System durch verschiedenes infiziert

KitsuneNoir · 22.01.2014, 15:54

Hallo,
sicherlich habt ihr von diesem Datenklau gehört bei dem an die 16Mio. Nutzerdaten geklaut wurden. Nun ich bin einer davon wie ich beim BSI getestet habe.
Passwörter von diversen Accounts und Banking habe ich bereits geändert, jetzt bleibt nur noch die Bereinigung meines Notebooks.

Vor 4 Tagen sind mir erste Anzeichen aufgefallen: Secure Banking poppte ständing auf und meldete eine Malware in Chrome.exe, die Schrift im Browser wechselte von scharf zu unscharf, der gesamte rechner hängte sich auf und alles war ganz langsam, der mauszeiger zuckte wild herum, die Firewall und mein Bitdefender Total Security 2014 wurden einfach deaktiviert und bei updates von diverser Software traten Fehler auf und es war und ist nicht möglich updates vorzunehmen.

Ich habe versucht die Schritte zu befolgen doch nach erfolgreichem frst scan wurden die logs gelöscht und windows blockt frst immerzu. daher habe ich nur einen mbam log von vor einigen Tagen.
Bitdefender findet auch keine Infektionen und wenn schon lässt sich nichts machen.

Ich habe Windows 8.1 und nutze Google Chrome als Browser, Bitdefender Total Security 2014

mbam-log

Code:

ATTFilter

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.01.17.04

Windows 8 x64 NTFS
Internet Explorer 11.0.9600.16476
****** :: ****** [Administrator]

20.01.2014 09:03:51
mbam-log-2014-01-20 (09-03-51).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 626275
Laufzeit: 2 Stunde(n), 13 Minute(n), 25 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 1
C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\File System\003\t\00\00000000 (PUP.Optional.InstalleRex) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

defogger

Code:

ATTFilter

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 12:30 on 22/01/2014 (*****)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
HKCU:DAEMON Tools Lite -> Removed

Checking for services/drivers...


-=E.O.F=-

secure banking

Code:

ATTFilter

========================================
[16.01.2014 - 13:24:11] Malware gefunden!
----------------------------------------
Malware: Unbekannt
----------------------------------------
Infizierter Prozess: chrome.exe
----------------------------------------
Infizierte Funktionen:
WSASend: JMP 0x5AFF2E51
send: JMP 0x5AFF2DC1
========================================

========================================
[16.01.2014 - 13:57:18] Malware gefunden!
----------------------------------------
Malware: Unbekannt
----------------------------------------
Infizierter Prozess: chrome.exe
----------------------------------------
Infizierte Funktionen:
WSASend: JMP 0x73E72E51
send: JMP 0x73E72DC1
========================================

Ich hoffe ihr könnt mir helfen

Gruß KitsuneNoir

sunjojo · 22.01.2014, 15:56

Ich habe dein Thema in Arbeit und melde mich so schnell als möglich mit weiteren Anweisungen.

Bitte beachte, dass alle meine Antworten zuerst von einem Ausbilder freigegeben werden müssen, bevor ich diese hier posten darf. Dies garantiert, dass Du Hilfe von einem ausgebildeten Helfer bekommst.

Ich bedanke mich für deine Geduld

KitsuneNoir · 22.01.2014, 17:18

Hi danke für die schnelle Reaktion

sunjojo · 22.01.2014, 19:53

Hallo KitsuneNoir,

mein Name ist Jonas und ich werde dir bei deiner Bereinigung helfen. Diese kann mit viel Arbeit für dich verbunden sein. Bevor wir anfangen können, lies bitte die Bereinigungsregeln und Hinweise:

Regeln zum Ablauf der Bereinigung

Arbeite die Anleitungen und Schritte sorgfältig und nacheinander ab.
Wenn du etwas nicht verstehst oder du dir unsicher bist, frage nach und schildere das Problem, so gut es geht. Handle nicht auf eigene Faust.
- Die Ausführung diverser Bereinigungsprogramme (mit Scripts aus anderen Threads) können dein Betriebssystem zerschießen!
Die Bereinigung eines Rechners in verschiedenen Foren zur selben Zeit ist verboten (Crossposting).

Installiere oder deinstalliere keine zusätzlichen Programme, lösche keine Dateien und führe nicht selbstständig Systemupdates durch.

Die Symptome können verschwunden sein, jedoch bedeutet das Verschwinden von äußeren Merkmalen einer Infektion nicht, dass du wieder clean bist.
- Ich werde dir ein eindeutiges Clean geben, solange arbeite bitte mit.

Hinweise

Ich kann dir nie eine Garantie geben, dass alles entfernt wurde. Die Formatierung der Festplatte und das Neuinstallieren deines Betriebssystems ist immer sicherer und meistens schneller.

Die von uns benutzten Programme erstellen meist ein Ergebnisprotokoll (Logfile genannt). Bitte füge alle von mir in einem Schritt geforderten Logfiles in einer Antwort/einem Post ein.
- http://www.trojaner-board.de/137229-...code-tags.html; Falls das Logfile zu groß für einen Post ist, teile es in zwei/mehrere Posts.

Wenn du alles gelesen hast, kann es losgehen. Bitte speichere alle Programme auf dem Desktop und führe sie von dort aus.

Führe bitte folgenden Schritt im Abgesicherten Modus mit Netzwerktreibern durch (Anleitung: http://www.trojaner-board.de/63335-w...tml#post387730) und berichte mir, ob dieser funktioniert hat.
Schritt 1
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Poste folgende Logfiles in deiner nächsten Antwort:

FRST-Scan

KitsuneNoir · 22.01.2014, 21:45

Hi

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-01-2014 02
Ran by Lucien (administrator) on LUCIENSNOTE on 22-01-2014 21:41:25
Running from C:\Users\Lucien\Desktop
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Safe Mode (with Networking)



==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Windows\HelpPane.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13530184 2013-04-22] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1278024 2013-03-08] (Realtek Semiconductor)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-09-25] (Adobe Systems Incorporated)
HKLM\...\Run: [PrnStatusMX] - C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe [1240064 2012-07-04] (Marvell Semiconductor, Inc.)
HKLM\...\Run: [ShadowPlay] - C:\WINDOWS\system32\nvspcap64.dll [1100248 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [Bdagent] - C:\Program Files\Bitdefender\Bitdefender\bdagent.exe [1735872 2014-01-13] (Bitdefender)
HKLM-x32\...\Run: [ASUSPRP] - C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-04-26] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-01-15] (cyberlink)
HKLM-x32\...\Run: [ASUS InstantKey] - C:\Program Files (x86)\ASUS\ASUS Instant Key\Ikey_start.exe [13936 2013-04-16] (ASUS)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2237328 2013-11-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-04-24] ( (Atheros Communications))
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\steam.exe [1815464 2014-01-07] (Valve Corporation)
HKCU\...\Run: [SecureBanking] - C:\Program Files (x86)\Secure Banking\SecureBanking.exe [507904 2013-06-30] (Secure Banking)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Lucien\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-10] (Spotify Ltd)
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
HKCU\...\Run: [Bitdefender-Geldbörse-Agent] - C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [561672 2014-01-13] (Bitdefender)
HKCU\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] - C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [612696 2014-01-13] (Bitdefender)
HKU\Gast\...\Run: [Spotify] - C:\Users\Gast\AppData\Roaming\Spotify\Spotify.exe [6118400 2014-01-20] (Spotify Ltd)
HKU\Gast\...\Run: [Spotify Web Helper] - C:\Users\Gast\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-01-20] (Spotify Ltd)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [168616 2013-11-14] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [141336 2013-11-14] (NVIDIA Corporation)
Startup: C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;form=IE10TR&amp;src=IE10TR&amp;pc=ASU2JS
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;form=IE10TR&amp;src=IE10TR&amp;pc=ASU2JS
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\pmbxie.dll (Bitdefender)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxie.dll (Bitdefender)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Chrome: 
=======
CHR HomePage: hxxp://www.google.de/
CHR Extension: (Google Docs) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-14]
CHR Extension: (Google Drive) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-19]
CHR Extension: (YouTube) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-19]
CHR Extension: (Bitdefender Wallet) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccahoghmggldkcdjiebjkidpfongdfbl [2014-01-13]
CHR Extension: (Google Search) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-19]
CHR Extension: (Google Wallet) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR Extension: (Gmail) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-19]
CHR HKLM-x32\...\Chrome\Extension: [ccahoghmggldkcdjiebjkidpfongdfbl] - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxcr.crx [2014-01-13]

==================== Services (Whitelisted) =================

U3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-12-18] (Adobe Systems)
U2 ASUS InstantOn; C:\Program Files\ASUS\P4G\InsOnSrv.exe [277120 2013-04-29] (ASUS)
U2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [310400 2013-04-24] (Windows (R) Win 7 DDK provider)
U4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender\bdparentalservice.exe [77632 2013-11-21] (Bitdefender)
U2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [247768 2013-01-15] (CyberLink)
U3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
U2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-04-11] (Intel Corporation)
U2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
U2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
U2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
U2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
U2 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [94624 2013-07-08] (Bitdefender)
U2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe [67320 2013-10-07] (Bitdefender)
U2 VSSERV; C:\Program Files\Bitdefender\Bitdefender\vsserv.exe [1507248 2013-11-15] (Bitdefender)
U3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
U3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
U2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [18384 2013-09-04] (Intel(R) Corporation)
U2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-04-24] (Atheros)

