf.sys
2014-01-13 22:52 - 2014-01-13 23:23 - 00261056 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avchv.sys
2014-01-13 22:52 - 2014-01-13 22:54 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Bitdefender
2014-01-13 22:48 - 2014-01-13 23:23 - 00000000 ____D () C:\ProgramData\Bitdefender
2014-01-13 22:48 - 2014-01-13 22:52 - 00000000 ____D () C:\Program Files\Bitdefender
2014-01-13 22:48 - 2014-01-13 22:48 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\QuickScan
2014-01-13 22:48 - 2013-11-04 15:47 - 00084848 _____ (BitDefender SRL) C:\WINDOWS\system32\BDSandBoxUISkin.dll
2014-01-13 22:48 - 2013-11-04 15:46 - 00034384 _____ (BitDefender SRL) C:\WINDOWS\system32\BDSandBoxUH.dll
2014-01-13 22:48 - 2013-08-23 12:48 - 00150256 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\gzflt.sys
2014-01-13 22:48 - 2013-08-07 12:46 - 00389240 _____ (BitDefender S.R.L.) C:\WINDOWS\system32\Drivers\trufos.sys
2014-01-12 22:56 - 2014-01-13 22:48 - 00000000 ____D () C:\Program Files\Common Files\Bitdefender
2014-01-12 22:29 - 2014-01-12 22:29 - 07171632 _____ () C:\Users\Lucien\Downloads\bitdefender_tsecurity.exe
2014-01-09 12:00 - 2014-01-13 14:27 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Bioshock
2014-01-09 12:00 - 2014-01-09 12:12 - 00000000 ____D () C:\Users\Lucien\Documents\Bioshock
2014-01-07 21:35 - 2014-01-07 21:35 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\WINDOWS\SysWOW64\GPhotos.scr
2014-01-06 13:29 - 2014-01-21 22:13 - 00000000 ____D () C:\Users\Lucien\Documents\Rockstar Games
2014-01-06 13:11 - 2014-01-06 13:11 - 00000000 __SHD () C:\ProgramData\SecuROM
2014-01-06 13:10 - 2014-01-06 13:10 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Rockstar Games
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D () C:\WINDOWS\SysWOW64\xlive
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D () C:\Users\Lucien\Documents\Games for Windows - LIVE Demos
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D () C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2014-01-06 13:08 - 2014-01-06 13:08 - 00642712 _____ (Microsoft Corporation) C:\Users\Lucien\Downloads\gfwlivesetup.exe

==================== One Month Modified Files and Folders =======

2014-02-05 16:57 - 2014-01-27 20:36 - 00020956 _____ () C:\Users\Lucien\Desktop\FRST.txt
2014-02-05 16:55 - 2014-01-22 21:41 - 00000000 ____D () C:\Users\Lucien\Desktop\FRST-OlderVersion
2014-02-05 16:55 - 2014-01-22 13:59 - 02080256 _____ (Farbar) C:\Users\Lucien\Desktop\FRST64.exe
2014-02-05 16:55 - 2014-01-21 23:54 - 00000000 ____D () C:\FRST
2014-02-05 16:55 - 2013-09-30 05:14 - 01804156 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-02-05 16:55 - 2013-09-30 04:56 - 00761880 _____ () C:\WINDOWS\system32\perfh007.dat
2014-02-05 16:55 - 2013-09-30 04:56 - 00159758 _____ () C:\WINDOWS\system32\perfc007.dat
2014-02-05 16:53 - 2014-01-29 13:10 - 00002197 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-05 16:53 - 2013-08-20 17:50 - 00000000 ____D () C:\Users\Lucien\AppData\Local\CrashDumps
2014-02-05 16:52 - 2013-11-05 22:24 - 00000000 __RDO () C:\Users\Lucien\SkyDrive
2014-02-05 16:52 - 2013-08-19 19:06 - 00001130 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-05 16:50 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-02-05 16:50 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-02-05 16:49 - 2013-09-29 20:04 - 09447560 _____ () C:\WINDOWS\PFRO.log
2014-02-05 16:49 - 2013-08-22 14:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2014-02-05 16:48 - 2013-11-05 21:43 - 01612318 _____ () C:\WINDOWS\WindowsUpdate.log
2014-02-05 16:46 - 2014-02-05 13:28 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\DigitalSites
2014-02-05 16:27 - 2013-07-18 20:55 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3506778915-1287356822-3408950579-1002
2014-02-05 16:15 - 2014-02-05 16:11 - 00000000 ____D () C:\Users\Lucien\Desktop\Indian Summer Westward Ho!
2014-02-05 16:12 - 2014-02-05 16:12 - 00000000 ____D () C:\Program Files (x86)\AviSynth 2.5
2014-02-05 16:11 - 2013-09-09 20:00 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\vlc
2014-02-05 16:07 - 2014-02-05 16:07 - 00001130 _____ () C:\Users\Public\Desktop\SUPER ©.lnk
2014-02-05 16:07 - 2014-02-05 16:07 - 00000000 ____D () C:\Users\Lucien\Documents\eRightSoft
2014-02-05 16:07 - 2013-09-10 15:25 - 00180736 ___SH () C:\Users\Lucien\Desktop\Thumbs.db
2014-02-05 16:06 - 2014-02-05 16:06 - 00000000 ____D () C:\Program Files (x86)\eRightSoft
2014-02-05 16:04 - 2014-02-05 16:02 - 64722252 _____ (eRightSoft ) C:\Users\Lucien\Downloads\SUPERsetup.exe
2014-02-05 16:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-02-05 15:50 - 2013-07-18 20:50 - 00000000 ____D () C:\Users\Lucien\Documents\Bluetooth Folder
2014-02-05 15:49 - 2013-10-03 02:33 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\vlc
2014-02-05 15:28 - 2013-08-19 19:07 - 00001134 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-05 13:30 - 2014-02-05 13:26 - 00000000 ____D () C:\Users\Gast\AppData\Local\CrashDumps
2014-02-05 13:27 - 2014-02-05 13:27 - 00670720 _____ () C:\Users\Gast\Downloads\VideoConverterSetup.exe
2014-02-05 13:18 - 2013-10-19 09:42 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Spotify
2014-02-05 13:18 - 2013-08-22 15:46 - 00385603 _____ () C:\WINDOWS\setupact.log
2014-02-05 13:18 - 2013-08-22 11:25 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Adobe
2014-02-05 13:17 - 2014-02-05 13:17 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Atheros
2014-02-05 13:17 - 2014-01-29 09:40 - 00000000 ____D () C:\ProgramData\Atheros
2014-02-05 13:17 - 2014-01-20 15:52 - 00000000 ____D () C:\Users\Gast\Documents\Bluetooth Folder
2014-02-05 13:17 - 2013-09-26 11:25 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Apple Computer
2014-02-05 13:17 - 2013-09-26 11:23 - 00000062 _____ () C:\Users\Gast\AppData\Roaming\sp_data.sys
2014-02-05 13:16 - 2014-02-05 13:16 - 00000008 __RSH () C:\Users\Gast\ntuser.pol
2014-02-05 13:16 - 2013-11-05 21:47 - 00000000 ____D () C:\Users\Gast
2014-02-05 13:16 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-02-03 21:03 - 2013-08-23 10:50 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-02-03 20:47 - 2014-01-13 22:52 - 00893440 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avc3.sys
2014-02-03 20:45 - 2014-01-13 22:52 - 00635392 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avckf.sys
2014-02-03 20:40 - 2014-02-03 20:21 - 00102400 _____ () C:\Users\Lucien\Desktop\Namenschilder fertig.ppt
2014-02-03 20:22 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-02-03 20:21 - 2013-06-26 08:07 - 00003474 _____ () C:\WINDOWS\System32\Tasks\ASUS Live Update1
2014-02-03 20:21 - 2013-06-26 08:07 - 00003464 _____ () C:\WINDOWS\System32\Tasks\ASUS Live Update2
2014-02-03 08:14 - 2014-02-03 08:14 - 00003576 _____ () C:\WINDOWS\System32\Tasks\Bitdefender Auto-Scan
2014-01-29 16:26 - 2013-11-05 21:47 - 00000000 ____D () C:\Users\Lucien
2014-01-29 16:07 - 2014-01-29 16:06 - 00298424 _____ () C:\WINDOWS\Minidump\012914-53375-01.dmp
2014-01-29 16:06 - 2014-01-19 18:22 - 00000000 ____D () C:\WINDOWS\Minidump
2014-01-29 16:06 - 2013-09-13 12:11 - 894753829 _____ () C:\WINDOWS\MEMORY.DMP
2014-01-29 16:06 - 2013-08-22 15:44 - 05147912 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-01-29 16:04 - 2014-01-29 15:41 - 00181064 _____ (Sysinternals) C:\WINDOWS\PSEXESVC.EXE
2014-01-29 16:03 - 2012-07-26 06:26 - 00000160 _____ () C:\WINDOWS\win.ini
2014-01-29 15:37 - 2014-01-29 15:37 - 00000207 _____ () C:\WINDOWS\tweaking.com-regbackup-LUCIENSNOTE-Microsoft-Windows-8.1-(64-bit).dat
2014-01-29 15:36 - 2014-01-29 15:36 - 00000000 ____D () C:\RegBackup
2014-01-29 15:11 - 2013-07-18 20:49 - 00000074 _____ () C:\Users\Lucien\AppData\Roaming\sp_data.sys
2014-01-29 14:56 - 2014-01-29 14:56 - 00000000 ____D () C:\Users\Lucien\Downloads\Tweaking.com - Windows Repair
2014-01-29 14:54 - 2014-01-22 00:10 - 00000000 ____D () C:\Users\Lucien\Desktop\Tweaking.com - Windows Repair
2014-01-29 14:48 - 2014-01-29 14:48 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2014-01-29 14:48 - 2013-11-05 21:42 - 00109524 _____ () C:\WINDOWS\system32\Drivers\RTWAVES30.dat
2014-01-29 14:48 - 2013-11-05 21:41 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2014-01-29 14:47 - 2013-08-22 15:46 - 00000974 _____ () C:\WINDOWS\setuperr.log
2014-01-29 14:46 - 2014-01-29 13:09 - 00000000 ____D () C:\Program Files (x86)\GUMCBFB.tmp
2014-01-29 14:37 - 2014-01-29 14:29 - 109595877 _____ () C:\Users\Lucien\Downloads\Audio_Realtek_Win81_64_VER6017083.zip
2014-01-29 14:34 - 2013-06-26 07:58 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-01-29 14:34 - 2013-06-26 07:51 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-01-29 14:20 - 2014-01-29 14:20 - 02903255 _____ () C:\Users\Lucien\Downloads\tweaking.com_windows_repair_aio.zip
2014-01-29 13:07 - 2014-01-29 13:05 - 37739976 _____ (Google Inc.) C:\Users\Lucien\Downloads\ChromeStandalone32Setup.exe
2014-01-29 13:06 - 2013-04-26 00:19 - 00000000 ____D () C:\ProgramData\WildTangent
2014-01-29 13:02 - 2014-01-29 13:02 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Deployment
2014-01-29 12:56 - 2014-01-29 12:56 - 00000000 ____D () C:\Users\Lucien\Desktop\chrome default
2014-01-29 12:49 - 2014-01-29 12:49 - 00001124 _____ () C:\Users\Lucien\Desktop\Absolute Uninstaller.lnk
2014-01-29 12:49 - 2014-01-29 12:49 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\GlarySoft
2014-01-29 12:48 - 2014-01-29 12:48 - 02194784 _____ (Glarysoft.com ) C:\Users\Lucien\Downloads\au29setup.exe
2014-01-29 09:54 - 2014-01-29 09:54 - 00048629 _____ () C:\Users\Lucien\Documents\Namenschilder%20fertig.ppt_0.odp
2014-01-29 09:40 - 2014-01-29 09:40 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Atheros
2014-01-29 09:40 - 2014-01-28 12:11 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-01-29 09:39 - 2014-01-28 12:11 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-01-28 14:05 - 2014-01-28 14:00 - 00000000 ____D () C:\Program Files\Common Files\QCA_Bluetooth
2014-01-28 14:00 - 2013-06-26 08:02 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite
2014-01-28 13:56 - 2014-01-28 13:56 - 00000000 ____D () C:\Users\Lucien\Downloads\Win8 Key
2014-01-28 13:52 - 2014-01-28 13:51 - 00000000 ____D () C:\Users\Lucien\Downloads\wlan
2014-01-28 13:51 - 2014-01-28 13:51 - 00000000 ____D () C:\Users\Lucien\Downloads\lan
2014-01-28 13:50 - 2014-01-28 13:50 - 00000000 ____D () C:\Users\Lucien\Downloads\bluetooth
2014-01-28 13:49 - 2014-01-28 13:48 - 00000000 ____D () C:\Users\Lucien\Downloads\audio
2014-01-28 13:46 - 2014-01-28 13:46 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_btmaux_01009.Wdf
2014-01-28 13:46 - 2013-11-05 21:42 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-01-28 13:45 - 2014-01-28 13:45 - 00000000 ____D () C:\Users\Lucien\Downloads\blue
2014-01-28 13:45 - 2014-01-28 13:44 - 00000000 ____D () C:\Users\Lucien\Downloads\Lang
2014-01-28 12:12 - 2014-01-28 12:12 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-01-28 12:12 - 2013-11-05 21:42 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-01-28 12:11 - 2014-01-28 10:55 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-01-28 11:41 - 2014-01-28 11:39 - 00000000 ____D () C:\Users\Lucien\AppData\Local\NVIDIA
2014-01-28 11:40 - 2014-01-28 11:40 - 00001369 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2014-01-28 11:40 - 2014-01-28 11:40 - 00000000 ____D () C:\Users\Lucien\AppData\Local\NVIDIA Corporation
2014-01-28 11:40 - 2014-01-28 10:54 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-01-28 11:39 - 2013-11-05 21:42 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-01-28 10:53 - 2014-01-28 10:53 - 00000000 ____D () C:\NVIDIA
2014-01-28 10:48 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Help
2014-01-28 10:41 - 2014-01-28 10:41 - 00000000 ____D () C:\WINDOWS\pss
2014-01-28 10:01 - 2014-01-28 09:59 - 31475128 _____ (NVIDIA Corporation) C:\Users\Lucien\Downloads\GeForce_Experience_v1.8.2.0.exe
2014-01-27 22:59 - 2014-01-27 22:46 - 266633424 _____ (NVIDIA Corporation) C:\Users\Lucien\Downloads\332.21-notebook-win8-win7-64bit-international-whql.exe
2014-01-27 20:33 - 2014-01-27 19:54 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-27 20:20 - 2013-09-12 10:02 - 00296960 ___SH () C:\Users\Lucien\Downloads\Thumbs.db
2014-01-27 20:01 - 2013-10-14 09:56 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Spotify
2014-01-27 19:53 - 2014-01-27 19:53 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-01-27 19:52 - 2014-01-27 19:52 - 00000000 ____D () C:\Users\Lucien\Desktop\mbar
2014-01-27 19:48 - 2014-01-27 19:47 - 00000000 ____D () C:\Users\Lucien\Desktop\Logs2
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-01-26 20:53 - 2014-01-26 20:53 - 00003186 _____ () C:\WINDOWS\System32\Tasks\{E66DEEF7-845B-48C8-BBEE-CE6EA6F2EE96}
2014-01-26 19:26 - 2014-01-26 19:26 - 00003362 _____ () C:\WINDOWS\System32\Tasks\{63C03234-5B71-4184-AD48-4EE22D315F87}
2014-01-25 15:01 - 2014-01-25 15:01 - 00000000 ____H () C:\Users\Lucien\Documents\Default.rdp
2014-01-24 19:21 - 2014-01-24 19:21 - 00000000 ____D () C:\Users\Lucien\Desktop\Logs alt
2014-01-24 19:17 - 2014-01-24 19:17 - 00361185 _____ (Farbar) C:\Users\Lucien\Desktop\FSS.exe
2014-01-24 19:06 - 2013-08-31 15:58 - 00000000 ____D () C:\AdwCleaner
2014-01-24 16:48 - 2014-01-24 16:48 - 00032847 _____ () C:\Users\Lucien\Desktop\gmer.zip
2014-01-24 11:34 - 2014-01-24 11:34 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-01-24 10:53 - 2014-01-24 10:53 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-01-22 21:23 - 2014-01-22 21:23 - 00022688 _____ () C:\Users\Lucien\Downloads\Addition.txt
2014-01-22 21:23 - 2014-01-22 21:22 - 00046051 _____ () C:\Users\Lucien\Downloads\FRST.txt
2014-01-22 14:01 - 2014-01-21 10:40 - 00000000 ____D () C:\Users\Gast\AppData\Local\My Games
2014-01-22 14:01 - 2013-10-01 15:03 - 00000000 ____D () C:\Users\Gast\Documents\My Games
2014-01-22 14:01 - 2013-09-01 19:44 - 00000000 ____D () C:\Users\Lucien\AppData\Local\My Games
2014-01-22 14:01 - 2013-08-20 09:54 - 00000000 ____D () C:\Users\Lucien\Documents\My Games
2014-01-22 12:30 - 2014-01-22 12:30 - 00000168 _____ () C:\Users\Lucien\defogger_reenable
2014-01-21 22:13 - 2014-01-06 13:29 - 00000000 ____D () C:\Users\Lucien\Documents\Rockstar Games
2014-01-21 22:13 - 2013-09-04 07:48 - 00000000 ____D () C:\Users\Lucien\Documents\Blender
2014-01-21 22:00 - 2013-11-04 09:24 - 00069120 ___SH () C:\Users\Gast\Downloads\Thumbs.db
2014-01-21 15:06 - 2014-01-21 15:06 - 01037068 _____ (Thisisu) C:\Users\Lucien\Desktop\JRT.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00987425 _____ () C:\Users\Lucien\Desktop\SecurityCheck.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00448512 _____ (OldTimer Tools) C:\Users\Lucien\Desktop\TFC.exe
2014-01-21 15:05 - 2014-01-21 15:05 - 01236282 _____ () C:\Users\Lucien\Desktop\adwcleaner.exe
2014-01-21 15:01 - 2014-01-21 15:00 - 02347384 _____ (ESET) C:\Users\Lucien\Desktop\esetsmartinstaller_enu.exe
2014-01-21 13:25 - 2014-01-21 13:15 - 24859352 _____ (Microsoft Corporation) C:\Users\Gast\Downloads\Windows-KB890830-x64-V5.8.exe
2014-01-21 10:38 - 2013-09-01 18:18 - 00281688 _____ () C:\WINDOWS\SysWOW64\PnkBstrB.xtr
2014-01-21 10:18 - 2014-01-21 10:18 - 00050477 _____ () C:\Users\Lucien\Desktop\Defogger.exe
2014-01-21 10:12 - 2014-01-21 10:12 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\QuickScan
2014-01-21 09:38 - 2014-01-21 09:38 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Spotydl
2014-01-21 09:37 - 2013-09-26 11:23 - 00000000 ____D () C:\Users\Gast\AppData\Local\VirtualStore
2014-01-21 08:37 - 2014-01-20 15:52 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Bitdefender
2014-01-21 03:54 - 2014-01-28 11:39 - 01179576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2014-01-21 03:54 - 2014-01-28 11:39 - 01048152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2014-01-20 15:53 - 2014-01-20 15:53 - 00000000 ____D () C:\Users\Gast\AppData\Local\NVIDIA Corporation
2014-01-20 15:52 - 2014-01-20 15:52 - 00000385 _____ () C:\Users\Gast\AppData\Roaminguser_gensett.xml
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D () C:\Users\Gast\AppData\Local\BMExplorer
2014-01-20 15:52 - 2013-10-29 11:55 - 00000000 ____D () C:\Users\Gast\AppData\Local\NVIDIA
2014-01-20 15:52 - 2013-10-19 09:42 - 00000000 ____D () C:\Users\Gast\AppData\Local\Spotify
2014-01-20 15:52 - 2013-09-26 11:24 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-20 15:52 - 2013-09-26 11:24 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-20 15:51 - 2014-01-20 15:51 - 00000000 ____D () C:\Users\Lucien\Documents\AdobeStockPhotos
2014-01-20 15:51 - 2013-07-18 20:48 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Adobe
2014-01-20 13:49 - 2014-01-17 13:50 - 00000000 ____D () C:\Users\Lucien\Downloads\backups
2014-01-20 12:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-01-19 18:46 - 2014-01-17 13:42 - 00012554 _____ () C:\Users\Lucien\Downloads\hijackthis.log
2014-01-19 18:22 - 2014-01-19 18:22 - 00305304 _____ () C:\WINDOWS\Minidump\011914-32203-01.dmp
2014-01-19 16:08 - 2014-01-13 23:20 - 00000000 ____D () C:\Program Files (x86)\McAfee Security Scan
2014-01-19 08:38 - 2014-01-19 21:21 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-01-17 20:25 - 2014-01-22 00:11 - 00379904 _____ () C:\Users\Lucien\Desktop\gmer.exe
2014-01-17 13:42 - 2014-01-17 13:42 - 00388608 _____ (Trend Micro Inc.) C:\Users\Lucien\Downloads\HiJackThis204.exe
2014-01-17 13:42 - 2013-07-18 20:48 - 00000000 ____D () C:\Users\Lucien\AppData\Local\VirtualStore
2014-01-17 09:54 - 2014-01-17 09:54 - 00000385 _____ () C:\Users\Lucien\AppData\Roaminguser_gensett.xml
2014-01-17 09:54 - 2013-07-18 20:49 - 00000000 ___RD () C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-17 09:54 - 2013-07-18 20:49 - 00000000 ___RD () C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-01-16 16:37 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\Dism
2014-01-16 16:37 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Dism
2014-01-16 13:51 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-01-16 13:29 - 2013-08-19 19:19 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-01-13 23:23 - 2014-01-13 23:23 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\system32\bdsandboxuiskin32.dll
2014-01-13 23:23 - 2014-01-13 22:53 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\SysWOW64\bdsandboxuiskin32.dll
2014-01-13 23:23 - 2014-01-13 22:52 - 00261056 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avchv.sys
2014-01-13 23:23 - 2014-01-13 22:48 - 00000000 ____D () C:\ProgramData\Bitdefender
2014-01-13 23:20 - 2014-01-13 23:20 - 00002041 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-13 23:20 - 2013-04-26 00:18 - 00000000 ____D () C:\ProgramData\McAfee
2014-01-13 23:19 - 2013-04-26 00:15 - 00000000 ____D () C:\ProgramData\Adobe
2014-01-13 23:19 - 2013-04-26 00:15 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-01-13 22:54 - 2014-01-13 22:54 - 00620542 _____ () C:\ProgramData\1389649682.bdinstall.bin
2014-01-13 22:54 - 2014-01-13 22:54 - 00000385 _____ () C:\WINDOWS\system32\user_gensett.xml
2014-01-13 22:54 - 2014-01-13 22:53 - 00000000 ____D () C:\ProgramData\BDLogging
2014-01-13 22:54 - 2014-01-13 22:52 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Bitdefender
2014-01-13 22:53 - 2014-01-13 22:53 - 00002212 _____ () C:\Users\Public\Desktop\Bitdefender Safepay.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00002164 _____ () C:\Users\Public\Desktop\Bitdefender Total Security.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2014-01-13 22:52 - 2014-01-13 22:48 - 00000000 ____D () C:\Program Files\Bitdefender
2014-01-13 22:48 - 2014-01-13 22:48 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\QuickScan
2014-01-13 22:48 - 2014-01-12 22:56 - 00000000 ____D () C:\Program Files\Common Files\Bitdefender
2014-01-13 22:46 - 2013-08-30 00:06 - 00000000 ____D () C:\avast! sandbox
2014-01-13 22:45 - 2013-08-19 19:05 - 00000000 ____D () C:\Program Files\AVAST Software
2014-01-13 22:45 - 2013-08-19 19:04 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-01-13 22:44 - 2013-08-19 19:06 - 00000000 _____ () C:\WINDOWS\SysWOW64\config.nt
2014-01-13 14:27 - 2014-01-09 12:00 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Bioshock
2014-01-12 22:29 - 2014-01-12 22:29 - 07171632 _____ () C:\Users\Lucien\Downloads\bitdefender_tsecurity.exe
2014-01-09 12:12 - 2014-01-09 12:00 - 00000000 ____D () C:\Users\Lucien\Documents\Bioshock
2014-01-09 11:59 - 2013-04-26 00:16 - 00502089 _____ () C:\WINDOWS\DirectX.log
2014-01-08 11:53 - 2013-12-27 10:35 - 00000000 ___RD () C:\Users\Lucien\Downloads\Microsoft.SkypeApp_kzf8qxf38zg5c!App
2014-01-07 21:35 - 2014-01-07 21:35 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2014-01-07 21:05 - 2013-11-22 17:15 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-01-06 23:31 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-01-06 23:31 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\WINDOWS\SysWOW64\GPhotos.scr
2014-01-06 16:20 - 2013-08-19 19:19 - 86054176 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-01-06 13:11 - 2014-01-06 13:11 - 00000000 __SHD () C:\ProgramData\SecuROM
2014-01-06 13:10 - 2014-01-06 13:10 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Rockstar Games
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D () C:\WINDOWS\SysWOW64\xlive
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D () C:\Users\Lucien\Documents\Games for Windows - LIVE Demos
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D () C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2014-01-06 13:08 - 2014-01-06 13:08 - 00642712 _____ (Microsoft Corporation) C:\Users\Lucien\Downloads\gfwlivesetup.exe

Some content of TEMP:
====================
C:\Users\Gast\AppData\Local\Temp\691.355818674457_Update.exe
C:\Users\Gast\AppData\Local\Temp\drm_dyndata_7390004.dll
C:\Users\Gast\AppData\Local\Temp\ubiB23E.tmp.exe
C:\Users\Lucien\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-05 14:50

==================== End Of Log ============================

--- --- ---


naja wenn ich auf der charmleiste auf desktop klicke dann braucht der desktop ein stückchen bis er aufgebaut ist, das will heißen, dass die Ikons erst nach und nach erscheinen.
und secure banking ist weiterhin das problem

lg :)

sunjojo 06.02.2014 18:44

Hi,

Zitat:

und secure banking ist weiterhin das problem
Ich denke, SecureBanking (Programmierer) wird sich bald melden. Meldet sich denn Secure Banking (Programm) auch, wenn du andere Browser öffnest oder nur bei Google Chrome :)?

KitsuneNoir 07.02.2014 15:59

Ja secure banking meldet sich nur bei google chrome

SecureBanking 10.02.2014 22:31

Hm.. schwer zu sagen. Sollte normalerweise ein FP sein, da Bitdefenders Active Virus Engine diese Hooks in der ws2_32.dll setzt.
Secure Banking sollte jedoch nichts finden, wenn du die Active Virus Engine (bzw. sogar alle Module) deaktiviert hast.

Wenn du willst, kannst du dir mal die aktuelle Beta Version von Secure Banking hier downloaden.
Das wir vermutlich das Problem nicht lösen, aber evtl. bekommen wir dadurch genauere Infos. (In dem schaust, ob du dann bei FF und IE auch diese Meldung bekommst).

KitsuneNoir 11.02.2014 01:04

Hi,
also ich hab bitdefender mal komplett aus dem autostart rausgenommen aber secure banking meldet sich immer noch.

Aber das ist gar nicht mein hauptproblem, denn mein lappi schmiert mir grad total ab.
Das hochfahren klappt super aber der desktop mit allen symbolen baut sich extrem langsam auf und der taskmanager meldet 100%ige datenträger auslastung obwohl ich den rechner einfach so stehen lasse und nichts anrühre.

vielleicht wäre es ratsamer das komplette system neu aufzusetzen, oder was ratet ihr mir?

sunjojo 11.02.2014 07:08

Zitat:

Aber das ist gar nicht mein hauptproblem, denn mein lappi schmiert mir grad total ab.
Das hochfahren klappt super aber der desktop mit allen symbolen baut sich extrem langsam auf und der taskmanager meldet 100%ige datenträger auslastung obwohl ich den rechner einfach so stehen lasse und nichts anrühre.


Mach mal bitte ein neues FRST Logfile.
Schritt 1
Starte noch einmal FRST.
  • Ändere keine der Voreinstellungen und drücke auf Scan.
  • Wenn der Scan abgeschlossen ist, wird ein neues Logfile FRST.txt erstellt und auf dem Desktop gespeichert.
  • Poste den Inhalt dieses Logfiles bitte hier in deinen Thread.



Poste folgende Logfiles in deiner nächsten Antwort:
  • FRST-Scan

SecureBanking 11.02.2014 14:41

Habe soeben Bitdefender kontaktiert.

Die haben nun alles auf die Whitelist gesetzt. Lade dir doch bitte hier die aktuelle Beta Version runter. Habe die Signatur von Bitdefender auf meine Whitelist gesetzt.

Vielleicht klappts jetzt. (Bei mir klappts :))

KitsuneNoir 12.02.2014 00:05

Hi, hier erstmal der frst scan


FRST Logfile:

FRST Logfile:
Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-02-2014 01
Ran by Lucien (administrator) on LUCIENSNOTE on 11-02-2014 22:48:36
Running from C:\Users\Lucien\Desktop
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\vsserv.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(ASUS) C:\Program Files\ASUS\P4G\InsOnSrv.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files\ASUS\P4G\InsOnWMI.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe\LiveComm.exe
(Microsoft Corporation) C:\Windows\System32\skydrive.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS Console\ASUS Console Starter.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\bdagent.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Secure Banking) C:\Program Files (x86)\Secure Banking\SecureBanking.exe
() C:\Program Files (x86)\Secure Banking\sbservice.exe
(Akamai Technologies, Inc.) C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe
(Akamai Technologies, Inc.) C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe
(Smartbar) C:\Users\Lucien\AppData\Local\Smartbar\Application\Smartbar.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Microsoft Corporation) C:\WINDOWS\system32\backgroundTaskHost.exe
(Microsoft Corporation) C:\WINDOWS\system32\wwahost.exe
(Microsoft Corporation) C:\WINDOWS\system32\backgroundTaskHost.exe
(Microsoft Corporation) C:\WINDOWS\system32\backgroundTaskHost.exe
(Microsoft Corporation) C:\WINDOWS\syswow64\wwahost.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\Asus\AsusVibe\AsusVibe2.0.exe
(Microsoft Corporation) C:\WINDOWS\SysWOW64\ByteCodeGenerator.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-09-25] (Adobe Systems Incorporated)
HKLM\...\Run: [PrnStatusMX] - C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe [1240064 2012-07-04] (Marvell Semiconductor, Inc.)
HKLM\...\Run: [Bdagent] - C:\Program Files\Bitdefender\Bitdefender\bdagent.exe [1737920 2014-02-03] (Bitdefender)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\WINDOWS\system32\nvspcap64.dll [1179576 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [BTMTrayAgent] - C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [7818040 2013-09-19] (Motorola Solutions, Inc.)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1361112 2013-11-05] (Realtek Semiconductor)
HKLM-x32\...\Run: [ASUSPRP] - C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-04-26] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-01-15] (cyberlink)
HKLM-x32\...\Run: [ASUS InstantKey] - C:\Program Files (x86)\ASUS\ASUS Instant Key\Ikey_start.exe [13936 2013-04-16] (ASUS)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2237328 2013-11-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-09-25] ( (Atheros Communications))
HKU\.DEFAULT\...\Run: [Bitdefender-Geldbörse-Agent] - C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [567888 2014-02-11] (Bitdefender)
HKU\.DEFAULT\...\Run: [Bitdefender-Geldbörse] - C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe [1001536 2014-02-11] (Bitdefender)
HKU\.DEFAULT\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] - C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [614232 2014-02-11] (Bitdefender)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [Steam] - C:\Program Files (x86)\Steam\steam.exe [1815976 2014-01-27] (Valve Corporation)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [SecureBanking] - C:\Program Files (x86)\Secure Banking\SecureBanking.exe [507904 2013-06-30] (Secure Banking)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [Spotify Web Helper] - C:\Users\Lucien\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-10] (Spotify Ltd)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [Akamai NetSession Interface] - C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [Bitdefender-Geldbörse-Agent] - C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [567888 2014-02-11] (Bitdefender)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] - C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [614232 2014-02-11] (Bitdefender)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [Browser Infrastructure Helper] - C:\Users\Lucien\AppData\Local\Smartbar\Application\Smartbar.exe [20248 2014-01-12] (Smartbar)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [168616 2013-12-19] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll, => c:\windows\syswow64\nvinit.dll [141336 2013-12-19] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [141336 2013-12-19] (NVIDIA Corporation)
Startup: C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=7762e639-0a6a-140d-b670-122db5e81917&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=05/02/2014&type=hp1000
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=7762e639-0a6a-140d-b670-122db5e81917&searchtype=hp&fr=linkury-tb&installDate=05/02/2014&type=hp1000
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=7762e639-0a6a-140d-b670-122db5e81917&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=05/02/2014&type=hp1000
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;form=IE10TR&amp;src=IE10TR&amp;pc=ASU2JS
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;form=IE10TR&amp;src=IE10TR&amp;pc=ASU2JS
SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=7762e639-0a6a-140d-b670-122db5e81917&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=05/02/2014&type=hp1000
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=7762e639-0a6a-140d-b670-122db5e81917&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=05/02/2014&type=hp1000
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=7762e639-0a6a-140d-b670-122db5e81917&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=05/02/2014&type=hp1000
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=7762e639-0a6a-140d-b670-122db5e81917&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=05/02/2014&type=hp1000
BHO: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\pmbxie.dll (Bitdefender)
BHO: Yahoo Community Smartbar (by Linkury)Engine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\WINDOWS\system32\mscoree.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxie.dll (Bitdefender)
BHO-x32: Yahoo Community Smartbar (by Linkury)Engine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\WINDOWS\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Yahoo Community Smartbar (by Linkury) - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\WINDOWS\system32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - Yahoo Community Smartbar (by Linkury) - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\WINDOWS\SysWOW64\mscoree.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Chrome:
=======
CHR HomePage: https://www.google.de/
CHR Extension: (Google Docs) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-14]
CHR Extension: (Google Drive) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-19]
CHR Extension: (YouTube) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-19]
CHR Extension: (Bitdefender Wallet) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccahoghmggldkcdjiebjkidpfongdfbl [2014-01-13]
CHR Extension: (Adblock Plus) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-02-08]
CHR Extension: (Google-Suche) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-19]
CHR Extension: (Google Wallet) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR Extension: (Google Mail) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-19]
CHR HKLM-x32\...\Chrome\Extension: [ccahoghmggldkcdjiebjkidpfongdfbl] - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxcr.crx [2014-02-11]

==================== Services (Whitelisted) =================

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-12-18] (Adobe Systems)
R2 ASUS InstantOn; C:\Program Files\ASUS\P4G\InsOnSrv.exe [277120 2013-04-29] (ASUS)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-09-25] (Windows (R) Win 7 DDK provider)
S4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender\bdparentalservice.exe [77632 2013-11-21] (Bitdefender)
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [247768 2013-01-15] (CyberLink)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-04-11] (Intel Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-09-18] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16939296 2014-01-21] (NVIDIA Corporation)
R2 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [94624 2013-07-08] (Bitdefender)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe [67320 2013-10-07] (Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender\vsserv.exe [1507248 2014-02-03] (Bitdefender)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [18384 2013-09-04] (Intel(R) Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-09-25] (Atheros)

