|
Plagegeister aller Art und deren Bekämpfung: System durch verschiedenes infiziertWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
12.02.2014, 20:56 | #31 |
/// Helfer-Team | System durch verschiedenes infiziert Hast du wirklich Secure Banking 2.0.0 b6 installiert? Das Installationsverzeichnis scheint nämlich noch das alte zu sein. Oder hast du das Installationsverzeichnis manuell eingestellt? (ich glaub aber das habe ich deaktiviert)
__________________ MfG, Niklas |
14.02.2014, 18:26 | #32 | ||
/// Malwareteam | System durch verschiedenes infiziert Hi,
__________________Zitat:
Schritt 1 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter GroupPolicyUsers\S-1-5-21-3506778915-1287356822-3408950579-1002\User: Group Policy restriction detected <======= ATTENTION Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Zitat:
__________________ |
19.02.2014, 02:27 | #33 |
/// Helfer-Team | System durch verschiedenes infiziert Hallöchen!
__________________Die Probleme sollten jetzt mit der neuen Beta Version von Secure Banking behoben sein. Hab eine neue Technologie eingebaut, um solche Falschmeldungen zu erkennen. Du kannst sie dir hier herunterladen. (Vorher natürlich die alte Version bitte deinstallieren)
__________________ |
19.02.2014, 18:21 | #34 |
/// Malwareteam | System durch verschiedenes infiziert Hi, ich hab schon länger keine Antwort mehr von dir erhalten. Brauchst du weiterhin noch Hilfe? Wenn ich in den nächsten 24 Stunden nichts von dir höre, gehe ich davon aus, dass sich das Thema erledigt hat und lösche es aus meinen Abos. Hinweis: Wir sind noch nicht fertig! Auch wenn die Symptome verschwunden sein sollten, kann dein System weiterhin infiziert sein und über Sicherheitslücken verfügen, welche eine erneute Infektion möglich machen
__________________ Gruß, Jonas |
20.02.2014, 00:51 | #35 |
| System durch verschiedenes infiziert Hi, Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 18-02-2014 Ran by Lucien at 2014-02-20 00:44:33 Run:3 Running from C:\Users\Lucien\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** GroupPolicyUsers\S-1-5-21-3506778915-1287356822-3408950579-1002\User: Group Policy restriction detected <======= ATTENTION ***************** C:\WINDOWS\system32\GroupPolicyUsers\S-1-5-21-3506778915-1287356822-3408950579-1002\User => Moved successfully. The system needs a manual reboot. ==== End of Fixlog ==== Wegen secure banking, die beta ist drauf nur wenn ich die alte version lösche dann ist auch die beta mit weg ich hab also noch beide versionen drauf. hey, mal ne ganz andere frage, wie wäre es denn wenn ich meine platte komplett überschreiben würde und win8 nochmal neu aufspiele. Das alles ist ja kein problem, nur der win8 key ist im bios gespeichert und wenn ich die platte überschreibe wird dieses doch auch mit gelöscht. also wie liest es dann beim neuen aufspielen von win8 meinen key aus? könnt ihr mir da weiterhelfen oder bin ich hier im falschen forum. denn ich glaube ich werde lieber die platte überschreiben als mich hier weiter rumzuärgern :/ |
22.02.2014, 12:49 | #36 | |||
/// Malwareteam | System durch verschiedenes infiziertZitat:
Starte noch einmal FRST.
Zitat:
Zitat:
__________________ --> System durch verschiedenes infiziert |
22.02.2014, 14:01 | #37 |
| System durch verschiedenes infiziert Hallo, ich versuchs nochmal n stück weiter aber wenn ich noch länger das gefühl habe dass etwas nicht stimmt formatiere ich neu. FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-02-2014 01 Ran by Lucien (administrator) on LUCIENSNOTE on 22-02-2014 13:57:09 Running from C:\Users\Lucien\Desktop Windows 8.1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (Bitdefender) C:\Program Files\Bitdefender\Bitdefender\vsserv.exe (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (ASUS) C:\Program Files\ASUS\P4G\InsOnSrv.exe (Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe (Microsoft Corporation) C:\WINDOWS\system32\dashost.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel(R) Corporation) C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe (Microsoft Corporation) C:\WINDOWS\System32\LogonUI.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe (ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS Console\ASUS Console Starter.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender\bdagent.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Akamai Technologies, Inc.) C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.) C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe (Secure Banking) C:\Program Files (x86)\Secure Banking\SecureBanking.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe\LiveComm.exe (Microsoft Corporation) C:\WINDOWS\system32\wwahost.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender\antispam32\OBKAgent.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe (ASUS) C:\Program Files\ASUS\P4G\InsOnWMI.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Spotify Ltd) C:\Users\Lucien\AppData\Roaming\Spotify\spotify.exe () C:\Users\Lucien\AppData\Roaming\Spotify\Data\SpotifyHelper.exe () C:\Users\Lucien\AppData\Roaming\Spotify\Data\SpotifyHelper.exe () C:\Users\Lucien\AppData\Roaming\Spotify\Data\SpotifyHelper.exe () C:\Users\Lucien\AppData\Roaming\Spotify\Data\SpotifyHelper.exe () C:\Users\Lucien\AppData\Roaming\Spotify\Data\SpotifyHelper.exe () C:\Users\Lucien\AppData\Roaming\Spotify\Data\SpotifyHelper.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\WINDOWS\system32\wwahost.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmd.exe () C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxcrnmh.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-12-10] (Adobe Systems Incorporated) HKLM\...\Run: [PrnStatusMX] - C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe [1240064 2012-07-04] (Marvell Semiconductor, Inc.) HKLM\...\Run: [Bdagent] - C:\Program Files\Bitdefender\Bitdefender\bdagent.exe [1737920 2014-02-03] (Bitdefender) HKLM\...\Run: [BTMTrayAgent] - C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [7818040 2013-09-19] (Motorola Solutions, Inc.) HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] - C:\WINDOWS\system32\nvspcap64.dll [1179576 2014-01-21] (NVIDIA Corporation) HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1361112 2013-11-05] (Realtek Semiconductor) HKLM-x32\...\Run: [ASUSPRP] - C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-04-26] (ASUSTek Computer Inc.) HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.) HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-01-15] (cyberlink) HKLM-x32\...\Run: [ASUS InstantKey] - C:\Program Files (x86)\ASUS\ASUS Instant Key\Ikey_start.exe [13936 2013-04-16] (ASUS) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2239376 2014-02-11] (Adobe Systems Incorporated) HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-09-25] ( (Atheros Communications)) HKU\.DEFAULT\...\Run: [Bitdefender-Geldbörse-Agent] - C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [567888 2014-02-11] (Bitdefender) HKU\.DEFAULT\...\Run: [Bitdefender-Geldbörse] - C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe [1001536 2014-02-11] (Bitdefender) HKU\.DEFAULT\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] - C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [614232 2014-02-11] (Bitdefender) HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [Steam] - C:\Program Files (x86)\Steam\steam.exe [1822400 2014-02-20] (Valve Corporation) HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [Spotify Web Helper] - C:\Users\Lucien\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-10] (Spotify Ltd) HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [Akamai NetSession Interface] - C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.) HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.) HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.) HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [Bitdefender-Geldbörse-Agent] - C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [567888 2014-02-11] (Bitdefender) HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] - C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [614232 2014-02-11] (Bitdefender) HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd) HKU\S-1-5-21-3506778915-1287356822-3408950579-1002\...