==================== Drivers (Whitelisted) ====================

U0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
U3 ATP; C:\Windows\System32\drivers\AsusTP.sys [70416 2013-09-23] (ASUS Corporation)
U0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [727592 2013-07-19] (BitDefender)
U3 avchv; C:\Windows\system32\DRIVERS\avchv.sys [261056 2014-01-13] (BitDefender)
U3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [601360 2013-07-19] (BitDefender)
U3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
U0 bdelam; C:\Windows\System32\drivers\bdelam.sys [23568 2013-09-08] (Bitdefender)
U1 BdfNdisf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys [98768 2013-07-24] (BitDefender LLC)
U1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107008 2013-07-29] (BitDefender LLC)
U3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-07-02] (Bitdefender SRL)
U3 BDSandBox; C:\WINDOWS\system32\drivers\bdsandbox.sys [82824 2013-11-04] (BitDefender SRL)
U1 BDVEDISK; C:\Windows\system32\DRIVERS\bdvedisk.sys [79192 2013-07-30] (BitDefender)
U3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-04-24] (Qualcomm Atheros)
U3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
U3 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2013-09-01] (DT Soft Ltd)
U0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [150256 2013-08-23] (BitDefender LLC)
U3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
U3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
U0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
U0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)
U2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [26328 2013-07-23] (Intel Corporation)
U3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
U0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
U3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
U3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-07-26] (Intel Corporation)
U3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
U3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
U3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
U3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
U0 rtcrfilt64; C:\Windows\System32\DRIVERS\rtcrfilt64.sys [19600 2000-01-01] (Realtek Semiconductor Corp.)
U3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)
U0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
U3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16152 2013-09-03] ()
U0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [389240 2013-08-07] (BitDefender S.R.L.)
U3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
U3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
U3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [x]
U3 GPU-Z; \??\C:\Users\Lucien\AppData\Local\Temp\GPU-Z.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-22 21:41 - 2014-01-22 21:41 - 00014376 _____ C:\Users\Lucien\Desktop\FRST.txt
2014-01-22 21:41 - 2014-01-22 21:41 - 00000000 ____D C:\Users\Lucien\Desktop\FRST-OlderVersion
2014-01-22 21:23 - 2014-01-22 21:23 - 00022688 _____ C:\Users\Lucien\Downloads\Addition.txt
2014-01-22 21:22 - 2014-01-22 21:23 - 00046051 _____ C:\Users\Lucien\Downloads\FRST.txt
2014-01-22 13:59 - 2014-01-22 21:41 - 02077696 _____ (Farbar) C:\Users\Lucien\Desktop\FRST64.exe
2014-01-22 13:49 - 2014-01-22 13:49 - 00003576 _____ C:\WINDOWS\System32\Tasks\Bitdefender Auto-Scan
2014-01-22 13:47 - 2014-01-22 13:47 - 00631815 _____ C:\Users\Lucien\Desktop\gmer.txt
2014-01-22 12:30 - 2014-01-22 12:30 - 00000544 _____ C:\Users\Lucien\Desktop\defogger_disable.log
2014-01-22 12:30 - 2014-01-22 12:30 - 00000168 _____ C:\Users\Lucien\defogger_reenable
2014-01-22 00:11 - 2014-01-17 20:25 - 00379904 _____ C:\Users\Lucien\Desktop\gmer.exe
2014-01-22 00:10 - 2012-12-19 16:10 - 00000000 ____D C:\Users\Lucien\Desktop\data
2014-01-22 00:10 - 2011-10-24 13:35 - 00000000 ____D C:\Users\Lucien\Desktop\Tweaking.com - Windows Repair
2014-01-22 00:10 - 2009-10-20 21:47 - 00055936 _____ () C:\Users\Lucien\Desktop\Setup.exe
2014-01-21 23:54 - 2014-01-22 21:41 - 00000000 ____D C:\FRST
2014-01-21 22:19 - 2014-01-21 22:19 - 00000000 ____D C:\WINDOWS\LastGood
2014-01-21 15:06 - 2014-01-21 15:06 - 01037068 _____ (Thisisu) C:\Users\Lucien\Desktop\JRT.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00987425 _____ C:\Users\Lucien\Desktop\SecurityCheck.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00448512 _____ (OldTimer Tools) C:\Users\Lucien\Desktop\TFC.exe
2014-01-21 15:05 - 2014-01-21 15:05 - 01236282 _____ C:\Users\Lucien\Desktop\adwcleaner.exe
2014-01-21 15:00 - 2014-01-21 15:01 - 02347384 _____ (ESET) C:\Users\Lucien\Desktop\esetsmartinstaller_enu.exe
2014-01-21 13:15 - 2014-01-21 13:25 - 24859352 _____ (Microsoft Corporation) C:\Users\Gast\Downloads\Windows-KB890830-x64-V5.8.exe
2014-01-21 10:40 - 2014-01-22 14:01 - 00000000 ____D C:\Users\Gast\AppData\Local\My Games
2014-01-21 10:18 - 2014-01-21 10:18 - 00050477 _____ C:\Users\Lucien\Desktop\Defogger.exe
2014-01-21 10:12 - 2014-01-21 10:12 - 00000000 ____D C:\Users\Gast\AppData\Roaming\QuickScan
2014-01-21 09:39 - 2014-01-21 09:39 - 00003258 _____ C:\WINDOWS\System32\Tasks\SomotoUpdateCheckerAutoStart
2014-01-21 09:38 - 2014-01-21 09:38 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Spotydl
2014-01-21 08:33 - 2014-01-21 08:33 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2014-01-20 16:10 - 2013-12-03 13:49 - 00000000 ____D C:\Users\Gast\Downloads\settings
2014-01-20 15:53 - 2014-01-20 15:53 - 00000000 ____D C:\Users\Gast\AppData\Local\NVIDIA Corporation
2014-01-20 15:52 - 2014-01-21 08:37 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Bitdefender
2014-01-20 15:52 - 2014-01-20 15:52 - 00000385 _____ C:\Users\Gast\AppData\Roaminguser_gensett.xml
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\Documents\Bluetooth Folder
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\AppData\Local\BMExplorer
2014-01-20 15:51 - 2014-01-20 15:51 - 00000000 ____D C:\Users\Lucien\Documents\AdobeStockPhotos
2014-01-19 21:21 - 2014-01-19 08:38 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-01-19 18:22 - 2014-01-19 18:22 - 00305304 _____ C:\WINDOWS\Minidump\011914-32203-01.dmp
2014-01-19 18:22 - 2014-01-19 18:22 - 00000000 ____D C:\WINDOWS\Minidump
2014-01-17 15:05 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2014-01-17 15:05 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2014-01-17 13:50 - 2014-01-20 13:49 - 00000000 ____D C:\Users\Lucien\Downloads\backups
2014-01-17 13:42 - 2014-01-19 18:46 - 00012554 _____ C:\Users\Lucien\Downloads\hijackthis.log
2014-01-17 13:42 - 2014-01-17 13:42 - 00388608 _____ (Trend Micro Inc.) C:\Users\Lucien\Downloads\HiJackThis204.exe
2014-01-17 09:54 - 2014-01-17 09:54 - 00000385 _____ C:\Users\Lucien\AppData\Roaminguser_gensett.xml
2014-01-16 14:05 - 2013-12-11 08:55 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-01-16 14:05 - 2013-12-09 01:34 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-01-16 14:05 - 2013-12-09 01:04 - 00980480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-01-16 14:05 - 2013-11-27 16:34 - 03210528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2014-01-16 14:05 - 2013-11-27 16:27 - 00809872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-01-16 14:05 - 2013-11-27 15:00 - 00663680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-01-16 14:05 - 2013-11-27 14:47 - 02804528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2014-01-16 14:05 - 2013-11-27 13:02 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ipnat.sys
2014-01-16 14:05 - 2013-11-27 11:54 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-01-16 14:05 - 2013-11-27 11:24 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll
2014-01-16 14:05 - 2013-11-27 11:08 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-01-16 14:05 - 2013-11-27 10:46 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll
2014-01-16 14:05 - 2013-11-27 10:41 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2014-01-16 14:05 - 2013-11-27 10:17 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-01-16 14:05 - 2013-11-27 10:10 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2014-01-16 14:05 - 2013-11-27 09:58 - 01503232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-01-16 14:05 - 2013-11-27 09:56 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll
2014-01-16 14:05 - 2013-11-27 09:20 - 04106240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-01-16 14:05 - 2013-11-27 05:01 - 00385614 _____ C:\WINDOWS\system32\ApnDatabase.xml