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [70416 2013-09-23] (ASUS Corporation)
R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [893440 2014-02-03] (BitDefender)
R3 avchv; C:\Windows\system32\DRIVERS\avchv.sys [261056 2014-01-13] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [635392 2014-02-03] (BitDefender)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
S0 bdelam; C:\Windows\System32\drivers\bdelam.sys [23568 2013-09-08] (Bitdefender)
R1 BdfNdisf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys [98768 2013-07-24] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107008 2013-07-29] (BitDefender LLC)
S4 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-07-02] (Bitdefender SRL)
S3 BDSandBox; C:\WINDOWS\system32\drivers\bdsandbox.sys [82824 2013-11-04] (BitDefender SRL)
R1 BDVEDISK; C:\Windows\system32\DRIVERS\bdvedisk.sys [79192 2013-07-30] (BitDefender)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-25] (Qualcomm Atheros)
S3 BthA2DP; C:\Windows\system32\drivers\BthA2DP.sys [131584 2013-08-22] (Microsoft Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [140600 2013-07-22] (Motorola Solutions, Inc.)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-02-05] (Disc Soft Ltd)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [150256 2013-08-23] (BitDefender LLC)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)
R2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [26328 2013-07-23] (Intel Corporation)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-07-26] (Intel Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S0 rtcrfilt64; C:\Windows\System32\DRIVERS\rtcrfilt64.sys [19600 2000-01-01] (Realtek Semiconductor Corp.)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
S3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16152 2013-09-03] ()
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [389240 2013-08-07] (BitDefender S.R.L.)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
S3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [X]
S3 GPU-Z; \??\C:\Users\Lucien\AppData\Local\Temp\GPU-Z.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-09 12:05 - 2014-02-09 12:05 - 00000000 ____D () C:\Users\Lucien\Documents\Meine empfangenen Dateien
2014-02-09 11:41 - 2014-02-09 11:41 - 07391168 _____ () C:\Users\Lucien\Downloads\ljcP1215-HB-pnp-win64-de.exe
2014-02-08 22:44 - 2014-02-08 22:44 - 00000000 ____D () C:\Users\Lucien\Documents\EA Games
2014-02-08 12:15 - 2014-02-08 12:15 - 00000000 _____ () C:\WINDOWS\SysWOW64\debug.log
2014-02-07 22:24 - 2014-02-07 22:24 - 00001214 _____ () C:\Users\Lucien\Desktop\IsoBuster.lnk
2014-02-07 22:24 - 2014-02-07 22:24 - 00000000 ____D () C:\Program Files (x86)\Smart Projects
2014-02-07 22:21 - 2014-02-07 22:21 - 04669400 _____ (Smart Projects ) C:\Users\Lucien\Downloads\isobuster_all_lang_3.3.exe
2014-02-07 22:14 - 2014-02-07 22:21 - 00000000 ____D () C:\Users\Lucien\Downloads\bin2iso
2014-02-05 17:18 - 2014-02-07 15:45 - 00002662 _____ () C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-02-05 17:18 - 2014-02-05 17:18 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Smartbar
2014-02-05 17:17 - 2014-02-05 17:17 - 00001968 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2014-02-05 17:16 - 2014-02-05 17:16 - 00283064 _____ (Disc Soft Ltd) C:\WINDOWS\system32\Drivers\dtsoftbus01.sys
2014-02-05 17:16 - 2014-02-05 17:16 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\OpenCandy
2014-02-05 17:16 - 2014-02-05 17:16 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite
2014-02-05 17:12 - 2014-02-05 17:14 - 13485616 _____ (Disc Soft Ltd) C:\Users\Lucien\Downloads\DTLite4481-0347.exe
2014-02-05 16:12 - 2014-02-05 16:12 - 00000000 ____D () C:\Program Files (x86)\AviSynth 2.5
2014-02-05 16:12 - 2009-09-27 09:39 - 00415744 ___SH (The Public) C:\WINDOWS\SysWOW64\avisynth.dll
2014-02-05 16:12 - 2005-07-14 12:31 - 00032256 ___SH () C:\WINDOWS\SysWOW64\AVSredirect.dll
2014-02-05 16:12 - 2004-02-22 10:11 - 00764416 ___SH (Abysmal Software) C:\WINDOWS\SysWOW64\devil.dll
2014-02-05 16:12 - 2004-01-25 00:00 - 00070656 ___SH (www.helixcommunity.org) C:\WINDOWS\SysWOW64\yv12vfw.dll
2014-02-05 16:12 - 2004-01-25 00:00 - 00070656 ___SH (www.helixcommunity.org) C:\WINDOWS\SysWOW64\i420vfw.dll
2014-02-05 16:11 - 2014-02-07 22:36 - 00000000 ____D () C:\Users\Lucien\Desktop\Indian Summer Westward Ho!
2014-02-05 16:07 - 2014-02-05 16:07 - 00001130 _____ () C:\Users\Public\Desktop\SUPER ©.lnk
2014-02-05 16:07 - 2014-02-05 16:07 - 00000000 ____D () C:\Users\Lucien\Documents\eRightSoft
2014-02-05 16:07 - 2012-10-05 19:54 - 00188416 __RSH () C:\WINDOWS\SysWOW64\winDCE32.dll
2014-02-05 16:07 - 2011-06-15 23:00 - 00163328 __RSH () C:\WINDOWS\SysWOW64\flvDX.dll
2014-02-05 16:07 - 2011-06-14 19:05 - 00121344 __RSH () C:\WINDOWS\SysWOW64\TAKDSDecoder.ax
2014-02-05 16:07 - 2011-02-11 10:26 - 00112128 __RSH () C:\WINDOWS\SysWOW64\OptimFROG.dll
2014-02-05 16:07 - 2010-01-06 23:00 - 00107520 __RSH () C:\WINDOWS\SysWOW64\TAKDSDecoder.dll
2014-02-05 16:07 - 2009-03-17 10:38 - 00070656 __RSH () C:\WINDOWS\SysWOW64\RLAPEDec.ax
2014-02-05 16:07 - 2009-01-18 12:03 - 00107520 __RSH () C:\WINDOWS\SysWOW64\RLMPCDec.ax
2014-02-05 16:07 - 2008-03-16 14:30 - 00216064 __RSH (MONOGRAM Multimedia, s.r.o.) C:\WINDOWS\SysWOW64\nbDX.dll
2014-02-05 16:07 - 2007-02-21 12:47 - 00031232 __RSH (Hans Mayerl) C:\WINDOWS\SysWOW64\msfDX.dll
2014-02-05 16:07 - 2005-02-13 00:00 - 00186880 __RSH (RadLight) C:\WINDOWS\SysWOW64\RLOgg.ax
2014-02-05 16:07 - 2005-02-13 00:00 - 00067584 __RSH (RadLight, LLC) C:\WINDOWS\SysWOW64\RLTheoraDec.ax
2014-02-05 16:07 - 2005-02-13 00:00 - 00051712 __RSH () C:\WINDOWS\SysWOW64\RLSpeexDec.ax
2014-02-05 16:07 - 2005-02-06 00:00 - 00092672 __RSH (RadLight) C:\WINDOWS\SysWOW64\RLVorbisDec.ax
2014-02-05 16:07 - 2004-10-10 09:50 - 00278528 _____ (Real Networks, Inc) C:\WINDOWS\SysWOW64\pncrt.dll
2014-02-05 16:07 - 2004-09-17 04:07 - 00090112 __RSH (-) C:\WINDOWS\SysWOW64\TTADSSplitter.ax
2014-02-05 16:07 - 2004-08-22 11:56 - 00090112 __RSH (-) C:\WINDOWS\SysWOW64\TTADSDecoder.ax
2014-02-05 16:07 - 2004-07-02 16:33 - 00327749 _____ (RealNetworks, Inc.) C:\WINDOWS\SysWOW64\drvc.dll
2014-02-05 16:07 - 2004-04-27 16:03 - 00017408 __RSH (RadLight) C:\WINDOWS\SysWOW64\RLOFRDec.ax
2014-02-05 16:06 - 2014-02-05 16:06 - 00000000 ____D () C:\Program Files (x86)\eRightSoft
2014-02-05 16:06 - 2012-07-11 23:00 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Olepau32.ax
2014-02-05 16:06 - 2009-09-27 23:00 - 00143872 __RSH () C:\WINDOWS\SysWOW64\AviDX.ax
2014-02-05 16:06 - 2009-08-10 23:00 - 00352768 __RSH () C:\WINDOWS\SysWOW64\ac3DX.ax
2014-02-05 16:06 - 2009-01-18 17:15 - 00120832 __RSH () C:\WINDOWS\SysWOW64\MPCDx.ax
2014-02-05 16:06 - 2006-08-16 15:53 - 00175104 __RSH () C:\WINDOWS\SysWOW64\CoreAAC.ax
2014-02-05 16:06 - 2006-03-10 20:21 - 00195584 __RSH () C:\WINDOWS\SysWOW64\MatroskaDX.ax
2014-02-05 16:06 - 2006-01-12 23:00 - 00123904 __RSH (CoreCodec) C:\WINDOWS\SysWOW64\AVCDX.ax
2014-02-05 16:06 - 2005-11-25 21:46 - 00161792 __RSH (Gabest) C:\WINDOWS\SysWOW64\RealMediaDX.ax
2014-02-05 16:06 - 2005-02-22 17:55 - 00081920 __RSH () C:\WINDOWS\SysWOW64\aac_parser.ax
2014-02-05 16:06 - 2005-01-18 00:26 - 00179200 __RSH (Gabest) C:\WINDOWS\SysWOW64\DiracSplitter.ax
2014-02-05 16:06 - 2003-12-07 08:59 - 00097280 __RSH () C:\WINDOWS\SysWOW64\FLACDX.ax
2014-02-05 16:02 - 2014-02-05 16:04 - 64722252 _____ (eRightSoft ) C:\Users\Lucien\Downloads\SUPERsetup.exe
2014-02-05 13:28 - 2014-02-05 16:46 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\DigitalSites
2014-02-05 13:27 - 2014-02-05 13:27 - 00670720 _____ () C:\Users\Gast\Downloads\VideoConverterSetup.exe
2014-02-05 13:26 - 2014-02-05 13:30 - 00000000 ____D () C:\Users\Gast\AppData\Local\CrashDumps
2014-02-05 13:17 - 2014-02-05 13:17 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Atheros
2014-02-05 13:16 - 2014-02-05 13:16 - 00000008 __RSH () C:\Users\Gast\ntuser.pol
2014-02-03 20:21 - 2014-02-03 20:40 - 00102400 _____ () C:\Users\Lucien\Desktop\Namenschilder fertig.ppt
2014-02-03 08:14 - 2014-02-03 08:14 - 00003576 _____ () C:\WINDOWS\System32\Tasks\Bitdefender Auto-Scan
2014-01-29 16:06 - 2014-01-29 16:07 - 00298424 _____ () C:\WINDOWS\Minidump\012914-53375-01.dmp
2014-01-29 15:41 - 2014-01-29 16:04 - 00181064 _____ (Sysinternals) C:\WINDOWS\PSEXESVC.EXE
2014-01-29 15:37 - 2014-01-29 15:37 - 00000207 _____ () C:\WINDOWS\tweaking.com-regbackup-LUCIENSNOTE-Microsoft-Windows-8.1-(64-bit).dat
2014-01-29 15:36 - 2014-01-29 15:36 - 00000000 ____D () C:\RegBackup
2014-01-29 14:56 - 2014-01-29 14:56 - 00000000 ____D () C:\Users\Lucien\Downloads\Tweaking.com - Windows Repair
2014-01-29 14:48 - 2014-01-29 14:48 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2014-01-29 14:45 - 2013-11-05 19:47 - 03707864 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2014-01-29 14:45 - 2013-11-05 18:54 - 38385664 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
2014-01-29 14:45 - 2013-11-05 15:48 - 00681905 _____ () C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2014-01-29 14:45 - 2013-11-04 19:26 - 00153304 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2014-01-29 14:45 - 2013-11-04 11:11 - 02587864 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkAPO64.dll
2014-01-29 14:45 - 2013-10-30 16:31 - 00929080 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICAPOSettingsIPC.dll
2014-01-29 14:45 - 2013-10-28 17:29 - 01021656 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2014-01-29 14:45 - 2013-10-25 10:49 - 05751576 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICAPOlfx.dll
2014-01-29 14:45 - 2013-10-18 16:41 - 01286360 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2014-01-29 14:45 - 2013-10-11 11:31 - 00947760 _____ (Sony Corporation) C:\WINDOWS\system32\SFSS_APO.dll
2014-01-29 14:45 - 2013-10-09 20:13 - 01286400 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxSpeechAPO64.dll
2014-01-29 14:45 - 2013-10-09 20:12 - 03714304 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioVnN64.dll
2014-01-29 14:45 - 2013-10-09 20:12 - 02103040 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\WavesGUILib64.dll
2014-01-29 14:45 - 2013-10-07 11:05 - 02810072 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2014-01-29 14:45 - 2013-10-02 17:10 - 00617176 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2014-01-29 14:45 - 2013-09-09 15:32 - 05681192 _____ () C:\WINDOWS\system32\Drivers\rtvienna.dat
2014-01-29 14:45 - 2013-08-24 03:14 - 01014016 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\slcnt64.dll
2014-01-29 14:45 - 2013-08-24 03:14 - 00897792 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll
2014-01-29 14:45 - 2013-08-24 03:14 - 00722688 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll
2014-01-29 14:45 - 2013-08-24 03:14 - 00244480 _____ (TODO: <Company name>) C:\WINDOWS\system32\slprp64.dll
2014-01-29 14:45 - 2013-08-14 16:36 - 00662784 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVolumeSDAPO.dll
2014-01-29 14:45 - 2013-08-14 16:35 - 00907008 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO2064.dll
2014-01-29 14:45 - 2013-06-25 12:47 - 00871856 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tossaeapo64.dll
2014-01-29 14:45 - 2013-06-25 12:47 - 00162224 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\toseaeapo64.dll
2014-01-29 14:45 - 2013-06-25 12:46 - 00582056 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosasfapo64.dll
2014-01-29 14:45 - 2013-04-24 17:16 - 01662024 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2014-01-29 14:45 - 2013-04-03 14:13 - 00906800 _____ (Sony Corporation) C:\WINDOWS\system32\MISS_APO.dll
2014-01-29 14:45 - 2012-08-31 19:18 - 07164176 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEP64A.dll
2014-01-29 14:45 - 2012-08-31 19:17 - 00434960 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EED64A.dll
2014-01-29 14:45 - 2012-08-31 19:17 - 00141584 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEL64A.dll
2014-01-29 14:45 - 2012-08-31 19:17 - 00124176 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEA64A.dll
2014-01-29 14:45 - 2012-08-31 19:17 - 00075024 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEG64A.dll
2014-01-29 14:45 - 2012-01-30 11:43 - 00836544 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo264.dll
2014-01-29 14:45 - 2012-01-10 10:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\WINDOWS\system32\tepeqapo64.dll
2014-01-29 14:45 - 2011-12-20 15:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2014-01-29 14:45 - 2011-11-22 16:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2014-01-29 14:45 - 2011-09-02 14:21 - 00221024 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFNHK64.dll
2014-01-29 14:45 - 2011-09-02 14:21 - 00081248 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFCOM64.dll
2014-01-29 14:45 - 2011-09-02 14:21 - 00078688 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFAPO64.dll
2014-01-29 14:45 - 2011-03-17 12:17 - 01361336 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosade.dll
2014-01-29 14:45 - 2011-03-07 17:11 - 00148416 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo.dll
2014-01-29 14:45 - 2010-11-08 07:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2014-01-29 14:45 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2014-01-29 14:45 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2014-01-29 14:45 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2014-01-29 14:45 - 2010-11-08 07:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2014-01-29 14:45 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2014-01-29 14:45 - 2010-11-03 18:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2014-01-29 14:45 - 2010-07-22 16:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\WINDOWS\SysWOW64\SFCOM.dll
2014-01-29 14:45 - 2009-11-24 09:55 - 00518896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2014-01-29 14:45 - 2009-11-24 09:55 - 00211184 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll
2014-01-29 14:45 - 2009-11-24 09:55 - 00198896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll
2014-01-29 14:45 - 2009-11-24 09:55 - 00155888 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2014-01-29 14:44 - 2013-10-16 03:43 - 00209096 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll
2014-01-29 14:44 - 2013-10-11 12:47 - 00113576 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2014-01-29 14:44 - 2013-10-09 20:13 - 01921792 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek264.dll
2014-01-29 14:44 - 2013-10-09 20:13 - 01345280 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO5064.dll
2014-01-29 14:44 - 2013-10-09 20:12 - 27644160 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioVnA64.dll
2014-01-29 14:44 - 2013-10-09 20:12 - 14152960 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek64.dll
2014-01-29 14:44 - 2013-10-09 20:12 - 02036992 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioEQ64.dll
2014-01-29 14:44 - 2013-10-09 20:12 - 01012992 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPOShell64.dll
2014-01-29 14:44 - 2013-10-07 00:26 - 00501184 _____ (DTS) C:\WINDOWS\system32\DTSU2PLFX64.dll
2014-01-29 14:44 - 2013-10-07 00:26 - 00487360 _____ (DTS) C:\WINDOWS\system32\DTSU2PGFX64.dll
2014-01-29 14:44 - 2013-10-07 00:26 - 00415680 _____ (DTS) C:\WINDOWS\system32\DTSU2PREC64.dll
2014-01-29 14:44 - 2013-09-10 04:02 - 06217904 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64A.dll
2014-01-29 14:44 - 2013-09-10 04:02 - 00313520 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64A.dll
2014-01-29 14:44 - 2013-09-10 04:01 - 01938608 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64A.dll
2014-01-29 14:44 - 2013-09-10 04:01 - 00260272 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64.dll
2014-01-29 14:44 - 2013-08-20 17:37 - 00605496 _____ () C:\WINDOWS\system32\audioLibVc.dll
2014-01-29 14:44 - 2013-08-14 16:35 - 01084160 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO4064.dll
2014-01-29 14:44 - 2013-08-14 16:35 - 00663296 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO30.dll
2014-01-29 14:44 - 2013-08-05 18:11 - 02743328 _____ (Fortemedia Corporation) C:\WINDOWS\system32\FMAPO64.dll
2014-01-29 14:44 - 2013-07-23 15:39 - 00790272 _____ (Waves Audio Ltd.) C:\WINDOWS\SysWOW64\MaxxAudioAPOShell.dll
2014-01-29 14:44 - 2013-06-21 11:01 - 00109848 _____ () C:\WINDOWS\system32\AcpiServiceVnA64.dll
2014-01-29 14:44 - 2012-03-08 11:47 - 00108640 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll
2014-01-29 14:44 - 2011-08-23 17:00 - 00603984 _____ (Knowles Acoustics ) C:\WINDOWS\system32\KAAPORT64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 01756264 _____ (DTS) C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 01568360 _____ (DTS) C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 01486952 _____ (DTS) C:\WINDOWS\system32\DTSBoostDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00728680 _____ (DTS) C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00712296 _____ (DTS) C:\WINDOWS\system32\DTSSymmetryDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00693352 _____ (DTS) C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00491112 _____ (DTS) C:\WINDOWS\system32\DTSNeoPCDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00432744 _____ (DTS) C:\WINDOWS\system32\DTSLimiterDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00428648 _____ (DTS) C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\WINDOWS\system32\DTSLFXAPO64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPO64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00241768 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPONS64.dll
2014-01-29 14:44 - 2010-09-27 09:34 - 00318808 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO20.dll
2014-01-29 14:29 - 2014-01-29 14:37 - 109595877 _____ () C:\Users\Lucien\Downloads\Audio_Realtek_Win81_64_VER6017083.zip
2014-01-29 14:20 - 2014-01-29 14:20 - 02903255 _____ () C:\Users\Lucien\Downloads\tweaking.com_windows_repair_aio.zip
2014-01-29 13:10 - 2014-02-11 22:47 - 00002197 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-29 13:09 - 2014-01-29 14:46 - 00000000 ____D () C:\Program Files (x86)\GUMCBFB.tmp
2014-01-29 13:05 - 2014-01-29 13:07 - 37739976 _____ (Google Inc.) C:\Users\Lucien\Downloads\ChromeStandalone32Setup.exe
2014-01-29 13:02 - 2014-01-29 13:02 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Deployment
2014-01-29 12:56 - 2014-01-29 12:56 - 00000000 ____D () C:\Users\Lucien\Desktop\chrome default
2014-01-29 12:49 - 2014-01-29 12:49 - 00001124 _____ () C:\Users\Lucien\Desktop\Absolute Uninstaller.lnk
2014-01-29 12:49 - 2014-01-29 12:49 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\GlarySoft
2014-01-29 12:48 - 2014-01-29 12:48 - 02194784 _____ (Glarysoft.com ) C:\Users\Lucien\Downloads\au29setup.exe
2014-01-29 09:54 - 2014-01-29 09:54 - 00048629 _____ () C:\Users\Lucien\Documents\Namenschilder%20fertig.ppt_0.odp
2014-01-29 09:40 - 2014-02-05 13:17 - 00000000 ____D () C:\ProgramData\Atheros
2014-01-29 09:40 - 2014-01-29 09:40 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Atheros
2014-01-28 14:00 - 2014-01-28 14:05 - 00000000 ____D () C:\Program Files\Common Files\QCA_Bluetooth
2014-01-28 13:56 - 2014-01-28 13:56 - 00000000 ____D () C:\Users\Lucien\Downloads\Win8 Key
2014-01-28 13:51 - 2014-01-28 13:52 - 00000000 ____D () C:\Users\Lucien\Downloads\wlan
2014-01-28 13:51 - 2014-01-28 13:51 - 00000000 ____D () C:\Users\Lucien\Downloads\lan
2014-01-28 13:50 - 2014-01-28 13:50 - 00000000 ____D () C:\Users\Lucien\Downloads\bluetooth
2014-01-28 13:48 - 2014-01-28 13:49 - 00000000 ____D () C:\Users\Lucien\Downloads\audio
2014-01-28 13:46 - 2014-01-28 13:46 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_btmaux_01009.Wdf
2014-01-28 13:45 - 2014-01-28 13:45 - 00000000 ____D () C:\Users\Lucien\Downloads\blue
2014-01-28 13:44 - 2014-01-28 13:45 - 00000000 ____D () C:\Users\Lucien\Downloads\Lang
2014-01-28 12:12 - 2014-01-28 12:12 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-01-28 12:11 - 2014-01-29 09:40 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-01-28 12:11 - 2014-01-29 09:39 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-01-28 12:10 - 2013-12-19 21:33 - 30372640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 25257248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 22960416 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 18310112 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 18222008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 17560352 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 15877216 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 15230352 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 12645664 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2014-01-28 12:10 - 2013-12-19 21:33 - 11605752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 11554264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 09700224 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 09657464 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 03132704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 03125024 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvenc.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 02947872 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 02747680 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvenc.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00882464 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00879392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00852768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00847648 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00479520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00405280 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00317472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00266984 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00032544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys
2014-01-28 11:40 - 2014-01-28 11:40 - 00001369 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2014-01-28 11:40 - 2014-01-28 11:40 - 00000000 ____D () C:\Users\Lucien\AppData\Local\NVIDIA Corporation
2014-01-28 11:39 - 2014-01-28 11:41 - 00000000 ____D () C:\Users\Lucien\AppData\Local\NVIDIA
2014-01-28 11:39 - 2014-01-21 03:54 - 01179576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2014-01-28 11:39 - 2014-01-21 03:54 - 01048152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2014-01-28 11:39 - 2013-12-27 19:42 - 00039200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2014-01-28 11:39 - 2013-12-27 19:42 - 00035104 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2014-01-28 11:39 - 2013-12-27 19:42 - 00033056 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2014-01-28 10:55 - 2014-01-28 12:11 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-01-28 10:55 - 2013-12-19 19:53 - 06671648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2014-01-28 10:55 - 2013-12-19 19:53 - 03490080 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2014-01-28 10:55 - 2013-12-19 19:53 - 02559776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2014-01-28 10:55 - 2013-12-19 19:53 - 01065248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2014-01-28 10:55 - 2013-12-19 19:53 - 00922912 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2014-01-28 10:55 - 2013-12-19 19:53 - 00386336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2014-01-28 10:55 - 2013-12-19 19:53 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2014-01-28 10:55 - 2013-12-19 19:53 - 00063776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2014-01-28 10:55 - 2013-12-19 06:01 - 03539040 _____ () C:\WINDOWS\system32\nvcoproc.bin
2014-01-28 10:54 - 2014-01-28 11:40 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-01-28 10:53 - 2014-01-28 10:53 - 00000000 ____D () C:\NVIDIA
2014-01-28 10:41 - 2014-01-28 10:41 - 00000000 ____D () C:\WINDOWS\pss
2014-01-28 09:59 - 2014-01-28 10:01 - 31475128 _____ (NVIDIA Corporation) C:\Users\Lucien\Downloads\GeForce_Experience_v1.8.2.0.exe
2014-01-27 23:55 - 2013-12-19 21:33 - 01884448 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6433221.dll
2014-01-27 23:55 - 2013-12-19 21:33 - 01511712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6433221.dll
2014-01-27 23:55 - 2013-12-19 21:33 - 00357152 _____ () C:\WINDOWS\system32\NvIFROpenGL.dll
2014-01-27 23:55 - 2013-12-19 21:33 - 00314656 _____ () C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2014-01-27 22:46 - 2014-01-27 22:59 - 266633424 _____ (NVIDIA Corporation) C:\Users\Lucien\Downloads\332.21-notebook-win8-win7-64bit-international-whql.exe
2014-01-27 20:36 - 2014-02-11 22:48 - 00023784 _____ () C:\Users\Lucien\Desktop\FRST.txt
2014-01-27 19:54 - 2014-01-27 20:33 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-27 19:53 - 2014-01-27 19:53 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-01-27 19:52 - 2014-01-27 19:52 - 00000000 ____D () C:\Users\Lucien\Desktop\mbar
2014-01-27 19:47 - 2014-01-27 19:48 - 00000000 ____D () C:\Users\Lucien\Desktop\Logs2
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-01-26 20:53 - 2014-01-26 20:53 - 00003186 _____ () C:\WINDOWS\System32\Tasks\{E66DEEF7-845B-48C8-BBEE-CE6EA6F2EE96}
2014-01-26 19:26 - 2014-01-26 19:26 - 00003362 _____ () C:\WINDOWS\System32\Tasks\{63C03234-5B71-4184-AD48-4EE22D315F87}
2014-01-25 15:01 - 2014-01-25 15:01 - 00000000 ____H () C:\Users\Lucien\Documents\Default.rdp
2014-01-24 19:21 - 2014-01-24 19:21 - 00000000 ____D () C:\Users\Lucien\Desktop\Logs alt
2014-01-24 19:17 - 2014-01-24 19:17 - 00361185 _____ (Farbar) C:\Users\Lucien\Desktop\FSS.exe
2014-01-24 16:48 - 2014-01-24 16:48 - 00032847 _____ () C:\Users\Lucien\Desktop\gmer.zip
2014-01-24 11:34 - 2014-01-24 11:34 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-01-24 10:53 - 2014-01-24 10:53 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-01-22 21:41 - 2014-02-11 22:47 - 00000000 ____D () C:\Users\Lucien\Desktop\FRST-OlderVersion
2014-01-22 21:23 - 2014-01-22 21:23 - 00022688 _____ () C:\Users\Lucien\Downloads\Addition.txt
2014-01-22 21:22 - 2014-01-22 21:23 - 00046051 _____ () C:\Users\Lucien\Downloads\FRST.txt
2014-01-22 13:59 - 2014-02-11 22:47 - 02151424 _____ (Farbar) C:\Users\Lucien\Desktop\FRST64.exe
2014-01-22 12:30 - 2014-01-22 12:30 - 00000168 _____ () C:\Users\Lucien\defogger_reenable
2014-01-22 00:11 - 2014-01-17 20:25 - 00379904 _____ () C:\Users\Lucien\Desktop\gmer.exe
2014-01-22 00:10 - 2014-01-29 14:54 - 00000000 ____D () C:\Users\Lucien\Desktop\Tweaking.com - Windows Repair
2014-01-22 00:10 - 2012-12-19 16:10 - 00000000 ____D () C:\Users\Lucien\Desktop\data
2014-01-22 00:10 - 2009-10-20 21:47 - 00055936 _____ () C:\Users\Lucien\Desktop\Setup.exe
2014-01-21 23:54 - 2014-02-11 22:47 - 00000000 ____D () C:\FRST
2014-01-21 15:06 - 2014-01-21 15:06 - 01037068 _____ (Thisisu) C:\Users\Lucien\Desktop\JRT.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00987425 _____ () C:\Users\Lucien\Desktop\SecurityCheck.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00448512 _____ (OldTimer Tools) C:\Users\Lucien\Desktop\TFC.exe
2014-01-21 15:05 - 2014-01-21 15:05 - 01236282 _____ () C:\Users\Lucien\Desktop\adwcleaner.exe
2014-01-21 15:00 - 2014-01-21 15:01 - 02347384 _____ (ESET) C:\Users\Lucien\Desktop\esetsmartinstaller_enu.exe
2014-01-21 13:15 - 2014-01-21 13:25 - 24859352 _____ (Microsoft Corporation) C:\Users\Gast\Downloads\Windows-KB890830-x64-V5.8.exe
2014-01-21 10:40 - 2014-01-22 14:01 - 00000000 ____D () C:\Users\Gast\AppData\Local\My Games
2014-01-21 10:18 - 2014-01-21 10:18 - 00050477 _____ () C:\Users\Lucien\Desktop\Defogger.exe
2014-01-21 10:12 - 2014-01-21 10:12 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\QuickScan
2014-01-21 09:38 - 2014-01-21 09:38 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Spotydl
2014-01-20 16:10 - 2013-12-03 13:49 - 00000000 ____D () C:\Users\Gast\Downloads\settings
2014-01-20 15:53 - 2014-01-20 15:53 - 00000000 ____D () C:\Users\Gast\AppData\Local\NVIDIA Corporation
2014-01-20 15:52 - 2014-02-05 13:17 - 00000000 ____D () C:\Users\Gast\Documents\Bluetooth Folder
2014-01-20 15:52 - 2014-01-21 08:37 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Bitdefender
2014-01-20 15:52 - 2014-01-20 15:52 - 00000385 _____ () C:\Users\Gast\AppData\Roaminguser_gensett.xml
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D () C:\Users\Gast\AppData\Local\BMExplorer
2014-01-20 15:51 - 2014-01-20 15:51 - 00000000 ____D () C:\Users\Lucien\Documents\AdobeStockPhotos
2014-01-19 21:21 - 2014-01-19 08:38 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-01-19 18:22 - 2014-01-29 16:06 - 00000000 ____D () C:\WINDOWS\Minidump
2014-01-19 18:22 - 2014-01-19 18:22 - 00305304 _____ () C:\WINDOWS\Minidump\011914-32203-01.dmp
2014-01-17 13:50 - 2014-01-20 13:49 - 00000000 ____D () C:\Users\Lucien\Downloads\backups
2014-01-17 13:42 - 2014-01-19 18:46 - 00012554 _____ () C:\Users\Lucien\Downloads\hijackthis.log
2014-01-17 13:42 - 2014-01-17 13:42 - 00388608 _____ (Trend Micro Inc.) C:\Users\Lucien\Downloads\HiJackThis204.exe
2014-01-17 09:54 - 2014-01-17 09:54 - 00000385 _____ () C:\Users\Lucien\AppData\Roaminguser_gensett.xml
2014-01-16 14:05 - 2013-12-11 08:55 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-01-16 14:05 - 2013-12-09 01:34 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-01-16 14:05 - 2013-12-09 01:04 - 00980480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-01-16 14:05 - 2013-11-27 16:34 - 03210528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2014-01-16 14:05 - 2013-11-27 16:27 - 00809872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-01-16 14:05 - 2013-11-27 15:00 - 00663680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-01-16 14:05 - 2013-11-27 14:47 - 02804528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2014-01-16 14:05 - 2013-11-27 13:02 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ipnat.sys
2014-01-16 14:05 - 2013-11-27 11:54 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-01-16 14:05 - 2013-11-27 11:24 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll
2014-01-16 14:05 - 2013-11-27 11:08 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-01-16 14:05 - 2013-11-27 10:46 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll
2014-01-16 14:05 - 2013-11-27 10:41 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2014-01-16 14:05 - 2013-11-27 10:17 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-01-16 14:05 - 2013-11-27 10:10 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2014-01-16 14:05 - 2013-11-27 09:58 - 01503232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-01-16 14:05 - 2013-11-27 09:56 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll
2014-01-16 14:05 - 2013-11-27 09:20 - 04106240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-01-16 14:05 - 2013-11-27 05:01 - 00385614 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-01-16 14:05 - 2013-11-26 14:22 - 01928144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2014-01-16 14:05 - 2013-11-26 14:20 - 02131120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-01-16 14:05 - 2013-11-26 14:20 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-01-16 14:05 - 2013-11-26 14:20 - 01374384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-01-16 14:05 - 2013-11-26 12:50 - 01371312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2014-01-16 14:05 - 2013-11-26 12:44 - 02142936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-01-16 14:05 - 2013-11-26 12:44 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-01-16 14:05 - 2013-11-26 11:13 - 04191232 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-01-16 14:05 - 2013-11-26 10:21 - 18577920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-01-16 14:05 - 2013-11-26 09:28 - 13925888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-01-16 14:05 - 2013-11-25 02:45 - 00142680 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-01-16 14:05 - 2013-11-25 02:32 - 01119064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2014-01-16 14:05 - 2013-11-25 00:30 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2014-01-16 14:05 - 2013-11-25 00:28 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2014-01-16 14:05 - 2013-11-23 13:47 - 00032088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-01-16 14:05 - 2013-11-23 12:49 - 21196664 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-01-16 14:05 - 2013-11-23 09:19 - 18642504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-01-16 14:05 - 2013-11-23 08:13 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\bi.dll
2014-01-16 14:05 - 2013-11-23 08:13 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys
2014-01-16 14:05 - 2013-11-23 08:08 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-01-16 14:05 - 2013-11-23 05:50 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-01-16 14:05 - 2013-11-23 04:57 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2014-01-16 14:05 - 2013-11-23 04:48 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2014-01-16 14:05 - 2013-11-23 04:25 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2014-01-16 14:05 - 2013-11-23 04:25 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2014-01-16 14:05 - 2013-11-23 04:19 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-01-16 14:05 - 2013-11-23 04:15 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-01-16 14:05 - 2013-11-21 07:58 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceregistration.dll
2014-01-16 14:05 - 2013-11-21 07:26 - 01415680 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-01-16 14:05 - 2013-11-16 06:11 - 00764856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-01-16 14:05 - 2013-11-15 19:19 - 00669344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-01-16 14:05 - 2013-11-15 15:59 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2014-01-16 14:05 - 2013-11-15 15:25 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2014-01-16 14:05 - 2013-11-15 15:08 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-01-16 14:05 - 2013-11-15 14:24 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-01-16 14:05 - 2013-11-05 21:12 - 02551128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-01-16 14:05 - 2013-10-31 01:29 - 00745336 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-01-16 14:05 - 2013-10-31 00:41 - 00552624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2014-01-15 23:39 - 2013-12-09 01:15 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-01-15 23:39 - 2013-11-27 16:36 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-01-15 23:39 - 2013-11-27 12:41 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe
2014-01-15 23:39 - 2013-11-27 11:34 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll
2014-01-15 23:39 - 2013-11-27 10:54 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-01-15 23:39 - 2013-11-27 09:48 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 23:39 - 2013-11-27 09:45 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-01-15 23:39 - 2013-11-27 09:40 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 23:39 - 2013-11-27 09:38 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-01-15 23:39 - 2013-11-27 09:17 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-01-15 23:39 - 2013-11-27 09:12 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-01-13 23:23 - 2014-01-13 23:23 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\system32\bdsandboxuiskin32.dll
2014-01-13 23:20 - 2014-01-19 16:08 - 00000000 ____D () C:\Program Files (x86)\McAfee Security Scan
2014-01-13 23:20 - 2014-01-13 23:20 - 00002041 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-13 22:54 - 2014-01-13 22:54 - 00620542 _____ () C:\ProgramData\1389649682.bdinstall.bin
2014-01-13 22:54 - 2014-01-13 22:54 - 00000385 _____ () C:\WINDOWS\system32\user_gensett.xml
2014-01-13 22:53 - 2014-01-13 23:23 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\SysWOW64\bdsandboxuiskin32.dll
2014-01-13 22:53 - 2014-01-13 22:54 - 00000000 ____D () C:\ProgramData\BDLogging
2014-01-13 22:53 - 2014-01-13 22:53 - 00002212 _____ () C:\Users\Public\Desktop\Bitdefender Safepay.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00002164 _____ () C:\Users\Public\Desktop\Bitdefender Total Security.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2014-01-13 22:53 - 2013-11-04 15:47 - 00082824 _____ (BitDefender SRL) C:\WINDOWS\system32\Drivers\bdsandbox.sys
2014-01-13 22:53 - 2013-09-08 19:04 - 00023568 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bdelam.sys
2014-01-13 22:53 - 2013-07-30 17:41 - 00079192 _____ (BitDefender) C:\WINDOWS\system32\Drivers\bdvedisk.sys
2014-01-13 22:53 - 2013-07-24 17:19 - 00098768 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\bdfndisf6.sys
2014-01-13 22:53 - 2007-04-11 10:11 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\capicom.dll
2014-01-13 22:52 - 2014-02-03 20:47 - 00893440 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avc3.sys
2014-01-13 22:52 - 2014-02-03 20:45 - 00635392 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avckf.sys
2014-01-13 22:52 - 2014-01-13 23:23 - 00261056 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avchv.sys
2014-01-13 22:52 - 2014-01-13 22:54 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Bitdefender
2014-01-13 22:48 - 2014-01-13 23:23 - 00000000 ____D () C:\ProgramData\Bitdefender
2014-01-13 22:48 - 2014-01-13 22:52 - 00000000 ____D () C:\Program Files\Bitdefender
2014-01-13 22:48 - 2014-01-13 22:48 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\QuickScan
2014-01-13 22:48 - 2013-11-04 15:47 - 00084848 _____ (BitDefender SRL) C:\WINDOWS\system32\BDSandBoxUISkin.dll
2014-01-13 22:48 - 2013-11-04 15:46 - 00034384 _____ (BitDefender SRL) C:\WINDOWS\system32\BDSandBoxUH.dll
2014-01-13 22:48 - 2013-08-23 12:48 - 00150256 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\gzflt.sys
2014-01-13 22:48 - 2013-08-07 12:46 - 00389240 _____ (BitDefender S.R.L.) C:\WINDOWS\system32\Drivers\trufos.sys
2014-01-12 22:56 - 2014-01-13 22:48 - 00000000 ____D () C:\Program Files\Common Files\Bitdefender
2014-01-12 22:29 - 2014-01-12 22:29 - 07171632 _____ () C:\Users\Lucien\Downloads\bitdefender_tsecurity.exe