\Run: [SecureBanking] - C:\Program Files (x86)\Secure Banking\SecureBanking.exe [507904 2013-06-30] (Secure Banking) AppInit_DLLs: C:\Windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [168616 2013-12-10] (NVIDIA Corporation) AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll, => c:\windows\syswow64\nvinit.dll [141336 2013-12-10] (NVIDIA Corporation) AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [141336 2013-12-10] (NVIDIA Corporation) Startup: C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) ==================== Internet (Whitelisted) ==================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS BHO: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\pmbxie.dll (Bitdefender) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxie.dll (Bitdefender) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Chrome: ======= CHR HomePage: https://www.google.de/ CHR Extension: (Google Docs) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-14] CHR Extension: (Google Drive) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-19] CHR Extension: (YouTube) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-19] CHR Extension: (Bitdefender Wallet) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccahoghmggldkcdjiebjkidpfongdfbl [2014-01-13] CHR Extension: (Adblock Plus) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-02-08] CHR Extension: (Google-Suche) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-19] CHR Extension: (Google Wallet) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30] CHR Extension: (Google Mail) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-19] CHR HKLM-x32\...\Chrome\Extension: [ccahoghmggldkcdjiebjkidpfongdfbl] - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxcr.crx [2014-02-11] ==================== Services (Whitelisted) ================= S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-12-18] (Adobe Systems) R2 ASUS InstantOn; C:\Program Files\ASUS\P4G\InsOnSrv.exe [277120 2013-04-29] (ASUS) R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-09-25] (Windows (R) Win 7 DDK provider) S4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender\bdparentalservice.exe [77632 2013-11-21] (Bitdefender) S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [247768 2013-01-15] (CyberLink) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-04-11] (Intel Corporation) R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-09-18] (Intel Corporation) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16939296 2014-01-21] (NVIDIA Corporation) R2 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [94624 2013-07-08] (Bitdefender) R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe [67320 2013-10-07] (Bitdefender) R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender\vsserv.exe [1507248 2014-02-03] (Bitdefender) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation) S2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation) R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [18384 2013-09-04] (Intel(R) Corporation) R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-09-25] (Atheros) ==================== Drivers (Whitelisted) ==================== S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra) R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Qualcomm Atheros Communications, Inc.) R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [70416 2013-09-23] (ASUS Corporation) R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [893440 2014-02-03] (BitDefender) R3 avchv; C:\Windows\system32\DRIVERS\avchv.sys [261056 2014-01-13] (BitDefender) R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [635392 2014-02-03] (BitDefender) S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider) S0 bdelam; C:\Windows\System32\drivers\bdelam.sys [23568 2013-09-08] (Bitdefender) R1 BdfNdisf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys [98768 2013-07-24] (BitDefender LLC) R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107008 2013-07-29] (BitDefender LLC) S4 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-07-02] (Bitdefender SRL) S3 BDSandBox; C:\WINDOWS\system32\drivers\bdsandbox.sys [82824 2013-11-04] (BitDefender SRL) R1 BDVEDISK; C:\Windows\system32\DRIVERS\bdvedisk.sys [79192 2013-07-30] (BitDefender) S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-25] (Qualcomm Atheros) S3 BthA2DP; C:\Windows\system32\drivers\BthA2DP.sys [131584 2013-08-22] (Microsoft Corporation) S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation) S3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [140600 2013-07-22] (Motorola Solutions, Inc.) R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-02-05] (Disc Soft Ltd) R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [150256 2013-08-23] (BitDefender LLC) S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation) S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation) S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation) R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation) R2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [26328 2013-07-23] (Intel Corporation) R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( ) S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-07-26] (Intel Corporation) R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation) S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation) S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation) S0 rtcrfilt64; C:\Windows\System32\DRIVERS\rtcrfilt64.sys [19600 2000-01-01] (Realtek Semiconductor Corp.) S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation) S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation) S3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16152 2013-09-03] () R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [389240 2013-08-07] (BitDefender S.R.L.) S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation) S3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [X] S3 GPU-Z; \??\C:\Users\Lucien\AppData\Local\Temp\GPU-Z.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-02-20 15:58 - 2014-02-20 15:58 - 00001316 _____ () C:\Users\Public\Desktop\AudioWizard.lnk 2014-02-20 15:58 - 2014-02-20 15:58 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM 2014-02-20 15:58 - 2013-11-05 19:47 - 03707864 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys 2014-02-20 15:58 - 2013-11-05 18:54 - 38385664 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat 2014-02-20 15:58 - 2013-11-05 15:48 - 00681905 _____ () C:\WINDOWS\system32\Drivers\RTAIODAT.DAT 2014-02-20 15:58 - 2013-11-04 19:26 - 00153304 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll 2014-02-20 15:58 - 2013-11-04 11:11 - 02587864 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkAPO64.dll 2014-02-20 15:58 - 2013-10-28 17:29 - 01021656 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll 2014-02-20 15:58 - 2013-10-18 16:41 - 01286360 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll 2014-02-20 15:58 - 2013-10-11 11:31 - 00947760 _____ (Sony Corporation) C:\WINDOWS\system32\SFSS_APO.dll 2014-02-20 15:58 - 2013-10-09 20:13 - 01921792 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek264.dll 2014-02-20 15:58 - 2013-10-09 20:12 - 27644160 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioVnA64.dll 2014-02-20 15:58 - 2013-10-09 20:12 - 14152960 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek64.dll 2014-02-20 15:58 - 2013-10-09 20:12 - 02103040 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\WavesGUILib64.dll 2014-02-20 15:58 - 2013-10-09 20:12 - 02036992 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioEQ64.dll 2014-02-20 15:58 - 2013-10-09 20:12 - 01012992 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPOShell64.dll 2014-02-20 15:58 - 2013-10-07 11:05 - 02810072 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll 2014-02-20 15:58 - 2013-10-02 17:10 - 00617176 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll 2014-02-20 15:58 - 2013-08-14 16:36 - 00662784 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVolumeSDAPO.dll 2014-02-20 15:58 - 2013-08-14 16:35 - 01084160 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO4064.dll 2014-02-20 15:58 - 2013-08-14 16:35 - 00663296 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO30.dll 2014-02-20 15:58 - 2013-08-05 18:11 - 02743328 _____ (Fortemedia Corporation) C:\WINDOWS\system32\FMAPO64.dll 2014-02-20 15:58 - 2013-04-24 17:16 - 01662024 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl 2014-02-20 15:58 - 2012-08-31 19:18 - 07164176 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEP64A.dll 2014-02-20 15:58 - 2012-08-31 19:17 - 00434960 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EED64A.dll 2014-02-20 15:58 - 2012-08-31 19:17 - 00141584 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEL64A.dll 2014-02-20 15:58 - 2012-08-31 19:17 - 00124176 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEA64A.dll 2014-02-20 15:58 - 2012-08-31 19:17 - 00075024 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEG64A.dll 2014-02-20 15:58 - 2012-01-30 