2014-01-16 14:05 - 2013-11-26 14:22 - 01928144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2014-01-16 14:05 - 2013-11-26 14:20 - 02131120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-01-16 14:05 - 2013-11-26 14:20 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-01-16 14:05 - 2013-11-26 14:20 - 01374384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-01-16 14:05 - 2013-11-26 12:50 - 01371312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2014-01-16 14:05 - 2013-11-26 12:44 - 02142936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-01-16 14:05 - 2013-11-26 12:44 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-01-16 14:05 - 2013-11-26 11:13 - 04191232 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-01-16 14:05 - 2013-11-26 10:21 - 18577920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-01-16 14:05 - 2013-11-26 09:28 - 13925888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-01-16 14:05 - 2013-11-25 02:45 - 00142680 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-01-16 14:05 - 2013-11-25 02:32 - 01119064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2014-01-16 14:05 - 2013-11-25 00:30 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2014-01-16 14:05 - 2013-11-25 00:28 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2014-01-16 14:05 - 2013-11-23 13:47 - 00032088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-01-16 14:05 - 2013-11-23 12:49 - 21196664 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-01-16 14:05 - 2013-11-23 09:19 - 18642504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-01-16 14:05 - 2013-11-23 08:13 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\bi.dll
2014-01-16 14:05 - 2013-11-23 08:13 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys
2014-01-16 14:05 - 2013-11-23 08:08 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-01-16 14:05 - 2013-11-23 05:50 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-01-16 14:05 - 2013-11-23 04:57 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2014-01-16 14:05 - 2013-11-23 04:48 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2014-01-16 14:05 - 2013-11-23 04:25 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2014-01-16 14:05 - 2013-11-23 04:25 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2014-01-16 14:05 - 2013-11-23 04:19 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-01-16 14:05 - 2013-11-23 04:15 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-01-16 14:05 - 2013-11-21 07:58 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceregistration.dll
2014-01-16 14:05 - 2013-11-21 07:26 - 01415680 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-01-16 14:05 - 2013-11-16 06:11 - 00764856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-01-16 14:05 - 2013-11-15 19:19 - 00669344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-01-16 14:05 - 2013-11-15 15:59 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2014-01-16 14:05 - 2013-11-15 15:25 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2014-01-16 14:05 - 2013-11-15 15:08 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-01-16 14:05 - 2013-11-15 14:24 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-01-16 14:05 - 2013-11-05 21:12 - 02551128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-01-16 14:05 - 2013-10-31 01:29 - 00745336 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-01-16 14:05 - 2013-10-31 00:41 - 00552624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2014-01-15 23:39 - 2013-12-09 01:15 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-01-15 23:39 - 2013-11-27 16:36 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-01-15 23:39 - 2013-11-27 12:41 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe
2014-01-15 23:39 - 2013-11-27 11:34 - 00138240 _____ C:\WINDOWS\system32\OEMLicense.dll
2014-01-15 23:39 - 2013-11-27 10:54 - 00103936 _____ C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-01-15 23:39 - 2013-11-27 09:48 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 23:39 - 2013-11-27 09:45 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-01-15 23:39 - 2013-11-27 09:40 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 23:39 - 2013-11-27 09:38 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-01-15 23:39 - 2013-11-27 09:17 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-01-15 23:39 - 2013-11-27 09:12 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-01-13 23:23 - 2014-01-13 23:23 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\system32\bdsandboxuiskin32.dll
2014-01-13 23:20 - 2014-01-19 16:08 - 00000000 ____D C:\Program Files (x86)\McAfee Security Scan
2014-01-13 23:20 - 2014-01-13 23:20 - 00002041 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-13 22:54 - 2014-01-13 22:54 - 00620542 _____ C:\ProgramData\1389649682.bdinstall.bin
2014-01-13 22:54 - 2014-01-13 22:54 - 00000385 _____ C:\WINDOWS\system32\user_gensett.xml
2014-01-13 22:53 - 2014-01-13 23:23 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\SysWOW64\bdsandboxuiskin32.dll
2014-01-13 22:53 - 2014-01-13 22:54 - 00000000 ____D C:\ProgramData\BDLogging
2014-01-13 22:53 - 2014-01-13 22:53 - 00002212 _____ C:\Users\Public\Desktop\Bitdefender Safepay.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00002164 _____ C:\Users\Public\Desktop\Bitdefender Total Security.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2014-01-13 22:53 - 2013-11-04 15:47 - 00082824 _____ (BitDefender SRL) C:\WINDOWS\system32\Drivers\bdsandbox.sys
2014-01-13 22:53 - 2013-09-08 19:04 - 00023568 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bdelam.sys
2014-01-13 22:53 - 2013-07-30 17:41 - 00079192 _____ (BitDefender) C:\WINDOWS\system32\Drivers\bdvedisk.sys
2014-01-13 22:53 - 2013-07-24 17:19 - 00098768 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\bdfndisf6.sys
2014-01-13 22:53 - 2007-04-11 10:11 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\capicom.dll
2014-01-13 22:52 - 2014-01-13 23:23 - 00261056 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avchv.sys
2014-01-13 22:52 - 2014-01-13 22:54 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Bitdefender
2014-01-13 22:52 - 2013-07-19 17:08 - 00601360 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avckf.sys
2014-01-13 22:52 - 2013-07-19 17:04 - 00727592 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avc3.sys
2014-01-13 22:48 - 2014-01-13 23:23 - 00000000 ____D C:\ProgramData\Bitdefender
2014-01-13 22:48 - 2014-01-13 22:52 - 00000000 ____D C:\Program Files\Bitdefender
2014-01-13 22:48 - 2014-01-13 22:48 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\QuickScan
2014-01-13 22:48 - 2013-11-04 15:47 - 00084848 _____ (BitDefender SRL) C:\WINDOWS\system32\BDSandBoxUISkin.dll
2014-01-13 22:48 - 2013-11-04 15:46 - 00034384 _____ (BitDefender SRL) C:\WINDOWS\system32\BDSandBoxUH.dll
2014-01-13 22:48 - 2013-08-23 12:48 - 00150256 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\gzflt.sys
2014-01-13 22:48 - 2013-08-07 12:46 - 00389240 _____ (BitDefender S.R.L.) C:\WINDOWS\system32\Drivers\trufos.sys
2014-01-12 22:56 - 2014-01-13 22:48 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2014-01-12 22:29 - 2014-01-12 22:29 - 07171632 _____ C:\Users\Lucien\Downloads\bitdefender_tsecurity.exe
2014-01-09 12:00 - 2014-01-13 14:27 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Bioshock
2014-01-09 12:00 - 2014-01-09 12:12 - 00000000 ____D C:\Users\Lucien\Documents\Bioshock
2014-01-07 21:35 - 2014-01-07 21:35 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\WINDOWS\SysWOW64\GPhotos.scr
2014-01-06 13:29 - 2014-01-21 22:13 - 00000000 ____D C:\Users\Lucien\Documents\Rockstar Games
2014-01-06 13:11 - 2014-01-06 13:11 - 00000000 __SHD C:\ProgramData\SecuROM
2014-01-06 13:10 - 2014-01-06 13:10 - 00000000 ____D C:\Users\Lucien\AppData\Local\Rockstar Games
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\WINDOWS\SysWOW64\xlive
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\Users\Lucien\Documents\Games for Windows - LIVE Demos
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2014-01-06 13:08 - 2014-01-06 13:08 - 00642712 _____ (Microsoft Corporation) C:\Users\Lucien\Downloads\gfwlivesetup.exe
2013-12-28 20:07 - 2013-12-28 20:10 - 70638408 _____ (Apple Inc.) C:\Users\Lucien\Downloads\iCloudSetup.exe
2013-12-27 10:35 - 2014-01-08 11:53 - 00000000 ___RD C:\Users\Lucien\Downloads\Microsoft.SkypeApp_kzf8qxf38zg5c!App