==================== One Month Modified Files and Folders =======

2014-02-11 22:48 - 2014-01-27 20:36 - 00023784 _____ () C:\Users\Lucien\Desktop\FRST.txt
2014-02-11 22:48 - 2014-01-21 23:54 - 00000000 ____D () C:\FRST
2014-02-11 22:48 - 2013-08-22 11:25 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Adobe
2014-02-11 22:47 - 2014-01-29 13:10 - 00002197 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-11 22:47 - 2014-01-22 21:41 - 00000000 ____D () C:\Users\Lucien\Desktop\FRST-OlderVersion
2014-02-11 22:47 - 2014-01-22 13:59 - 02151424 _____ (Farbar) C:\Users\Lucien\Desktop\FRST64.exe
2014-02-11 22:47 - 2013-08-20 17:50 - 00000000 ____D () C:\Users\Lucien\AppData\Local\CrashDumps
2014-02-11 22:47 - 2013-08-19 19:06 - 00001130 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-11 22:46 - 2013-11-05 22:24 - 00000000 __RDO () C:\Users\Lucien\SkyDrive
2014-02-11 22:45 - 2013-11-05 21:43 - 02012334 _____ () C:\WINDOWS\WindowsUpdate.log
2014-02-11 22:35 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-02-11 01:00 - 2013-07-18 20:55 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3506778915-1287356822-3408950579-1002
2014-02-11 00:59 - 2013-09-30 05:14 - 01804156 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-02-11 00:59 - 2013-09-30 04:56 - 00761880 _____ () C:\WINDOWS\system32\perfh007.dat
2014-02-11 00:59 - 2013-09-30 04:56 - 00159758 _____ () C:\WINDOWS\system32\perfc007.dat
2014-02-11 00:54 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-02-11 00:53 - 2013-08-22 14:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2014-02-11 00:28 - 2013-08-19 19:07 - 00001134 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-11 00:27 - 2013-09-10 15:25 - 00180736 ___SH () C:\Users\Lucien\Desktop\Thumbs.db
2014-02-10 13:36 - 2013-06-26 08:07 - 00003474 _____ () C:\WINDOWS\System32\Tasks\ASUS Live Update1
2014-02-10 13:36 - 2013-06-26 08:07 - 00003464 _____ () C:\WINDOWS\System32\Tasks\ASUS Live Update2
2014-02-09 21:44 - 2013-08-23 10:50 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-02-09 21:24 - 2013-09-29 20:04 - 09449668 _____ () C:\WINDOWS\PFRO.log
2014-02-09 14:33 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-02-09 14:33 - 2013-07-18 20:48 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Packages
2014-02-09 12:05 - 2014-02-09 12:05 - 00000000 ____D () C:\Users\Lucien\Documents\Meine empfangenen Dateien
2014-02-09 12:04 - 2013-07-18 20:50 - 00000000 ____D () C:\Users\Lucien\Documents\Bluetooth Folder
2014-02-09 11:50 - 2013-10-21 14:16 - 00031898 _____ () C:\LJCP1215.log
2014-02-09 11:41 - 2014-02-09 11:41 - 07391168 _____ () C:\Users\Lucien\Downloads\ljcP1215-HB-pnp-win64-de.exe
2014-02-09 11:34 - 2013-08-22 15:46 - 00386398 _____ () C:\WINDOWS\setupact.log
2014-02-08 22:44 - 2014-02-08 22:44 - 00000000 ____D () C:\Users\Lucien\Documents\EA Games
2014-02-08 22:44 - 2013-04-26 00:16 - 00390717 _____ () C:\WINDOWS\DirectX.log
2014-02-08 12:15 - 2014-02-08 12:15 - 00000000 _____ () C:\WINDOWS\SysWOW64\debug.log
2014-02-07 22:47 - 2013-09-09 20:00 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\vlc
2014-02-07 22:36 - 2014-02-05 16:11 - 00000000 ____D () C:\Users\Lucien\Desktop\Indian Summer Westward Ho!
2014-02-07 22:24 - 2014-02-07 22:24 - 00001214 _____ () C:\Users\Lucien\Desktop\IsoBuster.lnk
2014-02-07 22:24 - 2014-02-07 22:24 - 00000000 ____D () C:\Program Files (x86)\Smart Projects
2014-02-07 22:21 - 2014-02-07 22:21 - 04669400 _____ (Smart Projects ) C:\Users\Lucien\Downloads\isobuster_all_lang_3.3.exe
2014-02-07 22:21 - 2014-02-07 22:14 - 00000000 ____D () C:\Users\Lucien\Downloads\bin2iso
2014-02-07 15:45 - 2014-02-05 17:18 - 00002662 _____ () C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-02-05 17:18 - 2014-02-05 17:18 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Smartbar
2014-02-05 17:17 - 2014-02-05 17:17 - 00001968 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2014-02-05 17:16 - 2014-02-05 17:16 - 00283064 _____ (Disc Soft Ltd) C:\WINDOWS\system32\Drivers\dtsoftbus01.sys
2014-02-05 17:16 - 2014-02-05 17:16 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\OpenCandy
2014-02-05 17:16 - 2014-02-05 17:16 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite
2014-02-05 17:14 - 2014-02-05 17:12 - 13485616 _____ (Disc Soft Ltd) C:\Users\Lucien\Downloads\DTLite4481-0347.exe
2014-02-05 16:50 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-02-05 16:46 - 2014-02-05 13:28 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\DigitalSites
2014-02-05 16:12 - 2014-02-05 16:12 - 00000000 ____D () C:\Program Files (x86)\AviSynth 2.5
2014-02-05 16:07 - 2014-02-05 16:07 - 00001130 _____ () C:\Users\Public\Desktop\SUPER ©.lnk
2014-02-05 16:07 - 2014-02-05 16:07 - 00000000 ____D () C:\Users\Lucien\Documents\eRightSoft
2014-02-05 16:06 - 2014-02-05 16:06 - 00000000 ____D () C:\Program Files (x86)\eRightSoft
2014-02-05 16:04 - 2014-02-05 16:02 - 64722252 _____ (eRightSoft ) C:\Users\Lucien\Downloads\SUPERsetup.exe
2014-02-05 15:49 - 2013-10-03 02:33 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\vlc
2014-02-05 13:30 - 2014-02-05 13:26 - 00000000 ____D () C:\Users\Gast\AppData\Local\CrashDumps
2014-02-05 13:27 - 2014-02-05 13:27 - 00670720 _____ () C:\Users\Gast\Downloads\VideoConverterSetup.exe
2014-02-05 13:18 - 2013-10-19 09:42 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Spotify
2014-02-05 13:17 - 2014-02-05 13:17 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Atheros
2014-02-05 13:17 - 2014-01-29 09:40 - 00000000 ____D () C:\ProgramData\Atheros
2014-02-05 13:17 - 2014-01-20 15:52 - 00000000 ____D () C:\Users\Gast\Documents\Bluetooth Folder
2014-02-05 13:17 - 2013-09-26 11:25 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Apple Computer
2014-02-05 13:17 - 2013-09-26 11:23 - 00000062 _____ () C:\Users\Gast\AppData\Roaming\sp_data.sys
2014-02-05 13:16 - 2014-02-05 13:16 - 00000008 __RSH () C:\Users\Gast\ntuser.pol
2014-02-05 13:16 - 2013-11-05 21:47 - 00000000 ____D () C:\Users\Gast
2014-02-03 20:47 - 2014-01-13 22:52 - 00893440 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avc3.sys
2014-02-03 20:45 - 2014-01-13 22:52 - 00635392 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avckf.sys
2014-02-03 20:40 - 2014-02-03 20:21 - 00102400 _____ () C:\Users\Lucien\Desktop\Namenschilder fertig.ppt
2014-02-03 20:22 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-02-03 08:14 - 2014-02-03 08:14 - 00003576 _____ () C:\WINDOWS\System32\Tasks\Bitdefender Auto-Scan
2014-01-30 21:47 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-01-30 21:47 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-29 16:26 - 2013-11-05 21:47 - 00000000 ____D () C:\Users\Lucien
2014-01-29 16:07 - 2014-01-29 16:06 - 00298424 _____ () C:\WINDOWS\Minidump\012914-53375-01.dmp
2014-01-29 16:06 - 2014-01-19 18:22 - 00000000 ____D () C:\WINDOWS\Minidump
2014-01-29 16:06 - 2013-09-13 12:11 - 894753829 _____ () C:\WINDOWS\MEMORY.DMP
2014-01-29 16:06 - 2013-08-22 15:44 - 05147912 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-01-29 16:04 - 2014-01-29 15:41 - 00181064 _____ (Sysinternals) C:\WINDOWS\PSEXESVC.EXE
2014-01-29 16:03 - 2012-07-26 06:26 - 00000160 _____ () C:\WINDOWS\win.ini
2014-01-29 15:37 - 2014-01-29 15:37 - 00000207 _____ () C:\WINDOWS\tweaking.com-regbackup-LUCIENSNOTE-Microsoft-Windows-8.1-(64-bit).dat
2014-01-29 15:36 - 2014-01-29 15:36 - 00000000 ____D () C:\RegBackup
2014-01-29 15:11 - 2013-07-18 20:49 - 00000074 _____ () C:\Users\Lucien\AppData\Roaming\sp_data.sys
2014-01-29 14:56 - 2014-01-29 14:56 - 00000000 ____D () C:\Users\Lucien\Downloads\Tweaking.com - Windows Repair
2014-01-29 14:54 - 2014-01-22 00:10 - 00000000 ____D () C:\Users\Lucien\Desktop\Tweaking.com - Windows Repair
2014-01-29 14:48 - 2014-01-29 14:48 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2014-01-29 14:48 - 2013-11-05 21:42 - 00109524 _____ () C:\WINDOWS\system32\Drivers\RTWAVES30.dat
2014-01-29 14:48 - 2013-11-05 21:41 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2014-01-29 14:47 - 2013-08-22 15:46 - 00000974 _____ () C:\WINDOWS\setuperr.log
2014-01-29 14:46 - 2014-01-29 13:09 - 00000000 ____D () C:\Program Files (x86)\GUMCBFB.tmp
2014-01-29 14:37 - 2014-01-29 14:29 - 109595877 _____ () C:\Users\Lucien\Downloads\Audio_Realtek_Win81_64_VER6017083.zip
2014-01-29 14:34 - 2013-06-26 07:58 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-01-29 14:34 - 2013-06-26 07:51 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-01-29 14:20 - 2014-01-29 14:20 - 02903255 _____ () C:\Users\Lucien\Downloads\tweaking.com_windows_repair_aio.zip
2014-01-29 13:07 - 2014-01-29 13:05 - 37739976 _____ (Google Inc.) C:\Users\Lucien\Downloads\ChromeStandalone32Setup.exe
2014-01-29 13:06 - 2013-04-26 00:19 - 00000000 ____D () C:\ProgramData\WildTangent
2014-01-29 13:02 - 2014-01-29 13:02 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Deployment
2014-01-29 12:56 - 2014-01-29 12:56 - 00000000 ____D () C:\Users\Lucien\Desktop\chrome default
2014-01-29 12:49 - 2014-01-29 12:49 - 00001124 _____ () C:\Users\Lucien\Desktop\Absolute Uninstaller.lnk
2014-01-29 12:49 - 2014-01-29 12:49 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\GlarySoft
2014-01-29 12:48 - 2014-01-29 12:48 - 02194784 _____ (Glarysoft.com ) C:\Users\Lucien\Downloads\au29setup.exe
2014-01-29 09:54 - 2014-01-29 09:54 - 00048629 _____ () C:\Users\Lucien\Documents\Namenschilder%20fertig.ppt_0.odp
2014-01-29 09:40 - 2014-01-29 09:40 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Atheros
2014-01-29 09:40 - 2014-01-28 12:11 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-01-29 09:39 - 2014-01-28 12:11 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-01-28 14:05 - 2014-01-28 14:00 - 00000000 ____D () C:\Program Files\Common Files\QCA_Bluetooth
2014-01-28 14:00 - 2013-06-26 08:02 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite
2014-01-28 13:56 - 2014-01-28 13:56 - 00000000 ____D () C:\Users\Lucien\Downloads\Win8 Key
2014-01-28 13:52 - 2014-01-28 13:51 - 00000000 ____D () C:\Users\Lucien\Downloads\wlan
2014-01-28 13:51 - 2014-01-28 13:51 - 00000000 ____D () C:\Users\Lucien\Downloads\lan
2014-01-28 13:50 - 2014-01-28 13:50 - 00000000 ____D () C:\Users\Lucien\Downloads\bluetooth
2014-01-28 13:49 - 2014-01-28 13:48 - 00000000 ____D () C:\Users\Lucien\Downloads\audio
2014-01-28 13:46 - 2014-01-28 13:46 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_btmaux_01009.Wdf
2014-01-28 13:46 - 2013-11-05 21:42 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-01-28 13:45 - 2014-01-28 13:45 - 00000000 ____D () C:\Users\Lucien\Downloads\blue
2014-01-28 13:45 - 2014-01-28 13:44 - 00000000 ____D () C:\Users\Lucien\Downloads\Lang
2014-01-28 12:12 - 2014-01-28 12:12 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-01-28 12:12 - 2013-11-05 21:42 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-01-28 12:11 - 2014-01-28 10:55 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-01-28 11:41 - 2014-01-28 11:39 - 00000000 ____D () C:\Users\Lucien\AppData\Local\NVIDIA
2014-01-28 11:40 - 2014-01-28 11:40 - 00001369 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2014-01-28 11:40 - 2014-01-28 11:40 - 00000000 ____D () C:\Users\Lucien\AppData\Local\NVIDIA Corporation
2014-01-28 11:40 - 2014-01-28 10:54 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-01-28 11:39 - 2013-11-05 21:42 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-01-28 10:53 - 2014-01-28 10:53 - 00000000 ____D () C:\NVIDIA
2014-01-28 10:48 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Help
2014-01-28 10:41 - 2014-01-28 10:41 - 00000000 ____D () C:\WINDOWS\pss
2014-01-28 10:01 - 2014-01-28 09:59 - 31475128 _____ (NVIDIA Corporation) C:\Users\Lucien\Downloads\GeForce_Experience_v1.8.2.0.exe
2014-01-27 22:59 - 2014-01-27 22:46 - 266633424 _____ (NVIDIA Corporation) C:\Users\Lucien\Downloads\332.21-notebook-win8-win7-64bit-international-whql.exe
2014-01-27 20:33 - 2014-01-27 19:54 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-27 20:20 - 2013-09-12 10:02 - 00296960 ___SH () C:\Users\Lucien\Downloads\Thumbs.db
2014-01-27 20:01 - 2013-10-14 09:56 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Spotify
2014-01-27 19:53 - 2014-01-27 19:53 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-01-27 19:52 - 2014-01-27 19:52 - 00000000 ____D () C:\Users\Lucien\Desktop\mbar
2014-01-27 19:48 - 2014-01-27 19:47 - 00000000 ____D () C:\Users\Lucien\Desktop\Logs2
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-01-26 20:53 - 2014-01-26 20:53 - 00003186 _____ () C:\WINDOWS\System32\Tasks\{E66DEEF7-845B-48C8-BBEE-CE6EA6F2EE96}
2014-01-26 19:26 - 2014-01-26 19:26 - 00003362 _____ () C:\WINDOWS\System32\Tasks\{63C03234-5B71-4184-AD48-4EE22D315F87}
2014-01-25 15:01 - 2014-01-25 15:01 - 00000000 ____H () C:\Users\Lucien\Documents\Default.rdp
2014-01-24 19:21 - 2014-01-24 19:21 - 00000000 ____D () C:\Users\Lucien\Desktop\Logs alt
2014-01-24 19:17 - 2014-01-24 19:17 - 00361185 _____ (Farbar) C:\Users\Lucien\Desktop\FSS.exe
2014-01-24 19:06 - 2013-08-31 15:58 - 00000000 ____D () C:\AdwCleaner
2014-01-24 16:48 - 2014-01-24 16:48 - 00032847 _____ () C:\Users\Lucien\Desktop\gmer.zip
2014-01-24 11:34 - 2014-01-24 11:34 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-01-24 10:53 - 2014-01-24 10:53 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-01-22 21:23 - 2014-01-22 21:23 - 00022688 _____ () C:\Users\Lucien\Downloads\Addition.txt
2014-01-22 21:23 - 2014-01-22 21:22 - 00046051 _____ () C:\Users\Lucien\Downloads\FRST.txt
2014-01-22 14:01 - 2014-01-21 10:40 - 00000000 ____D () C:\Users\Gast\AppData\Local\My Games
2014-01-22 14:01 - 2013-10-01 15:03 - 00000000 ____D () C:\Users\Gast\Documents\My Games
2014-01-22 14:01 - 2013-09-01 19:44 - 00000000 ____D () C:\Users\Lucien\AppData\Local\My Games
2014-01-22 14:01 - 2013-08-20 09:54 - 00000000 ____D () C:\Users\Lucien\Documents\My Games
2014-01-22 12:30 - 2014-01-22 12:30 - 00000168 _____ () C:\Users\Lucien\defogger_reenable
2014-01-21 22:13 - 2014-01-06 13:29 - 00000000 ____D () C:\Users\Lucien\Documents\Rockstar Games
2014-01-21 22:13 - 2013-09-04 07:48 - 00000000 ____D () C:\Users\Lucien\Documents\Blender
2014-01-21 22:00 - 2013-11-04 09:24 - 00069120 ___SH () C:\Users\Gast\Downloads\Thumbs.db
2014-01-21 15:06 - 2014-01-21 15:06 - 01037068 _____ (Thisisu) C:\Users\Lucien\Desktop\JRT.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00987425 _____ () C:\Users\Lucien\Desktop\SecurityCheck.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00448512 _____ (OldTimer Tools) C:\Users\Lucien\Desktop\TFC.exe
2014-01-21 15:05 - 2014-01-21 15:05 - 01236282 _____ () C:\Users\Lucien\Desktop\adwcleaner.exe
2014-01-21 15:01 - 2014-01-21 15:00 - 02347384 _____ (ESET) C:\Users\Lucien\Desktop\esetsmartinstaller_enu.exe
2014-01-21 13:25 - 2014-01-21 13:15 - 24859352 _____ (Microsoft Corporation) C:\Users\Gast\Downloads\Windows-KB890830-x64-V5.8.exe
2014-01-21 10:38 - 2013-09-01 18:18 - 00281688 _____ () C:\WINDOWS\SysWOW64\PnkBstrB.xtr
2014-01-21 10:18 - 2014-01-21 10:18 - 00050477 _____ () C:\Users\Lucien\Desktop\Defogger.exe
2014-01-21 10:12 - 2014-01-21 10:12 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\QuickScan
2014-01-21 09:38 - 2014-01-21 09:38 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Spotydl
2014-01-21 09:37 - 2013-09-26 11:23 - 00000000 ____D () C:\Users\Gast\AppData\Local\VirtualStore
2014-01-21 08:37 - 2014-01-20 15:52 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Bitdefender
2014-01-21 03:54 - 2014-01-28 11:39 - 01179576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2014-01-21 03:54 - 2014-01-28 11:39 - 01048152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2014-01-20 15:53 - 2014-01-20 15:53 - 00000000 ____D () C:\Users\Gast\AppData\Local\NVIDIA Corporation
2014-01-20 15:52 - 2014-01-20 15:52 - 00000385 _____ () C:\Users\Gast\AppData\Roaminguser_gensett.xml
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D () C:\Users\Gast\AppData\Local\BMExplorer
2014-01-20 15:52 - 2013-10-29 11:55 - 00000000 ____D () C:\Users\Gast\AppData\Local\NVIDIA
2014-01-20 15:52 - 2013-10-19 09:42 - 00000000 ____D () C:\Users\Gast\AppData\Local\Spotify
2014-01-20 15:52 - 2013-09-26 11:24 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-20 15:52 - 2013-09-26 11:24 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-20 15:51 - 2014-01-20 15:51 - 00000000 ____D () C:\Users\Lucien\Documents\AdobeStockPhotos
2014-01-20 15:51 - 2013-07-18 20:48 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Adobe
2014-01-20 13:49 - 2014-01-17 13:50 - 00000000 ____D () C:\Users\Lucien\Downloads\backups
2014-01-20 12:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-01-19 18:46 - 2014-01-17 13:42 - 00012554 _____ () C:\Users\Lucien\Downloads\hijackthis.log
2014-01-19 18:22 - 2014-01-19 18:22 - 00305304 _____ () C:\WINDOWS\Minidump\011914-32203-01.dmp
2014-01-19 16:08 - 2014-01-13 23:20 - 00000000 ____D () C:\Program Files (x86)\McAfee Security Scan
2014-01-19 08:38 - 2014-01-19 21:21 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-01-17 20:25 - 2014-01-22 00:11 - 00379904 _____ () C:\Users\Lucien\Desktop\gmer.exe
2014-01-17 13:42 - 2014-01-17 13:42 - 00388608 _____ (Trend Micro Inc.) C:\Users\Lucien\Downloads\HiJackThis204.exe
2014-01-17 13:42 - 2013-07-18 20:48 - 00000000 ____D () C:\Users\Lucien\AppData\Local\VirtualStore
2014-01-17 09:54 - 2014-01-17 09:54 - 00000385 _____ () C:\Users\Lucien\AppData\Roaminguser_gensett.xml
2014-01-17 09:54 - 2013-07-18 20:49 - 00000000 ___RD () C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-17 09:54 - 2013-07-18 20:49 - 00000000 ___RD () C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-01-16 16:37 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\Dism
2014-01-16 16:37 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Dism
2014-01-16 13:51 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-01-16 13:29 - 2013-08-19 19:19 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-01-13 23:23 - 2014-01-13 23:23 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\system32\bdsandboxuiskin32.dll
2014-01-13 23:23 - 2014-01-13 22:53 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\SysWOW64\bdsandboxuiskin32.dll
2014-01-13 23:23 - 2014-01-13 22:52 - 00261056 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avchv.sys
2014-01-13 23:23 - 2014-01-13 22:48 - 00000000 ____D () C:\ProgramData\Bitdefender
2014-01-13 23:20 - 2014-01-13 23:20 - 00002041 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-13 23:20 - 2013-04-26 00:18 - 00000000 ____D () C:\ProgramData\McAfee
2014-01-13 23:19 - 2013-04-26 00:15 - 00000000 ____D () C:\ProgramData\Adobe
2014-01-13 23:19 - 2013-04-26 00:15 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-01-13 22:54 - 2014-01-13 22:54 - 00620542 _____ () C:\ProgramData\1389649682.bdinstall.bin
2014-01-13 22:54 - 2014-01-13 22:54 - 00000385 _____ () C:\WINDOWS\system32\user_gensett.xml
2014-01-13 22:54 - 2014-01-13 22:53 - 00000000 ____D () C:\ProgramData\BDLogging
2014-01-13 22:54 - 2014-01-13 22:52 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Bitdefender
2014-01-13 22:53 - 2014-01-13 22:53 - 00002212 _____ () C:\Users\Public\Desktop\Bitdefender Safepay.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00002164 _____ () C:\Users\Public\Desktop\Bitdefender Total Security.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2014-01-13 22:52 - 2014-01-13 22:48 - 00000000 ____D () C:\Program Files\Bitdefender
2014-01-13 22:48 - 2014-01-13 22:48 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\QuickScan
2014-01-13 22:48 - 2014-01-12 22:56 - 00000000 ____D () C:\Program Files\Common Files\Bitdefender
2014-01-13 22:46 - 2013-08-30 00:06 - 00000000 ____D () C:\avast! sandbox
2014-01-13 22:45 - 2013-08-19 19:05 - 00000000 ____D () C:\Program Files\AVAST Software
2014-01-13 22:45 - 2013-08-19 19:04 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-01-13 22:44 - 2013-08-19 19:06 - 00000000 _____ () C:\WINDOWS\SysWOW64\config.nt
2014-01-13 14:27 - 2014-01-09 12:00 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Bioshock
2014-01-12 22:29 - 2014-01-12 22:29 - 07171632 _____ () C:\Users\Lucien\Downloads\bitdefender_tsecurity.exe

Some content of TEMP:
====================
C:\Users\Gast\AppData\Local\Temp\691.355818674457_Update.exe
C:\Users\Gast\AppData\Local\Temp\drm_dyndata_7390004.dll
C:\Users\Gast\AppData\Local\Temp\ubiB23E.tmp.exe
C:\Users\Lucien\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-10 08:18

==================== End Of Log ============================

--- --- ---

--- --- ---


hey, also beta 6 ist drauf und auch sie meldet eine malware (bei fast jedem neuen tab den ich öffne) im chrome prozess, also da muss irgendwas in chrome nicht stimmen.

da ich grad kein bild anhängen kann schreib ich mal raus was in den ergebnissen steht:

API -> WSASend / Hook Method -> JMP/CALL / Destination Adress -> 0x74292e51

API -> send / Hook Method -> JMP/CALL / Destination Adress -> 0x74292dc1

ich kann damit nichts anfangen, aber Ihr vielleicht?

lg

SecureBanking 12.02.2014 00:16

Wie siehts bei Firefox bzw. Internet Explorer aus?

KitsuneNoir 12.02.2014 07:37

Die Maleware Meldung tritt nur bei google chrome auf :(
hat sich da irgendwas eingeschlichen?

sunjojo 12.02.2014 10:04

Zitat:

Das hochfahren klappt super aber der desktop mit allen symbolen baut sich extrem langsam auf und der taskmanager meldet 100%ige datenträger auslastung obwohl ich den rechner einfach so stehen lasse und nichts anrühre.
Du hast neue Adware auf deinem Rechner, die sehr wahrscheinlich die neuen Probleme verursachen (beseitigen wir schnell) :).



Schritt 1
Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).
Schritt 2
Starte noch einmal FRST.
  • Setze einen Haken bei Addition.txt und drücke auf Scan.
  • Wenn der Scan abgeschlossen ist, werden zwei neue Logfiles FRST.txt und Addition.txt erstellt und auf dem Desktop gespeichert.
  • Poste den Inhalt der Logfiles bitte hier in deinen Thread.



Poste folgende Logfiles in deiner nächsten Antwort:
  • AdwCleaner-Scan
  • FRST-Scan

KitsuneNoir 12.02.2014 20:46

hi,
adw
Code:

# AdwCleaner v3.018 - Bericht erstellt am 12/02/2014 um 20:25:29
# Updated 28/01/2014 von Xplode
# Betriebssystem : Windows 8.1  (64 bits)
# Benutzername : Lucien - LUCIENSNOTE
# Gestartet von : C:\Users\Lucien\Downloads\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Users\Lucien\AppData\Local\Smartbar
[#] Ordner Gelöscht : C:\Users\Lucien\AppData\Local\Temp\Smartbar
Ordner Gelöscht : C:\Users\Lucien\AppData\LocalLow\Smartbar
Ordner Gelöscht : C:\Users\Lucien\AppData\Roaming\OpenCandy

***** [ Verknüpfungen ] *****

Verknüpfung Desinfiziert : C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk

***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Browser Infrastructure Helper]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.bandobjectattribute
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.bho
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.dockingpanel
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbarbandobject
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.smartbardisplaystate
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.smartbarmenuform
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Schlüssel Gelöscht : HKCU\Software\smartbar
Schlüssel Gelöscht : HKCU\Software\smartbarbackup
Schlüssel Gelöscht : HKCU\Software\smartbarlog

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16384

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default]

-\\ Google Chrome v32.0.1700.107

[ Datei : C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ Datei : C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht : homepage
Gelöscht : urls_to_restore_on_startup

*************************

AdwCleaner[R0].txt - [8522 octets] - [31/08/2013 15:59:00]
AdwCleaner[R1].txt - [985 octets] - [24/01/2014 19:00:52]
AdwCleaner[R2].txt - [7386 octets] - [12/02/2014 20:08:07]
AdwCleaner[S0].txt - [8373 octets] - [31/08/2013 16:00:11]
AdwCleaner[S1].txt - [1045 octets] - [24/01/2014 19:05:46]
AdwCleaner[S2].txt - [5464 octets] - [12/02/2014 20:25:29]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [5524 octets] ##########

frst

FRST Logfile:
Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-02-2014
Ran by Lucien (administrator) on LUCIENSNOTE on 12-02-2014 20:42:16
Running from C:\Users\Lucien\Desktop
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\vsserv.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(ASUS) C:\Program Files\ASUS\P4G\InsOnSrv.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files\ASUS\P4G\InsOnWMI.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe\LiveComm.exe
(Microsoft Corporation) C:\Windows\System32\skydrive.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS Console\ASUS Console Starter.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\bdagent.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Akamai Technologies, Inc.) C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe
(Akamai Technologies, Inc.) C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
(Secure Banking) C:\Program Files (x86)\Secure Banking\SecureBanking.exe
() C:\Program Files (x86)\Secure Banking\sbservice.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-09-25] (Adobe Systems Incorporated)
HKLM\...\Run: [PrnStatusMX] - C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe [1240064 2012-07-04] (Marvell Semiconductor, Inc.)
HKLM\...\Run: [Bdagent] - C:\Program Files\Bitdefender\Bitdefender\bdagent.exe [1737920 2014-02-03] (Bitdefender)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\WINDOWS\system32\nvspcap64.dll [1179576 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [BTMTrayAgent] - C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [7818040 2013-09-19] (Motorola Solutions, Inc.)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1361112 2013-11-05] (Realtek Semiconductor)
HKLM-x32\...\Run: [ASUSPRP] - C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-04-26] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-01-15] (cyberlink)
HKLM-x32\...\Run: [ASUS InstantKey] - C:\Program Files (x86)\ASUS\ASUS Instant Key\Ikey_start.exe [13936 2013-04-16] (ASUS)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2237328 2013-11-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-09-25] ( (Atheros Communications))
HKU\.DEFAULT\...\Run: [Bitdefender-Geldbörse-Agent] - C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [567888 2014-02-11] (Bitdefender)
HKU\.DEFAULT\...\Run: [Bitdefender-Geldbörse] - C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe [1001536 2014-02-11] (Bitdefender)
HKU\.DEFAULT\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] - C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [614232 2014-02-11] (Bitdefender)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [Steam] - C:\Program Files (x86)\Steam\steam.exe [1815976 2014-01-27] (Valve Corporation)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [Spotify Web Helper] - C:\Users\Lucien\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-10] (Spotify Ltd)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [Akamai NetSession Interface] - C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [Bitdefender-Geldbörse-Agent] - C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [567888 2014-02-11] (Bitdefender)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] - C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [614232 2014-02-11] (Bitdefender)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [SecureBanking] - C:\Program Files (x86)\Secure Banking\SecureBanking.exe [507904 2013-06-30] (Secure Banking)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [168616 2013-12-19] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll, => c:\windows\syswow64\nvinit.dll [141336 2013-12-19] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [141336 2013-12-19] (NVIDIA Corporation)
Startup: C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
GroupPolicyUsers\S-1-5-21-3506778915-1287356822-3408950579-1002\User: Group Policy restriction detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;form=IE10TR&amp;src=IE10TR&amp;pc=ASU2JS
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;form=IE10TR&amp;src=IE10TR&amp;pc=ASU2JS
BHO: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\pmbxie.dll (Bitdefender)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxie.dll (Bitdefender)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Chrome:
=======
CHR HomePage: https://www.google.de/
CHR Extension: (Google Docs) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-14]
CHR Extension: (Google Drive) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-19]
CHR Extension: (YouTube) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-19]
CHR Extension: (Bitdefender Wallet) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccahoghmggldkcdjiebjkidpfongdfbl [2014-01-13]
CHR Extension: (Adblock Plus) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-02-08]
CHR Extension: (Google-Suche) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-19]
CHR Extension: (Google Wallet) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR Extension: (Google Mail) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-19]
CHR HKLM-x32\...\Chrome\Extension: [ccahoghmggldkcdjiebjkidpfongdfbl] - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxcr.crx [2014-02-11]

==================== Services (Whitelisted) =================

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-12-18] (Adobe Systems)
R2 ASUS InstantOn; C:\Program Files\ASUS\P4G\InsOnSrv.exe [277120 2013-04-29] (ASUS)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-09-25] (Windows (R) Win 7 DDK provider)
S4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender\bdparentalservice.exe [77632 2013-11-21] (Bitdefender)
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [247768 2013-01-15] (CyberLink)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-04-11] (Intel Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-09-18] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16939296 2014-01-21] (NVIDIA Corporation)
R2 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [94624 2013-07-08] (Bitdefender)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe [67320 2013-10-07] (Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender\vsserv.exe [1507248 2014-02-03] (Bitdefender)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [18384 2013-09-04] (Intel(R) Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-09-25] (Atheros)