11:43 - 00836544 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo264.dll 2014-02-20 15:58 - 2012-01-10 10:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\WINDOWS\system32\tepeqapo64.dll 2014-02-20 15:58 - 2011-12-20 15:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll 2014-02-20 15:58 - 2011-11-22 16:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll 2014-02-20 15:58 - 2011-09-02 14:21 - 00221024 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFNHK64.dll 2014-02-20 15:58 - 2011-09-02 14:21 - 00081248 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFCOM64.dll 2014-02-20 15:58 - 2011-09-02 14:21 - 00078688 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFAPO64.dll 2014-02-20 15:58 - 2011-08-23 17:00 - 00603984 _____ (Knowles Acoustics ) C:\WINDOWS\system32\KAAPORT64.dll 2014-02-20 15:58 - 2011-03-17 12:17 - 01361336 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosade.dll 2014-02-20 15:58 - 2011-03-07 17:11 - 00148416 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo.dll 2014-02-20 15:58 - 2010-11-08 07:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll 2014-02-20 15:58 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll 2014-02-20 15:58 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll 2014-02-20 15:58 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll 2014-02-20 15:58 - 2010-11-08 07:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll 2014-02-20 15:58 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll 2014-02-20 15:58 - 2010-11-03 18:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll 2014-02-20 15:58 - 2010-09-27 09:34 - 00318808 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO20.dll 2014-02-20 15:58 - 2010-07-22 16:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\WINDOWS\SysWOW64\SFCOM.dll 2014-02-20 15:58 - 2009-11-24 09:55 - 00518896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll 2014-02-20 15:58 - 2009-11-24 09:55 - 00211184 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll 2014-02-20 15:58 - 2009-11-24 09:55 - 00198896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll 2014-02-20 15:58 - 2009-11-24 09:55 - 00155888 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll 2014-02-20 15:57 - 2013-10-16 03:43 - 00209096 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll 2014-02-20 15:57 - 2013-10-11 12:47 - 00113576 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll 2014-02-20 15:57 - 2013-10-07 00:26 - 00501184 _____ (DTS) C:\WINDOWS\system32\DTSU2PLFX64.dll 2014-02-20 15:57 - 2013-10-07 00:26 - 00487360 _____ (DTS) C:\WINDOWS\system32\DTSU2PGFX64.dll 2014-02-20 15:57 - 2013-10-07 00:26 - 00415680 _____ (DTS) C:\WINDOWS\system32\DTSU2PREC64.dll 2014-02-20 15:57 - 2013-09-10 04:02 - 06217904 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64A.dll 2014-02-20 15:57 - 2013-09-10 04:02 - 00313520 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64A.dll 2014-02-20 15:57 - 2013-09-10 04:01 - 01938608 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64A.dll 2014-02-20 15:57 - 2013-09-10 04:01 - 00260272 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64.dll 2014-02-20 15:57 - 2012-03-08 11:47 - 00108640 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll 2014-02-20 15:57 - 2011-05-31 09:42 - 01756264 _____ (DTS) C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll 2014-02-20 15:57 - 2011-05-31 09:42 - 01568360 _____ (DTS) C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll 2014-02-20 15:57 - 2011-05-31 09:42 - 01486952 _____ (DTS) C:\WINDOWS\system32\DTSBoostDLL64.dll 2014-02-20 15:57 - 2011-05-31 09:42 - 00728680 _____ (DTS) C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll 2014-02-20 15:57 - 2011-05-31 09:42 - 00712296 _____ (DTS) C:\WINDOWS\system32\DTSSymmetryDLL64.dll 2014-02-20 15:57 - 2011-05-31 09:42 - 00693352 _____ (DTS) C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll 2014-02-20 15:57 - 2011-05-31 09:42 - 00491112 _____ (DTS) C:\WINDOWS\system32\DTSNeoPCDLL64.dll 2014-02-20 15:57 - 2011-05-31 09:42 - 00432744 _____ (DTS) C:\WINDOWS\system32\DTSLimiterDLL64.dll 2014-02-20 15:57 - 2011-05-31 09:42 - 00428648 _____ (DTS) C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll 2014-02-20 15:57 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\WINDOWS\system32\DTSLFXAPO64.dll 2014-02-20 15:57 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPO64.dll 2014-02-20 15:57 - 2011-05-31 09:42 - 00241768 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPONS64.dll 2014-02-20 15:56 - 2014-02-20 16:00 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV 2014-02-20 15:56 - 2014-02-20 16:00 - 00000000 ____D () C:\WINDOWS\system32\NV 2014-02-20 15:56 - 2014-02-20 15:56 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-02-20 15:32 - 2013-09-13 18:44 - 02080472 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\RtlExUpd.dll 2014-02-20 15:30 - 2013-09-09 14:54 - 00833752 _____ (Realtek ) C:\WINDOWS\system32\Drivers\Rt630x64.sys 2014-02-20 15:30 - 2013-09-09 14:54 - 00074456 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll 2014-02-20 15:28 - 2013-08-27 23:42 - 00086035 ____N () C:\WINDOWS\system32\athwbx.cat 2014-02-20 15:28 - 2013-08-15 20:13 - 03859968 ____N (Qualcomm Atheros Communications, Inc.) C:\WINDOWS\system32\athwbx.sys 2014-02-20 15:28 - 2013-08-15 20:13 - 03859968 _____ (Qualcomm Atheros Communications, Inc.) C:\WINDOWS\system32\Drivers\athwbx.sys 2014-02-20 14:43 - 2013-12-19 21:33 - 01884448 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6433221.dll 2014-02-20 14:43 - 2013-12-19 21:33 - 01511712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6433221.dll 2014-02-20 14:43 - 2013-12-19 21:33 - 00357152 _____ () C:\WINDOWS\system32\NvIFROpenGL.dll 2014-02-20 14:43 - 2013-12-19 21:33 - 00314656 _____ () C:\WINDOWS\SysWOW64\NvIFROpenGL.dll 2014-02-20 14:39 - 2013-10-23 09:20 - 06669600 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2014-02-20 14:39 - 2013-10-23 09:20 - 03489568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2014-02-20 14:39 - 2013-10-23 09:20 - 03426956 _____ () C:\WINDOWS\system32\nvcoproc.bin 2014-02-20 14:39 - 2013-10-23 09:20 - 02559776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2014-02-20 14:39 - 2013-10-23 09:20 - 01064224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2014-02-20 14:39 - 2013-10-23 09:20 - 00922912 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe 2014-02-20 14:39 - 2013-10-23 09:20 - 00219424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2014-02-20 14:39 - 2013-10-23 09:20 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2014-02-20 14:39 - 2013-10-23 09:20 - 00063776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2014-02-20 14:37 - 2013-12-10 08:13 - 00168616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll 2014-02-20 14:37 - 2013-12-10 08:13 - 00141336 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll 2014-02-20 13:14 - 2014-02-20 13:14 - 00001369 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk 2014-02-20 13:13 - 2014-01-21 03:54 - 01179576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll 2014-02-20 13:13 - 2014-01-21 03:54 - 01048152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll 2014-02-20 13:12 - 2013-12-27 19:42 - 00039200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys 2014-02-20 13:12 - 2013-12-27 19:42 - 00035104 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll 2014-02-20 13:12 - 2013-12-27 19:42 - 00033056 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll 2014-02-20 10:53 - 2014-02-08 19:34 - 01885472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6433489.dll 2014-02-20 10:53 - 2014-02-08 19:34 - 01515296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6433489.dll 2014-02-20 09:25 - 2014-01-08 02:46 - 00325464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS 2014-02-20 09:25 - 2014-01-08 02:41 - 01530712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2014-02-20 09:25 - 2014-01-08 02:41 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2014-02-20 09:25 - 2014-01-04 16:54 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll 2014-02-20 09:25 - 2014-01-04 16:08 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll 2014-02-20 09:25 - 2014-01-04 15:08 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll 2014-02-20 09:25 - 2014-01-04 14:53 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll 2014-02-20 09:25 - 2014-01-03 00:54 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll 2014-02-20 09:25 - 2014-01-03 00:48 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll 2014-02-20 09:25 - 2014-01-03 00:40 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2014-02-20 09:25 - 