==================== One Month Modified Files and Folders =======

2014-01-22 21:41 - 2014-01-22 21:41 - 00014376 _____ C:\Users\Lucien\Desktop\FRST.txt
2014-01-22 21:41 - 2014-01-22 21:41 - 00000000 ____D C:\Users\Lucien\Desktop\FRST-OlderVersion
2014-01-22 21:41 - 2014-01-22 13:59 - 02077696 _____ (Farbar) C:\Users\Lucien\Desktop\FRST64.exe
2014-01-22 21:41 - 2014-01-21 23:54 - 00000000 ____D C:\FRST
2014-01-22 21:26 - 2013-09-30 05:14 - 01804156 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2014-01-22 21:26 - 2013-09-30 04:56 - 00774346 _____ C:\WINDOWS\system32\perfh007.dat
2014-01-22 21:26 - 2013-09-30 04:56 - 00163568 _____ C:\WINDOWS\system32\perfc007.dat
2014-01-22 21:23 - 2014-01-22 21:23 - 00022688 _____ C:\Users\Lucien\Downloads\Addition.txt
2014-01-22 21:23 - 2014-01-22 21:22 - 00046051 _____ C:\Users\Lucien\Downloads\FRST.txt
2014-01-22 21:21 - 2013-11-05 21:47 - 00000000 ____D C:\Users\Lucien
2014-01-22 21:07 - 2013-09-29 20:04 - 09441346 _____ C:\WINDOWS\PFRO.log
2014-01-22 21:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\sru
2014-01-22 14:34 - 2013-07-18 20:55 - 00003600 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3506778915-1287356822-3408950579-1002
2014-01-22 14:01 - 2014-01-21 10:40 - 00000000 ____D C:\Users\Gast\AppData\Local\My Games
2014-01-22 14:01 - 2013-10-01 15:03 - 00000000 ____D C:\Users\Gast\Documents\My Games
2014-01-22 14:01 - 2013-09-01 19:44 - 00000000 ____D C:\Users\Lucien\AppData\Local\My Games
2014-01-22 14:01 - 2013-08-20 09:54 - 00000000 ____D C:\Users\Lucien\Documents\My Games
2014-01-22 13:52 - 2013-09-12 10:02 - 00296960 ___SH C:\Users\Lucien\Downloads\Thumbs.db
2014-01-22 13:49 - 2014-01-22 13:49 - 00003576 _____ C:\WINDOWS\System32\Tasks\Bitdefender Auto-Scan
2014-01-22 13:47 - 2014-01-22 13:47 - 00631815 _____ C:\Users\Lucien\Desktop\gmer.txt
2014-01-22 12:34 - 2013-09-10 15:25 - 00164352 ___SH C:\Users\Lucien\Desktop\Thumbs.db
2014-01-22 12:30 - 2014-01-22 12:30 - 00000544 _____ C:\Users\Lucien\Desktop\defogger_disable.log
2014-01-22 12:30 - 2014-01-22 12:30 - 00000168 _____ C:\Users\Lucien\defogger_reenable
2014-01-22 12:28 - 2013-08-19 19:07 - 00001134 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-22 12:08 - 2013-06-26 08:07 - 00003474 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1
2014-01-22 12:08 - 2013-06-26 08:07 - 00003464 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2
2014-01-22 11:43 - 2013-11-05 21:43 - 01314176 _____ C:\WINDOWS\WindowsUpdate.log
2014-01-22 11:20 - 2013-08-22 11:25 - 00000000 ____D C:\Users\Lucien\AppData\Local\Adobe
2014-01-22 11:19 - 2013-11-05 22:24 - 00000000 __RDO C:\Users\Lucien\SkyDrive
2014-01-22 11:18 - 2013-08-19 19:08 - 00002197 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-22 11:18 - 2013-08-19 19:06 - 00001130 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-22 11:18 - 2013-07-18 20:49 - 00000074 _____ C:\Users\Lucien\AppData\Roaming\sp_data.sys
2014-01-22 00:07 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2014-01-22 00:04 - 2013-08-22 14:25 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2014-01-22 00:03 - 2013-08-31 15:58 - 00000000 ____D C:\AdwCleaner
2014-01-21 22:19 - 2014-01-21 22:19 - 00000000 ____D C:\WINDOWS\LastGood
2014-01-21 22:13 - 2014-01-06 13:29 - 00000000 ____D C:\Users\Lucien\Documents\Rockstar Games
2014-01-21 22:13 - 2013-09-04 07:48 - 00000000 ____D C:\Users\Lucien\Documents\Blender
2014-01-21 22:00 - 2013-11-04 09:24 - 00069120 ___SH C:\Users\Gast\Downloads\Thumbs.db
2014-01-21 22:00 - 2013-08-22 15:46 - 00380728 _____ C:\WINDOWS\setupact.log
2014-01-21 15:06 - 2014-01-21 15:06 - 01037068 _____ (Thisisu) C:\Users\Lucien\Desktop\JRT.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00987425 _____ C:\Users\Lucien\Desktop\SecurityCheck.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00448512 _____ (OldTimer Tools) C:\Users\Lucien\Desktop\TFC.exe
2014-01-21 15:05 - 2014-01-21 15:05 - 01236282 _____ C:\Users\Lucien\Desktop\adwcleaner.exe
2014-01-21 15:01 - 2014-01-21 15:00 - 02347384 _____ (ESET) C:\Users\Lucien\Desktop\esetsmartinstaller_enu.exe
2014-01-21 14:51 - 2013-10-19 09:42 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Spotify
2014-01-21 13:25 - 2014-01-21 13:15 - 24859352 _____ (Microsoft Corporation) C:\Users\Gast\Downloads\Windows-KB890830-x64-V5.8.exe
2014-01-21 10:38 - 2013-09-01 18:18 - 00281688 _____ C:\WINDOWS\SysWOW64\PnkBstrB.xtr
2014-01-21 10:18 - 2014-01-21 10:18 - 00050477 _____ C:\Users\Lucien\Desktop\Defogger.exe
2014-01-21 10:12 - 2014-01-21 10:12 - 00000000 ____D C:\Users\Gast\AppData\Roaming\QuickScan
2014-01-21 09:39 - 2014-01-21 09:39 - 00003258 _____ C:\WINDOWS\System32\Tasks\SomotoUpdateCheckerAutoStart
2014-01-21 09:38 - 2014-01-21 09:38 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Spotydl
2014-01-21 09:37 - 2013-09-26 11:23 - 00000000 ____D C:\Users\Gast\AppData\Local\VirtualStore
2014-01-21 08:38 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2014-01-21 08:37 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Bitdefender
2014-01-21 08:37 - 2013-09-26 11:23 - 00000062 _____ C:\Users\Gast\AppData\Roaming\sp_data.sys
2014-01-21 08:36 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2014-01-21 08:33 - 2014-01-21 08:33 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2014-01-20 15:53 - 2014-01-20 15:53 - 00000000 ____D C:\Users\Gast\AppData\Local\NVIDIA Corporation
2014-01-20 15:53 - 2013-06-26 08:06 - 00000000 ____D C:\ProgramData\Atheros
2014-01-20 15:52 - 2014-01-20 15:52 - 00000385 _____ C:\Users\Gast\AppData\Roaminguser_gensett.xml
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\Documents\Bluetooth Folder
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\AppData\Local\BMExplorer
2014-01-20 15:52 - 2013-10-29 11:55 - 00000000 ____D C:\Users\Gast\AppData\Local\NVIDIA
2014-01-20 15:52 - 2013-10-19 09:42 - 00000000 ____D C:\Users\Gast\AppData\Local\Spotify
2014-01-20 15:52 - 2013-09-26 11:24 - 00000000 ___RD C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-20 15:52 - 2013-09-26 11:24 - 00000000 ___RD C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-20 15:51 - 2014-01-20 15:51 - 00000000 ____D C:\Users\Lucien\Documents\AdobeStockPhotos