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [70416 2013-09-23] (ASUS Corporation)
R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [893440 2014-02-03] (BitDefender)
R3 avchv; C:\Windows\system32\DRIVERS\avchv.sys [261056 2014-01-13] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [635392 2014-02-03] (BitDefender)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
S0 bdelam; C:\Windows\System32\drivers\bdelam.sys [23568 2013-09-08] (Bitdefender)
R1 BdfNdisf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys [98768 2013-07-24] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107008 2013-07-29] (BitDefender LLC)
S4 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-07-02] (Bitdefender SRL)
S3 BDSandBox; C:\WINDOWS\system32\drivers\bdsandbox.sys [82824 2013-11-04] (BitDefender SRL)
R1 BDVEDISK; C:\Windows\system32\DRIVERS\bdvedisk.sys [79192 2013-07-30] (BitDefender)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-25] (Qualcomm Atheros)
S3 BthA2DP; C:\Windows\system32\drivers\BthA2DP.sys [131584 2013-08-22] (Microsoft Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [140600 2013-07-22] (Motorola Solutions, Inc.)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-02-05] (Disc Soft Ltd)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [150256 2013-08-23] (BitDefender LLC)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)
R2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [26328 2013-07-23] (Intel Corporation)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-07-26] (Intel Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S0 rtcrfilt64; C:\Windows\System32\DRIVERS\rtcrfilt64.sys [19600 2000-01-01] (Realtek Semiconductor Corp.)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
S3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16152 2013-09-03] ()
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [389240 2013-08-07] (BitDefender S.R.L.)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
S3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [X]
S3 GPU-Z; \??\C:\Users\Lucien\AppData\Local\Temp\GPU-Z.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-12 20:07 - 2014-02-12 20:07 - 01166132 _____ () C:\Users\Lucien\Downloads\adwcleaner.exe
2014-02-11 23:35 - 2014-02-11 23:35 - 00002757 _____ () C:\Users\Public\Desktop\Secure Banking.lnk
2014-02-11 23:34 - 2014-02-11 23:34 - 00000000 ____D () C:\Program Files (x86)\Secure Banking
2014-02-11 23:29 - 2014-02-11 23:29 - 00000000 ____D () C:\Users\Lucien\AppData\Local\SecureBankingGUI
2014-02-11 23:29 - 2014-02-11 23:29 - 00000000 ____D () C:\Program Files (x86)\Secure Banking Software
2014-02-11 23:27 - 2014-02-11 23:27 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Downloaded Installations
2014-02-11 23:21 - 2014-02-11 23:33 - 00000000 ____D () C:\Users\Lucien\Downloads\secure banking
2014-02-09 12:05 - 2014-02-09 12:05 - 00000000 ____D () C:\Users\Lucien\Documents\Meine empfangenen Dateien
2014-02-09 11:41 - 2014-02-09 11:41 - 07391168 _____ () C:\Users\Lucien\Downloads\ljcP1215-HB-pnp-win64-de.exe
2014-02-08 22:44 - 2014-02-08 22:44 - 00000000 ____D () C:\Users\Lucien\Documents\EA Games
2014-02-08 12:15 - 2014-02-08 12:15 - 00000000 _____ () C:\WINDOWS\SysWOW64\debug.log
2014-02-07 22:24 - 2014-02-07 22:24 - 00001214 _____ () C:\Users\Lucien\Desktop\IsoBuster.lnk
2014-02-07 22:24 - 2014-02-07 22:24 - 00000000 ____D () C:\Program Files (x86)\Smart Projects
2014-02-07 22:21 - 2014-02-07 22:21 - 04669400 _____ (Smart Projects ) C:\Users\Lucien\Downloads\isobuster_all_lang_3.3.exe
2014-02-07 22:14 - 2014-02-07 22:21 - 00000000 ____D () C:\Users\Lucien\Downloads\bin2iso
2014-02-05 17:18 - 2014-02-12 20:25 - 00001302 _____ () C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-02-05 17:17 - 2014-02-05 17:17 - 00001968 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2014-02-05 17:16 - 2014-02-05 17:16 - 00283064 _____ (Disc Soft Ltd) C:\WINDOWS\system32\Drivers\dtsoftbus01.sys
2014-02-05 17:16 - 2014-02-05 17:16 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite
2014-02-05 17:12 - 2014-02-05 17:14 - 13485616 _____ (Disc Soft Ltd) C:\Users\Lucien\Downloads\DTLite4481-0347.exe
2014-02-05 16:12 - 2014-02-05 16:12 - 00000000 ____D () C:\Program Files (x86)\AviSynth 2.5
2014-02-05 16:12 - 2009-09-27 09:39 - 00415744 ___SH (The Public) C:\WINDOWS\SysWOW64\avisynth.dll
2014-02-05 16:12 - 2005-07-14 12:31 - 00032256 ___SH () C:\WINDOWS\SysWOW64\AVSredirect.dll
2014-02-05 16:12 - 2004-02-22 10:11 - 00764416 ___SH (Abysmal Software) C:\WINDOWS\SysWOW64\devil.dll
2014-02-05 16:12 - 2004-01-25 00:00 - 00070656 ___SH (www.helixcommunity.org) C:\WINDOWS\SysWOW64\yv12vfw.dll
2014-02-05 16:12 - 2004-01-25 00:00 - 00070656 ___SH (www.helixcommunity.org) C:\WINDOWS\SysWOW64\i420vfw.dll
2014-02-05 16:11 - 2014-02-07 22:36 - 00000000 ____D () C:\Users\Lucien\Desktop\Indian Summer Westward Ho!
2014-02-05 16:07 - 2014-02-05 16:07 - 00001130 _____ () C:\Users\Public\Desktop\SUPER ©.lnk
2014-02-05 16:07 - 2014-02-05 16:07 - 00000000 ____D () C:\Users\Lucien\Documents\eRightSoft
2014-02-05 16:07 - 2012-10-05 19:54 - 00188416 __RSH () C:\WINDOWS\SysWOW64\winDCE32.dll
2014-02-05 16:07 - 2011-06-15 23:00 - 00163328 __RSH () C:\WINDOWS\SysWOW64\flvDX.dll
2014-02-05 16:07 - 2011-06-14 19:05 - 00121344 __RSH () C:\WINDOWS\SysWOW64\TAKDSDecoder.ax
2014-02-05 16:07 - 2011-02-11 10:26 - 00112128 __RSH () C:\WINDOWS\SysWOW64\OptimFROG.dll
2014-02-05 16:07 - 2010-01-06 23:00 - 00107520 __RSH () C:\WINDOWS\SysWOW64\TAKDSDecoder.dll
2014-02-05 16:07 - 2009-03-17 10:38 - 00070656 __RSH () C:\WINDOWS\SysWOW64\RLAPEDec.ax
2014-02-05 16:07 - 2009-01-18 12:03 - 00107520 __RSH () C:\WINDOWS\SysWOW64\RLMPCDec.ax
2014-02-05 16:07 - 2008-03-16 14:30 - 00216064 __RSH (MONOGRAM Multimedia, s.r.o.) C:\WINDOWS\SysWOW64\nbDX.dll
2014-02-05 16:07 - 2007-02-21 12:47 - 00031232 __RSH (Hans Mayerl) C:\WINDOWS\SysWOW64\msfDX.dll
2014-02-05 16:07 - 2005-02-13 00:00 - 00186880 __RSH (RadLight) C:\WINDOWS\SysWOW64\RLOgg.ax
2014-02-05 16:07 - 2005-02-13 00:00 - 00067584 __RSH (RadLight, LLC) C:\WINDOWS\SysWOW64\RLTheoraDec.ax
2014-02-05 16:07 - 2005-02-13 00:00 - 00051712 __RSH () C:\WINDOWS\SysWOW64\RLSpeexDec.ax
2014-02-05 16:07 - 2005-02-06 00:00 - 00092672 __RSH (RadLight) C:\WINDOWS\SysWOW64\RLVorbisDec.ax
2014-02-05 16:07 - 2004-10-10 09:50 - 00278528 _____ (Real Networks, Inc) C:\WINDOWS\SysWOW64\pncrt.dll
2014-02-05 16:07 - 2004-09-17 04:07 - 00090112 __RSH (-) C:\WINDOWS\SysWOW64\TTADSSplitter.ax
2014-02-05 16:07 - 2004-08-22 11:56 - 00090112 __RSH (-) C:\WINDOWS\SysWOW64\TTADSDecoder.ax
2014-02-05 16:07 - 2004-07-02 16:33 - 00327749 _____ (RealNetworks, Inc.) C:\WINDOWS\SysWOW64\drvc.dll
2014-02-05 16:07 - 2004-04-27 16:03 - 00017408 __RSH (RadLight) C:\WINDOWS\SysWOW64\RLOFRDec.ax
2014-02-05 16:06 - 2014-02-05 16:06 - 00000000 ____D () C:\Program Files (x86)\eRightSoft
2014-02-05 16:06 - 2012-07-11 23:00 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Olepau32.ax
2014-02-05 16:06 - 2009-09-27 23:00 - 00143872 __RSH () C:\WINDOWS\SysWOW64\AviDX.ax
2014-02-05 16:06 - 2009-08-10 23:00 - 00352768 __RSH () C:\WINDOWS\SysWOW64\ac3DX.ax
2014-02-05 16:06 - 2009-01-18 17:15 - 00120832 __RSH () C:\WINDOWS\SysWOW64\MPCDx.ax
2014-02-05 16:06 - 2006-08-16 15:53 - 00175104 __RSH () C:\WINDOWS\SysWOW64\CoreAAC.ax
2014-02-05 16:06 - 2006-03-10 20:21 - 00195584 __RSH () C:\WINDOWS\SysWOW64\MatroskaDX.ax
2014-02-05 16:06 - 2006-01-12 23:00 - 00123904 __RSH (CoreCodec) C:\WINDOWS\SysWOW64\AVCDX.ax
2014-02-05 16:06 - 2005-11-25 21:46 - 00161792 __RSH (Gabest) C:\WINDOWS\SysWOW64\RealMediaDX.ax
2014-02-05 16:06 - 2005-02-22 17:55 - 00081920 __RSH () C:\WINDOWS\SysWOW64\aac_parser.ax
2014-02-05 16:06 - 2005-01-18 00:26 - 00179200 __RSH (Gabest) C:\WINDOWS\SysWOW64\DiracSplitter.ax
2014-02-05 16:06 - 2003-12-07 08:59 - 00097280 __RSH () C:\WINDOWS\SysWOW64\FLACDX.ax
2014-02-05 16:02 - 2014-02-05 16:04 - 64722252 _____ (eRightSoft ) C:\Users\Lucien\Downloads\SUPERsetup.exe
2014-02-05 13:28 - 2014-02-05 16:46 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\DigitalSites
2014-02-05 13:27 - 2014-02-05 13:27 - 00670720 _____ () C:\Users\Gast\Downloads\VideoConverterSetup.exe
2014-02-05 13:26 - 2014-02-05 13:30 - 00000000 ____D () C:\Users\Gast\AppData\Local\CrashDumps
2014-02-05 13:17 - 2014-02-05 13:17 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Atheros
2014-02-05 13:16 - 2014-02-05 13:16 - 00000008 __RSH () C:\Users\Gast\ntuser.pol
2014-02-03 20:21 - 2014-02-03 20:40 - 00102400 _____ () C:\Users\Lucien\Desktop\Namenschilder fertig.ppt
2014-02-03 08:14 - 2014-02-03 08:14 - 00003576 _____ () C:\WINDOWS\System32\Tasks\Bitdefender Auto-Scan
2014-01-29 16:06 - 2014-01-29 16:07 - 00298424 _____ () C:\WINDOWS\Minidump\012914-53375-01.dmp
2014-01-29 15:41 - 2014-01-29 16:04 - 00181064 _____ (Sysinternals) C:\WINDOWS\PSEXESVC.EXE
2014-01-29 15:37 - 2014-01-29 15:37 - 00000207 _____ () C:\WINDOWS\tweaking.com-regbackup-LUCIENSNOTE-Microsoft-Windows-8.1-(64-bit).dat
2014-01-29 15:36 - 2014-01-29 15:36 - 00000000 ____D () C:\RegBackup
2014-01-29 14:56 - 2014-01-29 14:56 - 00000000 ____D () C:\Users\Lucien\Downloads\Tweaking.com - Windows Repair
2014-01-29 14:48 - 2014-01-29 14:48 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2014-01-29 14:45 - 2013-11-05 19:47 - 03707864 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2014-01-29 14:45 - 2013-11-05 18:54 - 38385664 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
2014-01-29 14:45 - 2013-11-05 15:48 - 00681905 _____ () C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2014-01-29 14:45 - 2013-11-04 19:26 - 00153304 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2014-01-29 14:45 - 2013-11-04 11:11 - 02587864 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkAPO64.dll
2014-01-29 14:45 - 2013-10-30 16:31 - 00929080 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICAPOSettingsIPC.dll
2014-01-29 14:45 - 2013-10-28 17:29 - 01021656 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2014-01-29 14:45 - 2013-10-25 10:49 - 05751576 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICAPOlfx.dll
2014-01-29 14:45 - 2013-10-18 16:41 - 01286360 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2014-01-29 14:45 - 2013-10-11 11:31 - 00947760 _____ (Sony Corporation) C:\WINDOWS\system32\SFSS_APO.dll
2014-01-29 14:45 - 2013-10-09 20:13 - 01286400 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxSpeechAPO64.dll
2014-01-29 14:45 - 2013-10-09 20:12 - 03714304 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioVnN64.dll
2014-01-29 14:45 - 2013-10-09 20:12 - 02103040 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\WavesGUILib64.dll
2014-01-29 14:45 - 2013-10-07 11:05 - 02810072 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2014-01-29 14:45 - 2013-10-02 17:10 - 00617176 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2014-01-29 14:45 - 2013-09-09 15:32 - 05681192 _____ () C:\WINDOWS\system32\Drivers\rtvienna.dat
2014-01-29 14:45 - 2013-08-24 03:14 - 01014016 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\slcnt64.dll
2014-01-29 14:45 - 2013-08-24 03:14 - 00897792 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll
2014-01-29 14:45 - 2013-08-24 03:14 - 00722688 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll
2014-01-29 14:45 - 2013-08-24 03:14 - 00244480 _____ (TODO: <Company name>) C:\WINDOWS\system32\slprp64.dll
2014-01-29 14:45 - 2013-08-14 16:36 - 00662784 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVolumeSDAPO.dll
2014-01-29 14:45 - 2013-08-14 16:35 - 00907008 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO2064.dll
2014-01-29 14:45 - 2013-06-25 12:47 - 00871856 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tossaeapo64.dll
2014-01-29 14:45 - 2013-06-25 12:47 - 00162224 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\toseaeapo64.dll
2014-01-29 14:45 - 2013-06-25 12:46 - 00582056 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosasfapo64.dll
2014-01-29 14:45 - 2013-04-24 17:16 - 01662024 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2014-01-29 14:45 - 2013-04-03 14:13 - 00906800 _____ (Sony Corporation) C:\WINDOWS\system32\MISS_APO.dll
2014-01-29 14:45 - 2012-08-31 19:18 - 07164176 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEP64A.dll
2014-01-29 14:45 - 2012-08-31 19:17 - 00434960 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EED64A.dll
2014-01-29 14:45 - 2012-08-31 19:17 - 00141584 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEL64A.dll
2014-01-29 14:45 - 2012-08-31 19:17 - 00124176 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEA64A.dll
2014-01-29 14:45 - 2012-08-31 19:17 - 00075024 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEG64A.dll
2014-01-29 14:45 - 2012-01-30 11:43 - 00836544 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo264.dll
2014-01-29 14:45 - 2012-01-10 10:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\WINDOWS\system32\tepeqapo64.dll
2014-01-29 14:45 - 2011-12-20 15:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2014-01-29 14:45 - 2011-11-22 16:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2014-01-29 14:45 - 2011-09-02 14:21 - 00221024 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFNHK64.dll
2014-01-29 14:45 - 2011-09-02 14:21 - 00081248 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFCOM64.dll
2014-01-29 14:45 - 2011-09-02 14:21 - 00078688 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFAPO64.dll
2014-01-29 14:45 - 2011-03-17 12:17 - 01361336 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosade.dll
2014-01-29 14:45 - 2011-03-07 17:11 - 00148416 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo.dll
2014-01-29 14:45 - 2010-11-08 07:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2014-01-29 14:45 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2014-01-29 14:45 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2014-01-29 14:45 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2014-01-29 14:45 - 2010-11-08 07:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2014-01-29 14:45 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2014-01-29 14:45 - 2010-11-03 18:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2014-01-29 14:45 - 2010-07-22 16:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\WINDOWS\SysWOW64\SFCOM.dll
2014-01-29 14:45 - 2009-11-24 09:55 - 00518896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2014-01-29 14:45 - 2009-11-24 09:55 - 00211184 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll
2014-01-29 14:45 - 2009-11-24 09:55 - 00198896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll
2014-01-29 14:45 - 2009-11-24 09:55 - 00155888 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2014-01-29 14:44 - 2013-10-16 03:43 - 00209096 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll
2014-01-29 14:44 - 2013-10-11 12:47 - 00113576 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2014-01-29 14:44 - 2013-10-09 20:13 - 01921792 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek264.dll
2014-01-29 14:44 - 2013-10-09 20:13 - 01345280 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO5064.dll
2014-01-29 14:44 - 2013-10-09 20:12 - 27644160 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioVnA64.dll
2014-01-29 14:44 - 2013-10-09 20:12 - 14152960 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek64.dll
2014-01-29 14:44 - 2013-10-09 20:12 - 02036992 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioEQ64.dll
2014-01-29 14:44 - 2013-10-09 20:12 - 01012992 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPOShell64.dll
2014-01-29 14:44 - 2013-10-07 00:26 - 00501184 _____ (DTS) C:\WINDOWS\system32\DTSU2PLFX64.dll
2014-01-29 14:44 - 2013-10-07 00:26 - 00487360 _____ (DTS) C:\WINDOWS\system32\DTSU2PGFX64.dll
2014-01-29 14:44 - 2013-10-07 00:26 - 00415680 _____ (DTS) C:\WINDOWS\system32\DTSU2PREC64.dll
2014-01-29 14:44 - 2013-09-10 04:02 - 06217904 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64A.dll
2014-01-29 14:44 - 2013-09-10 04:02 - 00313520 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64A.dll
2014-01-29 14:44 - 2013-09-10 04:01 - 01938608 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64A.dll
2014-01-29 14:44 - 2013-09-10 04:01 - 00260272 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64.dll
2014-01-29 14:44 - 2013-08-20 17:37 - 00605496 _____ () C:\WINDOWS\system32\audioLibVc.dll
2014-01-29 14:44 - 2013-08-14 16:35 - 01084160 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO4064.dll
2014-01-29 14:44 - 2013-08-14 16:35 - 00663296 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO30.dll
2014-01-29 14:44 - 2013-08-05 18:11 - 02743328 _____ (Fortemedia Corporation) C:\WINDOWS\system32\FMAPO64.dll
2014-01-29 14:44 - 2013-07-23 15:39 - 00790272 _____ (Waves Audio Ltd.) C:\WINDOWS\SysWOW64\MaxxAudioAPOShell.dll
2014-01-29 14:44 - 2013-06-21 11:01 - 00109848 _____ () C:\WINDOWS\system32\AcpiServiceVnA64.dll
2014-01-29 14:44 - 2012-03-08 11:47 - 00108640 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll
2014-01-29 14:44 - 2011-08-23 17:00 - 00603984 _____ (Knowles Acoustics ) C:\WINDOWS\system32\KAAPORT64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 01756264 _____ (DTS) C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 01568360 _____ (DTS) C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 01486952 _____ (DTS) C:\WINDOWS\system32\DTSBoostDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00728680 _____ (DTS) C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00712296 _____ (DTS) C:\WINDOWS\system32\DTSSymmetryDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00693352 _____ (DTS) C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00491112 _____ (DTS) C:\WINDOWS\system32\DTSNeoPCDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00432744 _____ (DTS) C:\WINDOWS\system32\DTSLimiterDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00428648 _____ (DTS) C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\WINDOWS\system32\DTSLFXAPO64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPO64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00241768 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPONS64.dll
2014-01-29 14:44 - 2010-09-27 09:34 - 00318808 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO20.dll
2014-01-29 14:29 - 2014-01-29 14:37 - 109595877 _____ () C:\Users\Lucien\Downloads\Audio_Realtek_Win81_64_VER6017083.zip
2014-01-29 14:20 - 2014-01-29 14:20 - 02903255 _____ () C:\Users\Lucien\Downloads\tweaking.com_windows_repair_aio.zip
2014-01-29 13:10 - 2014-02-12 20:41 - 00002197 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-29 13:09 - 2014-01-29 14:46 - 00000000 ____D () C:\Program Files (x86)\GUMCBFB.tmp
2014-01-29 13:05 - 2014-01-29 13:07 - 37739976 _____ (Google Inc.) C:\Users\Lucien\Downloads\ChromeStandalone32Setup.exe
2014-01-29 13:02 - 2014-01-29 13:02 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Deployment
2014-01-29 12:56 - 2014-01-29 12:56 - 00000000 ____D () C:\Users\Lucien\Desktop\chrome default
2014-01-29 12:49 - 2014-01-29 12:49 - 00001124 _____ () C:\Users\Lucien\Desktop\Absolute Uninstaller.lnk
2014-01-29 12:49 - 2014-01-29 12:49 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\GlarySoft
2014-01-29 12:48 - 2014-01-29 12:48 - 02194784 _____ (Glarysoft.com ) C:\Users\Lucien\Downloads\au29setup.exe
2014-01-29 09:54 - 2014-01-29 09:54 - 00048629 _____ () C:\Users\Lucien\Documents\Namenschilder%20fertig.ppt_0.odp
2014-01-29 09:40 - 2014-02-05 13:17 - 00000000 ____D () C:\ProgramData\Atheros
2014-01-29 09:40 - 2014-01-29 09:40 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Atheros
2014-01-28 14:00 - 2014-01-28 14:05 - 00000000 ____D () C:\Program Files\Common Files\QCA_Bluetooth
2014-01-28 13:56 - 2014-01-28 13:56 - 00000000 ____D () C:\Users\Lucien\Downloads\Win8 Key
2014-01-28 13:51 - 2014-01-28 13:52 - 00000000 ____D () C:\Users\Lucien\Downloads\wlan
2014-01-28 13:51 - 2014-01-28 13:51 - 00000000 ____D () C:\Users\Lucien\Downloads\lan
2014-01-28 13:50 - 2014-01-28 13:50 - 00000000 ____D () C:\Users\Lucien\Downloads\bluetooth
2014-01-28 13:48 - 2014-01-28 13:49 - 00000000 ____D () C:\Users\Lucien\Downloads\audio
2014-01-28 13:46 - 2014-01-28 13:46 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_btmaux_01009.Wdf
2014-01-28 13:45 - 2014-01-28 13:45 - 00000000 ____D () C:\Users\Lucien\Downloads\blue
2014-01-28 13:44 - 2014-01-28 13:45 - 00000000 ____D () C:\Users\Lucien\Downloads\Lang
2014-01-28 12:12 - 2014-01-28 12:12 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-01-28 12:11 - 2014-01-29 09:40 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-01-28 12:11 - 2014-01-29 09:39 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-01-28 12:10 - 2013-12-19 21:33 - 30372640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 25257248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 22960416 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 18310112 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 18222008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 17560352 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 15877216 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 15230352 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 12645664 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2014-01-28 12:10 - 2013-12-19 21:33 - 11605752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 11554264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 09700224 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 09657464 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 03132704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 03125024 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvenc.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 02947872 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 02747680 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvenc.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00882464 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00879392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00852768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00847648 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00479520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00405280 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00317472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00266984 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00032544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys
2014-01-28 11:40 - 2014-01-28 11:40 - 00001369 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2014-01-28 11:40 - 2014-01-28 11:40 - 00000000 ____D () C:\Users\Lucien\AppData\Local\NVIDIA Corporation
2014-01-28 11:39 - 2014-01-28 11:41 - 00000000 ____D () C:\Users\Lucien\AppData\Local\NVIDIA
2014-01-28 11:39 - 2014-01-21 03:54 - 01179576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2014-01-28 11:39 - 2014-01-21 03:54 - 01048152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2014-01-28 11:39 - 2013-12-27 19:42 - 00039200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2014-01-28 11:39 - 2013-12-27 19:42 - 00035104 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2014-01-28 11:39 - 2013-12-27 19:42 - 00033056 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2014-01-28 10:55 - 2014-01-28 12:11 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-01-28 10:55 - 2013-12-19 19:53 - 06671648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2014-01-28 10:55 - 2013-12-19 19:53 - 03490080 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2014-01-28 10:55 - 2013-12-19 19:53 - 02559776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2014-01-28 10:55 - 2013-12-19 19:53 - 01065248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2014-01-28 10:55 - 2013-12-19 19:53 - 00922912 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2014-01-28 10:55 - 2013-12-19 19:53 - 00386336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2014-01-28 10:55 - 2013-12-19 19:53 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2014-01-28 10:55 - 2013-12-19 19:53 - 00063776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2014-01-28 10:55 - 2013-12-19 06:01 - 03539040 _____ () C:\WINDOWS\system32\nvcoproc.bin
2014-01-28 10:54 - 2014-01-28 11:40 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-01-28 10:53 - 2014-01-28 10:53 - 00000000 ____D () C:\NVIDIA
2014-01-28 10:41 - 2014-01-28 10:41 - 00000000 ____D () C:\WINDOWS\pss
2014-01-28 09:59 - 2014-01-28 10:01 - 31475128 _____ (NVIDIA Corporation) C:\Users\Lucien\Downloads\GeForce_Experience_v1.8.2.0.exe
2014-01-27 23:55 - 2013-12-19 21:33 - 01884448 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6433221.dll
2014-01-27 23:55 - 2013-12-19 21:33 - 01511712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6433221.dll
2014-01-27 23:55 - 2013-12-19 21:33 - 00357152 _____ () C:\WINDOWS\system32\NvIFROpenGL.dll
2014-01-27 23:55 - 2013-12-19 21:33 - 00314656 _____ () C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2014-01-27 22:46 - 2014-01-27 22:59 - 266633424 _____ (NVIDIA Corporation) C:\Users\Lucien\Downloads\332.21-notebook-win8-win7-64bit-international-whql.exe
2014-01-27 20:36 - 2014-02-12 20:42 - 00020672 _____ () C:\Users\Lucien\Desktop\FRST.txt
2014-01-27 19:54 - 2014-01-27 20:33 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-27 19:53 - 2014-01-27 19:53 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-01-27 19:52 - 2014-01-27 19:52 - 00000000 ____D () C:\Users\Lucien\Desktop\mbar
2014-01-27 19:47 - 2014-01-27 19:48 - 00000000 ____D () C:\Users\Lucien\Desktop\Logs2
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-01-26 20:53 - 2014-01-26 20:53 - 00003186 _____ () C:\WINDOWS\System32\Tasks\{E66DEEF7-845B-48C8-BBEE-CE6EA6F2EE96}
2014-01-26 19:26 - 2014-01-26 19:26 - 00003362 _____ () C:\WINDOWS\System32\Tasks\{63C03234-5B71-4184-AD48-4EE22D315F87}
2014-01-25 15:01 - 2014-01-25 15:01 - 00000000 ____H () C:\Users\Lucien\Documents\Default.rdp
2014-01-24 19:21 - 2014-01-24 19:21 - 00000000 ____D () C:\Users\Lucien\Desktop\Logs alt
2014-01-24 19:17 - 2014-01-24 19:17 - 00361185 _____ (Farbar) C:\Users\Lucien\Desktop\FSS.exe
2014-01-24 16:48 - 2014-01-24 16:48 - 00032847 _____ () C:\Users\Lucien\Desktop\gmer.zip
2014-01-24 11:34 - 2014-01-24 11:34 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-01-24 10:53 - 2014-01-24 10:53 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-01-22 21:41 - 2014-02-12 20:41 - 00000000 ____D () C:\Users\Lucien\Desktop\FRST-OlderVersion
2014-01-22 21:23 - 2014-01-22 21:23 - 00022688 _____ () C:\Users\Lucien\Downloads\Addition.txt
2014-01-22 21:22 - 2014-01-22 21:23 - 00046051 _____ () C:\Users\Lucien\Downloads\FRST.txt
2014-01-22 13:59 - 2014-02-12 20:41 - 02152448 _____ (Farbar) C:\Users\Lucien\Desktop\FRST64.exe
2014-01-22 12:30 - 2014-01-22 12:30 - 00000168 _____ () C:\Users\Lucien\defogger_reenable
2014-01-22 00:11 - 2014-01-17 20:25 - 00379904 _____ () C:\Users\Lucien\Desktop\gmer.exe
2014-01-22 00:10 - 2014-01-29 14:54 - 00000000 ____D () C:\Users\Lucien\Desktop\Tweaking.com - Windows Repair
2014-01-22 00:10 - 2012-12-19 16:10 - 00000000 ____D () C:\Users\Lucien\Desktop\data
2014-01-22 00:10 - 2009-10-20 21:47 - 00055936 _____ () C:\Users\Lucien\Desktop\Setup.exe
2014-01-21 23:54 - 2014-02-12 20:41 - 00000000 ____D () C:\FRST
2014-01-21 15:06 - 2014-01-21 15:06 - 01037068 _____ (Thisisu) C:\Users\Lucien\Desktop\JRT.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00987425 _____ () C:\Users\Lucien\Desktop\SecurityCheck.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00448512 _____ (OldTimer Tools) C:\Users\Lucien\Desktop\TFC.exe
2014-01-21 15:00 - 2014-01-21 15:01 - 02347384 _____ (ESET) C:\Users\Lucien\Desktop\esetsmartinstaller_enu.exe
2014-01-21 13:15 - 2014-01-21 13:25 - 24859352 _____ (Microsoft Corporation) C:\Users\Gast\Downloads\Windows-KB890830-x64-V5.8.exe
2014-01-21 10:40 - 2014-01-22 14:01 - 00000000 ____D () C:\Users\Gast\AppData\Local\My Games
2014-01-21 10:18 - 2014-01-21 10:18 - 00050477 _____ () C:\Users\Lucien\Desktop\Defogger.exe
2014-01-21 10:12 - 2014-01-21 10:12 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\QuickScan
2014-01-21 09:38 - 2014-01-21 09:38 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Spotydl
2014-01-20 16:10 - 2013-12-03 13:49 - 00000000 ____D () C:\Users\Gast\Downloads\settings
2014-01-20 15:53 - 2014-01-20 15:53 - 00000000 ____D () C:\Users\Gast\AppData\Local\NVIDIA Corporation
2014-01-20 15:52 - 2014-02-05 13:17 - 00000000 ____D () C:\Users\Gast\Documents\Bluetooth Folder
2014-01-20 15:52 - 2014-01-21 08:37 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Bitdefender
2014-01-20 15:52 - 2014-01-20 15:52 - 00000385 _____ () C:\Users\Gast\AppData\Roaminguser_gensett.xml
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D () C:\Users\Gast\AppData\Local\BMExplorer
2014-01-20 15:51 - 2014-01-20 15:51 - 00000000 ____D () C:\Users\Lucien\Documents\AdobeStockPhotos
2014-01-19 21:21 - 2014-01-19 08:38 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-01-19 18:22 - 2014-01-29 16:06 - 00000000 ____D () C:\WINDOWS\Minidump
2014-01-19 18:22 - 2014-01-19 18:22 - 00305304 _____ () C:\WINDOWS\Minidump\011914-32203-01.dmp
2014-01-17 13:50 - 2014-01-20 13:49 - 00000000 ____D () C:\Users\Lucien\Downloads\backups
2014-01-17 13:42 - 2014-01-19 18:46 - 00012554 _____ () C:\Users\Lucien\Downloads\hijackthis.log
2014-01-17 13:42 - 2014-01-17 13:42 - 00388608 _____ (Trend Micro Inc.) C:\Users\Lucien\Downloads\HiJackThis204.exe
2014-01-17 09:54 - 2014-01-17 09:54 - 00000385 _____ () C:\Users\Lucien\AppData\Roaminguser_gensett.xml
2014-01-16 14:05 - 2013-12-11 08:55 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-01-16 14:05 - 2013-12-09 01:34 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-01-16 14:05 - 2013-12-09 01:04 - 00980480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-01-16 14:05 - 2013-11-27 16:34 - 03210528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2014-01-16 14:05 - 2013-11-27 16:27 - 00809872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-01-16 14:05 - 2013-11-27 15:00 - 00663680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-01-16 14:05 - 2013-11-27 14:47 - 02804528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2014-01-16 14:05 - 2013-11-27 13:02 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ipnat.sys
2014-01-16 14:05 - 2013-11-27 11:54 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-01-16 14:05 - 2013-11-27 11:24 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll
2014-01-16 14:05 - 2013-11-27 11:08 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-01-16 14:05 - 2013-11-27 10:46 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll
2014-01-16 14:05 - 2013-11-27 10:41 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2014-01-16 14:05 - 2013-11-27 10:17 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-01-16 14:05 - 2013-11-27 10:10 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2014-01-16 14:05 - 2013-11-27 09:58 - 01503232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-01-16 14:05 - 2013-11-27 09:56 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll
2014-01-16 14:05 - 2013-11-27 09:20 - 04106240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-01-16 14:05 - 2013-11-27 05:01 - 00385614 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-01-16 14:05 - 2013-11-26 14:22 - 01928144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2014-01-16 14:05 - 2013-11-26 14:20 - 02131120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-01-16 14:05 - 2013-11-26 14:20 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-01-16 14:05 - 2013-11-26 14:20 - 01374384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-01-16 14:05 - 2013-11-26 12:50 - 01371312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2014-01-16 14:05 - 2013-11-26 12:44 - 02142936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-01-16 14:05 - 2013-11-26 12:44 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-01-16 14:05 - 2013-11-26 11:13 - 04191232 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-01-16 14:05 - 2013-11-26 10:21 - 18577920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-01-16 14:05 - 2013-11-26 09:28 - 13925888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-01-16 14:05 - 2013-11-25 02:45 - 00142680 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-01-16 14:05 - 2013-11-25 02:32 - 01119064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2014-01-16 14:05 - 2013-11-25 00:30 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2014-01-16 14:05 - 2013-11-25 00:28 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2014-01-16 14:05 - 2013-11-23 13:47 - 00032088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-01-16 14:05 - 2013-11-23 12:49 - 21196664 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-01-16 14:05 - 2013-11-23 09:19 - 18642504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-01-16 14:05 - 2013-11-23 08:13 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\bi.dll
2014-01-16 14:05 - 2013-11-23 08:13 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys
2014-01-16 14:05 - 2013-11-23 08:08 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-01-16 14:05 - 2013-11-23 05:50 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-01-16 14:05 - 2013-11-23 04:57 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2014-01-16 14:05 - 2013-11-23 04:48 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2014-01-16 14:05 - 2013-11-23 04:25 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2014-01-16 14:05 - 2013-11-23 04:25 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2014-01-16 14:05 - 2013-11-23 04:19 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-01-16 14:05 - 2013-11-23 04:15 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-01-16 14:05 - 2013-11-21 07:58 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceregistration.dll
2014-01-16 14:05 - 2013-11-21 07:26 - 01415680 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-01-16 14:05 - 2013-11-16 06:11 - 00764856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-01-16 14:05 - 2013-11-15 19:19 - 00669344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-01-16 14:05 - 2013-11-15 15:59 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2014-01-16 14:05 - 2013-11-15 15:25 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2014-01-16 14:05 - 2013-11-15 15:08 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-01-16 14:05 - 2013-11-15 14:24 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-01-16 14:05 - 2013-11-05 21:12 - 02551128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-01-16 14:05 - 2013-10-31 01:29 - 00745336 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-01-16 14:05 - 2013-10-31 00:41 - 00552624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2014-01-15 23:39 - 2013-12-09 01:15 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-01-15 23:39 - 2013-11-27 16:36 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-01-15 23:39 - 2013-11-27 12:41 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe
2014-01-15 23:39 - 2013-11-27 11:34 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll
2014-01-15 23:39 - 2013-11-27 10:54 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-01-15 23:39 - 2013-11-27 09:48 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 23:39 - 2013-11-27 09:45 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-01-15 23:39 - 2013-11-27 09:40 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 23:39 - 2013-11-27 09:38 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-01-15 23:39 - 2013-11-27 09:17 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-01-15 23:39 - 2013-11-27 09:12 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-01-13 23:23 - 2014-01-13 23:23 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\system32\bdsandboxuiskin32.dll
2014-01-13 23:20 - 2014-01-19 16:08 - 00000000 ____D () C:\Program Files (x86)\McAfee Security Scan
2014-01-13 23:20 - 2014-01-13 23:20 - 00002041 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-13 22:54 - 2014-01-13 22:54 - 00620542 _____ () C:\ProgramData\1389649682.bdinstall.bin
2014-01-13 22:54 - 2014-01-13 22:54 - 00000385 _____ () C:\WINDOWS\system32\user_gensett.xml
2014-01-13 22:53 - 2014-01-13 23:23 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\SysWOW64\bdsandboxuiskin32.dll
2014-01-13 22:53 - 2014-01-13 22:54 - 00000000 ____D () C:\ProgramData\BDLogging
2014-01-13 22:53 - 2014-01-13 22:53 - 00002212 _____ () C:\Users\Public\Desktop\Bitdefender Safepay.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00002164 _____ () C:\Users\Public\Desktop\Bitdefender Total Security.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2014-01-13 22:53 - 2013-11-04 15:47 - 00082824 _____ (BitDefender SRL) C:\WINDOWS\system32\Drivers\bdsandbox.sys
2014-01-13 22:53 - 2013-09-08 19:04 - 00023568 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bdelam.sys
2014-01-13 22:53 - 2013-07-30 17:41 - 00079192 _____ (BitDefender) C:\WINDOWS\system32\Drivers\bdvedisk.sys
2014-01-13 22:53 - 2013-07-24 17:19 - 00098768 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\bdfndisf6.sys
2014-01-13 22:53 - 2007-04-11 10:11 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\capicom.dll
2014-01-13 22:52 - 2014-02-03 20:47 - 00893440 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avc3.sys
2014-01-13 22:52 - 2014-02-03 20:45 - 00635392 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avckf.sys
2014-01-13 22:52 - 2014-01-13 23:23 - 00261056 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avchv.sys
2014-01-13 22:52 - 2014-01-13 22:54 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Bitdefender
2014-01-13 22:48 - 2014-01-13 23:23 - 00000000 ____D () C:\ProgramData\Bitdefender
2014-01-13 22:48 - 2014-01-13 22:52 - 00000000 ____D () C:\Program Files\Bitdefender
2014-01-13 22:48 - 2014-01-13 22:48 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\QuickScan
2014-01-13 22:48 - 2013-11-04 15:47 - 00084848 _____ (BitDefender SRL) C:\WINDOWS\system32\BDSandBoxUISkin.dll
2014-01-13 22:48 - 2013-11-04 15:46 - 00034384 _____ (BitDefender SRL) C:\WINDOWS\system32\BDSandBoxUH.dll
2014-01-13 22:48 - 2013-08-23 12:48 - 00150256 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\gzflt.sys
2014-01-13 22:48 - 2013-08-07 12:46 - 00389240 _____ (BitDefender S.R.L.) C:\WINDOWS\system32\Drivers\trufos.sys

==================== One Month Modified Files and Folders =======

2014-02-12 20:43 - 2014-01-27 20:36 - 00020672 _____ () C:\Users\Lucien\Desktop\FRST.txt
2014-02-12 20:42 - 2014-01-21 23:54 - 00000000 ____D () C:\FRST
2014-02-12 20:41 - 2014-01-29 13:10 - 00002197 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-12 20:41 - 2014-01-22 21:41 - 00000000 ____D () C:\Users\Lucien\Desktop\FRST-OlderVersion
2014-02-12 20:41 - 2014-01-22 13:59 - 02152448 _____ (Farbar) C:\Users\Lucien\Desktop\FRST64.exe
2014-02-12 20:41 - 2013-11-05 22:24 - 00000000 __RDO () C:\Users\Lucien\SkyDrive
2014-02-12 20:41 - 2013-08-20 17:50 - 00000000 ____D () C:\Users\Lucien\AppData\Local\CrashDumps
2014-02-12 20:41 - 2013-08-19 19:06 - 00001130 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-12 20:35 - 2013-11-05 21:43 - 01236143 _____ () C:\WINDOWS\WindowsUpdate.log
2014-02-12 20:33 - 2013-08-19 19:07 - 00001134 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-12 20:32 - 2013-09-30 05:14 - 01804156 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-02-12 20:32 - 2013-09-30 04:56 - 00761880 _____ () C:\WINDOWS\system32\perfh007.dat
2014-02-12 20:32 - 2013-09-30 04:56 - 00159758 _____ () C:\WINDOWS\system32\perfc007.dat
2014-02-12 20:28 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-02-12 20:28 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-02-12 20:27 - 2013-08-22 14:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2014-02-12 20:26 - 2013-08-31 15:58 - 00000000 ____D () C:\AdwCleaner
2014-02-12 20:25 - 2014-02-05 17:18 - 00001302 _____ () C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-02-12 20:07 - 2014-02-12 20:07 - 01166132 _____ () C:\Users\Lucien\Downloads\adwcleaner.exe
2014-02-12 20:02 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-02-12 19:57 - 2013-06-26 08:07 - 00003474 _____ () C:\WINDOWS\System32\Tasks\ASUS Live Update1
2014-02-12 19:57 - 2013-06-26 08:07 - 00003464 _____ () C:\WINDOWS\System32\Tasks\ASUS Live Update2
2014-02-12 07:43 - 2013-07-18 20:55 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3506778915-1287356822-3408950579-1002
2014-02-12 07:28 - 2013-08-19 19:07 - 00004106 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-12 07:28 - 2013-08-19 19:06 - 00003870 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-11 23:35 - 2014-02-11 23:35 - 00002757 _____ () C:\Users\Public\Desktop\Secure Banking.lnk
2014-02-11 23:34 - 2014-02-11 23:34 - 00000000 ____D () C:\Program Files (x86)\Secure Banking
2014-02-11 23:33 - 2014-02-11 23:21 - 00000000 ____D () C:\Users\Lucien\Downloads\secure banking
2014-02-11 23:29 - 2014-02-11 23:29 - 00000000 ____D () C:\Users\Lucien\AppData\Local\SecureBankingGUI
2014-02-11 23:29 - 2014-02-11 23:29 - 00000000 ____D () C:\Program Files (x86)\Secure Banking Software
2014-02-11 23:27 - 2014-02-11 23:27 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Downloaded Installations
2014-02-11 22:49 - 2013-08-22 11:25 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Adobe
2014-02-11 00:27 - 2013-09-10 15:25 - 00180736 ___SH () C:\Users\Lucien\Desktop\Thumbs.db
2014-02-09 21:44 - 2013-08-23 10:50 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-02-09 21:24 - 2013-09-29 20:04 - 09449668 _____ () C:\WINDOWS\PFRO.log
2014-02-09 14:39 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-02-09 14:33 - 2013-07-18 20:48 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Packages
2014-02-09 12:05 - 2014-02-09 12:05 - 00000000 ____D () C:\Users\Lucien\Documents\Meine empfangenen Dateien
2014-02-09 12:04 - 2013-07-18 20:50 - 00000000 ____D () C:\Users\Lucien\Documents\Bluetooth Folder
2014-02-09 11:50 - 2013-10-21 14:16 - 00031898 _____ () C:\LJCP1215.log
2014-02-09 11:41 - 2014-02-09 11:41 - 07391168 _____ () C:\Users\Lucien\Downloads\ljcP1215-HB-pnp-win64-de.exe
2014-02-09 11:34 - 2013-08-22 15:46 - 00386398 _____ () C:\WINDOWS\setupact.log
2014-02-08 22:44 - 2014-02-08 22:44 - 00000000 ____D () C:\Users\Lucien\Documents\EA Games
2014-02-08 22:44 - 2013-04-26 00:16 - 00390717 _____ () C:\WINDOWS\DirectX.log
2014-02-08 12:15 - 2014-02-08 12:15 - 00000000 _____ () C:\WINDOWS\SysWOW64\debug.log
2014-02-07 22:47 - 2013-09-09 20:00 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\vlc
2014-02-07 22:36 - 2014-02-05 16:11 - 00000000 ____D () C:\Users\Lucien\Desktop\Indian Summer Westward Ho!
2014-02-07 22:24 - 2014-02-07 22:24 - 00001214 _____ () C:\Users\Lucien\Desktop\IsoBuster.lnk
2014-02-07 22:24 - 2014-02-07 22:24 - 00000000 ____D () C:\Program Files (x86)\Smart Projects
2014-02-07 22:21 - 2014-02-07 22:21 - 04669400 _____ (Smart Projects ) C:\Users\Lucien\Downloads\isobuster_all_lang_3.3.exe
2014-02-07 22:21 - 2014-02-07 22:14 - 00000000 ____D () C:\Users\Lucien\Downloads\bin2iso
2014-02-05 17:17 - 2014-02-05 17:17 - 00001968 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2014-02-05 17:16 - 2014-02-05 17:16 - 00283064 _____ (Disc Soft Ltd) C:\WINDOWS\system32\Drivers\dtsoftbus01.sys
2014-02-05 17:16 - 2014-02-05 17:16 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite
2014-02-05 17:14 - 2014-02-05 17:12 - 13485616 _____ (Disc Soft Ltd) C:\Users\Lucien\Downloads\DTLite4481-0347.exe
2014-02-05 16:46 - 2014-02-05 13:28 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\DigitalSites
2014-02-05 16:12 - 2014-02-05 16:12 - 00000000 ____D () C:\Program Files (x86)\AviSynth 2.5
2014-02-05 16:07 - 2014-02-05 16:07 - 00001130 _____ () C:\Users\Public\Desktop\SUPER ©.lnk
2014-02-05 16:07 - 2014-02-05 16:07 - 00000000 ____D () C:\Users\Lucien\Documents\eRightSoft
2014-02-05 16:06 - 2014-02-05 16:06 - 00000000 ____D () C:\Program Files (x86)\eRightSoft
2014-02-05 16:04 - 2014-02-05 16:02 - 64722252 _____ (eRightSoft ) C:\Users\Lucien\Downloads\SUPERsetup.exe
2014-02-05 15:49 - 2013-10-03 02:33 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\vlc
2014-02-05 13:30 - 2014-02-05 13:26 - 00000000 ____D () C:\Users\Gast\AppData\Local\CrashDumps
2014-02-05 13:27 - 2014-02-05 13:27 - 00670720 _____ () C:\Users\Gast\Downloads\VideoConverterSetup.exe
2014-02-05 13:18 - 2013-10-19 09:42 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Spotify
2014-02-05 13:17 - 2014-02-05 13:17 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Atheros
2014-02-05 13:17 - 2014-01-29 09:40 - 00000000 ____D () C:\ProgramData\Atheros
2014-02-05 13:17 - 2014-01-20 15:52 - 00000000 ____D () C:\Users\Gast\Documents\Bluetooth Folder
2014-02-05 13:17 - 2013-09-26 11:25 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Apple Computer
2014-02-05 13:17 - 2013-09-26 11:23 - 00000062 _____ () C:\Users\Gast\AppData\Roaming\sp_data.sys
2014-02-05 13:16 - 2014-02-05 13:16 - 00000008 __RSH () C:\Users\Gast\ntuser.pol
2014-02-05 13:16 - 2013-11-05 21:47 - 00000000 ____D () C:\Users\Gast
2014-02-03 20:47 - 2014-01-13 22:52 - 00893440 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avc3.sys
2014-02-03 20:45 - 2014-01-13 22:52 - 00635392 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avckf.sys
2014-02-03 20:40 - 2014-02-03 20:21 - 00102400 _____ () C:\Users\Lucien\Desktop\Namenschilder fertig.ppt
2014-02-03 20:22 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-02-03 08:14 - 2014-02-03 08:14 - 00003576 _____ () C:\WINDOWS\System32\Tasks\Bitdefender Auto-Scan
2014-01-30 21:47 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-01-30 21:47 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-29 16:26 - 2013-11-05 21:47 - 00000000 ____D () C:\Users\Lucien
2014-01-29 16:07 - 2014-01-29 16:06 - 00298424 _____ () C:\WINDOWS\Minidump\012914-53375-01.dmp
2014-01-29 16:06 - 2014-01-19 18:22 - 00000000 ____D () C:\WINDOWS\Minidump
2014-01-29 16:06 - 2013-09-13 12:11 - 894753829 _____ () C:\WINDOWS\MEMORY.DMP
2014-01-29 16:06 - 2013-08-22 15:44 - 05147912 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-01-29 16:04 - 2014-01-29 15:41 - 00181064 _____ (Sysinternals) C:\WINDOWS\PSEXESVC.EXE
2014-01-29 16:03 - 2012-07-26 06:26 - 00000160 _____ () C:\WINDOWS\win.ini
2014-01-29 15:37 - 2014-01-29 15:37 - 00000207 _____ () C:\WINDOWS\tweaking.com-regbackup-LUCIENSNOTE-Microsoft-Windows-8.1-(64-bit).dat
2014-01-29 15:36 - 2014-01-29 15:36 - 00000000 ____D () C:\RegBackup
2014-01-29 15:11 - 2013-07-18 20:49 - 00000074 _____ () C:\Users\Lucien\AppData\Roaming\sp_data.sys
2014-01-29 14:56 - 2014-01-29 14:56 - 00000000 ____D () C:\Users\Lucien\Downloads\Tweaking.com - Windows Repair
2014-01-29 14:54 - 2014-01-22 00:10 - 00000000 ____D () C:\Users\Lucien\Desktop\Tweaking.com - Windows Repair
2014-01-29 14:48 - 2014-01-29 14:48 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2014-01-29 14:48 - 2013-11-05 21:42 - 00109524 _____ () C:\WINDOWS\system32\Drivers\RTWAVES30.dat
2014-01-29 14:48 - 2013-11-05 21:41 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2014-01-29 14:47 - 2013-08-22 15:46 - 00000974 _____ () C:\WINDOWS\setuperr.log
2014-01-29 14:46 - 2014-01-29 13:09 - 00000000 ____D () C:\Program Files (x86)\GUMCBFB.tmp
2014-01-29 14:37 - 2014-01-29 14:29 - 109595877 _____ () C:\Users\Lucien\Downloads\Audio_Realtek_Win81_64_VER6017083.zip
2014-01-29 14:34 - 2013-06-26 07:58 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-01-29 14:34 - 2013-06-26 07:51 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-01-29 14:20 - 2014-01-29 14:20 - 02903255 _____ () C:\Users\Lucien\Downloads\tweaking.com_windows_repair_aio.zip
2014-01-29 13:07 - 2014-01-29 13:05 - 37739976 _____ (Google Inc.) C:\Users\Lucien\Downloads\ChromeStandalone32Setup.exe
2014-01-29 13:06 - 2013-04-26 00:19 - 00000000 ____D () C:\ProgramData\WildTangent
2014-01-29 13:02 - 2014-01-29 13:02 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Deployment
2014-01-29 12:56 - 2014-01-29 12:56 - 00000000 ____D () C:\Users\Lucien\Desktop\chrome default
2014-01-29 12:49 - 2014-01-29 12:49 - 00001124 _____ () C:\Users\Lucien\Desktop\Absolute Uninstaller.lnk
2014-01-29 12:49 - 2014-01-29 12:49 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\GlarySoft
2014-01-29 12:48 - 2014-01-29 12:48 - 02194784 _____ (Glarysoft.com ) C:\Users\Lucien\Downloads\au29setup.exe
2014-01-29 09:54 - 2014-01-29 09:54 - 00048629 _____ () C:\Users\Lucien\Documents\Namenschilder%20fertig.ppt_0.odp
2014-01-29 09:40 - 2014-01-29 09:40 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Atheros
2014-01-29 09:40 - 2014-01-28 12:11 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-01-29 09:39 - 2014-01-28 12:11 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-01-28 14:05 - 2014-01-28 14:00 - 00000000 ____D () C:\Program Files\Common Files\QCA_Bluetooth
2014-01-28 14:00 - 2013-06-26 08:02 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite
2014-01-28 13:56 - 2014-01-28 13:56 - 00000000 ____D () C:\Users\Lucien\Downloads\Win8 Key
2014-01-28 13:52 - 2014-01-28 13:51 - 00000000 ____D () C:\Users\Lucien\Downloads\wlan
2014-01-28 13:51 - 2014-01-28 13:51 - 00000000 ____D () C:\Users\Lucien\Downloads\lan
2014-01-28 13:50 - 2014-01-28 13:50 - 00000000 ____D () C:\Users\Lucien\Downloads\bluetooth
2014-01-28 13:49 - 2014-01-28 13:48 - 00000000 ____D () C:\Users\Lucien\Downloads\audio
2014-01-28 13:46 - 2014-01-28 13:46 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_btmaux_01009.Wdf
2014-01-28 13:46 - 2013-11-05 21:42 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-01-28 13:45 - 2014-01-28 13:45 - 00000000 ____D () C:\Users\Lucien\Downloads\blue
2014-01-28 13:45 - 2014-01-28 13:44 - 00000000 ____D () C:\Users\Lucien\Downloads\Lang
2014-01-28 12:12 - 2014-01-28 12:12 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-01-28 12:12 - 2013-11-05 21:42 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-01-28 12:11 - 2014-01-28 10:55 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-01-28 11:41 - 2014-01-28 11:39 - 00000000 ____D () C:\Users\Lucien\AppData\Local\NVIDIA
2014-01-28 11:40 - 2014-01-28 11:40 - 00001369 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2014-01-28 11:40 - 2014-01-28 11:40 - 00000000 ____D () C:\Users\Lucien\AppData\Local\NVIDIA Corporation
2014-01-28 11:40 - 2014-01-28 10:54 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-01-28 11:39 - 2013-11-05 21:42 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-01-28 10:53 - 2014-01-28 10:53 - 00000000 ____D () C:\NVIDIA
2014-01-28 10:48 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Help
2014-01-28 10:41 - 2014-01-28 10:41 - 00000000 ____D () C:\WINDOWS\pss
2014-01-28 10:01 - 2014-01-28 09:59 - 31475128 _____ (NVIDIA Corporation) C:\Users\Lucien\Downloads\GeForce_Experience_v1.8.2.0.exe
2014-01-27 22:59 - 2014-01-27 22:46 - 266633424 _____ (NVIDIA Corporation) C:\Users\Lucien\Downloads\332.21-notebook-win8-win7-64bit-international-whql.exe
2014-01-27 20:33 - 2014-01-27 19:54 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-27 20:20 - 2013-09-12 10:02 - 00296960 ___SH () C:\Users\Lucien\Downloads\Thumbs.db
2014-01-27 20:01 - 2013-10-14 09:56 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Spotify
2014-01-27 19:53 - 2014-01-27 19:53 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-01-27 19:52 - 2014-01-27 19:52 - 00000000 ____D () C:\Users\Lucien\Desktop\mbar
2014-01-27 19:48 - 2014-01-27 19:47 - 00000000 ____D () C:\Users\Lucien\Desktop\Logs2
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-01-26 20:53 - 2014-01-26 20:53 - 00003186 _____ () C:\WINDOWS\System32\Tasks\{E66DEEF7-845B-48C8-BBEE-CE6EA6F2EE96}
2014-01-26 19:26 - 2014-01-26 19:26 - 00003362 _____ () C:\WINDOWS\System32\Tasks\{63C03234-5B71-4184-AD48-4EE22D315F87}
2014-01-25 15:01 - 2014-01-25 15:01 - 00000000 ____H () C:\Users\Lucien\Documents\Default.rdp
2014-01-24 19:21 - 2014-01-24 19:21 - 00000000 ____D () C:\Users\Lucien\Desktop\Logs alt
2014-01-24 19:17 - 2014-01-24 19:17 - 00361185 _____ (Farbar) C:\Users\Lucien\Desktop\FSS.exe
2014-01-24 16:48 - 2014-01-24 16:48 - 00032847 _____ () C:\Users\Lucien\Desktop\gmer.zip
2014-01-24 11:34 - 2014-01-24 11:34 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-01-24 10:53 - 2014-01-24 10:53 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-01-22 21:23 - 2014-01-22 21:23 - 00022688 _____ () C:\Users\Lucien\Downloads\Addition.txt
2014-01-22 21:23 - 2014-01-22 21:22 - 00046051 _____ () C:\Users\Lucien\Downloads\FRST.txt
2014-01-22 14:01 - 2014-01-21 10:40 - 00000000 ____D () C:\Users\Gast\AppData\Local\My Games
2014-01-22 14:01 - 2013-10-01 15:03 - 00000000 ____D () C:\Users\Gast\Documents\My Games
2014-01-22 14:01 - 2013-09-01 19:44 - 00000000 ____D () C:\Users\Lucien\AppData\Local\My Games
2014-01-22 14:01 - 2013-08-20 09:54 - 00000000 ____D () C:\Users\Lucien\Documents\My Games
2014-01-22 12:30 - 2014-01-22 12:30 - 00000168 _____ () C:\Users\Lucien\defogger_reenable
2014-01-21 22:13 - 2014-01-06 13:29 - 00000000 ____D () C:\Users\Lucien\Documents\Rockstar Games
2014-01-21 22:13 - 2013-09-04 07:48 - 00000000 ____D () C:\Users\Lucien\Documents\Blender
2014-01-21 22:00 - 2013-11-04 09:24 - 00069120 ___SH () C:\Users\Gast\Downloads\Thumbs.db
2014-01-21 15:06 - 2014-01-21 15:06 - 01037068 _____ (Thisisu) C:\Users\Lucien\Desktop\JRT.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00987425 _____ () C:\Users\Lucien\Desktop\SecurityCheck.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00448512 _____ (OldTimer Tools) C:\Users\Lucien\Desktop\TFC.exe
2014-01-21 15:01 - 2014-01-21 15:00 - 02347384 _____ (ESET) C:\Users\Lucien\Desktop\esetsmartinstaller_enu.exe
2014-01-21 13:25 - 2014-01-21 13:15 - 24859352 _____ (Microsoft Corporation) C:\Users\Gast\Downloads\Windows-KB890830-x64-V5.8.exe
2014-01-21 10:38 - 2013-09-01 18:18 - 00281688 _____ () C:\WINDOWS\SysWOW64\PnkBstrB.xtr
2014-01-21 10:18 - 2014-01-21 10:18 - 00050477 _____ () C:\Users\Lucien\Desktop\Defogger.exe
2014-01-21 10:12 - 2014-01-21 10:12 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\QuickScan
2014-01-21 09:38 - 2014-01-21 09:38 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Spotydl
2014-01-21 09:37 - 2013-09-26 11:23 - 00000000 ____D () C:\Users\Gast\AppData\Local\VirtualStore
2014-01-21 08:37 - 2014-01-20 15:52 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Bitdefender
2014-01-21 03:54 - 2014-01-28 11:39 - 01179576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2014-01-21 03:54 - 2014-01-28 11:39 - 01048152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2014-01-20 15:53 - 2014-01-20 15:53 - 00000000 ____D () C:\Users\Gast\AppData\Local\NVIDIA Corporation
2014-01-20 15:52 - 2014-01-20 15:52 - 00000385 _____ () C:\Users\Gast\AppData\Roaminguser_gensett.xml
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D () C:\Users\Gast\AppData\Local\BMExplorer
2014-01-20 15:52 - 2013-10-29 11:55 - 00000000 ____D () C:\Users\Gast\AppData\Local\NVIDIA
2014-01-20 15:52 - 2013-10-19 09:42 - 00000000 ____D () C:\Users\Gast\AppData\Local\Spotify
2014-01-20 15:52 - 2013-09-26 11:24 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-20 15:52 - 2013-09-26 11:24 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-20 15:51 - 2014-01-20 15:51 - 00000000 ____D () C:\Users\Lucien\Documents\AdobeStockPhotos
2014-01-20 15:51 - 2013-07-18 20:48 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Adobe
2014-01-20 13:49 - 2014-01-17 13:50 - 00000000 ____D () C:\Users\Lucien\Downloads\backups
2014-01-20 12:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-01-19 18:46 - 2014-01-17 13:42 - 00012554 _____ () C:\Users\Lucien\Downloads\hijackthis.log
2014-01-19 18:22 - 2014-01-19 18:22 - 00305304 _____ () C:\WINDOWS\Minidump\011914-32203-01.dmp
2014-01-19 16:08 - 2014-01-13 23:20 - 00000000 ____D () C:\Program Files (x86)\McAfee Security Scan
2014-01-19 08:38 - 2014-01-19 21:21 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-01-17 20:25 - 2014-01-22 00:11 - 00379904 _____ () C:\Users\Lucien\Desktop\gmer.exe
2014-01-17 13:42 - 2014-01-17 13:42 - 00388608 _____ (Trend Micro Inc.) C:\Users\Lucien\Downloads\HiJackThis204.exe
2014-01-17 13:42 - 2013-07-18 20:48 - 00000000 ____D () C:\Users\Lucien\AppData\Local\VirtualStore
2014-01-17 09:54 - 2014-01-17 09:54 - 00000385 _____ () C:\Users\Lucien\AppData\Roaminguser_gensett.xml
2014-01-17 09:54 - 2013-07-18 20:49 - 00000000 ___RD () C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-17 09:54 - 2013-07-18 20:49 - 00000000 ___RD () C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-01-16 16:37 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\Dism
2014-01-16 16:37 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Dism
2014-01-16 13:51 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-01-16 13:29 - 2013-08-19 19:19 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-01-13 23:23 - 2014-01-13 23:23 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\system32\bdsandboxuiskin32.dll
2014-01-13 23:23 - 2014-01-13 22:53 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\SysWOW64\bdsandboxuiskin32.dll
2014-01-13 23:23 - 2014-01-13 22:52 - 00261056 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avchv.sys
2014-01-13 23:23 - 2014-01-13 22:48 - 00000000 ____D () C:\ProgramData\Bitdefender
2014-01-13 23:20 - 2014-01-13 23:20 - 00002041 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-13 23:20 - 2013-04-26 00:18 - 00000000 ____D () C:\ProgramData\McAfee
2014-01-13 23:19 - 2013-04-26 00:15 - 00000000 ____D () C:\ProgramData\Adobe
2014-01-13 23:19 - 2013-04-26 00:15 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-01-13 22:54 - 2014-01-13 22:54 - 00620542 _____ () C:\ProgramData\1389649682.bdinstall.bin
2014-01-13 22:54 - 2014-01-13 22:54 - 00000385 _____ () C:\WINDOWS\system32\user_gensett.xml
2014-01-13 22:54 - 2014-01-13 22:53 - 00000000 ____D () C:\ProgramData\BDLogging
2014-01-13 22:54 - 2014-01-13 22:52 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Bitdefender
2014-01-13 22:53 - 2014-01-13 22:53 - 00002212 _____ () C:\Users\Public\Desktop\Bitdefender Safepay.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00002164 _____ () C:\Users\Public\Desktop\Bitdefender Total Security.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2014-01-13 22:52 - 2014-01-13 22:48 - 00000000 ____D () C:\Program Files\Bitdefender
2014-01-13 22:48 - 2014-01-13 22:48 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\QuickScan
2014-01-13 22:48 - 2014-01-12 22:56 - 00000000 ____D () C:\Program Files\Common Files\Bitdefender
2014-01-13 22:46 - 2013-08-30 00:06 - 00000000 ____D () C:\avast! sandbox
2014-01-13 22:45 - 2013-08-19 19:05 - 00000000 ____D () C:\Program Files\AVAST Software
2014-01-13 22:45 - 2013-08-19 19:04 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-01-13 22:44 - 2013-08-19 19:06 - 00000000 _____ () C:\WINDOWS\SysWOW64\config.nt
2014-01-13 14:27 - 2014-01-09 12:00 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Bioshock