2014-01-03 00:38 - 06640640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2014-02-20 09:25 - 2014-01-01 02:55 - 01720560 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2014-02-20 09:25 - 2014-01-01 02:52 - 00481944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2014-02-20 09:25 - 2014-01-01 01:56 - 01472048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2014-02-20 09:25 - 2014-01-01 01:55 - 00381168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2014-02-20 09:25 - 2014-01-01 00:59 - 00802816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2014-02-20 09:25 - 2014-01-01 00:57 - 01214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll 2014-02-20 09:25 - 2014-01-01 00:56 - 00960512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2014-02-20 09:25 - 2013-12-31 00:34 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sti.dll 2014-02-20 09:25 - 2013-12-31 00:33 - 00770560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll 2014-02-20 09:25 - 2013-12-31 00:32 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti.dll 2014-02-20 09:25 - 2013-12-31 00:31 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2014-02-20 09:25 - 2013-12-31 00:31 - 00914944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll 2014-02-20 09:25 - 2013-12-27 16:09 - 00419160 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll 2014-02-20 09:25 - 2013-12-27 11:38 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll 2014-02-20 09:25 - 2013-12-27 09:57 - 00842752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll 2014-02-20 09:25 - 2013-12-27 09:57 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2014-02-20 09:25 - 2013-12-27 09:23 - 00749056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll 2014-02-20 09:25 - 2013-12-27 09:16 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll 2014-02-20 09:25 - 2013-12-27 08:03 - 00630272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll 2014-02-20 09:25 - 2013-12-27 08:03 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2014-02-20 09:25 - 2013-12-27 07:37 - 00588800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll 2014-02-20 09:25 - 2013-12-21 08:21 - 00376320 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpsvc.dll 2014-02-20 09:25 - 2013-12-17 08:21 - 00408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys 2014-02-20 09:25 - 2013-12-14 07:31 - 13949440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2014-02-20 09:25 - 2013-12-14 07:19 - 18576384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2014-02-20 09:25 - 2013-12-13 11:54 - 00131160 _____ (Microsoft Corporation) C:\WINDOWS\system32\easinvoker.exe 2014-02-20 09:25 - 2013-12-13 07:36 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll 2014-02-20 09:25 - 2013-12-13 06:32 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\easwrt.dll 2014-02-20 09:25 - 2013-12-09 09:05 - 21199256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2014-02-20 09:25 - 2013-12-09 05:51 - 18643560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2014-02-20 09:25 - 2013-12-09 04:25 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2014-02-13 16:57 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2014-02-13 16:57 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2014-02-13 16:57 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll 2014-02-13 16:57 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2014-02-13 16:57 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll 2014-02-13 16:57 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll 2014-02-13 16:57 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2014-02-13 16:57 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll 2014-02-13 16:57 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe 2014-02-13 16:57 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2014-02-13 16:57 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe 2014-02-13 16:57 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2014-02-13 16:57 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2014-02-13 16:57 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2014-02-13 16:57 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll 2014-02-13 16:57 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2014-02-13 16:57 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll 2014-02-13 16:57 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll 2014-02-13 16:57 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2014-02-13 16:57 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2014-02-13 16:57 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2014-02-13 16:57 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll 2014-02-13 16:57 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2014-02-13 16:57 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe 2014-02-13 16:57 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2014-02-13 16:57 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2014-02-13 16:57 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll 2014-02-13 16:57 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2014-02-13 16:57 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2014-02-13 16:57 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2014-02-13 16:57 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2014-02-13 16:57 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2014-02-13 16:57 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2014-02-13 16:57 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2014-02-13 16:57 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2014-02-13 16:57 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2014-02-13 16:57 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2014-02-13 16:54 - 2013-12-09 01:19 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdrm.dll 2014-02-13 16:54 - 2013-12-09 00:55 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdrm.dll 2014-02-13 16:53 - 2014-01-07 06:00 - 02397184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll 2014-02-13 16:53 - 2014-01-07 05:30 - 02071552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll 2014-02-13 16:53 - 2013-12-09 01:27 - 02152448 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll 2014-02-13 16:53 - 2013-12-09 00:54 - 01317376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll 2014-02-13 16:53 - 2013-11-21 07:42 - 04604416 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll 2014-02-13 16:53 - 2013-11-21 06:44 - 03936256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2014-02-13 16:48 - 2014-01-04 21:50 - 01462216 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll 2014-02-13 16:48 - 2014-01-04 20:22 - 01202888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll 2014-02-13 16:48 - 2014-01-04 15:30 - 13209088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2014-02-13 16:48 - 2014-01-04 15:23 - 11702272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2014-02-13 16:48 - 2014-01-04 14:42 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll 2014-02-13 16:48 - 2014-01-04 14:40 - 07416832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll 2014-02-13 16:48 - 2014-01-04 14:36 - 00830976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll 2014-02-13 16:48 - 2014-01-04 14:28 - 04961792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll 2014-02-13 16:48 - 2013-12-21 03:10 - 00009701 _____ () C:\WINDOWS\SysWOW64\connectedsearch-results.searchconnector-ms 2014-02-13 16:48 - 2013-12-21 03:10 - 00009701 _____ () C:\WINDOWS\system32\connectedsearch-results.searchconnector-ms 2014-02-13 16:48 - 2013-12-09 03:57 - 00548864 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2014-02-13 16:48 - 2013-12-09 02:51 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2014-02-13 16:47 - 2014-01-07 08:03 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe 2014-02-13 16:47 - 2014-01-07 06:59 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.exe 2014-02-13 16:47 - 2013-12-20 11:10 - 01113040 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2014-02-13 16:47 - 2013-12-20 07:13 - 00835584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2014-02-13 16:44 - 2014-01-09 09:25 - 02804224 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2014-02-13 16:44 - 2014-01-09 08:59 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll 2014-02-13 16:44 - 2014-01-09 08:59 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll 2014-02-13 16:44 - 2014-01-09 08:49 - 00919040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2014-02-13 16:44 - 2014-01-09 08:44 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll 2014-02-13 16:44 - 2014-01-09 08:43 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll 2014-02-13 16:44 - 2014-01-09 08:29 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll 2014-02-13 16:44 - 2014-01-09 08:28 - 04217344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll 2014-02-13 16:44 - 2014-01-09 08:28 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2014-02-13 16:44 - 2014-01-09 08:18 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe 2014-02-12 20:07 - 2014-02-12 20:07 - 01166132 _____ () C:\Users\Lucien\Downloads\adwcleaner.exe 2014-02-11 23:35 - 2014-02-11 23:35 - 00002757 _____ () C:\Users\Public\Desktop\Secure Banking.lnk 2014-02-11 23:34 - 2014-02-11 23:34 - 00000000 ____D () C:\Program Files (x86)\Secure Banking 2014-02-11 23:29 - 2014-02-11 23:29 - 00000000 ____D () C:\Users\Lucien\AppData\Local\SecureBankingGUI 2014-02-11 23:29 - 2014-02-11 23:29 - 00000000 ____D () C:\Program Files (x86)\Secure Banking Software 2014-02-11 23:27 - 2014-02-11 23:27 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Downloaded Installations 2014-02-11 23:21 - 2014-02-11 23:33 - 00000000 ____D () C:\Users\Lucien\Downloads\secure banking 2014-02-09 12:05 - 2014-02-09 12:05 - 00000000 ____D () C:\Users\Lucien\Documents\Meine empfangenen Dateien 2014-02-09 11:41 - 2014-02-09 11:41 - 07391168 _____ () C:\Users\Lucien\Downloads\ljcP1215-HB-pnp-win64-de.exe 2014-02-08 22:44 - 2014-02-08 22:44 - 00000000 ____D () C:\Users\Lucien\Documents\EA Games 2014-02-08 12:15 - 2014-02-08 12:15 - 00000000 _____ () C:\WINDOWS\SysWOW64\debug.log 2014-02-07 22:24 - 2014-02-07 22:24 - 00001214 _____ () C:\Users\Lucien\Desktop\IsoBuster.lnk 2014-02-07 22:24 - 2014-02-07 22:24 - 00000000 ____D () C:\Program Files (x86)\Smart Projects 2014-02-07 22:21 - 2014-02-07 22:21 - 04669400 _____ (Smart Projects ) C:\Users\Lucien\Downloads\isobuster_all_lang_3.3.exe 2014-02-07 22:14 - 2014-02-07 22:21 - 00000000 ____D () C:\Users\Lucien\Downloads\bin2iso 2014-02-05 17:18 - 2014-02-12 20:45 - 00001380 _____ () C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk 2014-02-05 17:17 - 2014-02-05 17:17 - 00001968 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk 2014-02-05 17:16 - 2014-02-05 17:16 - 00283064 _____ (Disc Soft Ltd) C:\WINDOWS\system32\Drivers\dtsoftbus01.sys 2014-02-05 17:16 - 2014-02-05 17:16 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite 2014-02-05 17:12 - 2014-02-05 17:14 - 13485616 _____ (Disc Soft Ltd) C:\Users\Lucien\Downloads\DTLite4481-0347.exe 2014-02-05 16:12 - 2014-02-05 16:12 - 00000000 ____D () C:\Program Files (x86)\AviSynth 2.5 2014-02-05 16:12 - 2009-09-27 09:39 - 00415744 ___SH (The Public) C:\WINDOWS\SysWOW64\avisynth.dll 2014-02-05 16:12 - 2005-07-14 12:31 - 00032256 ___SH () C:\WINDOWS\SysWOW64\AVSredirect.dll 2014-02-05 16:12 - 2004-02-22 10:11 - 00764416 ___SH (Abysmal Software) C:\WINDOWS\SysWOW64\devil.dll 2014-02-05 16:12 - 2004-01-25 00:00 - 00070656 ___SH (www.helixcommunity.org) C:\WINDOWS\SysWOW64\yv12vfw.dll 2014-02-05 16:12 - 2004-01-25 00:00 - 00070656 ___SH (www.helixcommunity.org) C:\WINDOWS\SysWOW64\i420vfw.dll 2014-02-05 16:11 - 2014-02-07 22:36 - 00000000 ____D () C:\Users\Lucien\Desktop\Indian Summer Westward Ho! 2014-02-05 16:07 - 2014-02-05 16:07 - 00001130 _____ () C:\Users\Public\Desktop\SUPER ©.lnk 2014-02-05 16:07 - 2014-02-05 16:07 - 00000000 ____D () C:\Users\Lucien\Documents\eRightSoft 2014-02-05 16:07 - 2012-10-05 19:54 - 00188416 __RSH () C:\WINDOWS\SysWOW64\winDCE32.dll 2014-02-05 16:07 - 2011-06-15 23:00 - 00163328 __RSH () C:\WINDOWS\SysWOW64\flvDX.dll 2014-02-05 16:07 - 2011-06-14 19:05 - 00121344 __RSH () C:\WINDOWS\SysWOW64\TAKDSDecoder.ax 2014-02-05 16:07 - 2011-02-11 10:26 - 00112128 __RSH () C:\WINDOWS\SysWOW64\OptimFROG.dll 2014-02-05 16:07 - 2010-01-06 23:00 - 00107520 __RSH () C:\WINDOWS\SysWOW64\TAKDSDecoder.dll 2014-02-05 16:07 - 2009-03-17 10:38 - 00070656 __RSH () C:\WINDOWS\SysWOW64\RLAPEDec.ax 2014-02-05 16:07 - 2009-01-18 12:03 - 00107520 __RSH () C:\WINDOWS\SysWOW64\RLMPCDec.ax 2014-02-05 16:07 - 2008-03-16 14:30 - 00216064 __RSH (MONOGRAM Multimedia, s.r.o.) C:\WINDOWS\SysWOW64\nbDX.dll 2014-02-05 16:07 - 2007-02-21 12:47 - 00031232 __RSH (Hans Mayerl) C:\WINDOWS\SysWOW64\msfDX.dll 2014-02-05 16:07 - 2005-02-13 00:00 - 00186880 __RSH (RadLight) C:\WINDOWS\SysWOW64\RLOgg.ax 2014-02-05 16:07 - 2005-02-13 00:00 - 00067584 __RSH (RadLight, LLC) C:\WINDOWS\SysWOW64\RLTheoraDec.ax 2014-02-05 16:07 - 2005-02-13 00:00 - 00051712 __RSH () C:\WINDOWS\SysWOW64\RLSpeexDec.ax 2014-02-05 16:07 - 2005-02-06 00:00 - 00092672 __RSH (RadLight) C:\WINDOWS\SysWOW64\RLVorbisDec.ax 2014-02-05 16:07 - 2004-10-10 09:50 - 00278528 _____ (Real Networks, Inc) C:\WINDOWS\SysWOW64\pncrt.dll 2014-02-05 16:07 - 2004-09-17 04:07 - 00090112 __RSH (-) C:\WINDOWS\SysWOW64\TTADSSplitter.ax 2014-02-05 16:07 - 2004-08-22 11:56 - 00090112 __RSH (-) C:\WINDOWS\SysWOW64\TTADSDecoder.ax 2014-02-05 16:07 - 2004-07-02 16:33 - 00327749 _____ (RealNetworks, Inc.) C:\WINDOWS\SysWOW64\drvc.dll 2014-02-05 16:07 - 2004-04-27 16:03 - 00017408 __RSH (RadLight) C:\WINDOWS\SysWOW64\RLOFRDec.ax 2014-02-05 16:06 - 2014-02-05 16:06 - 00000000 ____D () C:\Program Files (x86)\eRightSoft 2014-02-05 16:06 - 2012-07-11 23:00 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Olepau32.ax 2014-02-05 16:06 - 2009-09-27 23:00 - 00143872 __RSH () C:\WINDOWS\SysWOW64\AviDX.ax 2014-02-05 16:06 - 2009-08-10 23:00 - 00352768 __RSH () C:\WINDOWS\SysWOW64\ac3DX.ax 2014-02-05 16:06 - 2009-01-18 17:15 - 00120832 __RSH () C:\WINDOWS\SysWOW64\MPCDx.ax 2014-02-05 16:06 - 2006-08-16 15:53 - 00175104 __RSH () C:\WINDOWS\SysWOW64\CoreAAC.ax 2014-02-05 16:06 - 2006-03-10 20:21 - 00195584 __RSH () C:\WINDOWS\SysWOW64\MatroskaDX.ax 2014-02-05 16:06 - 2006-01-12 23:00 - 00123904 __RSH (CoreCodec) C:\WINDOWS\SysWOW64\AVCDX.ax 2014-02-05 16:06 - 2005-11-25 21:46 - 00161792 __RSH (Gabest) C:\WINDOWS\SysWOW64\RealMediaDX.ax 2014-02-05 16:06 - 2005-02-22 17:55 - 00081920 __RSH () C:\WINDOWS\SysWOW64\aac_parser.ax 2014-02-05 16:06 - 2005-01-18 00:26 - 00179200 __RSH (Gabest) C:\WINDOWS\SysWOW64\DiracSplitter.ax 2014-02-05 16:06 - 2003-12-07 08:59 - 00097280 __RSH () C:\WINDOWS\SysWOW64\FLACDX.ax 2014-02-05 16:02 - 2014-02-05 16:04 - 64722252 _____ (eRightSoft ) C:\Users\Lucien\Downloads\SUPERsetup.exe 2014-02-05 13:28 - 2014-02-05 16:46 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\DigitalSites 2014-02-05 13:27 - 2014-02-05 13:27 - 00670720 _____ () C:\Users\Gast\Downloads\VideoConverterSetup.exe 2014-02-05 13:26 - 2014-02-05 13:30 - 00000000 ____D () C:\Users\Gast\AppData\Local\CrashDumps 2014-02-05 13:17 - 2014-02-05 13:17 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Atheros 2014-02-05 13:16 - 2014-02-21 23:04 - 00000008 __RSH () C:\Users\Gast\ntuser.pol 2014-02-03 20:21 - 2014-02-03 20:40 - 00102400 _____ () C:\Users\Lucien\Desktop\Namenschilder fertig.ppt 2014-02-03 08:14 - 2014-02-03 08:14 - 00003576 _____ () C:\WINDOWS\System32\Tasks\Bitdefender Auto-Scan 2014-01-29 16:06 - 2014-01-29 16:07 - 00298424 _____ () C:\WINDOWS\Minidump\012914-53375-01.dmp 2014-01-29 15:41 - 2014-01-29 16:04 - 00181064 _____ (Sysinternals) C:\WINDOWS\PSEXESVC.EXE 2014-01-29 15:37 - 2014-01-29 15:37 - 00000207 _____ () C:\WINDOWS\tweaking.com-regbackup-LUCIENSNOTE-Microsoft-Windows-8.1-(64-bit).dat 2014-01-29 15:36 - 2014-01-29 15:36 - 00000000 ____D () C:\RegBackup 2014-01-29 14:56 - 2014-01-29 14:56 - 00000000 ____D () C:\Users\Lucien\Downloads\Tweaking.com - Windows Repair 2014-01-29 14:48 - 2014-01-29 14:48 - 00000000 ____H () C:\ProgramData\DP45977C.lfl 2014-01-29 14:29 - 2014-01-29 14:37 - 109595877 _____ () C:\Users\Lucien\Downloads\Audio_Realtek_Win81_64_VER6017083.zip 2014-01-29 14:20 - 2014-01-29 14:20 - 02903255 _____ () C:\Users\Lucien\Downloads\tweaking.com_windows_repair_aio.zip 2014-01-29 13:10 - 2014-02-21 23:36 - 00002197 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-01-29 13:09 - 2014-01-29 14:46 - 00000000 ____D () C:\Program Files (x86)\GUMCBFB.tmp 2014-01-29 13:05 - 2014-01-29 13:07 - 37739976 _____ (Google Inc.) C:\Users\Lucien\Downloads\ChromeStandalone32Setup.exe 2014-01-29 13:02 - 2014-01-29 13:02 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Deployment 2014-01-29 12:56 - 2014-01-29 12:56 - 00000000 ____D () C:\Users\Lucien\Desktop\chrome default 2014-01-29 12:49 - 2014-01-29 12:49 - 00001124 _____ () C:\Users\Lucien\Desktop\Absolute Uninstaller.lnk 2014-01-29 12:49 - 2014-01-29 12:49 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\GlarySoft 2014-01-29 12:48 - 2014-01-29 12:48 - 02194784 _____ (Glarysoft.com ) C:\Users\Lucien\Downloads\au29setup.exe 2014-01-29 09:54 - 2014-01-29 09:54 - 00048629 _____ () C:\Users\Lucien\Documents\Namenschilder%20fertig.ppt_0.odp 2014-01-29 