2014-01-20 15:51 - 2013-07-18 20:48 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Adobe
2014-01-20 13:49 - 2014-01-17 13:50 - 00000000 ____D C:\Users\Lucien\Downloads\backups
2014-01-20 12:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache
2014-01-19 18:46 - 2014-01-17 13:42 - 00012554 _____ C:\Users\Lucien\Downloads\hijackthis.log
2014-01-19 18:22 - 2014-01-19 18:22 - 00305304 _____ C:\WINDOWS\Minidump\011914-32203-01.dmp
2014-01-19 18:22 - 2014-01-19 18:22 - 00000000 ____D C:\WINDOWS\Minidump
2014-01-19 18:22 - 2013-09-13 12:11 - 1134103589 _____ C:\WINDOWS\MEMORY.DMP
2014-01-19 16:08 - 2014-01-13 23:20 - 00000000 ____D C:\Program Files (x86)\McAfee Security Scan
2014-01-19 08:38 - 2014-01-19 21:21 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-01-17 20:25 - 2014-01-22 00:11 - 00379904 _____ C:\Users\Lucien\Desktop\gmer.exe
2014-01-17 13:42 - 2014-01-17 13:42 - 00388608 _____ (Trend Micro Inc.) C:\Users\Lucien\Downloads\HiJackThis204.exe
2014-01-17 13:42 - 2013-07-18 20:48 - 00000000 ____D C:\Users\Lucien\AppData\Local\VirtualStore
2014-01-17 09:54 - 2014-01-17 09:54 - 00000385 _____ C:\Users\Lucien\AppData\Roaminguser_gensett.xml
2014-01-17 09:54 - 2013-07-18 20:49 - 00000000 ___RD C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-17 09:54 - 2013-07-18 20:49 - 00000000 ___RD C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-16 16:41 - 2013-08-22 15:44 - 05147912 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\MediaViewer
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\FileManager
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Camera
2014-01-16 16:37 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2014-01-16 16:37 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\Dism
2014-01-16 14:31 - 2013-08-23 10:50 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-16 13:51 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\WinStore
2014-01-16 13:29 - 2013-08-19 19:19 - 00000000 ____D C:\WINDOWS\system32\MRT
2014-01-13 23:23 - 2014-01-13 23:23 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\system32\bdsandboxuiskin32.dll
2014-01-13 23:23 - 2014-01-13 22:53 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\SysWOW64\bdsandboxuiskin32.dll
2014-01-13 23:23 - 2014-01-13 22:52 - 00261056 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avchv.sys
2014-01-13 23:23 - 2014-01-13 22:48 - 00000000 ____D C:\ProgramData\Bitdefender
2014-01-13 23:20 - 2014-01-13 23:20 - 00002041 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-13 23:20 - 2013-04-26 00:18 - 00000000 ____D C:\ProgramData\McAfee
2014-01-13 23:19 - 2013-04-26 00:15 - 00000000 ____D C:\ProgramData\Adobe
2014-01-13 23:19 - 2013-04-26 00:15 - 00000000 ____D C:\Program Files (x86)\Adobe
2014-01-13 22:54 - 2014-01-13 22:54 - 00620542 _____ C:\ProgramData\1389649682.bdinstall.bin
2014-01-13 22:54 - 2014-01-13 22:54 - 00000385 _____ C:\WINDOWS\system32\user_gensett.xml
2014-01-13 22:54 - 2014-01-13 22:53 - 00000000 ____D C:\ProgramData\BDLogging
2014-01-13 22:54 - 2014-01-13 22:52 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Bitdefender
2014-01-13 22:53 - 2014-01-13 22:53 - 00002212 _____ C:\Users\Public\Desktop\Bitdefender Safepay.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00002164 _____ C:\Users\Public\Desktop\Bitdefender Total Security.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2014-01-13 22:52 - 2014-01-13 22:48 - 00000000 ____D C:\Program Files\Bitdefender
2014-01-13 22:48 - 2014-01-13 22:48 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\QuickScan
2014-01-13 22:48 - 2014-01-12 22:56 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2014-01-13 22:46 - 2013-08-30 00:06 - 00000000 ____D C:\avast! sandbox
2014-01-13 22:45 - 2013-08-19 19:05 - 00000000 ____D C:\Program Files\AVAST Software
2014-01-13 22:45 - 2013-08-19 19:04 - 00000000 ____D C:\ProgramData\AVAST Software
2014-01-13 22:44 - 2013-08-19 19:06 - 00000000 _____ C:\WINDOWS\SysWOW64\config.nt
2014-01-13 14:27 - 2014-01-09 12:00 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Bioshock
2014-01-12 22:29 - 2014-01-12 22:29 - 07171632 _____ C:\Users\Lucien\Downloads\bitdefender_tsecurity.exe
2014-01-09 12:12 - 2014-01-09 12:00 - 00000000 ____D C:\Users\Lucien\Documents\Bioshock
2014-01-09 11:59 - 2013-04-26 00:16 - 00502089 _____ C:\WINDOWS\DirectX.log
2014-01-08 12:09 - 2013-10-14 09:56 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Spotify
2014-01-08 11:53 - 2013-12-27 10:35 - 00000000 ___RD C:\Users\Lucien\Downloads\Microsoft.SkypeApp_kzf8qxf38zg5c!App
2014-01-07 21:35 - 2014-01-07 21:35 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2014-01-07 21:05 - 2013-11-22 17:15 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-01-06 23:31 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-01-06 23:31 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\WINDOWS\SysWOW64\GPhotos.scr
2014-01-06 16:20 - 2013-08-19 19:19 - 86054176 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-01-06 13:11 - 2014-01-06 13:11 - 00000000 __SHD C:\ProgramData\SecuROM
2014-01-06 13:10 - 2014-01-06 13:10 - 00000000 ____D C:\Users\Lucien\AppData\Local\Rockstar Games
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\WINDOWS\SysWOW64\xlive
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\Users\Lucien\Documents\Games for Windows - LIVE Demos
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2014-01-06 13:08 - 2014-01-06 13:08 - 00642712 _____ (Microsoft Corporation) C:\Users\Lucien\Downloads\gfwlivesetup.exe
2014-01-03 18:23 - 2013-09-09 20:00 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\vlc
2013-12-30 23:47 - 2013-10-14 09:58 - 00000000 ____D C:\Users\Lucien\AppData\Local\Spotify
2013-12-29 16:19 - 2013-11-29 21:45 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\dvdcss
2013-12-29 13:36 - 2013-08-20 22:12 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Apple Computer
2013-12-29 13:34 - 2013-08-20 22:12 - 00000000 ____D C:\Users\Lucien\AppData\Local\Apple Computer
2013-12-28 20:12 - 2013-08-20 22:10 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-12-28 20:10 - 2013-12-28 20:07 - 70638408 _____ (Apple Inc.) C:\Users\Lucien\Downloads\iCloudSetup.exe