Some content of TEMP:
====================
C:\Users\Gast\AppData\Local\Temp\691.355818674457_Update.exe
C:\Users\Gast\AppData\Local\Temp\drm_dyndata_7390004.dll
C:\Users\Gast\AppData\Local\Temp\ubiB23E.tmp.exe
C:\Users\Lucien\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-12 00:09

==================== End Of Log ============================

--- --- ---

SecureBanking 12.02.2014 20:56

Hast du wirklich Secure Banking 2.0.0 b6 installiert?

Das Installationsverzeichnis scheint nämlich noch das alte zu sein. Oder hast du das Installationsverzeichnis manuell eingestellt? (ich glaub aber das habe ich deaktiviert)

sunjojo 14.02.2014 18:26

Hi,

Zitat:

hat sich da irgendwas eingeschlichen?
Ich kann nichts schädliches in deinen Logfiles erkennen.



Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

GroupPolicyUsers\S-1-5-21-3506778915-1287356822-3408950579-1002\User: Group Policy restriction detected <======= ATTENTION

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.


Zitat:

Aber das ist gar nicht mein hauptproblem, denn mein lappi schmiert mir grad total ab.
Das hochfahren klappt super aber der desktop mit allen symbolen baut sich extrem langsam auf und der taskmanager meldet 100%ige datenträger auslastung obwohl ich den rechner einfach so stehen lasse und nichts anrühre.
Sind die Probleme noch vorhanden?

SecureBanking 19.02.2014 02:27

Hallöchen! :)

Die Probleme sollten jetzt mit der neuen Beta Version von Secure Banking behoben sein. Hab eine neue Technologie eingebaut, um solche Falschmeldungen zu erkennen.
Du kannst sie dir hier herunterladen.

(Vorher natürlich die alte Version bitte deinstallieren)

sunjojo 19.02.2014 18:21

Hi,

ich hab schon länger keine Antwort mehr von dir erhalten. Brauchst du weiterhin noch Hilfe?

Wenn ich in den nächsten 24 Stunden nichts von dir höre, gehe ich davon aus, dass sich das Thema erledigt hat und lösche es aus meinen Abos.

Hinweis: Wir sind noch nicht fertig! Auch wenn die Symptome verschwunden sein sollten, kann dein System weiterhin infiziert sein und über Sicherheitslücken verfügen, welche eine erneute Infektion möglich machen

KitsuneNoir 20.02.2014 00:51

Hi,
Code:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 18-02-2014
Ran by Lucien at 2014-02-20 00:44:33 Run:3
Running from C:\Users\Lucien\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
GroupPolicyUsers\S-1-5-21-3506778915-1287356822-3408950579-1002\User: Group Policy restriction detected <======= ATTENTION
       
*****************

C:\WINDOWS\system32\GroupPolicyUsers\S-1-5-21-3506778915-1287356822-3408950579-1002\User => Moved successfully.


The system needs a manual reboot.

==== End of Fixlog ====

probleme bestehen weiterhin, also ist immer noch langsam.


Wegen secure banking, die beta ist drauf nur wenn ich die alte version lösche dann ist auch die beta mit weg ich hab also noch beide versionen drauf.

hey, mal ne ganz andere frage, wie wäre es denn wenn ich meine platte komplett überschreiben würde und win8 nochmal neu aufspiele. Das alles ist ja kein problem, nur der win8 key ist im bios gespeichert und wenn ich die platte überschreibe wird dieses doch auch mit gelöscht. also wie liest es dann beim neuen aufspielen von win8 meinen key aus?
könnt ihr mir da weiterhelfen oder bin ich hier im falschen forum.

denn ich glaube ich werde lieber die platte überschreiben als mich hier weiter rumzuärgern :/

sunjojo 22.02.2014 12:49

Zitat:

probleme bestehen weiterhin, also ist immer noch langsam.
Ok, wenn du deinen Rechner nicht neuaufsetzen willst, mache bitte einen Scan mit FRST nach folgender Anleitung:

Starte noch einmal FRST.
  • Ändere keine der Voreinstellungen und drücke auf Scan.
  • Wenn der Scan abgeschlossen ist, wird ein neues Logfile FRST.txt erstellt und auf dem Desktop gespeichert.
  • Poste den Inhalt dieses Logfiles bitte hier in deinen Thread.

Zitat:

Wegen secure banking, die beta ist drauf nur wenn ich die alte version lösche dann ist auch die beta mit weg ich hab also noch beide versionen drauf.
Deinstalliere bitte zuerst die alte Version, bevor du dir die neue Version herunterlädst.

Zitat:

hey, mal ne ganz andere frage, wie wäre es denn wenn ich meine platte komplett überschreiben würde und win8 nochmal neu aufspiele. Das alles ist ja kein problem, nur der win8 key ist im bios gespeichert und wenn ich die platte überschreibe wird dieses doch auch mit gelöscht. also wie liest es dann beim neuen aufspielen von win8 meinen key aus?
Wenn du deine Festplatte formatierst, wird das BIOS nicht mitgelöscht, das heißt dein Key wird auch nicht gelöscht. Du musst diesen auch nicht mehr eingeben, wenn du dein Betriebssystem neu installierst. Dafür ist jedoch genau die gleiche Windows 8 Version auf DVD/USB-Stick erforderlich, die bereits installiert war. Dann sucht Windows automatisch nach dem Key und aktiviert das Betriebssystem. Gib mir bitte eine kurze Rückmeldung, ob du dein Betriebssystem neu installierst oder weitermachen willst.

KitsuneNoir 22.02.2014 14:01

Hallo, ich versuchs nochmal n stück weiter aber wenn ich noch länger das gefühl habe dass etwas nicht stimmt formatiere ich neu.


FRST Logfile:
Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-02-2014 01
Ran by Lucien (administrator) on LUCIENSNOTE on 22-02-2014 13:57:09
Running from C:\Users\Lucien\Desktop
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\vsserv.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(ASUS) C:\Program Files\ASUS\P4G\InsOnSrv.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Microsoft Corporation) C:\WINDOWS\System32\LogonUI.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS Console\ASUS Console Starter.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\bdagent.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Akamai Technologies, Inc.) C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe
(Akamai Technologies, Inc.) C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe
(Secure Banking) C:\Program Files (x86)\Secure Banking\SecureBanking.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe\LiveComm.exe
(Microsoft Corporation) C:\WINDOWS\system32\wwahost.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\antispam32\OBKAgent.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(ASUS) C:\Program Files\ASUS\P4G\InsOnWMI.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Spotify Ltd) C:\Users\Lucien\AppData\Roaming\Spotify\spotify.exe
() C:\Users\Lucien\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Lucien\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Lucien\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Lucien\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Lucien\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Lucien\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\WINDOWS\system32\wwahost.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Microsoft Corporation) C:\WINDOWS\SysWOW64\cmd.exe
() C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxcrnmh.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-12-10] (Adobe Systems Incorporated)
HKLM\...\Run: [PrnStatusMX] - C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe [1240064 2012-07-04] (Marvell Semiconductor, Inc.)
HKLM\...\Run: [Bdagent] - C:\Program Files\Bitdefender\Bitdefender\bdagent.exe [1737920 2014-02-03] (Bitdefender)
HKLM\...\Run: [BTMTrayAgent] - C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [7818040 2013-09-19] (Motorola Solutions, Inc.)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\WINDOWS\system32\nvspcap64.dll [1179576 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1361112 2013-11-05] (Realtek Semiconductor)
HKLM-x32\...\Run: [ASUSPRP] - C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-04-26] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-01-15] (cyberlink)
HKLM-x32\...\Run: [ASUS InstantKey] - C:\Program Files (x86)\ASUS\ASUS Instant Key\Ikey_start.exe [13936 2013-04-16] (ASUS)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2239376 2014-02-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-09-25] ( (Atheros Communications))
HKU\.DEFAULT\...\Run: [Bitdefender-Geldbörse-Agent] - C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [567888 2014-02-11] (Bitdefender)
HKU\.DEFAULT\...\Run: [Bitdefender-Geldbörse] - C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe [1001536 2014-02-11] (Bitdefender)
HKU\.DEFAULT\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] - C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [614232 2014-02-11] (Bitdefender)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [Steam] - C:\Program Files (x86)\Steam\steam.exe [1822400 2014-02-20] (Valve Corporation)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [Spotify Web Helper] - C:\Users\Lucien\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-10] (Spotify Ltd)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [Akamai NetSession Interface] - C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [Bitdefender-Geldbörse-Agent] - C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [567888 2014-02-11] (Bitdefender)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] - C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [614232 2014-02-11] (Bitdefender)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [SecureBanking] - C:\Program Files (x86)\Secure Banking\SecureBanking.exe [507904 2013-06-30] (Secure Banking)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [168616 2013-12-10] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll, => c:\windows\syswow64\nvinit.dll [141336 2013-12-10] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [141336 2013-12-10] (NVIDIA Corporation)
Startup: C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)

==================== Internet (Whitelisted) ====================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;form=IE10TR&amp;src=IE10TR&amp;pc=ASU2JS
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;form=IE10TR&amp;src=IE10TR&amp;pc=ASU2JS
BHO: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\pmbxie.dll (Bitdefender)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxie.dll (Bitdefender)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Chrome:
=======
CHR HomePage: https://www.google.de/
CHR Extension: (Google Docs) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-14]
CHR Extension: (Google Drive) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-19]
CHR Extension: (YouTube) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-19]
CHR Extension: (Bitdefender Wallet) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccahoghmggldkcdjiebjkidpfongdfbl [2014-01-13]
CHR Extension: (Adblock Plus) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-02-08]
CHR Extension: (Google-Suche) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-19]
CHR Extension: (Google Wallet) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR Extension: (Google Mail) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-19]
CHR HKLM-x32\...\Chrome\Extension: [ccahoghmggldkcdjiebjkidpfongdfbl] - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxcr.crx [2014-02-11]

==================== Services (Whitelisted) =================

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-12-18] (Adobe Systems)
R2 ASUS InstantOn; C:\Program Files\ASUS\P4G\InsOnSrv.exe [277120 2013-04-29] (ASUS)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-09-25] (Windows (R) Win 7 DDK provider)
S4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender\bdparentalservice.exe [77632 2013-11-21] (Bitdefender)
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [247768 2013-01-15] (CyberLink)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-04-11] (Intel Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-09-18] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16939296 2014-01-21] (NVIDIA Corporation)
R2 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [94624 2013-07-08] (Bitdefender)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe [67320 2013-10-07] (Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender\vsserv.exe [1507248 2014-02-03] (Bitdefender)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [18384 2013-09-04] (Intel(R) Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-09-25] (Atheros)

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Qualcomm Atheros Communications, Inc.)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [70416 2013-09-23] (ASUS Corporation)
R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [893440 2014-02-03] (BitDefender)
R3 avchv; C:\Windows\system32\DRIVERS\avchv.sys [261056 2014-01-13] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [635392 2014-02-03] (BitDefender)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
S0 bdelam; C:\Windows\System32\drivers\bdelam.sys [23568 2013-09-08] (Bitdefender)
R1 BdfNdisf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys [98768 2013-07-24] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107008 2013-07-29] (BitDefender LLC)
S4 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-07-02] (Bitdefender SRL)
S3 BDSandBox; C:\WINDOWS\system32\drivers\bdsandbox.sys [82824 2013-11-04] (BitDefender SRL)
R1 BDVEDISK; C:\Windows\system32\DRIVERS\bdvedisk.sys [79192 2013-07-30] (BitDefender)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-25] (Qualcomm Atheros)
S3 BthA2DP; C:\Windows\system32\drivers\BthA2DP.sys [131584 2013-08-22] (Microsoft Corporation)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
S3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [140600 2013-07-22] (Motorola Solutions, Inc.)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-02-05] (Disc Soft Ltd)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [150256 2013-08-23] (BitDefender LLC)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)
R2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [26328 2013-07-23] (Intel Corporation)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-07-26] (Intel Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S0 rtcrfilt64; C:\Windows\System32\DRIVERS\rtcrfilt64.sys [19600 2000-01-01] (Realtek Semiconductor Corp.)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
S3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16152 2013-09-03] ()
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [389240 2013-08-07] (BitDefender S.R.L.)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
S3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [X]
S3 GPU-Z; \??\C:\Users\Lucien\AppData\Local\Temp\GPU-Z.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-20 15:58 - 2014-02-20 15:58 - 00001316 _____ () C:\Users\Public\Desktop\AudioWizard.lnk
2014-02-20 15:58 - 2014-02-20 15:58 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2014-02-20 15:58 - 2013-11-05 19:47 - 03707864 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2014-02-20 15:58 - 2013-11-05 18:54 - 38385664 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
2014-02-20 15:58 - 2013-11-05 15:48 - 00681905 _____ () C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2014-02-20 15:58 - 2013-11-04 19:26 - 00153304 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2014-02-20 15:58 - 2013-11-04 11:11 - 02587864 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkAPO64.dll
2014-02-20 15:58 - 2013-10-28 17:29 - 01021656 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2014-02-20 15:58 - 2013-10-18 16:41 - 01286360 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2014-02-20 15:58 - 2013-10-11 11:31 - 00947760 _____ (Sony Corporation) C:\WINDOWS\system32\SFSS_APO.dll
2014-02-20 15:58 - 2013-10-09 20:13 - 01921792 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek264.dll
2014-02-20 15:58 - 2013-10-09 20:12 - 27644160 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioVnA64.dll
2014-02-20 15:58 - 2013-10-09 20:12 - 14152960 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek64.dll
2014-02-20 15:58 - 2013-10-09 20:12 - 02103040 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\WavesGUILib64.dll
2014-02-20 15:58 - 2013-10-09 20:12 - 02036992 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioEQ64.dll
2014-02-20 15:58 - 2013-10-09 20:12 - 01012992 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPOShell64.dll
2014-02-20 15:58 - 2013-10-07 11:05 - 02810072 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2014-02-20 15:58 - 2013-10-02 17:10 - 00617176 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2014-02-20 15:58 - 2013-08-14 16:36 - 00662784 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVolumeSDAPO.dll
2014-02-20 15:58 - 2013-08-14 16:35 - 01084160 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO4064.dll
2014-02-20 15:58 - 2013-08-14 16:35 - 00663296 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO30.dll
2014-02-20 15:58 - 2013-08-05 18:11 - 02743328 _____ (Fortemedia Corporation) C:\WINDOWS\system32\FMAPO64.dll
2014-02-20 15:58 - 2013-04-24 17:16 - 01662024 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2014-02-20 15:58 - 2012-08-31 19:18 - 07164176 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEP64A.dll
2014-02-20 15:58 - 2012-08-31 19:17 - 00434960 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EED64A.dll
2014-02-20 15:58 - 2012-08-31 19:17 - 00141584 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEL64A.dll
2014-02-20 15:58 - 2012-08-31 19:17 - 00124176 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEA64A.dll
2014-02-20 15:58 - 2012-08-31 19:17 - 00075024 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEG64A.dll
2014-02-20 15:58 - 2012-01-30 11:43 - 00836544 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo264.dll
2014-02-20 15:58 - 2012-01-10 10:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\WINDOWS\system32\tepeqapo64.dll
2014-02-20 15:58 - 2011-12-20 15:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2014-02-20 15:58 - 2011-11-22 16:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2014-02-20 15:58 - 2011-09-02 14:21 - 00221024 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFNHK64.dll
2014-02-20 15:58 - 2011-09-02 14:21 - 00081248 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFCOM64.dll
2014-02-20 15:58 - 2011-09-02 14:21 - 00078688 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFAPO64.dll
2014-02-20 15:58 - 2011-08-23 17:00 - 00603984 _____ (Knowles Acoustics ) C:\WINDOWS\system32\KAAPORT64.dll
2014-02-20 15:58 - 2011-03-17 12:17 - 01361336 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosade.dll
2014-02-20 15:58 - 2011-03-07 17:11 - 00148416 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo.dll
2014-02-20 15:58 - 2010-11-08 07:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2014-02-20 15:58 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2014-02-20 15:58 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2014-02-20 15:58 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2014-02-20 15:58 - 2010-11-08 07:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2014-02-20 15:58 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2014-02-20 15:58 - 2010-11-03 18:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2014-02-20 15:58 - 2010-09-27 09:34 - 00318808 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO20.dll
2014-02-20 15:58 - 2010-07-22 16:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\WINDOWS\SysWOW64\SFCOM.dll
2014-02-20 15:58 - 2009-11-24 09:55 - 00518896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2014-02-20 15:58 - 2009-11-24 09:55 - 00211184 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll
2014-02-20 15:58 - 2009-11-24 09:55 - 00198896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll
2014-02-20 15:58 - 2009-11-24 09:55 - 00155888 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2014-02-20 15:57 - 2013-10-16 03:43 - 00209096 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll
2014-02-20 15:57 - 2013-10-11 12:47 - 00113576 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2014-02-20 15:57 - 2013-10-07 00:26 - 00501184 _____ (DTS) C:\WINDOWS\system32\DTSU2PLFX64.dll
2014-02-20 15:57 - 2013-10-07 00:26 - 00487360 _____ (DTS) C:\WINDOWS\system32\DTSU2PGFX64.dll
2014-02-20 15:57 - 2013-10-07 00:26 - 00415680 _____ (DTS) C:\WINDOWS\system32\DTSU2PREC64.dll
2014-02-20 15:57 - 2013-09-10 04:02 - 06217904 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64A.dll
2014-02-20 15:57 - 2013-09-10 04:02 - 00313520 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64A.dll
2014-02-20 15:57 - 2013-09-10 04:01 - 01938608 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64A.dll
2014-02-20 15:57 - 2013-09-10 04:01 - 00260272 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64.dll
2014-02-20 15:57 - 2012-03-08 11:47 - 00108640 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll
2014-02-20 15:57 - 2011-05-31 09:42 - 01756264 _____ (DTS) C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll
2014-02-20 15:57 - 2011-05-31 09:42 - 01568360 _____ (DTS) C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll
2014-02-20 15:57 - 2011-05-31 09:42 - 01486952 _____ (DTS) C:\WINDOWS\system32\DTSBoostDLL64.dll
2014-02-20 15:57 - 2011-05-31 09:42 - 00728680 _____ (DTS) C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll
2014-02-20 15:57 - 2011-05-31 09:42 - 00712296 _____ (DTS) C:\WINDOWS\system32\DTSSymmetryDLL64.dll
2014-02-20 15:57 - 2011-05-31 09:42 - 00693352 _____ (DTS) C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll
2014-02-20 15:57 - 2011-05-31 09:42 - 00491112 _____ (DTS) C:\WINDOWS\system32\DTSNeoPCDLL64.dll
2014-02-20 15:57 - 2011-05-31 09:42 - 00432744 _____ (DTS) C:\WINDOWS\system32\DTSLimiterDLL64.dll
2014-02-20 15:57 - 2011-05-31 09:42 - 00428648 _____ (DTS) C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll
2014-02-20 15:57 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\WINDOWS\system32\DTSLFXAPO64.dll
2014-02-20 15:57 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPO64.dll
2014-02-20 15:57 - 2011-05-31 09:42 - 00241768 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPONS64.dll
2014-02-20 15:56 - 2014-02-20 16:00 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-02-20 15:56 - 2014-02-20 16:00 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-02-20 15:56 - 2014-02-20 15:56 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-20 15:32 - 2013-09-13 18:44 - 02080472 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\RtlExUpd.dll
2014-02-20 15:30 - 2013-09-09 14:54 - 00833752 _____ (Realtek ) C:\WINDOWS\system32\Drivers\Rt630x64.sys
2014-02-20 15:30 - 2013-09-09 14:54 - 00074456 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll
2014-02-20 15:28 - 2013-08-27 23:42 - 00086035 ____N () C:\WINDOWS\system32\athwbx.cat
2014-02-20 15:28 - 2013-08-15 20:13 - 03859968 ____N (Qualcomm Atheros Communications, Inc.) C:\WINDOWS\system32\athwbx.sys
2014-02-20 15:28 - 2013-08-15 20:13 - 03859968 _____ (Qualcomm Atheros Communications, Inc.) C:\WINDOWS\system32\Drivers\athwbx.sys
2014-02-20 14:43 - 2013-12-19 21:33 - 01884448 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6433221.dll
2014-02-20 14:43 - 2013-12-19 21:33 - 01511712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6433221.dll
2014-02-20 14:43 - 2013-12-19 21:33 - 00357152 _____ () C:\WINDOWS\system32\NvIFROpenGL.dll
2014-02-20 14:43 - 2013-12-19 21:33 - 00314656 _____ () C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2014-02-20 14:39 - 2013-10-23 09:20 - 06669600 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2014-02-20 14:39 - 2013-10-23 09:20 - 03489568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2014-02-20 14:39 - 2013-10-23 09:20 - 03426956 _____ () C:\WINDOWS\system32\nvcoproc.bin
2014-02-20 14:39 - 2013-10-23 09:20 - 02559776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2014-02-20 14:39 - 2013-10-23 09:20 - 01064224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2014-02-20 14:39 - 2013-10-23 09:20 - 00922912 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2014-02-20 14:39 - 2013-10-23 09:20 - 00219424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2014-02-20 14:39 - 2013-10-23 09:20 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2014-02-20 14:39 - 2013-10-23 09:20 - 00063776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2014-02-20 14:37 - 2013-12-10 08:13 - 00168616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2014-02-20 14:37 - 2013-12-10 08:13 - 00141336 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2014-02-20 13:14 - 2014-02-20 13:14 - 00001369 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2014-02-20 13:13 - 2014-01-21 03:54 - 01179576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2014-02-20 13:13 - 2014-01-21 03:54 - 01048152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2014-02-20 13:12 - 2013-12-27 19:42 - 00039200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2014-02-20 13:12 - 2013-12-27 19:42 - 00035104 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2014-02-20 13:12 - 2013-12-27 19:42 - 00033056 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2014-02-20 10:53 - 2014-02-08 19:34 - 01885472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6433489.dll
2014-02-20 10:53 - 2014-02-08 19:34 - 01515296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6433489.dll
2014-02-20 09:25 - 2014-01-08 02:46 - 00325464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2014-02-20 09:25 - 2014-01-08 02:41 - 01530712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-02-20 09:25 - 2014-01-08 02:41 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-02-20 09:25 - 2014-01-04 16:54 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll
2014-02-20 09:25 - 2014-01-04 16:08 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-02-20 09:25 - 2014-01-04 15:08 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-02-20 09:25 - 2014-01-04 14:53 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-02-20 09:25 - 2014-01-03 00:54 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-02-20 09:25 - 2014-01-03 00:48 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-02-20 09:25 - 2014-01-03 00:40 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-02-20 09:25 - 2014-01-03 00:38 - 06640640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-02-20 09:25 - 2014-01-01 02:55 - 01720560 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-02-20 09:25 - 2014-01-01 02:52 - 00481944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-02-20 09:25 - 2014-01-01 01:56 - 01472048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2014-02-20 09:25 - 2014-01-01 01:55 - 00381168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-02-20 09:25 - 2014-01-01 00:59 - 00802816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-02-20 09:25 - 2014-01-01 00:57 - 01214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2014-02-20 09:25 - 2014-01-01 00:56 - 00960512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-02-20 09:25 - 2013-12-31 00:34 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sti.dll
2014-02-20 09:25 - 2013-12-31 00:33 - 00770560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2014-02-20 09:25 - 2013-12-31 00:32 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti.dll
2014-02-20 09:25 - 2013-12-31 00:31 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2014-02-20 09:25 - 2013-12-31 00:31 - 00914944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-02-20 09:25 - 2013-12-27 16:09 - 00419160 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-02-20 09:25 - 2013-12-27 11:38 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-02-20 09:25 - 2013-12-27 09:57 - 00842752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2014-02-20 09:25 - 2013-12-27 09:57 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2014-02-20 09:25 - 2013-12-27 09:23 - 00749056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2014-02-20 09:25 - 2013-12-27 09:16 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-02-20 09:25 - 2013-12-27 08:03 - 00630272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
2014-02-20 09:25 - 2013-12-27 08:03 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2014-02-20 09:25 - 2013-12-27 07:37 - 00588800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2014-02-20 09:25 - 2013-12-21 08:21 - 00376320 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpsvc.dll
2014-02-20 09:25 - 2013-12-17 08:21 - 00408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2014-02-20 09:25 - 2013-12-14 07:31 - 13949440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-02-20 09:25 - 2013-12-14 07:19 - 18576384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-02-20 09:25 - 2013-12-13 11:54 - 00131160 _____ (Microsoft Corporation) C:\WINDOWS\system32\easinvoker.exe
2014-02-20 09:25 - 2013-12-13 07:36 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2014-02-20 09:25 - 2013-12-13 06:32 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\easwrt.dll
2014-02-20 09:25 - 2013-12-09 09:05 - 21199256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-02-20 09:25 - 2013-12-09 05:51 - 18643560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-02-20 09:25 - 2013-12-09 04:25 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-02-13 16:57 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-02-13 16:57 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-02-13 16:57 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-02-13 16:57 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-02-13 16:57 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-02-13 16:57 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-02-13 16:57 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-02-13 16:57 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-02-13 16:57 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-02-13 16:57 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-02-13 16:57 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-02-13 16:57 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-02-13 16:57 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-02-13 16:57 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-02-13 16:57 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-02-13 16:57 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-02-13 16:57 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-02-13 16:57 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-02-13 16:57 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-02-13 16:57 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-02-13 16:57 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-02-13 16:57 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-02-13 16:57 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-02-13 16:57 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-02-13 16:57 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-02-13 16:57 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-02-13 16:57 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-02-13 16:57 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-02-13 16:57 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-02-13 16:57 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-02-13 16:57 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-02-13 16:57 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-02-13 16:57 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-02-13 16:57 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-02-13 16:57 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-02-13 16:57 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-02-13 16:57 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-02-13 16:54 - 2013-12-09 01:19 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdrm.dll
2014-02-13 16:54 - 2013-12-09 00:55 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdrm.dll
2014-02-13 16:53 - 2014-01-07 06:00 - 02397184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2014-02-13 16:53 - 2014-01-07 05:30 - 02071552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2014-02-13 16:53 - 2013-12-09 01:27 - 02152448 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-02-13 16:53 - 2013-12-09 00:54 - 01317376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-02-13 16:53 - 2013-11-21 07:42 - 04604416 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2014-02-13 16:53 - 2013-11-21 06:44 - 03936256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2014-02-13 16:48 - 2014-01-04 21:50 - 01462216 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-02-13 16:48 - 2014-01-04 20:22 - 01202888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-02-13 16:48 - 2014-01-04 15:30 - 13209088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-02-13 16:48 - 2014-01-04 15:23 - 11702272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-02-13 16:48 - 2014-01-04 14:42 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-02-13 16:48 - 2014-01-04 14:40 - 07416832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-02-13 16:48 - 2014-01-04 14:36 - 00830976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-02-13 16:48 - 2014-01-04 14:28 - 04961792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-02-13 16:48 - 2013-12-21 03:10 - 00009701 _____ () C:\WINDOWS\SysWOW64\connectedsearch-results.searchconnector-ms
2014-02-13 16:48 - 2013-12-21 03:10 - 00009701 _____ () C:\WINDOWS\system32\connectedsearch-results.searchconnector-ms
2014-02-13 16:48 - 2013-12-09 03:57 - 00548864 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-02-13 16:48 - 2013-12-09 02:51 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-02-13 16:47 - 2014-01-07 08:03 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe
2014-02-13 16:47 - 2014-01-07 06:59 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.exe
2014-02-13 16:47 - 2013-12-20 11:10 - 01113040 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-02-13 16:47 - 2013-12-20 07:13 - 00835584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-02-13 16:44 - 2014-01-09 09:25 - 02804224 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-02-13 16:44 - 2014-01-09 08:59 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-02-13 16:44 - 2014-01-09 08:59 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-02-13 16:44 - 2014-01-09 08:49 - 00919040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-02-13 16:44 - 2014-01-09 08:44 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-02-13 16:44 - 2014-01-09 08:43 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll
2014-02-13 16:44 - 2014-01-09 08:29 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll
2014-02-13 16:44 - 2014-01-09 08:28 - 04217344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-02-13 16:44 - 2014-01-09 08:28 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-02-13 16:44 - 2014-01-09 08:18 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-02-12 20:07 - 2014-02-12 20:07 - 01166132 _____ () C:\Users\Lucien\Downloads\adwcleaner.exe
2014-02-11 23:35 - 2014-02-11 23:35 - 00002757 _____ () C:\Users\Public\Desktop\Secure Banking.lnk
2014-02-11 23:34 - 2014-02-11 23:34 - 00000000 ____D () C:\Program Files (x86)\Secure Banking
2014-02-11 23:29 - 2014-02-11 23:29 - 00000000 ____D () C:\Users\Lucien\AppData\Local\SecureBankingGUI
2014-02-11 23:29 - 2014-02-11 23:29 - 00000000 ____D () C:\Program Files (x86)\Secure Banking Software
2014-02-11 23:27 - 2014-02-11 23:27 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Downloaded Installations
2014-02-11 23:21 - 2014-02-11 23:33 - 00000000 ____D () C:\Users\Lucien\Downloads\secure banking
2014-02-09 12:05 - 2014-02-09 12:05 - 00000000 ____D () C:\Users\Lucien\Documents\Meine empfangenen Dateien
2014-02-09 11:41 - 2014-02-09 11:41 - 07391168 _____ () C:\Users\Lucien\Downloads\ljcP1215-HB-pnp-win64-de.exe
2014-02-08 22:44 - 2014-02-08 22:44 - 00000000 ____D () C:\Users\Lucien\Documents\EA Games
2014-02-08 12:15 - 2014-02-08 12:15 - 00000000 _____ () C:\WINDOWS\SysWOW64\debug.log
2014-02-07 22:24 - 2014-02-07 22:24 - 00001214 _____ () C:\Users\Lucien\Desktop\IsoBuster.lnk
2014-02-07 22:24 - 2014-02-07 22:24 - 00000000 ____D () C:\Program Files (x86)\Smart Projects
2014-02-07 22:21 - 2014-02-07 22:21 - 04669400 _____ (Smart Projects ) C:\Users\Lucien\Downloads\isobuster_all_lang_3.3.exe
2014-02-07 22:14 - 2014-02-07 22:21 - 00000000 ____D () C:\Users\Lucien\Downloads\bin2iso
2014-02-05 17:18 - 2014-02-12 20:45 - 00001380 _____ () C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-02-05 17:17 - 2014-02-05 17:17 - 00001968 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2014-02-05 17:16 - 2014-02-05 17:16 - 00283064 _____ (Disc Soft Ltd) C:\WINDOWS\system32\Drivers\dtsoftbus01.sys
2014-02-05 17:16 - 2014-02-05 17:16 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite
2014-02-05 17:12 - 2014-02-05 17:14 - 13485616 _____ (Disc Soft Ltd) C:\Users\Lucien\Downloads\DTLite4481-0347.exe
2014-02-05 16:12 - 2014-02-05 16:12 - 00000000 ____D () C:\Program Files (x86)\AviSynth 2.5
2014-02-05 16:12 - 2009-09-27 09:39 - 00415744 ___SH (The Public) C:\WINDOWS\SysWOW64\avisynth.dll
2014-02-05 16:12 - 2005-07-14 12:31 - 00032256 ___SH () C:\WINDOWS\SysWOW64\AVSredirect.dll
2014-02-05 16:12 - 2004-02-22 10:11 - 00764416 ___SH (Abysmal Software) C:\WINDOWS\SysWOW64\devil.dll
2014-02-05 16:12 - 2004-01-25 00:00 - 00070656 ___SH (www.helixcommunity.org) C:\WINDOWS\SysWOW64\yv12vfw.dll
2014-02-05 16:12 - 2004-01-25 00:00 - 00070656 ___SH (www.helixcommunity.org) C:\WINDOWS\SysWOW64\i420vfw.dll
2014-02-05 16:11 - 2014-02-07 22:36 - 00000000 ____D () C:\Users\Lucien\Desktop\Indian Summer Westward Ho!
2014-02-05 16:07 - 2014-02-05 16:07 - 00001130 _____ () C:\Users\Public\Desktop\SUPER ©.lnk
2014-02-05 16:07 - 2014-02-05 16:07 - 00000000 ____D () C:\Users\Lucien\Documents\eRightSoft
2014-02-05 16:07 - 2012-10-05 19:54 - 00188416 __RSH () C:\WINDOWS\SysWOW64\winDCE32.dll
2014-02-05 16:07 - 2011-06-15 23:00 - 00163328 __RSH () C:\WINDOWS\SysWOW64\flvDX.dll
2014-02-05 16:07 - 2011-06-14 19:05 - 00121344 __RSH () C:\WINDOWS\SysWOW64\TAKDSDecoder.ax
2014-02-05 16:07 - 2011-02-11 10:26 - 00112128 __RSH () C:\WINDOWS\SysWOW64\OptimFROG.dll
2014-02-05 16:07 - 2010-01-06 23:00 - 00107520 __RSH () C:\WINDOWS\SysWOW64\TAKDSDecoder.dll
2014-02-05 16:07 - 2009-03-17 10:38 - 00070656 __RSH () C:\WINDOWS\SysWOW64\RLAPEDec.ax
2014-02-05 16:07 - 2009-01-18 12:03 - 00107520 __RSH () C:\WINDOWS\SysWOW64\RLMPCDec.ax
2014-02-05 16:07 - 2008-03-16 14:30 - 00216064 __RSH (MONOGRAM Multimedia, s.r.o.) C:\WINDOWS\SysWOW64\nbDX.dll
2014-02-05 16:07 - 2007-02-21 12:47 - 00031232 __RSH (Hans Mayerl) C:\WINDOWS\SysWOW64\msfDX.dll
2014-02-05 16:07 - 2005-02-13 00:00 - 00186880 __RSH (RadLight) C:\WINDOWS\SysWOW64\RLOgg.ax
2014-02-05 16:07 - 2005-02-13 00:00 - 00067584 __RSH (RadLight, LLC) C:\WINDOWS\SysWOW64\RLTheoraDec.ax
2014-02-05 16:07 - 2005-02-13 00:00 - 00051712 __RSH () C:\WINDOWS\SysWOW64\RLSpeexDec.ax
2014-02-05 16:07 - 2005-02-06 00:00 - 00092672 __RSH (RadLight) C:\WINDOWS\SysWOW64\RLVorbisDec.ax
2014-02-05 16:07 - 2004-10-10 09:50 - 00278528 _____ (Real Networks, Inc) C:\WINDOWS\SysWOW64\pncrt.dll
2014-02-05 16:07 - 2004-09-17 04:07 - 00090112 __RSH (-) C:\WINDOWS\SysWOW64\TTADSSplitter.ax
2014-02-05 16:07 - 2004-08-22 11:56 - 00090112 __RSH (-) C:\WINDOWS\SysWOW64\TTADSDecoder.ax
2014-02-05 16:07 - 2004-07-02 16:33 - 00327749 _____ (RealNetworks, Inc.) C:\WINDOWS\SysWOW64\drvc.dll
2014-02-05 16:07 - 2004-04-27 16:03 - 00017408 __RSH (RadLight) C:\WINDOWS\SysWOW64\RLOFRDec.ax
2014-02-05 16:06 - 2014-02-05 16:06 - 00000000 ____D () C:\Program Files (x86)\eRightSoft
2014-02-05 16:06 - 2012-07-11 23:00 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Olepau32.ax
2014-02-05 16:06 - 2009-09-27 23:00 - 00143872 __RSH () C:\WINDOWS\SysWOW64\AviDX.ax
2014-02-05 16:06 - 2009-08-10 23:00 - 00352768 __RSH () C:\WINDOWS\SysWOW64\ac3DX.ax
2014-02-05 16:06 - 2009-01-18 17:15 - 00120832 __RSH () C:\WINDOWS\SysWOW64\MPCDx.ax
2014-02-05 16:06 - 2006-08-16 15:53 - 00175104 __RSH () C:\WINDOWS\SysWOW64\CoreAAC.ax
2014-02-05 16:06 - 2006-03-10 20:21 - 00195584 __RSH () C:\WINDOWS\SysWOW64\MatroskaDX.ax
2014-02-05 16:06 - 2006-01-12 23:00 - 00123904 __RSH (CoreCodec) C:\WINDOWS\SysWOW64\AVCDX.ax
2014-02-05 16:06 - 2005-11-25 21:46 - 00161792 __RSH (Gabest) C:\WINDOWS\SysWOW64\RealMediaDX.ax
2014-02-05 16:06 - 2005-02-22 17:55 - 00081920 __RSH () C:\WINDOWS\SysWOW64\aac_parser.ax
2014-02-05 16:06 - 2005-01-18 00:26 - 00179200 __RSH (Gabest) C:\WINDOWS\SysWOW64\DiracSplitter.ax
2014-02-05 16:06 - 2003-12-07 08:59 - 00097280 __RSH () C:\WINDOWS\SysWOW64\FLACDX.ax
2014-02-05 16:02 - 2014-02-05 16:04 - 64722252 _____ (eRightSoft ) C:\Users\Lucien\Downloads\SUPERsetup.exe
2014-02-05 13:28 - 2014-02-05 16:46 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\DigitalSites
2014-02-05 13:27 - 2014-02-05 13:27 - 00670720 _____ () C:\Users\Gast\Downloads\VideoConverterSetup.exe
2014-02-05 13:26 - 2014-02-05 13:30 - 00000000 ____D () C:\Users\Gast\AppData\Local\CrashDumps
2014-02-05 13:17 - 2014-02-05 13:17 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Atheros
2014-02-05 13:16 - 2014-02-21 23:04 - 00000008 __RSH () C:\Users\Gast\ntuser.pol
2014-02-03 20:21 - 2014-02-03 20:40 - 00102400 _____ () C:\Users\Lucien\Desktop\Namenschilder fertig.ppt
2014-02-03 08:14 - 2014-02-03 08:14 - 00003576 _____ () C:\WINDOWS\System32\Tasks\Bitdefender Auto-Scan
2014-01-29 16:06 - 2014-01-29 16:07 - 00298424 _____ () C:\WINDOWS\Minidump\012914-53375-01.dmp
2014-01-29 15:41 - 2014-01-29 16:04 - 00181064 _____ (Sysinternals) C:\WINDOWS\PSEXESVC.EXE
2014-01-29 15:37 - 2014-01-29 15:37 - 00000207 _____ () C:\WINDOWS\tweaking.com-regbackup-LUCIENSNOTE-Microsoft-Windows-8.1-(64-bit).dat
2014-01-29 15:36 - 2014-01-29 15:36 - 00000000 ____D () C:\RegBackup
2014-01-29 14:56 - 2014-01-29 14:56 - 00000000 ____D () C:\Users\Lucien\Downloads\Tweaking.com - Windows Repair
2014-01-29 14:48 - 2014-01-29 14:48 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2014-01-29 14:29 - 2014-01-29 14:37 - 109595877 _____ () C:\Users\Lucien\Downloads\Audio_Realtek_Win81_64_VER6017083.zip
2014-01-29 14:20 - 2014-01-29 14:20 - 02903255 _____ () C:\Users\Lucien\Downloads\tweaking.com_windows_repair_aio.zip
2014-01-29 13:10 - 2014-02-21 23:36 - 00002197 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-29 13:09 - 2014-01-29 14:46 - 00000000 ____D () C:\Program Files (x86)\GUMCBFB.tmp
2014-01-29 13:05 - 2014-01-29 13:07 - 37739976 _____ (Google Inc.) C:\Users\Lucien\Downloads\ChromeStandalone32Setup.exe
2014-01-29 13:02 - 2014-01-29 13:02 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Deployment
2014-01-29 12:56 - 2014-01-29 12:56 - 00000000 ____D () C:\Users\Lucien\Desktop\chrome default
2014-01-29 12:49 - 2014-01-29 12:49 - 00001124 _____ () C:\Users\Lucien\Desktop\Absolute Uninstaller.lnk
2014-01-29 12:49 - 2014-01-29 12:49 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\GlarySoft
2014-01-29 12:48 - 2014-01-29 12:48 - 02194784 _____ (Glarysoft.com ) C:\Users\Lucien\Downloads\au29setup.exe
2014-01-29 09:54 - 2014-01-29 09:54 - 00048629 _____ () C:\Users\Lucien\Documents\Namenschilder%20fertig.ppt_0.odp
2014-01-29 09:40 - 2014-02-05 13:17 - 00000000 ____D () C:\ProgramData\Atheros
2014-01-29 09:40 - 2014-01-29 09:40 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Atheros
2014-01-28 14:00 - 2014-01-28 14:05 - 00000000 ____D () C:\Program Files\Common Files\QCA_Bluetooth
2014-01-28 13:56 - 2014-01-28 13:56 - 00000000 ____D () C:\Users\Lucien\Downloads\Win8 Key
2014-01-28 13:51 - 2014-02-20 15:28 - 00000000 ____D () C:\Users\Lucien\Downloads\wlan
2014-01-28 13:51 - 2014-02-20 15:25 - 00000000 ____D () C:\Users\Lucien\Downloads\lan
2014-01-28 13:50 - 2014-01-28 13:50 - 00000000 ____D () C:\Users\Lucien\Downloads\bluetooth
2014-01-28 13:48 - 2014-01-28 13:49 - 00000000 ____D () C:\Users\Lucien\Downloads\audio
2014-01-28 13:46 - 2014-01-28 13:46 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_btmaux_01009.Wdf
2014-01-28 13:45 - 2014-01-28 13:45 - 00000000 ____D () C:\Users\Lucien\Downloads\blue
2014-01-28 13:44 - 2014-01-28 13:45 - 00000000 ____D () C:\Users\Lucien\Downloads\Lang
2014-01-28 11:40 - 2014-02-20 12:38 - 00000000 ____D () C:\Users\Lucien\AppData\Local\NVIDIA Corporation
2014-01-28 11:39 - 2014-02-20 13:14 - 00000000 ____D () C:\Users\Lucien\AppData\Local\NVIDIA
2014-01-28 10:54 - 2014-02-20 14:38 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-01-28 10:53 - 2014-01-28 10:53 - 00000000 ____D () C:\NVIDIA
2014-01-28 10:41 - 2014-01-28 10:41 - 00000000 ____D () C:\WINDOWS\pss
2014-01-28 09:59 - 2014-01-28 10:01 - 31475128 _____ (NVIDIA Corporation) C:\Users\Lucien\Downloads\GeForce_Experience_v1.8.2.0.exe
2014-01-27 22:46 - 2014-01-27 22:59 - 266633424 _____ (NVIDIA Corporation) C:\Users\Lucien\Downloads\332.21-notebook-win8-win7-64bit-international-whql.exe
2014-01-27 20:36 - 2014-02-22 13:57 - 00021777 _____ () C:\Users\Lucien\Desktop\FRST.txt
2014-01-27 19:54 - 2014-01-27 20:33 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-27 19:53 - 2014-01-27 19:53 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-01-27 19:52 - 2014-01-27 19:52 - 00000000 ____D () C:\Users\Lucien\Desktop\mbar
2014-01-27 19:47 - 2014-01-27 19:48 - 00000000 ____D () C:\Users\Lucien\Desktop\Logs2
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-01-26 20:53 - 2014-01-26 20:53 - 00003186 _____ () C:\WINDOWS\System32\Tasks\{E66DEEF7-845B-48C8-BBEE-CE6EA6F2EE96}
2014-01-26 19:26 - 2014-01-26 19:26 - 00003362 _____ () C:\WINDOWS\System32\Tasks\{63C03234-5B71-4184-AD48-4EE22D315F87}
2014-01-25 15:01 - 2014-01-25 15:01 - 00000000 ____H () C:\Users\Lucien\Documents\Default.rdp
2014-01-24 19:21 - 2014-01-24 19:21 - 00000000 ____D () C:\Users\Lucien\Desktop\Logs alt
2014-01-24 19:17 - 2014-01-24 19:17 - 00361185 _____ (Farbar) C:\Users\Lucien\Desktop\FSS.exe
2014-01-24 16:48 - 2014-01-24 16:48 - 00032847 _____ () C:\Users\Lucien\Desktop\gmer.zip
2014-01-24 11:34 - 2014-01-24 11:34 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-01-24 10:53 - 2014-01-24 10:53 - 00000000 ____D () C:\WINDOWS\ERUNT