09:40 - 2014-02-05 13:17 - 00000000 ____D () C:\ProgramData\Atheros 2014-01-29 09:40 - 2014-01-29 09:40 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Atheros 2014-01-28 14:00 - 2014-01-28 14:05 - 00000000 ____D () C:\Program Files\Common Files\QCA_Bluetooth 2014-01-28 13:56 - 2014-01-28 13:56 - 00000000 ____D () C:\Users\Lucien\Downloads\Win8 Key 2014-01-28 13:51 - 2014-02-20 15:28 - 00000000 ____D () C:\Users\Lucien\Downloads\wlan 2014-01-28 13:51 - 2014-02-20 15:25 - 00000000 ____D () C:\Users\Lucien\Downloads\lan 2014-01-28 13:50 - 2014-01-28 13:50 - 00000000 ____D () C:\Users\Lucien\Downloads\bluetooth 2014-01-28 13:48 - 2014-01-28 13:49 - 00000000 ____D () C:\Users\Lucien\Downloads\audio 2014-01-28 13:46 - 2014-01-28 13:46 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_btmaux_01009.Wdf 2014-01-28 13:45 - 2014-01-28 13:45 - 00000000 ____D () C:\Users\Lucien\Downloads\blue 2014-01-28 13:44 - 2014-01-28 13:45 - 00000000 ____D () C:\Users\Lucien\Downloads\Lang 2014-01-28 11:40 - 2014-02-20 12:38 - 00000000 ____D () C:\Users\Lucien\AppData\Local\NVIDIA Corporation 2014-01-28 11:39 - 2014-02-20 13:14 - 00000000 ____D () C:\Users\Lucien\AppData\Local\NVIDIA 2014-01-28 10:54 - 2014-02-20 14:38 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-01-28 10:53 - 2014-01-28 10:53 - 00000000 ____D () C:\NVIDIA 2014-01-28 10:41 - 2014-01-28 10:41 - 00000000 ____D () C:\WINDOWS\pss 2014-01-28 09:59 - 2014-01-28 10:01 - 31475128 _____ (NVIDIA Corporation) C:\Users\Lucien\Downloads\GeForce_Experience_v1.8.2.0.exe 2014-01-27 22:46 - 2014-01-27 22:59 - 266633424 _____ (NVIDIA Corporation) C:\Users\Lucien\Downloads\332.21-notebook-win8-win7-64bit-international-whql.exe 2014-01-27 20:36 - 2014-02-22 13:57 - 00021777 _____ () C:\Users\Lucien\Desktop\FRST.txt 2014-01-27 19:54 - 2014-01-27 20:33 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2014-01-27 19:53 - 2014-01-27 19:53 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2014-01-27 19:52 - 2014-01-27 19:52 - 00000000 ____D () C:\Users\Lucien\Desktop\mbar 2014-01-27 19:47 - 2014-01-27 19:48 - 00000000 ____D () C:\Users\Lucien\Desktop\Logs2 2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-01-26 20:53 - 2014-01-26 20:53 - 00003186 _____ () C:\WINDOWS\System32\Tasks\{E66DEEF7-845B-48C8-BBEE-CE6EA6F2EE96} 2014-01-26 19:26 - 2014-01-26 19:26 - 00003362 _____ () C:\WINDOWS\System32\Tasks\{63C03234-5B71-4184-AD48-4EE22D315F87} 2014-01-25 15:01 - 2014-01-25 15:01 - 00000000 ____H () C:\Users\Lucien\Documents\Default.rdp 2014-01-24 19:21 - 2014-01-24 19:21 - 00000000 ____D () C:\Users\Lucien\Desktop\Logs alt 2014-01-24 19:17 - 2014-01-24 19:17 - 00361185 _____ (Farbar) C:\Users\Lucien\Desktop\FSS.exe 2014-01-24 16:48 - 2014-01-24 16:48 - 00032847 _____ () C:\Users\Lucien\Desktop\gmer.zip 2014-01-24 11:34 - 2014-01-24 11:34 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-01-24 10:53 - 2014-01-24 10:53 - 00000000 ____D () C:\WINDOWS\ERUNT ==================== One Month Modified Files and Folders ======= 2014-02-22 13:58 - 2014-01-27 20:36 - 00021777 _____ () C:\Users\Lucien\Desktop\FRST.txt 2014-02-22 13:56 - 2014-01-22 21:41 - 00000000 ____D () C:\Users\Lucien\Desktop\FRST-OlderVersion 2014-02-22 13:56 - 2014-01-22 13:59 - 02154496 _____ (Farbar) C:\Users\Lucien\Desktop\FRST64.exe 2014-02-22 13:56 - 2014-01-21 23:54 - 00000000 ____D () C:\FRST 2014-02-22 13:54 - 2013-10-14 09:56 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Spotify 2014-02-22 13:50 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru 2014-02-22 13:50 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM 2014-02-22 01:33 - 2013-08-19 19:07 - 00001134 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2014-02-22 00:19 - 2013-07-18 20:55 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3506778915-1287356822-3408950579-1002 2014-02-21 23:41 - 2013-11-05 21:43 - 01722634 _____ () C:\WINDOWS\WindowsUpdate.log 2014-02-21 23:36 - 2014-01-29 13:10 - 00002197 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-02-21 23:35 - 2013-10-14 09:58 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Spotify 2014-02-21 23:06 - 2013-10-11 22:00 - 00091648 ___SH () C:\Users\Gast\Desktop\Thumbs.db 2014-02-21 23:05 - 2013-10-19 09:42 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Spotify 2014-02-21 23:04 - 2014-02-05 13:16 - 00000008 __RSH () C:\Users\Gast\ntuser.pol 2014-02-21 23:04 - 2013-11-05 21:47 - 00000000 ____D () C:\Users\Gast 2014-02-21 23:04 - 2013-09-26 11:23 - 00000062 _____ () C:\Users\Gast\AppData\Roaming\sp_data.sys 2014-02-21 23:04 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness 2014-02-21 23:04 - 2013-08-19 19:06 - 00001130 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2014-02-21 18:04 - 2013-09-09 20:00 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\vlc 2014-02-21 13:15 - 2013-08-22 11:25 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Adobe 2014-02-21 12:00 - 2013-06-26 08:07 - 00003474 _____ () C:\WINDOWS\System32\Tasks\ASUS Live Update1 2014-02-21 12:00 - 2013-06-26 08:07 - 00003464 _____ () C:\WINDOWS\System32\Tasks\ASUS Live Update2 2014-02-21 10:27 - 2013-08-20 17:50 - 00000000 ____D () C:\Users\Lucien\AppData\Local\CrashDumps 2014-02-20 21:20 - 2013-09-30 05:14 - 01804156 _____ () C:\WINDOWS\system32\PerfStringBackup.INI 2014-02-20 21:20 - 2013-09-30 04:56 - 00761880 _____ () C:\WINDOWS\system32\perfh007.dat 2014-02-20 21:20 - 2013-09-30 04:56 - 00159758 _____ () C:\WINDOWS\system32\perfc007.dat 2014-02-20 16:14 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF 2014-02-20 16:02 - 2013-11-05 22:24 - 00000000 __RDO () C:\Users\Lucien\SkyDrive 2014-02-20 16:00 - 2014-02-20 15:56 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV 2014-02-20 16:00 - 2014-02-20 15:56 - 00000000 ____D () C:\WINDOWS\system32\NV 2014-02-20 16:00 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2014-02-20 15:58 - 2014-02-20 15:58 - 00001316 _____ () C:\Users\Public\Desktop\AudioWizard.lnk 2014-02-20 15:58 - 2014-02-20 15:58 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM 2014-02-20 15:58 - 2013-11-05 21:42 - 00109524 _____ () C:\WINDOWS\system32\Drivers\RTWAVES30.dat 2014-02-20 15:58 - 2013-08-22 15:46 - 00387310 _____ () C:\WINDOWS\setupact.log 2014-02-20 15:56 - 2014-02-20 15:56 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-02-20 15:55 - 2013-09-29 20:04 - 09450610 _____ () C:\WINDOWS\PFRO.log 2014-02-20 15:55 - 2013-08-22 14:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI 2014-02-20 15:30 - 2013-06-26 07:58 - 00000000 ____D () C:\Program Files (x86)\Realtek 2014-02-20 15:28 - 2014-01-28 13:51 - 00000000 ____D () C:\Users\Lucien\Downloads\wlan 2014-02-20 15:28 - 2013-06-26 08:01 - 00000000 ____D () C:\Program Files (x86)\Qualcomm Atheros 2014-02-20 15:25 - 2014-01-28 13:51 - 00000000 ____D () C:\Users\Lucien\Downloads\lan 2014-02-20 14:40 - 2013-09-10 15:25 - 00197120 ___SH () C:\Users\Lucien\Desktop\Thumbs.db 2014-02-20 14:39 - 2013-11-05 21:42 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-02-20 14:38 - 2014-01-28 10:54 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-02-20 14:38 - 2013-11-05 21:42 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-02-20 13:14 - 2014-02-20 13:14 - 00001369 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk 2014-02-20 13:14 - 2014-01-28 11:39 - 00000000 ____D () C:\Users\Lucien\AppData\Local\NVIDIA 2014-02-20 12:38 - 2014-01-28 11:40 - 00000000 ____D () C:\Users\Lucien\AppData\Local\NVIDIA Corporation 2014-02-20 11:42 - 2013-08-22 15:44 - 05147912 _____ () C:\WINDOWS\system32\FNTCACHE.DAT 2014-02-20 11:41 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData 2014-02-20 10:53 - 2013-08-23 10:50 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-02-20 09:22 - 2013-09-09 08:41 - 00001323 _____ () C:\Users\Public\Desktop\Adobe Creative Cloud.lnk 2014-02-17 22:00 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2014-02-17 22:00 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2014-02-17 18:25 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache 2014-02-17 15:12 - 2013-08-19 19:19 - 00000000 ____D () C:\WINDOWS\system32\MRT 2014-02-17 15:10 - 2013-08-19 19:19 - 88567024 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2014-02-17 12:03 - 2013-09-06 08:17 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Thunderbird 2014-02-14 00:13 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer 2014-02-14 00:13 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager 2014-02-14 00:13 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera 2014-02-12 20:45 - 2014-02-05 17:18 - 00001380 _____ () C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk 2014-02-12 20:26 - 2013-08-31 15:58 - 