Files to move or delete:
====================
C:\ProgramData\SetStretch.exe
C:\ProgramData\SetStretch.VBS


Some content of TEMP:
====================
C:\Users\Gast\AppData\Local\Temp\drm_dyndata_7390004.dll
C:\Users\Gast\AppData\Local\Temp\ubiB23E.tmp.exe
C:\Users\Lucien\AppData\Local\Temp\UpdateCheckerSetup.exe
C:\Users\Lucien\AppData\Local\Temp\wajam_download.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-21 11:44

==================== End Of Log ============================

--- --- ---

--- --- ---

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-01-2014 02
Ran by Lucien at 2014-01-22 21:41:49
Running from C:\Users\Lucien\Desktop
Boot Mode: Safe Mode (with Networking)
==========================================================


==================== Security Center ========================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Bitdefender Antivirus (Enabled - Up to date) {9B5F5313-CAF9-DD97-C460-E778420237B4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Bitdefender Spyware-Schutz (Enabled - Up to date) {203EB2F7-ECC3-D219-FED0-DC0A39857D09}
FW: Bitdefender Firewall (Enabled) {A364D236-8096-DCCF-EF3F-4E4DBCD170CF}

==================== Installed Programs ======================

 ASUS Console (Version: 1.0.0 - ASUS)
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0 - Igor Pavlov)
Adobe AIR (x32 Version: 3.9.0.1380 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.9.0.1380 - Adobe Systems Incorporated) Hidden
Adobe Bridge 1.0 (x32 Version: 001.000.001 - Adobe Systems) Hidden
Adobe Common File Installer (x32 Version: 1.00.001 - Adobe System Incorporated) Hidden
Adobe Creative Cloud (x32 Version: 2.2.1.260 - Adobe Systems Incorporated)
Adobe Help Center 1.0 (x32 Version: 1.0.1 - Adobe Systems) Hidden
Adobe InDesign CS2 (x32 Version: 004.000.000 - Adobe Systems Incorporated)
Adobe InDesign CS2 (x32 Version: 004.000.000 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS2 (x32 Version: 9.0 - Adobe Systems, Inc.)
Adobe Photoshop CS2 (x32 Version: 9.0 - Adobe Systems, Inc.) Hidden
Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated)
Adobe Stock Photos 1.0 (x32 Version: 1.0.1 - Adobe Systems) Hidden
Adobe® Content Viewer (x32 Version: 3.3.0 - Adobe Systems Incorporated)
Adobe® Content Viewer (x32 Version: 3.3.0 - Adobe Systems Incorporated) Hidden
Akamai NetSession Interface (HKCU Version:  - Akamai Technologies, Inc)
Apple Application Support (x32 Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
Assassin's Creed (x32 Version:  - Ubisoft Montreal)
ASUS FaceKey (x32 Version: 4.1.0.0 - )
ASUS Instant Key (x32 Version: 1.1.1 - ASUS)
ASUS Live Update (x32 Version: 3.2.2 - ASUS)
ASUS Power4Gear Hybrid (Version: 3.0.2 - ASUS)
ASUS Screen Saver (Version: 1.0.1 - ASUS)
ASUS Smart Gesture (x32 Version: 2.2.5 - ASUS)
ASUS Splendid Video Enhancement Technology (x32 Version: 2.01.0005 - ASUS)
ASUS USB Charger Plus (x32 Version: 3.1.0 - ASUS)
ASUS Video DSP (x32 Version: 1.0.000 - )
ASUSDVD (x32 Version: 10.0.4924.52 - CyberLink Corp.)
ASUSDVD (x32 Version: 10.0.4924.52 - CyberLink Corp.) Hidden
AsusVibe2.0 (x32 Version: 2.0.12.309 - ASUSTEK)
ATK Package (x32 Version: 1.0.0030 - ASUS)
Azteca (x32 Version: 2.2.0.97 - WildTangent) Hidden
Bejeweled 3 (x32 Version: 2.2.0.97 - WildTangent) Hidden
BioShock (x32 Version:  - 2K Boston)
BioShock 2 (x32 Version:  - 2K Marin)
BioShock Infinite (x32 Version:  - Irrational Games)
Bitdefender Total Security (Version: 17.23.0.996 - Bitdefender)
Blender (Version: 2.68a - Blender Foundation)
Bonjour (Version: 3.0.0.10 - Apple Inc.)
Combat Arms EU (x32 Version:  - )
Crysis (x32 Version:  - Crytek)
Crysis 2 Maximum Edition (x32 Version:  - Crytek Studios)
Crysis Warhead (x32 Version:  - Crytek)
Cut the Rope (x32 Version: 3.0.2.38 - WildTangent) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (x32 Version: 4.47.1.0333 - Disc Soft Ltd)
Fallout: New Vegas (x32 Version:  - Obsidian Entertainment)
Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Galerie de photos (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
GameSpy Comrade (x32 Version: 1.5.0.156 - GameSpy)
Geeks3D FurMark 1.11.0 (x32 Version:  - Geeks3D)
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
Google Chrome (x32 Version: 32.0.1700.76 - Google Inc.)
Google Earth Plug-in (x32 Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
Google+ Auto Backup (x32 Version: 1.0.21.81 - Google)
Grand Theft Auto IV (x32 Version:  - Rockstar North)
iCloud (Version: 3.1.0.40 - Apple Inc.)
Intel Extreme Tuning Utility (x32 Version: 4.2.0.8 - Intel Corporation)
Intel Extreme Tuning Utility (x32 Version: 4.2.0.8 - Intel Corporation) Hidden
Intel(R) Management Engine Components (x32 Version: 9.5.10.1658 - Intel Corporation)
Intel(R) Processor Graphics (x32 Version: 10.18.10.3308 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 3.0.0.63463 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.27.798.1 - Intel Corporation) Hidden
Intel® Watchdog Timer Driver (Intel® WDT) (x32 Version:  - Intel Corporation)
iTunes (Version: 11.1.3.8 - Apple Inc.)
Java 7 Update 40 (x32 Version: 7.0.400 - Oracle)
Java 7 Update 45 (64-bit) (Version: 7.0.450 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JDownloader 0.9 (x32 Version: 0.9 - AppWork GmbH)
Kyocera Product Library (Version: 3.3.0728 - KYOCERA Document Solutions Inc.)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322 - Microsoft)
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.67.0 - Microsoft Corporation)
Microsoft Office (x32 Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft SkyDrive (HKCU Version: 17.0.2015.0811 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (x32 Version: 3.5.8080.0 - Microsoft Corporation) Hidden
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (Version: 3.5.8080.0 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (Version: 2.2.173.0 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (Version: 2.2.173.0 - Microsoft Corporation) Hidden
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Maintenance Service (x32 Version: 24.2.0 - Mozilla)
Mozilla Thunderbird 24.2.0 (x86 en-US) (x32 Version: 24.2.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MyBitCast 2.0 (x32 Version: 2.0 - ASUS)
NVIDIA GeForce Experience 1.8.1 (Version: 1.8.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 331.82 (Version: 331.82 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.142.992 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Optimus Update 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA ShadowPlay 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 331.82 (Version: 331.82 - NVIDIA Corporation) Hidden
NVIDIA Update 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.19 (Version: 1.2.19 - NVIDIA Corporation)
OpenOffice 4.0.0 (x32 Version: 4.00.9702 - Apache Software Foundation)
PDF Settings CC (x32 Version: 12.0 - Adobe Systems Incorporated) Hidden
Peggle (x32 Version: 2.2.0.95 - WildTangent) Hidden
Penguins! (x32 Version: 2.2.0.98 - WildTangent) Hidden
Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Picasa 3 (x32 Version: 3.9 - Google, Inc.)
Qualcomm Atheros Bluetooth Suite (64) (Version: 8.0.0.226 - Qualcomm Atheros Communications)
Qualcomm Atheros Client Installation Program (x32 Version: 10.0 - Qualcomm Atheros)
Raccolta foto (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (x32 Version: 8.11.201.2013 - Realtek)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6890 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (x32 Version: 6.2.8400.39032 - Realtek Semiconductor Corp.)
Secure Banking Version 1.5.2 (x32 Version: 1.5.2 - Hopfgartner Niklas)
Shared C Run-time for x64 (Version: 10.0.0 - McAfee)
SHIELD Streaming (Version: 1.6.85 - NVIDIA Corporation) Hidden
Spotify (HKCU Version: 0.9.6.81.gd359a796 - Spotify AB)
Steam (x32 Version: 1.0.0.0 - Valve Corporation)
SweetFX Configurator (HKCU Version: 1.3.3.32 - SweetFX Configurator)
Tales of Lagoona (x32 Version: 2.2.0.110 - WildTangent) Hidden
TechPowerUp GPU-Z (x32 Version:  - TechPowerUp)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Uplay (x32 Version: 2.0 - Ubisoft)
VLC media player 2.1.1 (Version: 2.1.1 - VideoLAN)
WildTangent Games (x32 Version: 1.0.0.0 - WildTangent)
WildTangent Games App (x32 Version: 4.0.10.5 - WildTangent) Hidden
Windows Driver Package - Cambridge Silicon Radio Ltd. (CSRBC) USB  (04/21/2011 01.0.0.0) (Version: 04/21/2011 01.0.0.0 - Cambridge Silicon Radio Ltd.)
Windows Live (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows-Treiberpaket - ASUS (ATP) Mouse  (09/17/2013 1.0.0.186) (Version: 09/17/2013 1.0.0.186 - ASUS)
WinFlash (x32 Version: 2.42.0 - ASUS)
WinRAR 5.00 (64-bit) (Version: 5.00.0 - win.rar GmbH)
XnView 2.05 (x32 Version: 2.05 - Gougelet Pierre-e)

==================== Restore Points  =========================

09-01-2014 10:58:22 DirectX wurde installiert
12-01-2014 21:31:58 avast! antivirus system restore point
16-01-2014 09:29:12 Windows Update
17-01-2014 14:06:26 DirectX wurde installiert
22-01-2014 13:00:14 Entfernt Far Cry 3

==================== Hosts content: ==========================

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {24D65D33-1BB6-4218-8C9A-93BAD5F7AD58} - System32\Tasks\AdobeAAMUpdater-1.0-LuciensNote-Gastkonto => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-09-25] (Adobe Systems Incorporated)
Task: {2AF41336-0150-4FC9-B1C4-303AEA8AB2F7} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2013-04-29] (ASUS)
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {2DFE22E7-DDC9-4DF6-979F-0F0302665CED} - System32\Tasks\Bitdefender Auto-Scan => C:\Program Files\Bitdefender\Bitdefender\mtasklaunch.exe [2013-06-19] (Bitdefender)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3A11AC82-0061-4F37-9E53-8E776FA1AF63} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {4A723241-2A57-419E-88DB-131E0F4EE453} - System32\Tasks\ASUS InstantOn Config => C:\Program Files\ASUS\P4G\InsOnCfg.exe
Task: {588E869A-469C-4E6A-9158-E9C69DF40653} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2013-03-20] (ASUSTeK Computer Inc.)
Task: {5C446892-083C-441F-B1A1-ACCD00580988} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-05-13] (Microsoft)
Task: {67D0BA4D-D8A0-4BE4-9946-9D1B29003D15} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2013-03-26] (ASUSTek Computer Inc.)
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {71CF2ACD-5ECE-44AF-B70E-0FB86EFAD5E5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-19] (Google Inc.)
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77C3AEEE-3C58-4A38-ACD3-672BDA247D8E} - System32\Tasks\AsusVibeSchedule => C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe [2013-01-04] ()
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {A813CD6F-CBF7-44E8-8680-9351C17F9CD4} - System32\Tasks\AdobeAAMUpdater-1.0-LuciensNote-Lucien => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-09-25] (Adobe Systems Incorporated)
Task: {A96BC286-FCDE-4AB0-9AD9-0101AB9992A7} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {AB1225C5-F405-4879-86FC-01567E0BE790} - System32\Tasks\ASUS Splendid ColorU => C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe [2013-02-26] (ASUSTeK Computer Inc.)
Task: {B15AD5C5-8842-43CF-8012-7BB0A738725D} - System32\Tasks\SomotoUpdateCheckerAutoStart => C:\Users\Lucien\AppData\Local\FilesFrog Update Checker\update_checker.exe <==== ATTENTION
Task: {B50DB3E1-90FE-41F6-8364-55236F316E7E} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2013-09-23] (AsusTek)
Task: {B9BDCE1F-9E3D-4592-B896-2362E5B7542D} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {C5DC00DB-616B-464F-BC49-6AF0D0337FB8} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
Task: {CD4FDD82-8274-4996-9887-36AD37BEAFAA} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2012-11-28] (ASUS)
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {DA8DF7E5-FD16-4EF9-8B88-FCA784BEFFEB} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-01-06] (Microsoft Corporation)
Task: {DD395EDC-2C10-4EEC-80EC-DA41AB982423} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-19] (Google Inc.)
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {EE52212A-8910-4CEF-B193-410CBAED2F8C} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2013-03-20] (ASUSTeK Computer Inc.)
Task: {F782D995-86D7-4704-A400-0D45AF92B7AB} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {FD2BBDEB-EFC8-49FB-94A4-305C0766547A} - System32\Tasks\ASUS Console => C:\Program Files\ASUS\ASUS Console\ASUS Console Starter.exe [2013-04-12] (ASUSTek Computer Inc.)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-10-16 18:02 - 2013-10-16 18:02 - 03358064 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll
2014-01-13 22:53 - 2013-06-19 11:45 - 00265080 _____ () C:\Program Files\Bitdefender\Bitdefender\txmlutil.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\Gast\Downloads\Windows-KB890830-x64-V5.8.exe:BDU
AlternateDataStreams: C:\Users\Lucien\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\Lucien\Desktop\adwcleaner.exe:BDU
AlternateDataStreams: C:\Users\Lucien\Desktop\Defogger.exe:BDU
AlternateDataStreams: C:\Users\Lucien\Desktop\esetsmartinstaller_enu.exe:BDU
AlternateDataStreams: C:\Users\Lucien\Desktop\JRT.exe:BDU
AlternateDataStreams: C:\Users\Lucien\Desktop\SecurityCheck.exe:BDU
AlternateDataStreams: C:\Users\Lucien\Desktop\TFC.exe:BDU
AlternateDataStreams: C:\Users\Lucien\Downloads\HiJackThis204.exe:BDU

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Could not start eventlog service, could not read events.

Der angeforderte Dienst wurde bereits gestartet.