==================== One Month Modified Files and Folders =======

2014-02-22 13:58 - 2014-01-27 20:36 - 00021777 _____ () C:\Users\Lucien\Desktop\FRST.txt
2014-02-22 13:56 - 2014-01-22 21:41 - 00000000 ____D () C:\Users\Lucien\Desktop\FRST-OlderVersion
2014-02-22 13:56 - 2014-01-22 13:59 - 02154496 _____ (Farbar) C:\Users\Lucien\Desktop\FRST64.exe
2014-02-22 13:56 - 2014-01-21 23:54 - 00000000 ____D () C:\FRST
2014-02-22 13:54 - 2013-10-14 09:56 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Spotify
2014-02-22 13:50 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-02-22 13:50 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-02-22 01:33 - 2013-08-19 19:07 - 00001134 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-22 00:19 - 2013-07-18 20:55 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3506778915-1287356822-3408950579-1002
2014-02-21 23:41 - 2013-11-05 21:43 - 01722634 _____ () C:\WINDOWS\WindowsUpdate.log
2014-02-21 23:36 - 2014-01-29 13:10 - 00002197 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-21 23:35 - 2013-10-14 09:58 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Spotify
2014-02-21 23:06 - 2013-10-11 22:00 - 00091648 ___SH () C:\Users\Gast\Desktop\Thumbs.db
2014-02-21 23:05 - 2013-10-19 09:42 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Spotify
2014-02-21 23:04 - 2014-02-05 13:16 - 00000008 __RSH () C:\Users\Gast\ntuser.pol
2014-02-21 23:04 - 2013-11-05 21:47 - 00000000 ____D () C:\Users\Gast
2014-02-21 23:04 - 2013-09-26 11:23 - 00000062 _____ () C:\Users\Gast\AppData\Roaming\sp_data.sys
2014-02-21 23:04 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-02-21 23:04 - 2013-08-19 19:06 - 00001130 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-21 18:04 - 2013-09-09 20:00 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\vlc
2014-02-21 13:15 - 2013-08-22 11:25 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Adobe
2014-02-21 12:00 - 2013-06-26 08:07 - 00003474 _____ () C:\WINDOWS\System32\Tasks\ASUS Live Update1
2014-02-21 12:00 - 2013-06-26 08:07 - 00003464 _____ () C:\WINDOWS\System32\Tasks\ASUS Live Update2
2014-02-21 10:27 - 2013-08-20 17:50 - 00000000 ____D () C:\Users\Lucien\AppData\Local\CrashDumps
2014-02-20 21:20 - 2013-09-30 05:14 - 01804156 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-02-20 21:20 - 2013-09-30 04:56 - 00761880 _____ () C:\WINDOWS\system32\perfh007.dat
2014-02-20 21:20 - 2013-09-30 04:56 - 00159758 _____ () C:\WINDOWS\system32\perfc007.dat
2014-02-20 16:14 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-02-20 16:02 - 2013-11-05 22:24 - 00000000 __RDO () C:\Users\Lucien\SkyDrive
2014-02-20 16:00 - 2014-02-20 15:56 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-02-20 16:00 - 2014-02-20 15:56 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-02-20 16:00 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-02-20 15:58 - 2014-02-20 15:58 - 00001316 _____ () C:\Users\Public\Desktop\AudioWizard.lnk
2014-02-20 15:58 - 2014-02-20 15:58 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2014-02-20 15:58 - 2013-11-05 21:42 - 00109524 _____ () C:\WINDOWS\system32\Drivers\RTWAVES30.dat
2014-02-20 15:58 - 2013-08-22 15:46 - 00387310 _____ () C:\WINDOWS\setupact.log
2014-02-20 15:56 - 2014-02-20 15:56 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-20 15:55 - 2013-09-29 20:04 - 09450610 _____ () C:\WINDOWS\PFRO.log
2014-02-20 15:55 - 2013-08-22 14:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2014-02-20 15:30 - 2013-06-26 07:58 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-02-20 15:28 - 2014-01-28 13:51 - 00000000 ____D () C:\Users\Lucien\Downloads\wlan
2014-02-20 15:28 - 2013-06-26 08:01 - 00000000 ____D () C:\Program Files (x86)\Qualcomm Atheros
2014-02-20 15:25 - 2014-01-28 13:51 - 00000000 ____D () C:\Users\Lucien\Downloads\lan
2014-02-20 14:40 - 2013-09-10 15:25 - 00197120 ___SH () C:\Users\Lucien\Desktop\Thumbs.db
2014-02-20 14:39 - 2013-11-05 21:42 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-02-20 14:38 - 2014-01-28 10:54 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-02-20 14:38 - 2013-11-05 21:42 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-02-20 13:14 - 2014-02-20 13:14 - 00001369 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2014-02-20 13:14 - 2014-01-28 11:39 - 00000000 ____D () C:\Users\Lucien\AppData\Local\NVIDIA
2014-02-20 12:38 - 2014-01-28 11:40 - 00000000 ____D () C:\Users\Lucien\AppData\Local\NVIDIA Corporation
2014-02-20 11:42 - 2013-08-22 15:44 - 05147912 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-02-20 11:41 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-02-20 10:53 - 2013-08-23 10:50 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-02-20 09:22 - 2013-09-09 08:41 - 00001323 _____ () C:\Users\Public\Desktop\Adobe Creative Cloud.lnk
2014-02-17 22:00 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-02-17 22:00 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-17 18:25 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-02-17 15:12 - 2013-08-19 19:19 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-02-17 15:10 - 2013-08-19 19:19 - 88567024 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-02-17 12:03 - 2013-09-06 08:17 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Thunderbird
2014-02-14 00:13 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-02-14 00:13 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-02-14 00:13 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-02-12 20:45 - 2014-02-05 17:18 - 00001380 _____ () C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-02-12 20:26 - 2013-08-31 15:58 - 00000000 ____D () C:\AdwCleaner
2014-02-12 20:07 - 2014-02-12 20:07 - 01166132 _____ () C:\Users\Lucien\Downloads\adwcleaner.exe
2014-02-12 07:28 - 2013-08-19 19:07 - 00004106 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-12 07:28 - 2013-08-19 19:06 - 00003870 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-11 23:35 - 2014-02-11 23:35 - 00002757 _____ () C:\Users\Public\Desktop\Secure Banking.lnk
2014-02-11 23:34 - 2014-02-11 23:34 - 00000000 ____D () C:\Program Files (x86)\Secure Banking
2014-02-11 23:33 - 2014-02-11 23:21 - 00000000 ____D () C:\Users\Lucien\Downloads\secure banking
2014-02-11 23:29 - 2014-02-11 23:29 - 00000000 ____D () C:\Users\Lucien\AppData\Local\SecureBankingGUI
2014-02-11 23:29 - 2014-02-11 23:29 - 00000000 ____D () C:\Program Files (x86)\Secure Banking Software
2014-02-11 23:27 - 2014-02-11 23:27 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Downloaded Installations
2014-02-09 14:33 - 2013-07-18 20:48 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Packages
2014-02-09 12:05 - 2014-02-09 12:05 - 00000000 ____D () C:\Users\Lucien\Documents\Meine empfangenen Dateien
2014-02-09 12:04 - 2013-07-18 20:50 - 00000000 ____D () C:\Users\Lucien\Documents\Bluetooth Folder
2014-02-09 11:50 - 2013-10-21 14:16 - 00031898 _____ () C:\LJCP1215.log
2014-02-09 11:41 - 2014-02-09 11:41 - 07391168 _____ () C:\Users\Lucien\Downloads\ljcP1215-HB-pnp-win64-de.exe
2014-02-08 22:44 - 2014-02-08 22:44 - 00000000 ____D () C:\Users\Lucien\Documents\EA Games
2014-02-08 22:44 - 2013-04-26 00:16 - 00390717 _____ () C:\WINDOWS\DirectX.log
2014-02-08 19:34 - 2014-02-20 10:53 - 01885472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6433489.dll
2014-02-08 19:34 - 2014-02-20 10:53 - 01515296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6433489.dll
2014-02-08 12:15 - 2014-02-08 12:15 - 00000000 _____ () C:\WINDOWS\SysWOW64\debug.log
2014-02-07 22:36 - 2014-02-05 16:11 - 00000000 ____D () C:\Users\Lucien\Desktop\Indian Summer Westward Ho!
2014-02-07 22:24 - 2014-02-07 22:24 - 00001214 _____ () C:\Users\Lucien\Desktop\IsoBuster.lnk
2014-02-07 22:24 - 2014-02-07 22:24 - 00000000 ____D () C:\Program Files (x86)\Smart Projects
2014-02-07 22:21 - 2014-02-07 22:21 - 04669400 _____ (Smart Projects ) C:\Users\Lucien\Downloads\isobuster_all_lang_3.3.exe
2014-02-07 22:21 - 2014-02-07 22:14 - 00000000 ____D () C:\Users\Lucien\Downloads\bin2iso
2014-02-06 13:16 - 2014-02-13 16:57 - 23170048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-13 16:57 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-13 16:57 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-13 16:57 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-13 16:57 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-13 16:57 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-13 16:57 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-13 16:57 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-02-06 11:49 - 2014-02-13 16:57 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-13 16:57 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-13 16:57 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-13 16:57 - 17103872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-13 16:57 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-13 16:57 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-13 16:57 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-02-06 11:11 - 2014-02-13 16:57 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-13 16:57 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-13 16:57 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-13 16:57 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-13 16:57 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-02-06 10:52 - 2014-02-13 16:57 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-13 16:57 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-13 16:57 - 02041856 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-02-06 10:47 - 2014-02-13 16:57 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-13 16:57 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-13 16:57 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-02-06 10:25 - 2014-02-13 16:57 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-02-06 10:24 - 2014-02-13 16:57 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-02-06 10:22 - 2014-02-13 16:57 - 13051392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-13 16:57 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-13 16:57 - 01964032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-13 16:57 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-13 16:57 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-13 16:57 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-13 16:57 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-13 16:57 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-13 16:57 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-02-05 17:17 - 2014-02-05 17:17 - 00001968 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2014-02-05 17:16 - 2014-02-05 17:16 - 00283064 _____ (Disc Soft Ltd) C:\WINDOWS\system32\Drivers\dtsoftbus01.sys
2014-02-05 17:16 - 2014-02-05 17:16 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite
2014-02-05 17:14 - 2014-02-05 17:12 - 13485616 _____ (Disc Soft Ltd) C:\Users\Lucien\Downloads\DTLite4481-0347.exe
2014-02-05 16:46 - 2014-02-05 13:28 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\DigitalSites
2014-02-05 16:12 - 2014-02-05 16:12 - 00000000 ____D () C:\Program Files (x86)\AviSynth 2.5
2014-02-05 16:07 - 2014-02-05 16:07 - 00001130 _____ () C:\Users\Public\Desktop\SUPER ©.lnk
2014-02-05 16:07 - 2014-02-05 16:07 - 00000000 ____D () C:\Users\Lucien\Documents\eRightSoft
2014-02-05 16:06 - 2014-02-05 16:06 - 00000000 ____D () C:\Program Files (x86)\eRightSoft
2014-02-05 16:04 - 2014-02-05 16:02 - 64722252 _____ (eRightSoft ) C:\Users\Lucien\Downloads\SUPERsetup.exe
2014-02-05 15:49 - 2013-10-03 02:33 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\vlc
2014-02-05 13:30 - 2014-02-05 13:26 - 00000000 ____D () C:\Users\Gast\AppData\Local\CrashDumps
2014-02-05 13:27 - 2014-02-05 13:27 - 00670720 _____ () C:\Users\Gast\Downloads\VideoConverterSetup.exe
2014-02-05 13:17 - 2014-02-05 13:17 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Atheros
2014-02-05 13:17 - 2014-01-29 09:40 - 00000000 ____D () C:\ProgramData\Atheros
2014-02-05 13:17 - 2014-01-20 15:52 - 00000000 ____D () C:\Users\Gast\Documents\Bluetooth Folder
2014-02-05 13:17 - 2013-09-26 11:25 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Apple Computer
2014-02-03 20:47 - 2014-01-13 22:52 - 00893440 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avc3.sys
2014-02-03 20:45 - 2014-01-13 22:52 - 00635392 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avckf.sys
2014-02-03 20:40 - 2014-02-03 20:21 - 00102400 _____ () C:\Users\Lucien\Desktop\Namenschilder fertig.ppt
2014-02-03 08:14 - 2014-02-03 08:14 - 00003576 _____ () C:\WINDOWS\System32\Tasks\Bitdefender Auto-Scan
2014-01-29 16:26 - 2013-11-05 21:47 - 00000000 ____D () C:\Users\Lucien
2014-01-29 16:07 - 2014-01-29 16:06 - 00298424 _____ () C:\WINDOWS\Minidump\012914-53375-01.dmp
2014-01-29 16:06 - 2014-01-19 18:22 - 00000000 ____D () C:\WINDOWS\Minidump
2014-01-29 16:06 - 2013-09-13 12:11 - 894753829 _____ () C:\WINDOWS\MEMORY.DMP
2014-01-29 16:04 - 2014-01-29 15:41 - 00181064 _____ (Sysinternals) C:\WINDOWS\PSEXESVC.EXE
2014-01-29 16:03 - 2012-07-26 06:26 - 00000160 _____ () C:\WINDOWS\win.ini
2014-01-29 15:37 - 2014-01-29 15:37 - 00000207 _____ () C:\WINDOWS\tweaking.com-regbackup-LUCIENSNOTE-Microsoft-Windows-8.1-(64-bit).dat
2014-01-29 15:36 - 2014-01-29 15:36 - 00000000 ____D () C:\RegBackup
2014-01-29 15:11 - 2013-07-18 20:49 - 00000074 _____ () C:\Users\Lucien\AppData\Roaming\sp_data.sys
2014-01-29 14:56 - 2014-01-29 14:56 - 00000000 ____D () C:\Users\Lucien\Downloads\Tweaking.com - Windows Repair
2014-01-29 14:54 - 2014-01-22 00:10 - 00000000 ____D () C:\Users\Lucien\Desktop\Tweaking.com - Windows Repair
2014-01-29 14:48 - 2014-01-29 14:48 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2014-01-29 14:47 - 2013-08-22 15:46 - 00000974 _____ () C:\WINDOWS\setuperr.log
2014-01-29 14:46 - 2014-01-29 13:09 - 00000000 ____D () C:\Program Files (x86)\GUMCBFB.tmp
2014-01-29 14:37 - 2014-01-29 14:29 - 109595877 _____ () C:\Users\Lucien\Downloads\Audio_Realtek_Win81_64_VER6017083.zip
2014-01-29 14:34 - 2013-06-26 07:51 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-01-29 14:20 - 2014-01-29 14:20 - 02903255 _____ () C:\Users\Lucien\Downloads\tweaking.com_windows_repair_aio.zip
2014-01-29 13:07 - 2014-01-29 13:05 - 37739976 _____ (Google Inc.) C:\Users\Lucien\Downloads\ChromeStandalone32Setup.exe
2014-01-29 13:06 - 2013-04-26 00:19 - 00000000 ____D () C:\ProgramData\WildTangent
2014-01-29 13:02 - 2014-01-29 13:02 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Deployment
2014-01-29 12:56 - 2014-01-29 12:56 - 00000000 ____D () C:\Users\Lucien\Desktop\chrome default
2014-01-29 12:49 - 2014-01-29 12:49 - 00001124 _____ () C:\Users\Lucien\Desktop\Absolute Uninstaller.lnk
2014-01-29 12:49 - 2014-01-29 12:49 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\GlarySoft
2014-01-29 12:48 - 2014-01-29 12:48 - 02194784 _____ (Glarysoft.com ) C:\Users\Lucien\Downloads\au29setup.exe
2014-01-29 09:54 - 2014-01-29 09:54 - 00048629 _____ () C:\Users\Lucien\Documents\Namenschilder%20fertig.ppt_0.odp
2014-01-29 09:40 - 2014-01-29 09:40 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Atheros
2014-01-28 14:05 - 2014-01-28 14:00 - 00000000 ____D () C:\Program Files\Common Files\QCA_Bluetooth
2014-01-28 14:00 - 2013-06-26 08:02 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite
2014-01-28 13:56 - 2014-01-28 13:56 - 00000000 ____D () C:\Users\Lucien\Downloads\Win8 Key
2014-01-28 13:50 - 2014-01-28 13:50 - 00000000 ____D () C:\Users\Lucien\Downloads\bluetooth
2014-01-28 13:49 - 2014-01-28 13:48 - 00000000 ____D () C:\Users\Lucien\Downloads\audio
2014-01-28 13:46 - 2014-01-28 13:46 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_btmaux_01009.Wdf
2014-01-28 13:46 - 2013-11-05 21:42 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-01-28 13:45 - 2014-01-28 13:45 - 00000000 ____D () C:\Users\Lucien\Downloads\blue
2014-01-28 13:45 - 2014-01-28 13:44 - 00000000 ____D () C:\Users\Lucien\Downloads\Lang
2014-01-28 10:53 - 2014-01-28 10:53 - 00000000 ____D () C:\NVIDIA
2014-01-28 10:48 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Help
2014-01-28 10:41 - 2014-01-28 10:41 - 00000000 ____D () C:\WINDOWS\pss
2014-01-28 10:01 - 2014-01-28 09:59 - 31475128 _____ (NVIDIA Corporation) C:\Users\Lucien\Downloads\GeForce_Experience_v1.8.2.0.exe
2014-01-27 22:59 - 2014-01-27 22:46 - 266633424 _____ (NVIDIA Corporation) C:\Users\Lucien\Downloads\332.21-notebook-win8-win7-64bit-international-whql.exe
2014-01-27 20:33 - 2014-01-27 19:54 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-27 20:20 - 2013-09-12 10:02 - 00296960 ___SH () C:\Users\Lucien\Downloads\Thumbs.db
2014-01-27 19:53 - 2014-01-27 19:53 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-01-27 19:52 - 2014-01-27 19:52 - 00000000 ____D () C:\Users\Lucien\Desktop\mbar
2014-01-27 19:48 - 2014-01-27 19:47 - 00000000 ____D () C:\Users\Lucien\Desktop\Logs2
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-01-26 20:53 - 2014-01-26 20:53 - 00003186 _____ () C:\WINDOWS\System32\Tasks\{E66DEEF7-845B-48C8-BBEE-CE6EA6F2EE96}
2014-01-26 19:26 - 2014-01-26 19:26 - 00003362 _____ () C:\WINDOWS\System32\Tasks\{63C03234-5B71-4184-AD48-4EE22D315F87}
2014-01-25 15:01 - 2014-01-25 15:01 - 00000000 ____H () C:\Users\Lucien\Documents\Default.rdp
2014-01-24 19:21 - 2014-01-24 19:21 - 00000000 ____D () C:\Users\Lucien\Desktop\Logs alt
2014-01-24 19:17 - 2014-01-24 19:17 - 00361185 _____ (Farbar) C:\Users\Lucien\Desktop\FSS.exe
2014-01-24 16:48 - 2014-01-24 16:48 - 00032847 _____ () C:\Users\Lucien\Desktop\gmer.zip
2014-01-24 11:34 - 2014-01-24 11:34 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-01-24 10:53 - 2014-01-24 10:53 - 00000000 ____D () C:\WINDOWS\ERUNT

Some content of TEMP:
====================
C:\Users\Gast\AppData\Local\Temp\691.355818674457_Update.exe
C:\Users\Gast\AppData\Local\Temp\drm_dyndata_7390004.dll
C:\Users\Gast\AppData\Local\Temp\ubiB23E.tmp.exe
C:\Users\Lucien\AppData\Local\Temp\Creative Cloud Helper.exe
C:\Users\Lucien\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-20 22:33

==================== End Of Log ============================

--- --- ---

SecureBanking 22.02.2014 14:06

Wie läufts jetzt mit Secure Banking?
Bekommst du da noch eine Meldung?

Laut Autostart Eintrag ist bei dir noch die alte Version am laufen.
Starte mal per Hand die neue Version, navigiere in den Einstellungs-Reiter und deaktiviere mal die Einstellung "Autostart" und aktiviere sie dann wieder.
So wird der Autostart-Eintrag neu überschrieben.

KitsuneNoir 22.02.2014 14:28

ok jetzt ist nur noch die beta installiert, aber sie meldet sich trotzdem die ganze zeit das ne malware in chrome entdeckt wurde :(

SecureBanking 22.02.2014 14:30

Hättest du mal kurz Zeit für eine Teamviewer-Sitzung?
Würde mir das gerne mal anschauen.

KitsuneNoir 22.02.2014 14:36

neustart und es geht :)
ich öffne chrome und es gibt keine meldung mehr

SecureBanking 22.02.2014 14:47

Alles klar, super! ;)

sunjojo 24.02.2014 16:00

Zitat:

neustart und es geht
Super! Und nochmal vielen Dank an dich Niklas :).

Zitat:

probleme bestehen weiterhin, also ist immer noch langsam.
Kannst du nochmal genau beschreiben, wie sich das äußert? Ist Computer generell langsamer? Kannst du dich noch erinnern, seit wann das Problem auftrat (bzw. was du voher gemacht hast)? Das neue Logfile sieht für mich wieder sauber aus.

Starte mal den Taskmanager und gehe zum Reiter Leistung -> Ressourcenmonitor -> Datenträger und schreib mal den Namen + Dateipfad des Prozesses, welcher die hohe Datenträgerauslastung verursacht (am besten nen Screenshot).

KitsuneNoir 24.02.2014 16:48

Liste der Anhänge anzeigen (Anzahl: 1)
also schon der Start von Windows 8 braucht länger als normal (also vor 3 monaten ca. wars noch normal ich kann leider kein genaues datum oder sonstiges Ereignis nennen)
-> das heißt in dem moment in dem eigentlich der Anmeldebildschirm kommen sollte, bleibt dieser erstmal eine weile in der gwählten farbe - in meinem fall in gelb. Dann nach gefühlten 5-6 sekunden erscheint das Anmelde-Fenster.

Desweiteren, wenn ich auf der charmbar oder wie diese Appansicht heißt den Desktop anklicke, öffnet sich dieser und bleibt erstmal leer. Erst nach und nach erscheinen die ganzen icons und die taskleiste.

Im Browser, sowie auf dem desktop tritt manchmal wie ein "verschwimmen" oder eine unschärfe der schrift auf.

Und wenn ich den Taskmanager manchmal öffne steht bei Datenträger-Auslastung 100% obwohl ich gar nicht mache oder nur Office programme geöffnet habe.

Es gibt eine Sache, an die ich mich noch erinnern kann, die mal Probleme verursacht hat. Ich hab vor ca. 6 Monaten, als ich den Laptop erworben habe beim Programme installieren auch Google Chrome installiert, nur glaube ich damals sowas wie ein fakechrome installiert zu haben. Ich hab daraufhin den laptop von einem kumpel bereinigen lassen (er macht irgendwas im it-bereich) aber ich glaube er war nicht gründlich genug, denn ab dem moment war das laptop immer gefühlt ein bisschen langsamer.