00000000 ____D () C:\AdwCleaner 2014-02-12 20:07 - 2014-02-12 20:07 - 01166132 _____ () C:\Users\Lucien\Downloads\adwcleaner.exe 2014-02-12 07:28 - 2013-08-19 19:07 - 00004106 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2014-02-12 07:28 - 2013-08-19 19:06 - 00003870 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2014-02-11 23:35 - 2014-02-11 23:35 - 00002757 _____ () C:\Users\Public\Desktop\Secure Banking.lnk 2014-02-11 23:34 - 2014-02-11 23:34 - 00000000 ____D () C:\Program Files (x86)\Secure Banking 2014-02-11 23:33 - 2014-02-11 23:21 - 00000000 ____D () C:\Users\Lucien\Downloads\secure banking 2014-02-11 23:29 - 2014-02-11 23:29 - 00000000 ____D () C:\Users\Lucien\AppData\Local\SecureBankingGUI 2014-02-11 23:29 - 2014-02-11 23:29 - 00000000 ____D () C:\Program Files (x86)\Secure Banking Software 2014-02-11 23:27 - 2014-02-11 23:27 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Downloaded Installations 2014-02-09 14:33 - 2013-07-18 20:48 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Packages 2014-02-09 12:05 - 2014-02-09 12:05 - 00000000 ____D () C:\Users\Lucien\Documents\Meine empfangenen Dateien 2014-02-09 12:04 - 2013-07-18 20:50 - 00000000 ____D () C:\Users\Lucien\Documents\Bluetooth Folder 2014-02-09 11:50 - 2013-10-21 14:16 - 00031898 _____ () C:\LJCP1215.log 2014-02-09 11:41 - 2014-02-09 11:41 - 07391168 _____ () C:\Users\Lucien\Downloads\ljcP1215-HB-pnp-win64-de.exe 2014-02-08 22:44 - 2014-02-08 22:44 - 00000000 ____D () C:\Users\Lucien\Documents\EA Games 2014-02-08 22:44 - 2013-04-26 00:16 - 00390717 _____ () C:\WINDOWS\DirectX.log 2014-02-08 19:34 - 2014-02-20 10:53 - 01885472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6433489.dll 2014-02-08 19:34 - 2014-02-20 10:53 - 01515296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6433489.dll 2014-02-08 12:15 - 2014-02-08 12:15 - 00000000 _____ () C:\WINDOWS\SysWOW64\debug.log 2014-02-07 22:36 - 2014-02-05 16:11 - 00000000 ____D () C:\Users\Lucien\Desktop\Indian Summer Westward Ho! 2014-02-07 22:24 - 2014-02-07 22:24 - 00001214 _____ () C:\Users\Lucien\Desktop\IsoBuster.lnk 2014-02-07 22:24 - 2014-02-07 22:24 - 00000000 ____D () C:\Program Files (x86)\Smart Projects 2014-02-07 22:21 - 2014-02-07 22:21 - 04669400 _____ (Smart Projects ) C:\Users\Lucien\Downloads\isobuster_all_lang_3.3.exe 2014-02-07 22:21 - 2014-02-07 22:14 - 00000000 ____D () C:\Users\Lucien\Downloads\bin2iso 2014-02-06 13:16 - 2014-02-13 16:57 - 23170048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2014-02-06 12:30 - 2014-02-13 16:57 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2014-02-06 12:30 - 2014-02-13 16:57 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll 2014-02-06 12:12 - 2014-02-13 16:57 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2014-02-06 12:07 - 2014-02-13 16:57 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll 2014-02-06 12:06 - 2014-02-13 16:57 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll 2014-02-06 11:57 - 2014-02-13 16:57 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2014-02-06 11:56 - 2014-02-13 16:57 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll 2014-02-06 11:49 - 2014-02-13 16:57 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe 2014-02-06 11:48 - 2014-02-13 16:57 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2014-02-06 11:48 - 2014-02-13 16:57 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe 2014-02-06 11:38 - 2014-02-13 16:57 - 17103872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2014-02-06 11:32 - 2014-02-13 16:57 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2014-02-06 11:20 - 2014-02-13 16:57 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2014-02-06 11:17 - 2014-02-13 16:57 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll 2014-02-06 11:11 - 2014-02-13 16:57 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2014-02-06 11:01 - 2014-02-13 16:57 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll 2014-02-06 11:00 - 2014-02-13 16:57 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll 2014-02-06 10:57 - 2014-02-13 16:57 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2014-02-06 10:57 - 2014-02-13 16:57 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2014-02-06 10:52 - 2014-02-13 16:57 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2014-02-06 10:52 - 2014-02-13 16:57 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll 2014-02-06 10:50 - 2014-02-13 16:57 - 02041856 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2014-02-06 10:47 - 2014-02-13 16:57 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe 2014-02-06 10:46 - 2014-02-13 16:57 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2014-02-06 10:25 - 2014-02-13 16:57 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2014-02-06 10:25 - 2014-02-13 16:57 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll 2014-02-06 10:24 - 2014-02-13 16:57 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2014-02-06 10:22 - 2014-02-13 16:57 - 13051392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2014-02-06 10:13 - 2014-02-13 16:57 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2014-02-06 10:09 - 2014-02-13 16:57 - 01964032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2014-02-06 10:03 - 2014-02-13 16:57 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2014-02-06 09:55 - 2014-02-13 16:57 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2014-02-06 09:41 - 2014-02-13 16:57 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2014-02-06 09:40 - 2014-02-13 16:57 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2014-02-06 09:36 - 2014-02-13 16:57 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2014-02-06 09:34 - 2014-02-13 16:57 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2014-02-05 17:17 - 2014-02-05 17:17 - 00001968 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk 2014-02-05 17:16 - 2014-02-05 17:16 - 00283064 _____ (Disc Soft Ltd) C:\WINDOWS\system32\Drivers\dtsoftbus01.sys 2014-02-05 17:16 - 2014-02-05 17:16 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite 2014-02-05 17:14 - 2014-02-05 17:12 - 13485616 _____ (Disc Soft Ltd) C:\Users\Lucien\Downloads\DTLite4481-0347.exe 2014-02-05 16:46 - 2014-02-05 13:28 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\DigitalSites 2014-02-05 16:12 - 2014-02-05 16:12 - 00000000 ____D () C:\Program Files (x86)\AviSynth 2.5 2014-02-05 16:07 - 2014-02-05 16:07 - 00001130 _____ () C:\Users\Public\Desktop\SUPER ©.lnk 2014-02-05 16:07 - 2014-02-05 16:07 - 00000000 ____D () C:\Users\Lucien\Documents\eRightSoft 2014-02-05 16:06 - 2014-02-05 16:06 - 00000000 ____D () C:\Program Files (x86)\eRightSoft 2014-02-05 16:04 - 2014-02-05 16:02 - 64722252 _____ (eRightSoft ) C:\Users\Lucien\Downloads\SUPERsetup.exe 2014-02-05 15:49 - 2013-10-03 02:33 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\vlc 2014-02-05 13:30 - 2014-02-05 13:26 - 00000000 ____D () C:\Users\Gast\AppData\Local\CrashDumps 2014-02-05 13:27 - 2014-02-05 13:27 - 00670720 _____ () C:\Users\Gast\Downloads\VideoConverterSetup.exe 2014-02-05 13:17 - 2014-02-05 13:17 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Atheros 2014-02-05 13:17 - 2014-01-29 09:40 - 00000000 ____D () C:\ProgramData\Atheros 2014-02-05 13:17 - 2014-01-20 15:52 - 00000000 ____D () C:\Users\Gast\Documents\Bluetooth Folder 2014-02-05 13:17 - 2013-09-26 11:25 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Apple Computer 2014-02-03 20:47 - 2014-01-13 22:52 - 00893440 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avc3.sys 2014-02-03 20:45 - 2014-01-13 22:52 - 00635392 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avckf.sys 2014-02-03 20:40 - 2014-02-03 20:21 - 00102400 _____ () C:\Users\Lucien\Desktop\Namenschilder fertig.ppt 2014-02-03 08:14 - 2014-02-03 08:14 - 00003576 _____ () C:\WINDOWS\System32\Tasks\Bitdefender Auto-Scan 2014-01-29 16:26 - 2013-11-05 21:47 - 00000000 ____D () C:\Users\Lucien 2014-01-29 16:07 - 2014-01-29 16:06 - 00298424 _____ () C:\WINDOWS\Minidump\012914-53375-01.dmp 2014-01-29 16:06 - 2014-01-19 18:22 - 00000000 ____D () C:\WINDOWS\Minidump 2014-01-29 16:06 - 2013-09-13 12:11 - 894753829 _____ () C:\WINDOWS\MEMORY.DMP 2014-01-29 16:04 - 2014-01-29 15:41 - 00181064 _____ (Sysinternals) C:\WINDOWS\PSEXESVC.EXE 2014-01-29 16:03 - 2012-07-26 06:26 - 00000160 _____ () C:\WINDOWS\win.ini 2014-01-29 15:37 - 2014-01-29 15:37 - 00000207 _____ () C:\WINDOWS\tweaking.com-regbackup-LUCIENSNOTE-Microsoft-Windows-8.1-(64-bit).dat 2014-01-29 15:36 - 2014-01-29 15:36 - 00000000 ____D () C:\RegBackup 2014-01-29 15:11 - 2013-07-18 20:49 - 00000074 _____ () C:\Users\Lucien\AppData\Roaming\sp_data.sys 2014-01-29 14:56 - 