Sie erhalten weitere Hilfe, wenn Sie NET HELPMSG 2182 eingeben.


==================== Memory info =========================== 

Percentage of memory in use: 13%
Total physical RAM: 8075.37 MB
Available physical RAM: 7023.35 MB
Total Pagefile: 16267.37 MB
Available Pagefile: 15314.97 MB
Total Virtual: 131072 MB
Available Virtual: 131071.82 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:372.26 GB) (Free:261.49 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (DATA) (Fixed) (Total:537.6 GB) (Free:424.58 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 115DA0F7)

Partition: GPT Partition Type
==================== End Of Log ============================

Gruß KitsuneNoir

sunjojo · 23.01.2014, 23:27

Code:

ATTFilter

C:\Users\Lucien\Desktop\gmer.txt

Laut deinen Logfiles hast du bereits einen Scan mit GMER durchgeführt. Poste mir bitte dieses Logfile.

Code:

ATTFilter

(Thisisu) C:\Users\Lucien\Desktop\JRT.exe
C:\Users\Lucien\Desktop\adwcleaner.exe
(ESET) C:\Users\Lucien\Desktop\esetsmartinstaller_enu.exe

Hast du mit dem AdwCleaner, ESET oder JRT bereits Scans druchgeführt? Wenn ja, poste bitte die entsprechenden Logfiles

.

Führe folgenden Schritt im Abgesicherten Modus mit Netzwerktreibern durch.
Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

2014-01-21 09:39 - 2014-01-21 09:39 - 00003258 _____ C:\WINDOWS\System32\Tasks\SomotoUpdateCheckerAutoStart
C:\ProgramData\SetStretch.exe
cmd: type "C:\ProgramData\SetStretch.VBS"
C:\ProgramData\SetStretch.VBS

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Führe folgende Schritte im Normalen Modus durch (berichte mir, ob diese funktioniert haben).

Schritt 2
Downloade dir bitte

Farbar Service Scanner

Starte das Tool mit Doppelklick auf die FSS.exe
Gehe sicher, dass folgende Optionen angehakt sind.
- Internet Services
- Windows Firewall
- System Restore
- Security Center/Action Center
- Windows Update
- Windows Defender
- Other Services
Klicke auf Scan.
Wenn das Tool fertig ist, wird es eine FSS.txt in dem Verzeichnis erstellen, wo das Tool gelaufen ist.

Poste bitte den Inhalt hier.

Schritt 3
Starte noch einmal FRST.

Ändere keine der Voreinstellungen und drücke auf Scan.
Wenn der Scan abgeschlossen ist, wird ein neues Logfile FRST.txt erstellt und auf dem Desktop gespeichert.
Poste den Inhalt dieses Logfiles bitte hier in deinen Thread.

Hast du noch die oben beschriebenen Probleme?

Poste folgende Logfiles in deiner nächsten Antwort:

FRST-Fix
FSS-Scan
FRST-Scan

KitsuneNoir · 24.01.2014, 19:40

Hey,
also erstmal die GMER als zip und die adw,jrt und eset logs...

AdwCleaner[S0]
AdwCleaner Logfile:

Code:

ATTFilter

# AdwCleaner v3.001 - Report created 31/08/2013 at 17:00:11
# Updated 24/08/2013 by Xplode
# Operating System : Windows 8  (64 bits)
# Username : Lucien - LUCIENSNOTE
# Running from : C:\Users\Lucien\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\Program Files (x86)\Conduit
Folder Deleted : C:\Program Files (x86)\Common Files\AVG Secure Search
Folder Deleted : C:\Users\Lucien\AppData\Local\cre
Folder Deleted : C:\Users\Lucien\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Lucien\AppData\LocalLow\SimplyTech
Folder Deleted : C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
File Deleted : C:\END

***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Deleted : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\Software\AVG Security Toolbar

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16660


-\\ Google Chrome v29.0.1547.62

[ File : C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [4386 octets] - [31/08/2013 16:59:00]
AdwCleaner[S0].txt - [4290 octets] - [31/08/2013 17:00:11]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4350 octets] ##########

--- --- ---
AdwCleaner Logfile:

Code:

ATTFilter

# AdwCleaner v3.017 - Bericht erstellt am 22/01/2014 um 00:03:25
# Aktualisiert 12/01/2014 von Xplode
# Betriebssystem : Windows 8.1  (64 bits)
# Benutzername : Lucien - LUCIENSNOTE
# Gestartet von : C:\Users\Lucien\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****

AdwCleaner[R0]

Code:

ATTFilter

# AdwCleaner v3.001 - Report created 31/08/2013 at 16:59:00
# Updated 24/08/2013 by Xplode
# Operating System : Windows 8  (64 bits)
# Username : Lucien - LUCIENSNOTE
# Running from : C:\Users\Lucien\Desktop\adwcleaner.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

File Found : C:\END
Folder Found : C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Folder Found C:\Program Files (x86)\Common Files\AVG Secure Search
Folder Found C:\Program Files (x86)\Conduit
Folder Found C:\ProgramData\Babylon
Folder Found C:\Users\Lucien\AppData\Local\cre
Folder Found C:\Users\Lucien\AppData\LocalLow\Conduit
Folder Found C:\Users\Lucien\AppData\LocalLow\SimplyTech

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKLM\Software\AVG Security Toolbar
Key Found : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Found : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Found : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Found : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Found : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Found : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Found : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Found : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Found : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Found : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16660


-\\ Google Chrome v29.0.1547.62

[ File : C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [4238 octets] - [31/08/2013 16:59:00]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [4298 octets] ##########

--- --- ---
AdwCleaner Logfile:

Code:

ATTFilter

# AdwCleaner v3.017 - Bericht erstellt am 22/01/2014 um 00:01:42
# Aktualisiert 12/01/2014 von Xplode
# Betriebssystem : Windows 8.1  (64 bits)
# Benutzername : Lucien - LUCIENSNOTE
# Gestartet von : C:\Users\Lucien\Desktop\adwcleaner.exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Datei Gefunden : C:\END
Datei Gefunden : C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_app.mam.conduit.com_0.localstorage
Datei Gefunden : C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_app.mam.conduit.com_0.localstorage-journal
Datei Gefunden : C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www2.delta-search.com_0.localstorage
Datei Gefunden : C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www2.delta-search.com_0.localstorage-journal
Datei Gefunden : C:\WINDOWS\System32\roboot64.exe
Ordner Gefunden C:\Program Files (x86)\Mobogenie
Ordner Gefunden C:\Program Files (x86)\MyPC Backup
Ordner Gefunden C:\Program Files (x86)\Wajam
Ordner Gefunden C:\ProgramData\Babylon
Ordner Gefunden C:\ProgramData\boost_interprocess
Ordner Gefunden C:\Users\Lucien\AppData\Local\Babylon
Ordner Gefunden C:\Users\Lucien\AppData\Local\FilesFrog Update Checker
Ordner Gefunden C:\Users\Lucien\AppData\Local\Mobogenie
Ordner Gefunden C:\Users\Lucien\AppData\LocalLow\Softonic
Ordner Gefunden C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker
Ordner Gefunden C:\Users\Lucien\AppData\Roaming\Systweak
Ordner Gefunden C:\Users\Lucien\Documents\Mobogenie

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gefunden : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gefunden : HKCU\Software\Softonic
Schlüssel Gefunden : HKCU\Software\Somoto
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gefunden : [x64] HKCU\Software\Softonic
Schlüssel Gefunden : [x64] HKCU\Software\Somoto
Schlüssel Gefunden : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gefunden : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FilesFrog Update Checker
Schlüssel Gefunden : HKLM\Software\systweak
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon]

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16384


-\\ Google Chrome v32.0.1700.76

[ Datei : C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ Datei : C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [8302 octets] - [31/08/2013 15:59:00]
AdwCleaner[S0].txt - [4434 octets] - [31/08/2013 16:00:11]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [8422 octets] ##########

--- --- ---

Eset

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=fb51889e9531004db1d4bd0fb39b748e
# engine=16781
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-01-24 05:55:57
# local_time=2014-01-24 06:55:57 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.2.9200 NT 
# compatibility_mode=5893 16776574 100 94 10071555 15467450 0 0
# scanned=279688
# found=1
# cleaned=1
# scan_time=26257
sh=54CC556CE00024BFE21CE105A292522EF4B8E257 ft=0 fh=0000000000000000 vn="HTML/ScrInject.B.Gen virus (deleted - quarantined)" ac=C fn="C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Cache\f_007465"

JRT

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.0 (01.07.2014:1)
OS: Windows 8.1 x64
Ran by Lucien on 24.01.2014 at 10:53:50,13
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 24.01.2014 at 11:10:03,42
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Gruß KitsuneNoir

KitsuneNoir · 25.01.2014, 16:14

1.

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 22-01-2014 02
Ran by Lucien at 2014-01-24 19:16:02 Run:1
Running from C:\Users\Lucien\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
2014-01-21 09:39 - 2014-01-21 09:39 - 00003258 _____ C:\WINDOWS\System32\Tasks\SomotoUpdateCheckerAutoStart
C:\ProgramData\SetStretch.exe
cmd: type "C:\ProgramData\SetStretch.VBS"
C:\ProgramData\SetStretch.VBS
*****************

C:\WINDOWS\System32\Tasks\SomotoUpdateCheckerAutoStart => Moved successfully.
C:\ProgramData\SetStretch.exe => Moved successfully.