Ich hoffe das hilft, auch ich danke dir für die Hilfe mit secure banking! :)

sunjojo 25.02.2014 09:23

Hey,

Zitat:

Ich hab vor ca. 6 Monaten, als ich den Laptop erworben habe beim Programme installieren auch Google Chrome installiert, nur glaube ich damals sowas wie ein fakechrome installiert zu haben. Ich hab daraufhin den laptop von einem kumpel bereinigen lassen (er macht irgendwas im it-bereich) aber ich glaube er war nicht gründlich genug, denn ab dem moment war das laptop immer gefühlt ein bisschen langsamer.
Hast du seit diesem Zeitpunkt evtl. BitDefender installiert? Google Chrome hast du ja bereits einmal deinstalliert und wieder neuinstalliert.

Der Screenshot von der Datenträgerauslastung war ganz normal, ich hab keine Unauffälligkeiten gesehen. Jedoch vermute ich, dass das langsame Verhalten deines Computers mit BitDefender zusammenhängt (ich will nicht auf BitDefender rumhacken, aber ich habe einige Berichte im Internet gefunden, die ähnliche/schlimmere Symptome zeigen). Deinstalliere BitDefender einmal komplett, starte den Rechner neu und gucke, ob sich an der Performance etwas geändert hat (natürlich dann nicht groß im Internet surfen). Wenn ja, gibt es gute/bessere Alternativen, welche zum Teil auch kostenlos sind :).

KitsuneNoir 25.02.2014 10:37

Hi, also ich hatte vorher die vollversion von avast drauf, aber das hat sich manchmal aufgehangen und man konnte z.b. nichts mit gefundener schadsoftware machen - avast reagierte einfach nicht. Zudem hatte ich den Eindruck dass das laptop mit avast auch schon langsam war und außerdem viel durchgelassen hat, also nicht als schädlich erkannt hat was schädlich war.

was für alternativen wären denn sonst so empfehlenswert? Avira hör ich in letzter zeit nur noch schlechtes von

lg

Hochfahren und Desktop Aufbau verlaufen weiterhin so langsam :/
zu dem kann ich tastatureingaben machen und zuschauen wie das gerade getippte verzögert erscheint.
ich werd jetzt vorläufig bitdefender wieder installieren.

sunjojo 26.02.2014 16:10

Zitat:

was für alternativen wären denn sonst so empfehlenswert? Avira hör ich in letzter zeit nur noch schlechtes von
Ich empfehle Emsisoft (Emsisoft Anti-Malware für besten Schutz - Gratis Malware Entfernung von Viren, Bots, Spyware, Keylogger, Trojaner und Rootkits), jedoch ist dieses Produkt kostenpflichtig (das Geld lohnt sich aber).

Zitat:

Hochfahren und Desktop Aufbau verlaufen weiterhin so langsam :/
Das könnte daran liegen, dass du viele Programme beim Start von Windows mitstarten lässt. Dadurch wird das hochfahren natürlich verlangsamt. Um das zu überprüfen, gebe bitte msconfig in der Ausführen Fenster (Windows Taste + R gleichzeitig drücken) ein. Danach gehe zum Reiter Systemstart und deaktiviere bitte zum Test alle Einträge und drücke auf Übernehmen. Starte dein Rechner neu und gucke, ob das Hochfahren und der Aufbau des Rechners schneller gehen.

Falls der Rechner schneller startet, aktiviere bitte nur die wichtigsten Programme (die wirklich beim Systemstart auch mitstarten sollen) wieder und überprüfe, ob sich das Problem wieder einstellt. Wenn ja, musst du einzelnd die Einträge wieder deaktivieren und gucken, bei welcher Deaktivierung der Rechner wieder schneller startet (und so das Problem lokalisieren).

Zitat:

zu dem kann ich tastatureingaben machen und zuschauen wie das gerade getippte verzögert erscheint.
Hmm, ok, das gucke ich mir mal genauer an. Dafür lade dir bitte den Process Explorer (Process Explorer) herunter. Das Programm ist eine verbesserte Version des Task Managers und zeigt mehr Details zu den einzelnen Prozessen an.

In jeder Zeile steht ein Prozess, ein paar der Zeilen sind keine richtigen Prozesse, sondern nur Pseudoprozesse für die Tätigkeit des Windos-Kernels. Im Menü View => Select Columns wird ein Dialog geöffnet, in dem du auswählen kannst, welche Spalten mit Informationen zu den Prozessen angezeigt werden sollen. In dem gehe in das Register "Process Performance" und stelle sicher, dass dort "CPU Usage" angehakt ist, "CPU History" wäre ebenfalls sinnvoll. Unter "CPU Usage" wird der aktuelle Wert der Prozessorauslastung für jeden Prozess angezeigt (im Tabellentitel steht nur kurz "CPU"), "CPU History" blendet für jeden Prozess ein Diagramm ein, das eine Kurve mit der Prozessorauslastung für die letzte Zeit anzeigt.

Mache bitte einen Screenshot, wo man alle Prozesse gut erkennen kann.


Und zu guter letzt, hätte ich gerne noch ein frisches FRST Logfile, damit ich einen aktuellen Stand deines Systems habe :).

KitsuneNoir 26.02.2014 23:22

Liste der Anhänge anzeigen (Anzahl: 2)
Hi,
also im Autostart hab ich nur noch das wichtigste und der Start geht schneller von statten, allerdings ist der Desktop aufbau weiterhin so dass zuerst die taskleiste erscheint und dann nach und nach die icons.
Process Explorer im Anhang, wobei ich selbst rein gar nichts schlimmes sehe.

und schließlich der frst-scan

FRST Logfile:
Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-02-2014 01
Ran by Lucien (administrator) on LUCIENSNOTE on 26-02-2014 23:17:42
Running from C:\Users\Lucien\Desktop
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\vsserv.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(ASUS) C:\Program Files\ASUS\P4G\InsOnSrv.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(ASUS) C:\Program Files\ASUS\P4G\InsOnWMI.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS Console\ASUS Console Starter.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe\LiveComm.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\bdagent.exe
(Microsoft Corporation) C:\WINDOWS\system32\wwahost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Microsoft Corporation) C:\WINDOWS\system32\wwahost.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-12-10] (Adobe Systems Incorporated)
HKLM\...\Run: [PrnStatusMX] - C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe [1240064 2012-07-04] (Marvell Semiconductor, Inc.)
HKLM\...\Run: [BTMTrayAgent] - C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [7818040 2013-09-19] (Motorola Solutions, Inc.)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\WINDOWS\system32\nvspcap64.dll [1179576 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1361112 2013-11-05] (Realtek Semiconductor)
HKLM\...\Run: [Bdagent] - C:\Program Files\Bitdefender\Bitdefender\bdagent.exe [1737920 2014-01-15] (Bitdefender)
HKLM-x32\...\Run: [ASUSPRP] - C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-04-26] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-01-15] (cyberlink)
HKLM-x32\...\Run: [ASUS InstantKey] - C:\Program Files (x86)\ASUS\ASUS Instant Key\Ikey_start.exe [13936 2013-04-16] (ASUS)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2239376 2014-02-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-09-25] ( (Atheros Communications))
HKU\.DEFAULT\...\Run: [Bitdefender-Geldbörse-Agent] - C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [567888 2014-02-25] (Bitdefender)
HKU\.DEFAULT\...\Run: [Bitdefender-Geldbörse] - C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe [1001536 2014-02-25] (Bitdefender)
HKU\.DEFAULT\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] - C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [614232 2014-02-25] (Bitdefender)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [Steam] - C:\Program Files (x86)\Steam\steam.exe [1821888 2014-02-25] (Valve Corporation)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [Spotify Web Helper] - C:\Users\Lucien\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-02-22] (Spotify Ltd)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [Akamai NetSession Interface] - C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [SecureBanking] - C:\Program Files (x86)\Secure Banking Software\Secure Banking\SecureBanking.exe [1248256 2014-02-19] (Secure Banking)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [Bitdefender-Geldbörse-Agent] - C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [567888 2014-02-25] (Bitdefender)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [Bitdefender-Geldbörse] - C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe [1001536 2014-02-25] (Bitdefender)
HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] - C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [614232 2014-02-25] (Bitdefender)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-12-10] (NVIDIA Corporation)
AppInit_DLLs: ,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [168616 2013-12-10] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [141336 2013-12-10] (NVIDIA Corporation)
AppInit_DLLs-x32: , C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [141336 2013-12-10] (NVIDIA Corporation)
Startup: C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)

==================== Internet (Whitelisted) ====================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;form=IE10TR&amp;src=IE10TR&amp;pc=ASU2JS
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;form=IE10TR&amp;src=IE10TR&amp;pc=ASU2JS
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxie.dll (Bitdefender)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Chrome:
=======
CHR HomePage: https://www.google.de/
CHR Extension: (Google Docs) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-14]
CHR Extension: (Google Drive) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-19]
CHR Extension: (YouTube) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-19]
CHR Extension: (Bitdefender Wallet) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccahoghmggldkcdjiebjkidpfongdfbl [2014-02-25]
CHR Extension: (Adblock Plus) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-02-08]
CHR Extension: (Google-Suche) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-19]
CHR Extension: (Google Wallet) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR Extension: (Google Mail) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-19]
CHR HKLM-x32\...\Chrome\Extension: [ccahoghmggldkcdjiebjkidpfongdfbl] - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxcr.crx [2014-02-25]

==================== Services (Whitelisted) =================

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-12-18] (Adobe Systems)
R2 ASUS InstantOn; C:\Program Files\ASUS\P4G\InsOnSrv.exe [277120 2013-04-29] (ASUS)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-09-25] (Windows (R) Win 7 DDK provider)
S4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender\bdparentalservice.exe [77632 2013-11-21] (Bitdefender)
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [247768 2013-01-15] (CyberLink)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-04-11] (Intel Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-09-18] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16939296 2014-01-21] (NVIDIA Corporation)
R2 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [94624 2013-07-08] (Bitdefender)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe [67320 2013-10-07] (Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender\vsserv.exe [1507248 2014-01-23] (Bitdefender)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [18384 2013-09-04] (Intel(R) Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-09-25] (Atheros)

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Qualcomm Atheros Communications, Inc.)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [70416 2013-09-23] (ASUS Corporation)
R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [893440 2013-12-02] (BitDefender)
R3 avchv; C:\Windows\system32\DRIVERS\avchv.sys [261056 2014-02-25] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [635392 2013-12-02] (BitDefender)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
S0 bdelam; C:\Windows\System32\drivers\bdelam.sys [23568 2013-09-08] (Bitdefender)
R1 BdfNdisf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys [98768 2013-07-24] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107008 2013-07-29] (BitDefender LLC)
S3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-07-02] (Bitdefender SRL)
S3 BDSandBox; C:\WINDOWS\system32\drivers\bdsandbox.sys [82824 2013-11-04] (BitDefender SRL)
R1 BDVEDISK; C:\Windows\system32\DRIVERS\bdvedisk.sys [79192 2013-07-30] (BitDefender)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-25] (Qualcomm Atheros)
S3 BthA2DP; C:\Windows\system32\drivers\BthA2DP.sys [131584 2013-08-22] (Microsoft Corporation)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
S3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [140600 2013-07-22] (Motorola Solutions, Inc.)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-02-05] (Disc Soft Ltd)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [150256 2013-08-23] (BitDefender LLC)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)
R2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [26328 2013-07-23] (Intel Corporation)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-07-26] (Intel Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S0 rtcrfilt64; C:\Windows\System32\DRIVERS\rtcrfilt64.sys [19600 2000-01-01] (Realtek Semiconductor Corp.)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
S3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16152 2013-09-03] ()
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [389240 2013-08-07] (BitDefender S.R.L.)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
S3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [X]
S3 GPU-Z; \??\C:\Users\Lucien\AppData\Local\Temp\GPU-Z.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-26 23:03 - 2014-02-26 23:04 - 00000000 ____D () C:\Users\Lucien\Downloads\ProcessExplorer
2014-02-26 15:45 - 2014-02-26 16:16 - 00131584 _____ () C:\Users\Lucien\Desktop\Tagegeld 2014-Biofach L. Haase.xls
2014-02-25 11:18 - 2014-02-25 11:18 - 01274662 _____ () C:\ProgramData\1393321186.bdinstall.bin
2014-02-25 11:16 - 2014-02-26 22:31 - 00003576 _____ () C:\WINDOWS\System32\Tasks\Bitdefender Auto-Scan
2014-02-25 11:16 - 2014-02-25 11:16 - 00002212 _____ () C:\Users\Public\Desktop\Bitdefender Safepay.lnk
2014-02-25 11:16 - 2014-02-25 11:16 - 00002164 _____ () C:\Users\Public\Desktop\Bitdefender Total Security.lnk
2014-02-25 11:16 - 2013-09-08 19:04 - 00023568 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bdelam.sys
2014-02-25 11:16 - 2013-07-30 17:41 - 00079192 _____ (BitDefender) C:\WINDOWS\system32\Drivers\bdvedisk.sys
2014-02-25 11:15 - 2013-12-02 11:58 - 00635392 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avckf.sys
2014-02-25 11:15 - 2013-12-02 11:56 - 00893440 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avc3.sys
2014-02-25 11:15 - 2013-11-04 15:47 - 00082824 _____ (BitDefender SRL) C:\WINDOWS\system32\Drivers\bdsandbox.sys
2014-02-25 11:15 - 2013-07-24 17:19 - 00098768 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\bdfndisf6.sys
2014-02-25 11:09 - 2014-02-25 11:09 - 00000000 ____D () C:\WINDOWS\LastGood
2014-02-25 10:52 - 2014-02-25 11:17 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Bitdefender
2014-02-25 10:51 - 2014-02-26 15:33 - 00131584 _____ () C:\Users\Lucien\Desktop\Tagegeld 2014-Biofach M. Welzel und Helene B..xls
2014-02-25 10:45 - 2014-02-25 16:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-02-25 10:43 - 2013-08-23 12:48 - 00150256 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\gzflt.sys
2014-02-25 10:43 - 2013-08-07 12:46 - 00389240 _____ (BitDefender S.R.L.) C:\WINDOWS\system32\Drivers\trufos.sys
2014-02-25 10:31 - 2014-02-25 10:31 - 00256855 _____ () C:\ProgramData\1393320561.bdinstall.bin
2014-02-24 23:05 - 2014-02-24 23:05 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Fallout3
2014-02-24 18:58 - 2014-02-24 18:58 - 00000000 ____D () C:\Users\Lucien\Desktop\HTC Backup
2014-02-24 09:08 - 2014-02-24 09:10 - 00000000 ____D () C:\WINDOWS\LastGood.Tmp
2014-02-22 14:32 - 2014-02-22 14:34 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Secure Banking
2014-02-22 14:32 - 2014-02-22 14:32 - 00002757 _____ () C:\Users\Public\Desktop\Secure Banking.lnk
2014-02-22 14:32 - 2014-02-22 14:32 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Secure_Banking
2014-02-22 14:32 - 2014-02-19 21:11 - 02579197 _____ (Secure Banking) C:\Users\Lucien\Downloads\setup.exe
2014-02-22 14:31 - 2014-02-22 14:31 - 01816721 _____ () C:\Users\Lucien\Downloads\Secure Banking v2.0.0 b7.rar
2014-02-20 15:58 - 2014-02-20 15:58 - 00001316 _____ () C:\Users\Public\Desktop\AudioWizard.lnk
2014-02-20 15:58 - 2014-02-20 15:58 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2014-02-20 15:58 - 2013-11-05 19:47 - 03707864 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2014-02-20 15:58 - 2013-11-05 18:54 - 38385664 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
2014-02-20 15:58 - 2013-11-05 15:48 - 00681905 _____ () C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2014-02-20 15:58 - 2013-11-04 19:26 - 00153304 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2014-02-20 15:58 - 2013-11-04 11:11 - 02587864 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkAPO64.dll
2014-02-20 15:58 - 2013-10-28 17:29 - 01021656 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2014-02-20 15:58 - 2013-10-18 16:41 - 01286360 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2014-02-20 15:58 - 2013-10-11 11:31 - 00947760 _____ (Sony Corporation) C:\WINDOWS\system32\SFSS_APO.dll
2014-02-20 15:58 - 2013-10-09 20:13 - 01921792 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek264.dll
2014-02-20 15:58 - 2013-10-09 20:12 - 27644160 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioVnA64.dll
2014-02-20 15:58 - 2013-10-09 20:12 - 14152960 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek64.dll
2014-02-20 15:58 - 2013-10-09 20:12 - 02103040 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\WavesGUILib64.dll
2014-02-20 15:58 - 2013-10-09 20:12 - 02036992 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioEQ64.dll
2014-02-20 15:58 - 2013-10-09 20:12 - 01012992 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPOShell64.dll
2014-02-20 15:58 - 2013-10-07 11:05 - 02810072 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2014-02-20 15:58 - 2013-10-02 17:10 - 00617176 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2014-02-20 15:58 - 2013-08-14 16:36 - 00662784 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVolumeSDAPO.dll
2014-02-20 15:58 - 2013-08-14 16:35 - 01084160 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO4064.dll
2014-02-20 15:58 - 2013-08-14 16:35 - 00663296 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO30.dll
2014-02-20 15:58 - 2013-08-05 18:11 - 02743328 _____ (Fortemedia Corporation) C:\WINDOWS\system32\FMAPO64.dll
2014-02-20 15:58 - 2013-04-24 17:16 - 01662024 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2014-02-20 15:58 - 2012-08-31 19:18 - 07164176 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEP64A.dll
2014-02-20 15:58 - 2012-08-31 19:17 - 00434960 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EED64A.dll
2014-02-20 15:58 - 2012-08-31 19:17 - 00141584 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEL64A.dll
2014-02-20 15:58 - 2012-08-31 19:17 - 00124176 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEA64A.dll
2014-02-20 15:58 - 2012-08-31 19:17 - 00075024 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEG64A.dll
2014-02-20 15:58 - 2012-01-30 11:43 - 00836544 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo264.dll
2014-02-20 15:58 - 2012-01-10 10:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\WINDOWS\system32\tepeqapo64.dll
2014-02-20 15:58 - 2011-12-20 15:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2014-02-20 15:58 - 2011-11-22 16:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2014-02-20 15:58 - 2011-09-02 14:21 - 00221024 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFNHK64.dll
2014-02-20 15:58 - 2011-09-02 14:21 - 00081248 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFCOM64.dll
2014-02-20 15:58 - 2011-09-02 14:21 - 00078688 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFAPO64.dll
2014-02-20 15:58 - 2011-08-23 17:00 - 00603984 _____ (Knowles Acoustics ) C:\WINDOWS\system32\KAAPORT64.dll
2014-02-20 15:58 - 2011-03-17 12:17 - 01361336 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosade.dll
2014-02-20 15:58 - 2011-03-07 17:11 - 00148416 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo.dll
2014-02-20 15:58 - 2010-11-08 07:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2014-02-20 15:58 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2014-02-20 15:58 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2014-02-20 15:58 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2014-02-20 15:58 - 2010-11-08 07:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2014-02-20 15:58 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2014-02-20 15:58 - 2010-11-03 18:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2014-02-20 15:58 - 2010-09-27 09:34 - 00318808 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO20.dll
2014-02-20 15:58 - 2010-07-22 16:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\WINDOWS\SysWOW64\SFCOM.dll
2014-02-20 15:58 - 2009-11-24 09:55 - 00518896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2014-02-20 15:58 - 2009-11-24 09:55 - 00211184 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll
2014-02-20 15:58 - 2009-11-24 09:55 - 00198896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll
2014-02-20 15:58 - 2009-11-24 09:55 - 00155888 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2014-02-20 15:57 - 2013-10-16 03:43 - 00209096 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll
2014-02-20 15:57 - 2013-10-11 12:47 - 00113576 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2014-02-20 15:57 - 2013-10-07 00:26 - 00501184 _____ (DTS) C:\WINDOWS\system32\DTSU2PLFX64.dll
2014-02-20 15:57 - 2013-10-07 00:26 - 00487360 _____ (DTS) C:\WINDOWS\system32\DTSU2PGFX64.dll
2014-02-20 15:57 - 2013-10-07 00:26 - 00415680 _____ (DTS) C:\WINDOWS\system32\DTSU2PREC64.dll
2014-02-20 15:57 - 2013-09-10 04:02 - 06217904 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64A.dll
2014-02-20 15:57 - 2013-09-10 04:02 - 00313520 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64A.dll
2014-02-20 15:57 - 2013-09-10 04:01 - 01938608 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64A.dll
2014-02-20 15:57 - 2013-09-10 04:01 - 00260272 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64.dll
2014-02-20 15:57 - 2012-03-08 11:47 - 00108640 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll
2014-02-20 15:57 - 2011-05-31 09:42 - 01756264 _____ (DTS) C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll
2014-02-20 15:57 - 2011-05-31 09:42 - 01568360 _____ (DTS) C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll
2014-02-20 15:57 - 2011-05-31 09:42 - 01486952 _____ (DTS) C:\WINDOWS\system32\DTSBoostDLL64.dll
2014-02-20 15:57 - 2011-05-31 09:42 - 00728680 _____ (DTS) C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll
2014-02-20 15:57 - 2011-05-31 09:42 - 00712296 _____ (DTS) C:\WINDOWS\system32\DTSSymmetryDLL64.dll
2014-02-20 15:57 - 2011-05-31 09:42 - 00693352 _____ (DTS) C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll
2014-02-20 15:57 - 2011-05-31 09:42 - 00491112 _____ (DTS) C:\WINDOWS\system32\DTSNeoPCDLL64.dll
2014-02-20 15:57 - 2011-05-31 09:42 - 00432744 _____ (DTS) C:\WINDOWS\system32\DTSLimiterDLL64.dll
2014-02-20 15:57 - 2011-05-31 09:42 - 00428648 _____ (DTS) C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll
2014-02-20 15:57 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\WINDOWS\system32\DTSLFXAPO64.dll
2014-02-20 15:57 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPO64.dll
2014-02-20 15:57 - 2011-05-31 09:42 - 00241768 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPONS64.dll
2014-02-20 15:56 - 2014-02-20 16:00 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-02-20 15:56 - 2014-02-20 16:00 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-02-20 15:56 - 2014-02-20 15:56 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-20 15:32 - 2013-09-13 18:44 - 02080472 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\RtlExUpd.dll
2014-02-20 15:30 - 2013-09-09 14:54 - 00833752 _____ (Realtek ) C:\WINDOWS\system32\Drivers\Rt630x64.sys
2014-02-20 15:30 - 2013-09-09 14:54 - 00074456 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll
2014-02-20 15:28 - 2013-08-27 23:42 - 00086035 ____N () C:\WINDOWS\system32\athwbx.cat
2014-02-20 15:28 - 2013-08-15 20:13 - 03859968 ____N (Qualcomm Atheros Communications, Inc.) C:\WINDOWS\system32\athwbx.sys
2014-02-20 15:28 - 2013-08-15 20:13 - 03859968 _____ (Qualcomm Atheros Communications, Inc.) C:\WINDOWS\system32\Drivers\athwbx.sys
2014-02-20 14:43 - 2013-12-19 21:33 - 01884448 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6433221.dll
2014-02-20 14:43 - 2013-12-19 21:33 - 01511712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6433221.dll
2014-02-20 14:43 - 2013-12-19 21:33 - 00357152 _____ () C:\WINDOWS\system32\NvIFROpenGL.dll
2014-02-20 14:43 - 2013-12-19 21:33 - 00314656 _____ () C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2014-02-20 14:39 - 2013-10-23 09:20 - 06669600 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2014-02-20 14:39 - 2013-10-23 09:20 - 03489568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2014-02-20 14:39 - 2013-10-23 09:20 - 03426956 _____ () C:\WINDOWS\system32\nvcoproc.bin
2014-02-20 14:39 - 2013-10-23 09:20 - 02559776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2014-02-20 14:39 - 2013-10-23 09:20 - 01064224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2014-02-20 14:39 - 2013-10-23 09:20 - 00922912 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2014-02-20 14:39 - 2013-10-23 09:20 - 00219424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2014-02-20 14:39 - 2013-10-23 09:20 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2014-02-20 14:39 - 2013-10-23 09:20 - 00063776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2014-02-20 14:37 - 2013-12-10 08:13 - 00168616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2014-02-20 14:37 - 2013-12-10 08:13 - 00141336 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2014-02-20 13:14 - 2014-02-20 13:14 - 00001369 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2014-02-20 13:13 - 2014-01-21 03:54 - 01179576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2014-02-20 13:13 - 2014-01-21 03:54 - 01048152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2014-02-20 13:12 - 2013-12-27 19:42 - 00039200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2014-02-20 13:12 - 2013-12-27 19:42 - 00035104 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2014-02-20 13:12 - 2013-12-27 19:42 - 00033056 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2014-02-20 10:53 - 2014-02-08 19:34 - 01885472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6433489.dll
2014-02-20 10:53 - 2014-02-08 19:34 - 01515296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6433489.dll
2014-02-20 09:25 - 2014-01-08 02:46 - 00325464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2014-02-20 09:25 - 2014-01-08 02:41 - 01530712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-02-20 09:25 - 2014-01-08 02:41 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-02-20 09:25 - 2014-01-04 16:54 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll
2014-02-20 09:25 - 2014-01-04 16:08 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-02-20 09:25 - 2014-01-04 15:08 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-02-20 09:25 - 2014-01-04 14:53 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-02-20 09:25 - 2014-01-03 00:54 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-02-20 09:25 - 2014-01-03 00:48 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-02-20 09:25 - 2014-01-03 00:40 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-02-20 09:25 - 2014-01-03 00:38 - 06640640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-02-20 09:25 - 2014-01-01 02:55 - 01720560 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-02-20 09:25 - 2014-01-01 02:52 - 00481944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-02-20 09:25 - 2014-01-01 01:56 - 01472048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2014-02-20 09:25 - 2014-01-01 01:55 - 00381168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-02-20 09:25 - 2014-01-01 00:59 - 00802816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-02-20 09:25 - 2014-01-01 00:57 - 01214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2014-02-20 09:25 - 2014-01-01 00:56 - 00960512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-02-20 09:25 - 2013-12-31 00:34 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sti.dll
2014-02-20 09:25 - 2013-12-31 00:33 - 00770560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2014-02-20 09:25 - 2013-12-31 00:32 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti.dll
2014-02-20 09:25 - 2013-12-31 00:31 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2014-02-20 09:25 - 2013-12-31 00:31 - 00914944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-02-20 09:25 - 2013-12-27 16:09 - 00419160 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-02-20 09:25 - 2013-12-27 11:38 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-02-20 09:25 - 2013-12-27 09:57 - 00842752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2014-02-20 09:25 - 2013-12-27 09:57 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2014-02-20 09:25 - 2013-12-27 09:23 - 00749056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2014-02-20 09:25 - 2013-12-27 09:16 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-02-20 09:25 - 2013-12-27 08:03 - 00630272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
2014-02-20 09:25 - 2013-12-27 08:03 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2014-02-20 09:25 - 2013-12-27 07:37 - 00588800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2014-02-20 09:25 - 2013-12-21 08:21 - 00376320 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpsvc.dll
2014-02-20 09:25 - 2013-12-17 08:21 - 00408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2014-02-20 09:25 - 2013-12-14 07:31 - 13949440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-02-20 09:25 - 2013-12-14 07:19 - 18576384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-02-20 09:25 - 2013-12-13 11:54 - 00131160 _____ (Microsoft Corporation) C:\WINDOWS\system32\easinvoker.exe
2014-02-20 09:25 - 2013-12-13 07:36 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2014-02-20 09:25 - 2013-12-13 06:32 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\easwrt.dll
2014-02-20 09:25 - 2013-12-09 09:05 - 21199256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-02-20 09:25 - 2013-12-09 05:51 - 18643560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-02-20 09:25 - 2013-12-09 04:25 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-02-13 16:57 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-02-13 16:57 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-02-13 16:57 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-02-13 16:57 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-02-13 16:57 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-02-13 16:57 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-02-13 16:57 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-02-13 16:57 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-02-13 16:57 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-02-13 16:57 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-02-13 16:57 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-02-13 16:57 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-02-13 16:57 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-02-13 16:57 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-02-13 16:57 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-02-13 16:57 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-02-13 16:57 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-02-13 16:57 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-02-13 16:57 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-02-13 16:57 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-02-13 16:57 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-02-13 16:57 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-02-13 16:57 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-02-13 16:57 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-02-13 16:57 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-02-13 16:57 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-02-13 16:57 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-02-13 16:57 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-02-13 16:57 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-02-13 16:57 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-02-13 16:57 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-02-13 16:57 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-02-13 16:57 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-02-13 16:57 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-02-13 16:57 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-02-13 16:57 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-02-13 16:57 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-02-13 16:54 - 2013-12-09 01:19 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdrm.dll
2014-02-13 16:54 - 2013-12-09 00:55 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdrm.dll
2014-02-13 16:53 - 2014-01-07 06:00 - 02397184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2014-02-13 16:53 - 2014-01-07 05:30 - 02071552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2014-02-13 16:53 - 2013-12-09 01:27 - 02152448 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-02-13 16:53 - 2013-12-09 00:54 - 01317376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-02-13 16:53 - 2013-11-21 07:42 - 04604416 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2014-02-13 16:53 - 2013-11-21 06:44 - 03936256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2014-02-13 16:48 - 2014-01-04 21:50 - 01462216 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-02-13 16:48 - 2014-01-04 20:22 - 01202888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-02-13 16:48 - 2014-01-04 15:30 - 13209088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-02-13 16:48 - 2014-01-04 15:23 - 11702272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-02-13 16:48 - 2014-01-04 14:42 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-02-13 16:48 - 2014-01-04 14:40 - 07416832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-02-13 16:48 - 2014-01-04 14:36 - 00830976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-02-13 16:48 - 2014-01-04 14:28 - 04961792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-02-13 16:48 - 2013-12-21 03:10 - 00009701 _____ () C:\WINDOWS\SysWOW64\connectedsearch-results.searchconnector-ms
2014-02-13 16:48 - 2013-12-21 03:10 - 00009701 _____ () C:\WINDOWS\system32\connectedsearch-results.searchconnector-ms
2014-02-13 16:48 - 2013-12-09 03:57 - 00548864 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-02-13 16:48 - 2013-12-09 02:51 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-02-13 16:47 - 2014-01-07 08:03 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe
2014-02-13 16:47 - 2014-01-07 06:59 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.exe
2014-02-13 16:47 - 2013-12-20 11:10 - 01113040 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-02-13 16:47 - 2013-12-20 07:13 - 00835584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-02-13 16:44 - 2014-01-09 09:25 - 02804224 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-02-13 16:44 - 2014-01-09 08:59 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-02-13 16:44 - 2014-01-09 08:59 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-02-13 16:44 - 2014-01-09 08:49 - 00919040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-02-13 16:44 - 2014-01-09 08:44 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-02-13 16:44 - 2014-01-09 08:43 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll
2014-02-13 16:44 - 2014-01-09 08:29 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll
2014-02-13 16:44 - 2014-01-09 08:28 - 04217344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-02-13 16:44 - 2014-01-09 08:28 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-02-13 16:44 - 2014-01-09 08:18 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-02-12 20:07 - 2014-02-12 20:07 - 01166132 _____ () C:\Users\Lucien\Downloads\adwcleaner.exe
2014-02-11 23:29 - 2014-02-11 23:29 - 00000000 ____D () C:\Users\Lucien\AppData\Local\SecureBankingGUI
2014-02-11 23:29 - 2014-02-11 23:29 - 00000000 ____D () C:\Program Files (x86)\Secure Banking Software
2014-02-11 23:27 - 2014-02-22 14:32 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Downloaded Installations
2014-02-11 23:21 - 2014-02-11 23:33 - 00000000 ____D () C:\Users\Lucien\Downloads\secure banking
2014-02-09 12:05 - 2014-02-09 12:05 - 00000000 ____D () C:\Users\Lucien\Documents\Meine empfangenen Dateien
2014-02-09 11:41 - 2014-02-09 11:41 - 07391168 _____ () C:\Users\Lucien\Downloads\ljcP1215-HB-pnp-win64-de.exe
2014-02-08 22:44 - 2014-02-08 22:44 - 00000000 ____D () C:\Users\Lucien\Documents\EA Games
2014-02-08 12:15 - 2014-02-08 12:15 - 00000000 _____ () C:\WINDOWS\SysWOW64\debug.log
2014-02-07 22:24 - 2014-02-07 22:24 - 00001214 _____ () C:\Users\Lucien\Desktop\IsoBuster.lnk
2014-02-07 22:24 - 2014-02-07 22:24 - 00000000 ____D () C:\Program Files (x86)\Smart Projects
2014-02-07 22:21 - 2014-02-07 22:21 - 04669400 _____ (Smart Projects ) C:\Users\Lucien\Downloads\isobuster_all_lang_3.3.exe
2014-02-07 22:14 - 2014-02-07 22:21 - 00000000 ____D () C:\Users\Lucien\Downloads\bin2iso
2014-02-05 17:18 - 2014-02-12 20:45 - 00001380 _____ () C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-02-05 17:17 - 2014-02-05 17:17 - 00001968 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2014-02-05 17:16 - 2014-02-05 17:16 - 00283064 _____ (Disc Soft Ltd) C:\WINDOWS\system32\Drivers\dtsoftbus01.sys
2014-02-05 17:16 - 2014-02-05 17:16 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite
2014-02-05 17:12 - 2014-02-05 17:14 - 13485616 _____ (Disc Soft Ltd) C:\Users\Lucien\Downloads\DTLite4481-0347.exe
2014-02-05 16:12 - 2014-02-05 16:12 - 00000000 ____D () C:\Program Files (x86)\AviSynth 2.5
2014-02-05 16:12 - 2009-09-27 09:39 - 00415744 ___SH (The Public) C:\WINDOWS\SysWOW64\avisynth.dll
2014-02-05 16:12 - 2005-07-14 12:31 - 00032256 ___SH () C:\WINDOWS\SysWOW64\AVSredirect.dll
2014-02-05 16:12 - 2004-02-22 10:11 - 00764416 ___SH (Abysmal Software) C:\WINDOWS\SysWOW64\devil.dll
2014-02-05 16:12 - 2004-01-25 00:00 - 00070656 ___SH (www.helixcommunity.org) C:\WINDOWS\SysWOW64\yv12vfw.dll
2014-02-05 16:12 - 2004-01-25 00:00 - 00070656 ___SH (www.helixcommunity.org) C:\WINDOWS\SysWOW64\i420vfw.dll
2014-02-05 16:11 - 2014-02-07 22:36 - 00000000 ____D () C:\Users\Lucien\Desktop\Indian Summer Westward Ho!
2014-02-05 16:07 - 2014-02-05 16:07 - 00001130 _____ () C:\Users\Public\Desktop\SUPER ©.lnk
2014-02-05 16:07 - 2014-02-05 16:07 - 00000000 ____D () C:\Users\Lucien\Documents\eRightSoft
2014-02-05 16:07 - 2012-10-05 19:54 - 00188416 __RSH () C:\WINDOWS\SysWOW64\winDCE32.dll
2014-02-05 16:07 - 2011-06-15 23:00 - 00163328 __RSH () C:\WINDOWS\SysWOW64\flvDX.dll
2014-02-05 16:07 - 2011-06-14 19:05 - 00121344 __RSH () C:\WINDOWS\SysWOW64\TAKDSDecoder.ax
2014-02-05 16:07 - 2011-02-11 10:26 - 00112128 __RSH () C:\WINDOWS\SysWOW64\OptimFROG.dll
2014-02-05 16:07 - 2010-01-06 23:00 - 00107520 __RSH () C:\WINDOWS\SysWOW64\TAKDSDecoder.dll
2014-02-05 16:07 - 2009-03-17 10:38 - 00070656 __RSH () C:\WINDOWS\SysWOW64\RLAPEDec.ax
2014-02-05 16:07 - 2009-01-18 12:03 - 00107520 __RSH () C:\WINDOWS\SysWOW64\RLMPCDec.ax
2014-02-05 16:07 - 2008-03-16 14:30 - 00216064 __RSH (MONOGRAM Multimedia, s.r.o.) C:\WINDOWS\SysWOW64\nbDX.dll
2014-02-05 16:07 - 2007-02-21 12:47 - 00031232 __RSH (Hans Mayerl) C:\WINDOWS\SysWOW64\msfDX.dll
2014-02-05 16:07 - 2005-02-13 00:00 - 00186880 __RSH (RadLight) C:\WINDOWS\SysWOW64\RLOgg.ax
2014-02-05 16:07 - 2005-02-13 00:00 - 00067584 __RSH (RadLight, LLC) C:\WINDOWS\SysWOW64\RLTheoraDec.ax
2014-02-05 16:07 - 2005-02-13 00:00 - 00051712 __RSH () C:\WINDOWS\SysWOW64\RLSpeexDec.ax
2014-02-05 16:07 - 2005-02-06 00:00 - 00092672 __RSH (RadLight) C:\WINDOWS\SysWOW64\RLVorbisDec.ax
2014-02-05 16:07 - 2004-10-10 09:50 - 00278528 _____ (Real Networks, Inc) C:\WINDOWS\SysWOW64\pncrt.dll
2014-02-05 16:07 - 2004-09-17 04:07 - 00090112 __RSH (-) C:\WINDOWS\SysWOW64\TTADSSplitter.ax
2014-02-05 16:07 - 2004-08-22 11:56 - 00090112 __RSH (-) C:\WINDOWS\SysWOW64\TTADSDecoder.ax
2014-02-05 16:07 - 2004-07-02 16:33 - 00327749 _____ (RealNetworks, Inc.) C:\WINDOWS\SysWOW64\drvc.dll
2014-02-05 16:07 - 2004-04-27 16:03 - 00017408 __RSH (RadLight) C:\WINDOWS\SysWOW64\RLOFRDec.ax
2014-02-05 16:06 - 2014-02-05 16:06 - 00000000 ____D () C:\Program Files (x86)\eRightSoft
2014-02-05 16:06 - 2012-07-11 23:00 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Olepau32.ax
2014-02-05 16:06 - 2009-09-27 23:00 - 00143872 __RSH () C:\WINDOWS\SysWOW64\AviDX.ax
2014-02-05 16:06 - 2009-08-10 23:00 - 00352768 __RSH () C:\WINDOWS\SysWOW64\ac3DX.ax
2014-02-05 16:06 - 2009-01-18 17:15 - 00120832 __RSH () C:\WINDOWS\SysWOW64\MPCDx.ax
2014-02-05 16:06 - 2006-08-16 15:53 - 00175104 __RSH () C:\WINDOWS\SysWOW64\CoreAAC.ax
2014-02-05 16:06 - 2006-03-10 20:21 - 00195584 __RSH () C:\WINDOWS\SysWOW64\MatroskaDX.ax
2014-02-05 16:06 - 2006-01-12 23:00 - 00123904 __RSH (CoreCodec) C:\WINDOWS\SysWOW64\AVCDX.ax
2014-02-05 16:06 - 2005-11-25 21:46 - 00161792 __RSH (Gabest) C:\WINDOWS\SysWOW64\RealMediaDX.ax
2014-02-05 16:06 - 2005-02-22 17:55 - 00081920 __RSH () C:\WINDOWS\SysWOW64\aac_parser.ax
2014-02-05 16:06 - 2005-01-18 00:26 - 00179200 __RSH (Gabest) C:\WINDOWS\SysWOW64\DiracSplitter.ax
2014-02-05 16:06 - 2003-12-07 08:59 - 00097280 __RSH () C:\WINDOWS\SysWOW64\FLACDX.ax
2014-02-05 16:02 - 2014-02-05 16:04 - 64722252 _____ (eRightSoft ) C:\Users\Lucien\Downloads\SUPERsetup.exe
2014-02-05 13:28 - 2014-02-05 16:46 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\DigitalSites
2014-02-05 13:27 - 2014-02-05 13:27 - 00670720 _____ () C:\Users\Gast\Downloads\VideoConverterSetup.exe
2014-02-05 13:26 - 2014-02-05 13:30 - 00000000 ____D () C:\Users\Gast\AppData\Local\CrashDumps
2014-02-05 13:17 - 2014-02-05 13:17 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Atheros
2014-02-05 13:16 - 2014-02-21 23:04 - 00000008 __RSH () C:\Users\Gast\ntuser.pol
2014-02-03 20:21 - 2014-02-03 20:40 - 00102400 _____ () C:\Users\Lucien\Desktop\Namenschilder fertig.ppt
2014-01-29 16:06 - 2014-01-29 16:07 - 00298424 _____ () C:\WINDOWS\Minidump\012914-53375-01.dmp
2014-01-29 15:41 - 2014-01-29 16:04 - 00181064 _____ (Sysinternals) C:\WINDOWS\PSEXESVC.EXE
2014-01-29 15:37 - 2014-01-29 15:37 - 00000207 _____ () C:\WINDOWS\tweaking.com-regbackup-LUCIENSNOTE-Microsoft-Windows-8.1-(64-bit).dat
2014-01-29 15:36 - 2014-01-29 15:36 - 00000000 ____D () C:\RegBackup
2014-01-29 14:56 - 2014-01-29 14:56 - 00000000 ____D () C:\Users\Lucien\Downloads\Tweaking.com - Windows Repair
2014-01-29 14:48 - 2014-01-29 14:48 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2014-01-29 14:29 - 2014-01-29 14:37 - 109595877 _____ () C:\Users\Lucien\Downloads\Audio_Realtek_Win81_64_VER6017083.zip
2014-01-29 14:20 - 2014-01-29 14:20 - 02903255 _____ () C:\Users\Lucien\Downloads\tweaking.com_windows_repair_aio.zip
2014-01-29 13:10 - 2014-02-26 16:29 - 00002197 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-29 13:09 - 2014-01-29 14:46 - 00000000 ____D () C:\Program Files (x86)\GUMCBFB.tmp
2014-01-29 13:05 - 2014-01-29 13:07 - 37739976 _____ (Google Inc.) C:\Users\Lucien\Downloads\ChromeStandalone32Setup.exe
2014-01-29 13:02 - 2014-01-29 13:02 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Deployment
2014-01-29 12:56 - 2014-01-29 12:56 - 00000000 ____D () C:\Users\Lucien\Desktop\chrome default
2014-01-29 12:49 - 2014-01-29 12:49 - 00001124 _____ () C:\Users\Lucien\Desktop\Absolute Uninstaller.lnk
2014-01-29 12:49 - 2014-01-29 12:49 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\GlarySoft
2014-01-29 12:48 - 2014-01-29 12:48 - 02194784 _____ (Glarysoft.com ) C:\Users\Lucien\Downloads\au29setup.exe
2014-01-29 09:54 - 2014-01-29 09:54 - 00048629 _____ () C:\Users\Lucien\Documents\Namenschilder%20fertig.ppt_0.odp
2014-01-29 09:40 - 2014-02-05 13:17 - 00000000 ____D () C:\ProgramData\Atheros
2014-01-29 09:40 - 2014-01-29 09:40 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Atheros
2014-01-28 14:00 - 2014-01-28 14:05 - 00000000 ____D () C:\Program Files\Common Files\QCA_Bluetooth
2014-01-28 13:56 - 2014-01-28 13:56 - 00000000 ____D () C:\Users\Lucien\Downloads\Win8 Key
2014-01-28 13:51 - 2014-02-20 15:28 - 00000000 ____D () C:\Users\Lucien\Downloads\wlan
2014-01-28 13:51 - 2014-02-20 15:25 - 00000000 ____D () C:\Users\Lucien\Downloads\lan
2014-01-28 13:50 - 2014-01-28 13:50 - 00000000 ____D () C:\Users\Lucien\Downloads\bluetooth
2014-01-28 13:48 - 2014-01-28 13:49 - 00000000 ____D () C:\Users\Lucien\Downloads\audio
2014-01-28 13:46 - 2014-01-28 13:46 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_btmaux_01009.Wdf
2014-01-28 13:45 - 2014-01-28 13:45 - 00000000 ____D () C:\Users\Lucien\Downloads\blue
2014-01-28 13:44 - 2014-01-28 13:45 - 00000000 ____D () C:\Users\Lucien\Downloads\Lang
2014-01-28 11:40 - 2014-02-20 12:38 - 00000000 ____D () C:\Users\Lucien\AppData\Local\NVIDIA Corporation
2014-01-28 11:39 - 2014-02-20 13:14 - 00000000 ____D () C:\Users\Lucien\AppData\Local\NVIDIA
2014-01-28 10:54 - 2014-02-20 14:38 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-01-28 10:53 - 2014-01-28 10:53 - 00000000 ____D () C:\NVIDIA
2014-01-28 10:41 - 2014-01-28 10:41 - 00000000 ____D () C:\WINDOWS\pss
2014-01-28 09:59 - 2014-01-28 10:01 - 31475128 _____ (NVIDIA Corporation) C:\Users\Lucien\Downloads\GeForce_Experience_v1.8.2.0.exe
2014-01-27 22:46 - 2014-01-27 22:59 - 266633424 _____ (NVIDIA Corporation) C:\Users\Lucien\Downloads\332.21-notebook-win8-win7-64bit-international-whql.exe
2014-01-27 20:36 - 2014-02-26 23:17 - 00020563 _____ () C:\Users\Lucien\Desktop\FRST.txt
2014-01-27 19:54 - 2014-01-27 20:33 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-27 19:53 - 2014-01-27 19:53 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-01-27 19:52 - 2014-01-27 19:52 - 00000000 ____D () C:\Users\Lucien\Desktop\mbar
2014-01-27 19:47 - 2014-01-27 19:48 - 00000000 ____D () C:\Users\Lucien\Desktop\Logs2
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight

==================== One Month Modified Files and Folders =======

2014-02-26 23:17 - 2014-01-27 20:36 - 00020563 _____ () C:\Users\Lucien\Desktop\FRST.txt
2014-02-26 23:17 - 2014-01-22 21:41 - 00000000 ____D () C:\Users\Lucien\Desktop\FRST-OlderVersion
2014-02-26 23:17 - 2014-01-22 13:59 - 02155008 _____ (Farbar) C:\Users\Lucien\Desktop\FRST64.exe
2014-02-26 23:17 - 2014-01-21 23:54 - 00000000 ____D () C:\FRST
2014-02-26 23:12 - 2013-08-23 10:50 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-02-26 23:04 - 2014-02-26 23:03 - 00000000 ____D () C:\Users\Lucien\Downloads\ProcessExplorer
2014-02-26 23:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-02-26 22:33 - 2013-08-19 19:07 - 00001134 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-26 22:31 - 2014-02-25 11:16 - 00003576 _____ () C:\WINDOWS\System32\Tasks\Bitdefender Auto-Scan
2014-02-26 19:48 - 2013-07-18 20:55 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3506778915-1287356822-3408950579-1002
2014-02-26 18:06 - 2013-11-05 21:43 - 01571525 _____ () C:\WINDOWS\WindowsUpdate.log
2014-02-26 17:55 - 2013-09-30 05:14 - 01804156 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-02-26 17:55 - 2013-09-30 04:56 - 00761880 _____ () C:\WINDOWS\system32\perfh007.dat
2014-02-26 17:55 - 2013-09-30 04:56 - 00159758 _____ () C:\WINDOWS\system32\perfc007.dat
2014-02-26 16:29 - 2014-01-29 13:10 - 00002197 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-26 16:29 - 2013-08-20 17:50 - 00000000 ____D () C:\Users\Lucien\AppData\Local\CrashDumps
2014-02-26 16:28 - 2013-08-19 19:06 - 00001130 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-26 16:27 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-02-26 16:26 - 2013-08-22 14:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2014-02-26 16:16 - 2014-02-26 15:45 - 00131584 _____ () C:\Users\Lucien\Desktop\Tagegeld 2014-Biofach L. Haase.xls
2014-02-26 15:33 - 2014-02-25 10:51 - 00131584 _____ () C:\Users\Lucien\Desktop\Tagegeld 2014-Biofach M. Welzel und Helene B..xls
2014-02-26 12:00 - 2013-06-26 08:07 - 00003474 _____ () C:\WINDOWS\System32\Tasks\ASUS Live Update1
2014-02-26 12:00 - 2013-06-26 08:07 - 00003464 _____ () C:\WINDOWS\System32\Tasks\ASUS Live Update2
2014-02-26 09:28 - 2013-11-05 22:24 - 00000000 __RDO () C:\Users\Lucien\SkyDrive
2014-02-26 09:28 - 2013-08-22 11:25 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Adobe
2014-02-26 00:46 - 2013-10-14 09:56 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Spotify
2014-02-25 16:10 - 2014-02-25 10:45 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-02-25 13:50 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-02-25 12:09 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-02-25 11:47 - 2014-01-13 22:52 - 00261056 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avchv.sys
2014-02-25 11:18 - 2014-02-25 11:18 - 01274662 _____ () C:\ProgramData\1393321186.bdinstall.bin
2014-02-25 11:17 - 2014-02-25 10:52 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Bitdefender
2014-02-25 11:17 - 2014-01-13 22:48 - 00000000 ____D () C:\ProgramData\Bitdefender
2014-02-25 11:16 - 2014-02-25 11:16 - 00002212 _____ () C:\Users\Public\Desktop\Bitdefender Safepay.lnk
2014-02-25 11:16 - 2014-02-25 11:16 - 00002164 _____ () C:\Users\Public\Desktop\Bitdefender Total Security.lnk
2014-02-25 11:16 - 2013-08-22 15:46 - 00387609 _____ () C:\WINDOWS\setupact.log
2014-02-25 11:09 - 2014-02-25 11:09 - 00000000 ____D () C:\WINDOWS\LastGood
2014-02-25 10:43 - 2014-01-13 22:48 - 00000000 ____D () C:\Program Files\Bitdefender
2014-02-25 10:43 - 2014-01-12 22:56 - 00000000 ____D () C:\Program Files\Common Files\Bitdefender
2014-02-25 10:32 - 2013-09-29 20:04 - 09452902 _____ () C:\WINDOWS\PFRO.log
2014-02-25 10:31 - 2014-02-25 10:31 - 00256855 _____ () C:\ProgramData\1393320561.bdinstall.bin
2014-02-24 23:05 - 2014-02-24 23:05 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Fallout3
2014-02-24 23:05 - 2013-04-26 00:16 - 00408268 _____ () C:\WINDOWS\DirectX.log
2014-02-24 23:04 - 2013-08-20 09:54 - 00000000 ____D () C:\Users\Lucien\Documents\My Games
2014-02-24 19:15 - 2013-10-14 09:58 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Spotify
2014-02-24 18:58 - 2014-02-24 18:58 - 00000000 ____D () C:\Users\Lucien\Desktop\HTC Backup
2014-02-24 17:45 - 2013-09-08 17:27 - 00007628 _____ () C:\Users\Lucien\AppData\Local\resmon.resmoncfg
2014-02-24 09:10 - 2014-02-24 09:08 - 00000000 ____D () C:\WINDOWS\LastGood.Tmp
2014-02-24 09:05 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-02-23 22:26 - 2013-09-10 15:25 - 00197120 ___SH () C:\Users\Lucien\Desktop\Thumbs.db
2014-02-23 17:15 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-02-23 16:35 - 2013-11-22 17:15 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-02-22 14:34 - 2014-02-22 14:32 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Secure Banking
2014-02-22 14:32 - 2014-02-22 14:32 - 00002757 _____ () C:\Users\Public\Desktop\Secure Banking.lnk
2014-02-22 14:32 - 2014-02-22 14:32 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Secure_Banking
2014-02-22 14:32 - 2014-02-11 23:27 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Downloaded Installations
2014-02-22 14:31 - 2014-02-22 14:31 - 01816721 _____ () C:\Users\Lucien\Downloads\Secure Banking v2.0.0 b7.rar
2014-02-21 23:06 - 2013-10-11 22:00 - 00091648 ___SH () C:\Users\Gast\Desktop\Thumbs.db
2014-02-21 23:05 - 2013-10-19 09:42 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Spotify
2014-02-21 23:04 - 2014-02-05 13:16 - 00000008 __RSH () C:\Users\Gast\ntuser.pol
2014-02-21 23:04 - 2013-11-05 21:47 - 00000000 ____D () C:\Users\Gast
2014-02-21 23:04 - 2013-09-26 11:23 - 00000062 _____ () C:\Users\Gast\AppData\Roaming\sp_data.sys
2014-02-21 18:04 - 2013-09-09 20:00 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\vlc
2014-02-20 16:00 - 2014-02-20 15:56 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-02-20 16:00 - 2014-02-20 15:56 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-02-20 15:58 - 2014-02-20 15:58 - 00001316 _____ () C:\Users\Public\Desktop\AudioWizard.lnk
2014-02-20 15:58 - 2014-02-20 15:58 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2014-02-20 15:58 - 2013-11-05 21:42 - 00109524 _____ () C:\WINDOWS\system32\Drivers\RTWAVES30.dat
2014-02-20 15:56 - 2014-02-20 15:56 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-20 15:30 - 2013-06-26 07:58 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-02-20 15:28 - 2014-01-28 13:51 - 00000000 ____D () C:\Users\Lucien\Downloads\wlan
2014-02-20 15:28 - 2013-06-26 08:01 - 00000000 ____D () C:\Program Files (x86)\Qualcomm Atheros
2014-02-20 15:25 - 2014-01-28 13:51 - 00000000 ____D () C:\Users\Lucien\Downloads\lan
2014-02-20 14:39 - 2013-11-05 21:42 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-02-20 14:38 - 2014-01-28 10:54 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-02-20 14:38 - 2013-11-05 21:42 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-02-20 13:14 - 2014-02-20 13:14 - 00001369 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2014-02-20 13:14 - 2014-01-28 11:39 - 00000000 ____D () C:\Users\Lucien\AppData\Local\NVIDIA
2014-02-20 12:38 - 2014-01-28 11:40 - 00000000 ____D () C:\Users\Lucien\AppData\Local\NVIDIA Corporation
2014-02-20 11:42 - 2013-08-22 15:44 - 05147912 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-02-20 11:41 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-02-20 09:22 - 2013-09-09 08:41 - 00001323 _____ () C:\Users\Public\Desktop\Adobe Creative Cloud.lnk
2014-02-19 21:11 - 2014-02-22 14:32 - 02579197 _____ (Secure Banking) C:\Users\Lucien\Downloads\setup.exe
2014-02-17 22:00 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-02-17 22:00 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-17 15:12 - 2013-08-19 19:19 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-02-17 15:10 - 2013-08-19 19:19 - 88567024 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-02-17 12:03 - 2013-09-06 08:17 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Thunderbird
2014-02-14 00:13 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-02-14 00:13 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-02-14 00:13 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-02-12 20:45 - 2014-02-05 17:18 - 00001380 _____ () C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-02-12 20:26 - 2013-08-31 15:58 - 00000000 ____D () C:\AdwCleaner
2014-02-12 20:07 - 2014-02-12 20:07 - 01166132 _____ () C:\Users\Lucien\Downloads\adwcleaner.exe
2014-02-12 07:28 - 2013-08-19 19:07 - 00004106 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-12 07:28 - 2013-08-19 19:06 - 00003870 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-11 23:33 - 2014-02-11 23:21 - 00000000 ____D () C:\Users\Lucien\Downloads\secure banking
2014-02-11 23:29 - 2014-02-11 23:29 - 00000000 ____D () C:\Users\Lucien\AppData\Local\SecureBankingGUI
2014-02-11 23:29 - 2014-02-11 23:29 - 00000000 ____D () C:\Program Files (x86)\Secure Banking Software
2014-02-09 14:33 - 2013-07-18 20:48 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Packages
2014-02-09 12:05 - 2014-02-09 12:05 - 00000000 ____D () C:\Users\Lucien\Documents\Meine empfangenen Dateien
2014-02-09 12:04 - 2013-07-18 20:50 - 00000000 ____D () C:\Users\Lucien\Documents\Bluetooth Folder
2014-02-09 11:50 - 2013-10-21 14:16 - 00031898 _____ () C:\LJCP1215.log
2014-02-09 11:41 - 2014-02-09 11:41 - 07391168 _____ () C:\Users\Lucien\Downloads\ljcP1215-HB-pnp-win64-de.exe
2014-02-08 22:44 - 2014-02-08 22:44 - 00000000 ____D () C:\Users\Lucien\Documents\EA Games
2014-02-08 19:34 - 2014-02-20 10:53 - 01885472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6433489.dll
2014-02-08 19:34 - 2014-02-20 10:53 - 01515296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6433489.dll
2014-02-08 12:15 - 2014-02-08 12:15 - 00000000 _____ () C:\WINDOWS\SysWOW64\debug.log
2014-02-07 22:36 - 2014-02-05 16:11 - 00000000 ____D () C:\Users\Lucien\Desktop\Indian Summer Westward Ho!
2014-02-07 22:24 - 2014-02-07 22:24 - 00001214 _____ () C:\Users\Lucien\Desktop\IsoBuster.lnk
2014-02-07 22:24 - 2014-02-07 22:24 - 00000000 ____D () C:\Program Files (x86)\Smart Projects
2014-02-07 22:21 - 2014-02-07 22:21 - 04669400 _____ (Smart Projects ) C:\Users\Lucien\Downloads\isobuster_all_lang_3.3.exe
2014-02-07 22:21 - 2014-02-07 22:14 - 00000000 ____D () C:\Users\Lucien\Downloads\bin2iso
2014-02-06 13:16 - 2014-02-13 16:57 - 23170048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-13 16:57 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-13 16:57 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-13 16:57 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-13 16:57 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-13 16:57 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-13 16:57 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-13 16:57 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-02-06 11:49 - 2014-02-13 16:57 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-13 16:57 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-13 16:57 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-13 16:57 - 17103872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-13 16:57 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-13 16:57 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-13 16:57 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-02-06 11:11 - 2014-02-13 16:57 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-13 16:57 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-13 16:57 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-13 16:57 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-13 16:57 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-02-06 10:52 - 2014-02-13 16:57 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-13 16:57 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-13 16:57 - 02041856 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-02-06 10:47 - 2014-02-13 16:57 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-13 16:57 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-13 16:57 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-02-06 10:25 - 2014-02-13 16:57 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-02-06 10:24 - 2014-02-13 16:57 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-02-06 10:22 - 2014-02-13 16:57 - 13051392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-13 16:57 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-13 16:57 - 01964032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-13 16:57 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-13 16:57 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-13 16:57 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-13 16:57 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-13 16:57 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-13 16:57 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-02-05 17:17 - 2014-02-05 17:17 - 00001968 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2014-02-05 17:16 - 2014-02-05 17:16 - 00283064 _____ (Disc Soft Ltd) C:\WINDOWS\system32\Drivers\dtsoftbus01.sys
2014-02-05 17:16 - 2014-02-05 17:16 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite
2014-02-05 17:14 - 2014-02-05 17:12 - 13485616 _____ (Disc Soft Ltd) C:\Users\Lucien\Downloads\DTLite4481-0347.exe
2014-02-05 16:46 - 2014-02-05 13:28 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\DigitalSites
2014-02-05 16:12 - 2014-02-05 16:12 - 00000000 ____D () C:\Program Files (x86)\AviSynth 2.5
2014-02-05 16:07 - 2014-02-05 16:07 - 00001130 _____ () C:\Users\Public\Desktop\SUPER ©.lnk
2014-02-05 16:07 - 2014-02-05 16:07 - 00000000 ____D () C:\Users\Lucien\Documents\eRightSoft
2014-02-05 16:06 - 2014-02-05 16:06 - 00000000 ____D () C:\Program Files (x86)\eRightSoft
2014-02-05 16:04 - 2014-02-05 16:02 - 64722252 _____ (eRightSoft ) C:\Users\Lucien\Downloads\SUPERsetup.exe
2014-02-05 15:49 - 2013-10-03 02:33 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\vlc
2014-02-05 13:30 - 2014-02-05 13:26 - 00000000 ____D () C:\Users\Gast\AppData\Local\CrashDumps
2014-02-05 13:27 - 2014-02-05 13:27 - 00670720 _____ () C:\Users\Gast\Downloads\VideoConverterSetup.exe
2014-02-05 13:17 - 2014-02-05 13:17 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Atheros
2014-02-05 13:17 - 2014-01-29 09:40 - 00000000 ____D () C:\ProgramData\Atheros
2014-02-05 13:17 - 2014-01-20 15:52 - 00000000 ____D () C:\Users\Gast\Documents\Bluetooth Folder
2014-02-05 13:17 - 2013-09-26 11:25 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Apple Computer
2014-02-03 20:40 - 2014-02-03 20:21 - 00102400 _____ () C:\Users\Lucien\Desktop\Namenschilder fertig.ppt
2014-01-29 18:04 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\ELAMBKUP
2014-01-29 16:26 - 2013-11-05 21:47 - 00000000 ____D () C:\Users\Lucien
2014-01-29 16:07 - 2014-01-29 16:06 - 00298424 _____ () C:\WINDOWS\Minidump\012914-53375-01.dmp
2014-01-29 16:06 - 2014-01-19 18:22 - 00000000 ____D () C:\WINDOWS\Minidump
2014-01-29 16:06 - 2013-09-13 12:11 - 894753829 _____ () C:\WINDOWS\MEMORY.DMP
2014-01-29 16:04 - 2014-01-29 15:41 - 00181064 _____ (Sysinternals) C:\WINDOWS\PSEXESVC.EXE
2014-01-29 16:03 - 2012-07-26 06:26 - 00000160 _____ () C:\WINDOWS\win.ini
2014-01-29 15:37 - 2014-01-29 15:37 - 00000207 _____ () C:\WINDOWS\tweaking.com-regbackup-LUCIENSNOTE-Microsoft-Windows-8.1-(64-bit).dat
2014-01-29 15:36 - 2014-01-29 15:36 - 00000000 ____D () C:\RegBackup
2014-01-29 15:11 - 2013-07-18 20:49 - 00000074 _____ () C:\Users\Lucien\AppData\Roaming\sp_data.sys
2014-01-29 14:56 - 2014-01-29 14:56 - 00000000 ____D () C:\Users\Lucien\Downloads\Tweaking.com - Windows Repair
2014-01-29 14:54 - 2014-01-22 00:10 - 00000000 ____D () C:\Users\Lucien\Desktop\Tweaking.com - Windows Repair
2014-01-29 14:48 - 2014-01-29 14:48 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2014-01-29 14:47 - 2013-08-22 15:46 - 00000974 _____ () C:\WINDOWS\setuperr.log
2014-01-29 14:46 - 2014-01-29 13:09 - 00000000 ____D () C:\Program Files (x86)\GUMCBFB.tmp
2014-01-29 14:37 - 2014-01-29 14:29 - 109595877 _____ () C:\Users\Lucien\Downloads\Audio_Realtek_Win81_64_VER6017083.zip
2014-01-29 14:34 - 2013-06-26 07:51 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-01-29 14:20 - 2014-01-29 14:20 - 02903255 _____ () C:\Users\Lucien\Downloads\tweaking.com_windows_repair_aio.zip
2014-01-29 13:07 - 2014-01-29 13:05 - 37739976 _____ (Google Inc.) C:\Users\Lucien\Downloads\ChromeStandalone32Setup.exe
2014-01-29 13:06 - 2013-04-26 00:19 - 00000000 ____D () C:\ProgramData\WildTangent
2014-01-29 13:02 - 2014-01-29 13:02 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Deployment
2014-01-29 12:56 - 2014-01-29 12:56 - 00000000 ____D () C:\Users\Lucien\Desktop\chrome default
2014-01-29 12:49 - 2014-01-29 12:49 - 00001124 _____ () C:\Users\Lucien\Desktop\Absolute Uninstaller.lnk
2014-01-29 12:49 - 2014-01-29 12:49 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\GlarySoft
2014-01-29 12:48 - 2014-01-29 12:48 - 02194784 _____ (Glarysoft.com ) C:\Users\Lucien\Downloads\au29setup.exe
2014-01-29 09:54 - 2014-01-29 09:54 - 00048629 _____ () C:\Users\Lucien\Documents\Namenschilder%20fertig.ppt_0.odp
2014-01-29 09:40 - 2014-01-29 09:40 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Atheros
2014-01-28 14:05 - 2014-01-28 14:00 - 00000000 ____D () C:\Program Files\Common Files\QCA_Bluetooth
2014-01-28 14:00 - 2013-06-26 08:02 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite
2014-01-28 13:56 - 2014-01-28 13:56 - 00000000 ____D () C:\Users\Lucien\Downloads\Win8 Key
2014-01-28 13:50 - 2014-01-28 13:50 - 00000000 ____D () C:\Users\Lucien\Downloads\bluetooth
2014-01-28 13:49 - 2014-01-28 13:48 - 00000000 ____D () C:\Users\Lucien\Downloads\audio
2014-01-28 13:46 - 2014-01-28 13:46 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_btmaux_01009.Wdf
2014-01-28 13:46 - 2013-11-05 21:42 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-01-28 13:45 - 2014-01-28 13:45 - 00000000 ____D () C:\Users\Lucien\Downloads\blue
2014-01-28 13:45 - 2014-01-28 13:44 - 00000000 ____D () C:\Users\Lucien\Downloads\Lang
2014-01-28 10:53 - 2014-01-28 10:53 - 00000000 ____D () C:\NVIDIA
2014-01-28 10:48 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Help
2014-01-28 10:41 - 2014-01-28 10:41 - 00000000 ____D () C:\WINDOWS\pss
2014-01-28 10:01 - 2014-01-28 09:59 - 31475128 _____ (NVIDIA Corporation) C:\Users\Lucien\Downloads\GeForce_Experience_v1.8.2.0.exe
2014-01-27 22:59 - 2014-01-27 22:46 - 266633424 _____ (NVIDIA Corporation) C:\Users\Lucien\Downloads\332.21-notebook-win8-win7-64bit-international-whql.exe
2014-01-27 20:33 - 2014-01-27 19:54 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-27 20:20 - 2013-09-12 10:02 - 00296960 ___SH () C:\Users\Lucien\Downloads\Thumbs.db
2014-01-27 19:53 - 2014-01-27 19:53 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-01-27 19:52 - 2014-01-27 19:52 - 00000000 ____D () C:\Users\Lucien\Desktop\mbar
2014-01-27 19:48 - 2014-01-27 19:47 - 00000000 ____D () C:\Users\Lucien\Desktop\Logs2
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight

Some content of TEMP:
====================
C:\Users\Gast\AppData\Local\Temp\691.355818674457_Update.exe
C:\Users\Gast\AppData\Local\Temp\drm_dyndata_7390004.dll
C:\Users\Gast\AppData\Local\Temp\ubiB23E.tmp.exe
C:\Users\Lucien\AppData\Local\Temp\Creative Cloud Helper.exe
C:\Users\Lucien\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-25 13:50

==================== End Of Log ============================

--- --- ---

sunjojo 28.02.2014 11:37

Hi,

Zitat:

also im Autostart hab ich nur noch das wichtigste und der Start geht schneller von statten, allerdings ist der Desktop aufbau weiterhin so dass zuerst die taskleiste erscheint und dann nach und nach die icons.
Ich denke, das ist zu einem gewissen Grad normal. Wie lange braucht denn der Rechner in Minuten vom Drücken des Powerbuttons bis zum "fertigen Desktop"?

Zitat:

Process Explorer im Anhang, wobei ich selbst rein gar nichts schlimmes sehe.
Jop, sehe da auch nichts. Alle Prozesse haben eine normale Prozessorauslastung und die Gesamtauslastung liegt nur bei 1,24%. Das ist alles wunderbar. Da hat sich keine Malware eingeschlichen, die den Computer ausbremst :).

Zitat:

zu dem kann ich tastatureingaben machen und zuschauen wie das gerade getippte verzögert erscheint.
Tritt dieses Problem generell auf oder nur bei bestimmten Programmen? Wenn du gerade viel am Rechner machst oder auch wenn du zum Beispiel nur an einem Dokument schreibst und sonst keine Programme geöffnet sind?

KitsuneNoir 01.03.2014 14:36

Das mit der Eingabe tritt meistens in Verbindung mit den ganzen anderen "verlangsamenden Symptomen" auf, also wenn gar nichts mehr geht. Aber der rechner läuft ja jetzt auch wieder soweit recht ordentlich, von daher wird das wohl nicht mehr so oft vorkommen.

Zudem hab ich ne ssd von nem kumpel geschenkt bekommen die ich heute einbauen werde, das wird alles noch beschleunigen und verflüssigen :)

sunjojo 02.03.2014 11:35

Zitat:

Aber der rechner läuft ja jetzt auch wieder soweit recht ordentlich, von daher wird das wohl nicht mehr so oft vorkommen.
Alles klar :)



Updates
Java 7 Update 51
Dein Java ist nicht mehr aktuell. Älter Versionen enthalten Sicherheitslücken, die von Malware missbraucht werden können.
  • Downloade dir bitte die neueste Java-Version von hier
  • Speichere die jxpiinstall.exe
  • Schließe alle laufenden Programme. Speziell deinen Browser.
  • Starte die jxpiinstall.exe. Diese wird den Installer für die neueste Java Version ( Java 7 Update 51 ) herunter laden.
  • Entferne den Haken bei "Installieren Sie die Ask-Toolbar ..." während der Installation.
  • Wenn die Installation beendet wurde
    Start --> Systemsteuerung --> Programme und deinstalliere alle älteren Java Versionen.
  • Starte deinen Rechner neu sobald alle älteren Versionen deinstalliert wurden.
Nach dem Neustart
  • Öffne erneut die Systemsteuerung --> Programme und klicke auf das Java Symbol.
  • Im Reiter Allgemein, klicke unter Temporäre Internetdateien auf Einstellungen.
  • Klicke auf Dateien löschen....
  • Gehe sicher das überall ein Haken gesetzt ist und klicke OK.
  • Klicke erneut OK.

Cleanup
Falls du Malwarebytes Anti-Malware und den ESET Online Scanner nicht mehr behalten möchtest, kannst du diese über die Systemsteuerung deinstallieren. Ich empfehle dir, mindestens ein Programm zu behalten (näheres in den Tipps).
Windows XP: Start --> Systemsteuerung --> Kategorieansicht auswählen (falls nicht voreingestellt) --> Software
Windows Vista/7: Start --> Systemsteuerung --> Anzeige (oben-rechts) auf Kategorie stellen (falls nicht voreingestellt) --> Programme deinstallieren (Unterpunkt von Programme)
Windows 8: Suchen --> "Systemsteuerung" in das Suchfeld eingeben --> Systemsteuerung auswählen --> Programme deinstallieren (Unterpunkt von Programme)
Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.



In deinen Logfiles sehe ich keine schädlichen Einträge mehr, du bist in meinen Augen Clean. Für die Zukunft habe ich dir Tipps aufgeschrieben, damit du uns in nächster Zeit nicht mehr brauchst :).




Tipps - Frequently Asked Questions (FAQ)/Häufig gestellte Fragen

Welcher Antivirenscanner ist der Beste?
  • Die Antwort auf die Frage ist im Grunde einfach: keins. Es gibt keinen Antivirenscanner, der immer alle Schädlinge sofort erkennt und dich 100%ig schützt. Alles vom Menschen geschaffene ist fehlerhaft und es ist ratsam, sich nur begrenzt darauf zu verlassen. Das heißt nicht, dass die Verwendung eines Antivirenprogramms keinen Sinn macht, aber es sollte als zusätzliche Hilfe angesehen werden. Die Hauptverantwortung liegt bei dir und deinem Verhalten im Internet selbst.
  • Benutze nur einen Antivirenscanner/Hintergrundwächter, niemals zwei oder mehrere. Diese könnten sich gegenseitig blockieren und dir mehr schaden, als helfen. Es ist nicht unbedingt nötig, sich kostenpflichtige Antivirenprogramme für viel Geld zu kaufen. Achte darauf, dass immer die neuesten Updates heruntergeladen werden. Ein veralteter Antivirenscanner ist nutzlos!
  • Außerdem kannst du dein Betriebssystem mit On-Demand Sannern überprüfen. Solche Scanner laufen nicht permanent im Hintergrund, sondern scannen nur "auf Knopfdruck" dein System. Damit holst du dir eine zweite Meinung ein. Gute On-Demand Scanner, die auch wir zur Kontrolle benutzen, sind Malwarebytes Anti Malware und der ESET Online Scanner.
    • Malwarebytes Anti-Malware (Anleitung zur Verwendung) ist eines der besten und zuverlässigsten Programme in der Malwareentfernung. Scanne dein System einmal pro Woche oder einmal in zwei Wochen.
    • Der ESET Online Scanner (Anleitnung zur Verwendung) ist kostenlos und scannt dein System und deine Dateien sehr gründlich. Deswegen kann der Scan bei vielen Dateien mehrere Stunden dauern. Scanne dein System nach deinem eigenem Ermessen. Falls schädliche Dateien gefunden werden, handle nicht eigenmächtig!
Aber Updates muss ich immer installieren, oder?
  • Die Aktualität von Software ist sehr wichtig und unbedingt notwendig. Veraltete Programme stellen Schwachstellen dar, die sich Angreifer gerne zur Nutze machen. Daher ist es wichtig, immer die neueste Version der jeweiligen Software installiert zu haben. Dies fängt beim Betriebssystem an. Du solltest das neueste Service Pack installiert und automatische Updates eingeschaltet haben.
    Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
    Windows 8: Suchen --> "Systemsteuerung" in das Suchfeld eingeben --> Systemsteuerung auswählen --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Häufig werden Sicherheitslücken von älteren Java Versionen, dem Flash-Player und PDF-Reader ausgenutzt. Du kannst hier überprüfen, ob diese häufig missbrauchte Software aktuell ist: PluginCheck
Ok, muss ich auf etwas achten, wenn ich im Internet surfe?
  • Mit dem richtigen Verhalten im Internet fängt der Schutz vor Infektionen an. Es gibt inzwischen viele virtuelle Betrugsversuche oder Tricks zum Täuschen, sowie im echten Leben. Um sich dort zu schützen, hast du bestimmte Angewohnheiten. Diese können auf das Surfverhalten übertragen werden. Zur Verdeutlichung stelle ich dir einen kleinen Vergleich zum Leben her:

    Verhalten im LebenVerhalten im Internet
    Du überprüfst vorher die Läden, in denen du einkaufst.Klicke nicht auf alle Seiten/Werbungen/PopUps, weil diese bunt sind oder tolle Preise versprechen.
    Du achtest auf die Qualität, wenn du Produkte kaufst.Lade dir Programme nur von original Herstellerseiten herunter und nicht von Softonic oder ähnlichem. Diese birgen häufig die Gefahr, sich zusätzlich Adware herunterzuladen.
    Du öffnest keine Briefe oder Pakete ohne zu gucken, von wem diese sind.Öffne nur Anhänge von Emails, wenn der Absender bekannt ist. Überprüfe, ob zum Beispiel eine Rechnung im Anhang wirklich von der Firma versendet wurde. Häufig werden gefälschte Emails mit schädlichem Anhang verschickt!

    Handle mit Bedacht und überlege zuerst, bevor du etwas anklickst, herunterlädst oder öffnest!
  • Vermeide das Besuchen von pornographischen, Pokerspiel oder weiteren dubiosen Webseiten. Diese birgen ein besonders großes Infektionsrisiko.
Welche Programme sollte ich nicht verwenden?
  • Wenn du neue Software installierst, besteht häufig die Auswahl, eine weitere Toolbar (oder ähnliches) zu installieren. Entferne generell den Haken bei optionalen Zusatzprogrammen. Diese verlangsamen in der Regel deinen Browser und können ein erhöhtes Infektionsrisiko bedeuten.
  • Registry Cleaner versprechen meist einen großen Performancegewinn, wenn verwaiste Einträge in der Regsitry entfernt werden. Dieser angebliche Gewinn ist kaum bis gar nicht bemerkbar. Außerdem wird häufig verschwiegen, dass falsche Änderungen der Registry zu schwerwiegenden Folgen führen können. Deswegen sollte so wenig wie möglich an der Registry verändert werden. Zerstörst du die Registry, zerstörst du Windows!
  • Filesharing oder Peer-to-Peer Programme ermöglichen es, Dateien mit anderen Nutzern auszutauschen. Es ist möglich, dass du dir eine infizierte Datei herunterlädst (auch versteckt in angeblich legalen Versionen von bekannten Programmen). Du kannst niemals wissen, woher diese stammen. Daher sollte diese Art von Software mit äußerster Vorsicht oder gar nicht benutzt werden.
    • Lade dir vor allem keine Cracks (illegale Versione einer Software) herunter. Das ist rechtlich nicht erlaubt und du kannst dafür bestraft werden. Außerdem ist bei solcher Software das Infektionsrisiko am höchsten, da Cracks sehr häufig versteckte Malware enthalten.
Gibt es noch weitere Tipps, um mich zu schützen?
  • Achte auf die Endung von Dateien, die dir zugesendet wurden. Häufig versuchen Malwareschreiber mit Tricks wie Rechnung.pdf.exe dich zu täuschen. Wenn die Dateiendung ausgeblendet wird, bleibt Rechnung.pdf übrig, was den Anschein einer normalen PDF-Datei macht. Lass dir daher bekannte Dateiendung anzeigen (Anleitung: http://www.trojaner-board.de/59624-a...-sichtbar.html)
  • Surfe mit einem Konto mit eingeschränkten Rechten. Durch Administratorrechte kann Malware ohne Probleme zahlreiche Änderungen am System vornehmen, zum Beispiel Sicherheitseinstellungen verändern oder auf Systemdateien zugreifen.
  • Verwende nicht immer das gleiche Passwort. Falls dein Passwort durch entsprechende Malware herausgefunden wird, könnte auf alle Konten von dir zugegriffen werden.
  • Lege in regelmäßigen Abständen Backups (Was sind Backups?) von deinem System an. Dadurch ist ein Datenverlust durch Malware oder Hardwareschäden verkraftbar und es ist vergleichsweise einfach, den Rechner auf den Stand des letzten Backups zu bringen. Damit du deine Daten nicht manuell sichern musst, gibt es Backup-Programme wie Paragon Backup & Recovery.
  • Deaktiviere das Autorun-Feature von Windows. Dies ermöglicht, dass zum Beispiel CDs, DVDs oder Programme auf USB-Sticks alleine starten. Häufig nutzen Malwareschreiber genau diese Funktion aus. In solchen Fällen befindet sich Malware auf dem USB-Stick und wird automatisch beim Anschließen an den Computer ausgeführt. Um das zu verhinden, deaktiviere die Autorun-Funktion: http://www.trojaner-board.de/83238-a...sschalten.html.


Wenn du die Arbeit des Trojaner-Boards unterstützen möchtest, kannst du gerne spenden :).

Ich wünsche dir eine schöne und malwarefreie Zeit :daumenhoc.

sunjojo 04.03.2014 23:13

Hallo KitsuneNoir,

schön, dass wir dir helfen konnten :abklatsch:.

Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht, damit erhalte ich keine Benachrichtungen über neue Antworten in diesem Thread. Solltest Du das Thema erneut brauchen, schicke mir bitte eine PM.

Jeder Andere bitte hier klicken und einen eigenen Thread erstellen.


Alle Zeitangaben in WEZ +1. Es ist jetzt 19:09 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131