2014-01-29 14:56 - 00000000 ____D () C:\Users\Lucien\Downloads\Tweaking.com - Windows Repair 2014-01-29 14:54 - 2014-01-22 00:10 - 00000000 ____D () C:\Users\Lucien\Desktop\Tweaking.com - Windows Repair 2014-01-29 14:48 - 2014-01-29 14:48 - 00000000 ____H () C:\ProgramData\DP45977C.lfl 2014-01-29 14:47 - 2013-08-22 15:46 - 00000974 _____ () C:\WINDOWS\setuperr.log 2014-01-29 14:46 - 2014-01-29 13:09 - 00000000 ____D () C:\Program Files (x86)\GUMCBFB.tmp 2014-01-29 14:37 - 2014-01-29 14:29 - 109595877 _____ () C:\Users\Lucien\Downloads\Audio_Realtek_Win81_64_VER6017083.zip 2014-01-29 14:34 - 2013-06-26 07:51 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-01-29 14:20 - 2014-01-29 14:20 - 02903255 _____ () C:\Users\Lucien\Downloads\tweaking.com_windows_repair_aio.zip 2014-01-29 13:07 - 2014-01-29 13:05 - 37739976 _____ (Google Inc.) C:\Users\Lucien\Downloads\ChromeStandalone32Setup.exe 2014-01-29 13:06 - 2013-04-26 00:19 - 00000000 ____D () C:\ProgramData\WildTangent 2014-01-29 13:02 - 2014-01-29 13:02 - 00000000 ____D () C:\Users\Lucien\AppData\Local\Deployment 2014-01-29 12:56 - 2014-01-29 12:56 - 00000000 ____D () C:\Users\Lucien\Desktop\chrome default 2014-01-29 12:49 - 2014-01-29 12:49 - 00001124 _____ () C:\Users\Lucien\Desktop\Absolute Uninstaller.lnk 2014-01-29 12:49 - 2014-01-29 12:49 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\GlarySoft 2014-01-29 12:48 - 2014-01-29 12:48 - 02194784 _____ (Glarysoft.com ) C:\Users\Lucien\Downloads\au29setup.exe 2014-01-29 09:54 - 2014-01-29 09:54 - 00048629 _____ () C:\Users\Lucien\Documents\Namenschilder%20fertig.ppt_0.odp 2014-01-29 09:40 - 2014-01-29 09:40 - 00000000 ____D () C:\Users\Lucien\AppData\Roaming\Atheros 2014-01-28 14:05 - 2014-01-28 14:00 - 00000000 ____D () C:\Program Files\Common Files\QCA_Bluetooth 2014-01-28 14:00 - 2013-06-26 08:02 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite 2014-01-28 13:56 - 2014-01-28 13:56 - 00000000 ____D () C:\Users\Lucien\Downloads\Win8 Key 2014-01-28 13:50 - 2014-01-28 13:50 - 00000000 ____D () C:\Users\Lucien\Downloads\bluetooth 2014-01-28 13:49 - 2014-01-28 13:48 - 00000000 ____D () C:\Users\Lucien\Downloads\audio 2014-01-28 13:46 - 2014-01-28 13:46 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_btmaux_01009.Wdf 2014-01-28 13:46 - 2013-11-05 21:42 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-01-28 13:45 - 2014-01-28 13:45 - 00000000 ____D () C:\Users\Lucien\Downloads\blue 2014-01-28 13:45 - 2014-01-28 13:44 - 00000000 ____D () C:\Users\Lucien\Downloads\Lang 2014-01-28 10:53 - 2014-01-28 10:53 - 00000000 ____D () C:\NVIDIA 2014-01-28 10:48 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Help 2014-01-28 10:41 - 2014-01-28 10:41 - 00000000 ____D () C:\WINDOWS\pss 2014-01-28 10:01 - 2014-01-28 09:59 - 31475128 _____ (NVIDIA Corporation) C:\Users\Lucien\Downloads\GeForce_Experience_v1.8.2.0.exe 2014-01-27 22:59 - 2014-01-27 22:46 - 266633424 _____ (NVIDIA Corporation) C:\Users\Lucien\Downloads\332.21-notebook-win8-win7-64bit-international-whql.exe 2014-01-27 20:33 - 2014-01-27 19:54 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2014-01-27 20:20 - 2013-09-12 10:02 - 00296960 ___SH () C:\Users\Lucien\Downloads\Thumbs.db 2014-01-27 19:53 - 2014-01-27 19:53 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2014-01-27 19:52 - 2014-01-27 19:52 - 00000000 ____D () C:\Users\Lucien\Desktop\mbar 2014-01-27 19:48 - 2014-01-27 19:47 - 00000000 ____D () C:\Users\Lucien\Desktop\Logs2 2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-01-26 20:53 - 2014-01-26 20:53 - 00003186 _____ () C:\WINDOWS\System32\Tasks\{E66DEEF7-845B-48C8-BBEE-CE6EA6F2EE96} 2014-01-26 19:26 - 2014-01-26 19:26 - 00003362 _____ () C:\WINDOWS\System32\Tasks\{63C03234-5B71-4184-AD48-4EE22D315F87} 2014-01-25 15:01 - 2014-01-25 15:01 - 00000000 ____H () C:\Users\Lucien\Documents\Default.rdp 2014-01-24 19:21 - 2014-01-24 19:21 - 00000000 ____D () C:\Users\Lucien\Desktop\Logs alt 2014-01-24 19:17 - 2014-01-24 19:17 - 00361185 _____ (Farbar) C:\Users\Lucien\Desktop\FSS.exe 2014-01-24 16:48 - 2014-01-24 16:48 - 00032847 _____ () C:\Users\Lucien\Desktop\gmer.zip 2014-01-24 11:34 - 2014-01-24 11:34 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-01-24 10:53 - 2014-01-24 10:53 - 00000000 ____D () C:\WINDOWS\ERUNT Some content of TEMP: ==================== C:\Users\Gast\AppData\Local\Temp\691.355818674457_Update.exe C:\Users\Gast\AppData\Local\Temp\drm_dyndata_7390004.dll C:\Users\Gast\AppData\Local\Temp\ubiB23E.tmp.exe C:\Users\Lucien\AppData\Local\Temp\Creative Cloud Helper.exe C:\Users\Lucien\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-02-20 22:33 ==================== End Of Log ============================ |
22.02.2014, 14:06 | #38 |
/// Helfer-Team | System durch verschiedenes infiziert Wie läufts jetzt mit Secure Banking? Bekommst du da noch eine Meldung? Laut Autostart Eintrag ist bei dir noch die alte Version am laufen. Starte mal per Hand die neue Version, navigiere in den Einstellungs-Reiter und deaktiviere mal die Einstellung "Autostart" und aktiviere sie dann wieder. So wird der Autostart-Eintrag neu überschrieben.
__________________ MfG, Niklas |
22.02.2014, 14:28 | #39 |
| System durch verschiedenes infiziert ok jetzt ist nur noch die beta installiert, aber sie meldet sich trotzdem die ganze zeit das ne malware in chrome entdeckt wurde |
22.02.2014, 14:30 | #40 |
/// Helfer-Team | System durch verschiedenes infiziert Hättest du mal kurz Zeit für eine Teamviewer-Sitzung? Würde mir das gerne mal anschauen.
__________________ MfG, Niklas |
22.02.2014, 14:36 | #41 |
| System durch verschiedenes infiziert neustart und es geht ich öffne chrome und es gibt keine meldung mehr |
22.02.2014, 14:47 | #42 |
/// Helfer-Team | System durch verschiedenes infiziert Alles klar, super!
__________________ MfG, Niklas |
24.02.2014, 16:00 | #43 | ||
/// Malwareteam | System durch verschiedenes infiziertZitat:
Zitat:
Starte mal den Taskmanager und gehe zum Reiter Leistung -> Ressourcenmonitor -> Datenträger und schreib mal den Namen + Dateipfad des Prozesses, welcher die hohe Datenträgerauslastung verursacht (am besten nen Screenshot).
__________________ Gruß, Jonas |
24.02.2014, 16:48 | #44 |
| System durch verschiedenes infiziert also schon der Start von Windows 8 braucht länger als normal (also vor 3 monaten ca. wars noch normal ich kann leider kein genaues datum oder sonstiges Ereignis nennen) -> das heißt in dem moment in dem eigentlich der Anmeldebildschirm kommen sollte, bleibt dieser erstmal eine weile in der gwählten farbe - in meinem fall in gelb. Dann nach gefühlten 5-6 sekunden erscheint das Anmelde-Fenster. Desweiteren, wenn ich auf der charmbar oder wie diese Appansicht heißt den Desktop anklicke, öffnet sich dieser und bleibt erstmal leer. Erst nach und nach erscheinen die ganzen icons und die taskleiste. Im Browser, sowie auf dem desktop tritt manchmal wie ein "verschwimmen" oder eine unschärfe der schrift auf. Und wenn ich den Taskmanager manchmal öffne steht bei Datenträger-Auslastung 100% obwohl ich gar nicht mache oder nur Office programme geöffnet habe. Es gibt eine Sache, an die ich mich noch erinnern kann, die mal Probleme verursacht hat. Ich hab vor ca. 6 Monaten, als ich den Laptop erworben habe beim Programme installieren auch Google Chrome installiert, nur glaube ich damals sowas wie ein fakechrome installiert zu haben. Ich hab daraufhin den laptop von einem kumpel bereinigen lassen (er macht irgendwas im it-bereich) aber ich glaube er war nicht gründlich genug, denn ab dem moment war das laptop immer gefühlt ein bisschen langsamer. Ich hoffe das hilft, auch ich danke dir für die Hilfe mit secure banking! |
25.02.2014, 09:23 | #45 | |
/// Malwareteam | System durch verschiedenes infiziert Hey, Zitat:
Der Screenshot von der Datenträgerauslastung war ganz normal, ich hab keine Unauffälligkeiten gesehen. Jedoch vermute ich, dass das langsame Verhalten deines Computers mit BitDefender zusammenhängt (ich will nicht auf BitDefender rumhacken, aber ich habe einige Berichte im Internet gefunden, die ähnliche/schlimmere Symptome zeigen). Deinstalliere BitDefender einmal komplett, starte den Rechner neu und gucke, ob sich an der Performance etwas geändert hat (natürlich dann nicht groß im Internet surfen). Wenn ja, gibt es gute/bessere Alternativen, welche zum Teil auch kostenlos sind .
__________________ Gruß, Jonas |
Themen zu System durch verschiedenes infiziert |
administrator, bitdefender, browser, defender, diverse, fehler, file, gelöscht, google, html/scrinject.b.gen, langsam, malware, malware gefunden, malwarebytes, mobogenie, mobogenie entfernen, pup.optional.installerex, rechner, scan, security, software, updates, windows |