=========  type "C:\ProgramData\SetStretch.VBS" =========

set exe=CreateObject("WScript.shell")
res=exe.run("cmd.exe /c C:\ProgramData\SetStretch.cmd",k,true)

========= End of CMD: =========

C:\ProgramData\SetStretch.VBS => Moved successfully.

==== End of Fixlog ====

2.

Code:

ATTFilter

Farbar Service Scanner Version: 08-01-2014
Ran by Lucien (administrator) on 24-01-2014 at 19:19:43
Running from "C:\Users\Lucien\Desktop"
Microsoft Windows 8.1  (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Attempt to access Google IP returned error. Google IP is offline
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy: 
==================
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall"=DWORD:0


System Restore:
============

System Restore Disabled Policy: 
========================


Action Center:
============


Windows Update:
============

Windows Autoupdate Disabled Policy: 
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend: ""%ProgramFiles%\Windows Defender\MsMpEng.exe"".


Windows Defender Disabled Policy: 
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll
[2013-08-22 14:25] - [2013-08-22 14:25] - 0029184 ____A (Microsoft Corporation) 6E2271ED0C3E95B8E29F3752B91B9E84

C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys
[2014-01-16 14:05] - [2013-11-05 21:12] - 2551128 ____A (Microsoft Corporation) 3D9A5AC880D7AA2305812D665D24ED23

C:\Windows\System32\dnsrslvr.dll
[2013-11-17 15:12] - [2013-10-08 06:48] - 0255488 ____A (Microsoft Corporation) 5BAF7714E68F93515A937A3FA8587EF9

C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll
[2013-11-13 09:20] - [2013-10-12 22:48] - 0828416 ____A (Microsoft Corporation) 6468B696C65775D51A06615830E0E79D

C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll
[2013-11-17 15:12] - [2013-10-07 03:13] - 3532288 ____A (Microsoft Corporation) 86D0BF4F792053A50D6EE43DFA5837A5

C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MsMpEng.exe => MD5 is legit
C:\Windows\System32\ipnathlp.dll
[2013-11-17 15:12] - [2013-09-14 10:11] - 0433664 ____A (Microsoft Corporation) F4414F57DF2CECB8FC969AA43A6B0D50

C:\Windows\System32\iphlpsvc.dll
[2013-11-17 15:12] - [2013-10-08 05:50] - 0903168 ____A (Microsoft Corporation) DFC4050D58565ADBEE793A8D4AEBDAE6

C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****

3.

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-01-2014 02
Ran by Lucien (administrator) on LUCIENSNOTE on 24-01-2014 19:21:38
Running from C:\Users\Lucien\Desktop
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\vsserv.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(ASUS) C:\Program Files\ASUS\P4G\InsOnSrv.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender Safebox\safeboxservice.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files\ASUS\P4G\InsOnWMI.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe\livecomm.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS Console\ASUS Console Starter.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\bdagent.exe
(Secure Banking) C:\Program Files (x86)\Secure Banking\SecureBanking.exe
(Akamai Technologies, Inc.) C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe
() C:\Program Files (x86)\Secure Banking\sbservice.exe
(Akamai Technologies, Inc.) C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13530184 2013-04-22] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1278024 2013-03-08] (Realtek Semiconductor)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-09-25] (Adobe Systems Incorporated)
HKLM\...\Run: [PrnStatusMX] - C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe [1240064 2012-07-04] (Marvell Semiconductor, Inc.)
HKLM\...\Run: [ShadowPlay] - C:\WINDOWS\system32\nvspcap64.dll [1100248 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [Bdagent] - C:\Program Files\Bitdefender\Bitdefender\bdagent.exe [1735872 2014-01-13] (Bitdefender)
HKLM-x32\...\Run: [ASUSPRP] - C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-04-26] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-01-15] (cyberlink)
HKLM-x32\...\Run: [ASUS InstantKey] - C:\Program Files (x86)\ASUS\ASUS Instant Key\Ikey_start.exe [13936 2013-04-16] (ASUS)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2237328 2013-11-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-04-24] ( (Atheros Communications))
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\steam.exe [1815464 2014-01-07] (Valve Corporation)
HKCU\...\Run: [SecureBanking] - C:\Program Files (x86)\Secure Banking\SecureBanking.exe [507904 2013-06-30] (Secure Banking)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Lucien\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-10] (Spotify Ltd)
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
HKCU\...\Run: [Bitdefender-Geldbörse-Agent] - C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [561672 2014-01-13] (Bitdefender)
HKCU\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] - C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [612696 2014-01-13] (Bitdefender)
HKU\Gast\...\Run: [Spotify] - C:\Users\Gast\AppData\Roaming\Spotify\Spotify.exe [6118400 2014-01-20] (Spotify Ltd)
HKU\Gast\...\Run: [Spotify Web Helper] - C:\Users\Gast\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-01-20] (Spotify Ltd)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [168616 2013-11-14] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [141336 2013-11-14] (NVIDIA Corporation)
Startup: C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;form=IE10TR&amp;src=IE10TR&amp;pc=ASU2JS
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;form=IE10TR&amp;src=IE10TR&amp;pc=ASU2JS
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\pmbxie.dll (Bitdefender)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxie.dll (Bitdefender)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Chrome: 
=======
CHR HomePage: hxxp://www.google.de/
CHR Extension: (Google Docs) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-14]
CHR Extension: (Google Drive) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-19]
CHR Extension: (YouTube) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-19]
CHR Extension: (Bitdefender Wallet) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccahoghmggldkcdjiebjkidpfongdfbl [2014-01-13]
CHR Extension: (Google Search) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-19]
CHR Extension: (Google Wallet) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR Extension: (Gmail) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-19]
CHR HKLM-x32\...\Chrome\Extension: [ccahoghmggldkcdjiebjkidpfongdfbl] - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxcr.crx [2014-01-13]

==================== Services (Whitelisted) =================

U3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-12-18] (Adobe Systems)
U2 ASUS InstantOn; C:\Program Files\ASUS\P4G\InsOnSrv.exe [277120 2013-04-29] (ASUS)
U2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [310400 2013-04-24] (Windows (R) Win 7 DDK provider)
U4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender\bdparentalservice.exe [77632 2013-11-21] (Bitdefender)
U2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [247768 2013-01-15] (CyberLink)
U3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
U2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-04-11] (Intel Corporation)
U2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
U2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
U2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
U2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
U2 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [94624 2013-07-08] (Bitdefender)
U2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe [67320 2013-10-07] (Bitdefender)
U2 VSSERV; C:\Program Files\Bitdefender\Bitdefender\vsserv.exe [1507248 2013-11-15] (Bitdefender)
U3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
U3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
U2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [18384 2013-09-04] (Intel(R) Corporation)
U2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-04-24] (Atheros)

==================== Drivers (Whitelisted) ====================

U0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
U3 ATP; C:\Windows\System32\drivers\AsusTP.sys [70416 2013-09-23] (ASUS Corporation)
U0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [727592 2013-07-19] (BitDefender)
U3 avchv; C:\Windows\system32\DRIVERS\avchv.sys [261056 2014-01-13] (BitDefender)
U3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [601360 2013-07-19] (BitDefender)
U3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
U0 bdelam; C:\Windows\System32\drivers\bdelam.sys [23568 2013-09-08] (Bitdefender)
U1 BdfNdisf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys [98768 2013-07-24] (BitDefender LLC)
U1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107008 2013-07-29] (BitDefender LLC)
U3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-07-02] (Bitdefender SRL)
U3 BDSandBox; C:\WINDOWS\system32\drivers\bdsandbox.sys [82824 2013-11-04] (BitDefender SRL)
U1 BDVEDISK; C:\Windows\system32\DRIVERS\bdvedisk.sys [79192 2013-07-30] (BitDefender)
U3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-04-24] (Qualcomm Atheros)
U3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
U3 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2013-09-01] (DT Soft Ltd)
U0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [150256 2013-08-23] (BitDefender LLC)
U3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
U3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
U0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
U0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)
U2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [26328 2013-07-23] (Intel Corporation)
U3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
U0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
U3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
U3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-07-26] (Intel Corporation)
U3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
U3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
U3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
U3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
U0 rtcrfilt64; C:\Windows\System32\DRIVERS\rtcrfilt64.sys [19600 2000-01-01] (Realtek Semiconductor Corp.)
U3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)
U0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
U3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16152 2013-09-03] ()
U0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [389240 2013-08-07] (BitDefender S.R.L.)
U3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
U3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
U3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [x]
U3 GPU-Z; \??\C:\Users\Lucien\AppData\Local\Temp\GPU-Z.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-24 19:21 - 2014-01-24 19:21 - 00000000 ____D C:\Users\Lucien\Desktop\Logs alt
2014-01-24 19:19 - 2014-01-24 19:19 - 00003293 _____ C:\Users\Lucien\Desktop\FSS.txt
2014-01-24 19:17 - 2014-01-24 19:17 - 00361185 _____ (Farbar) C:\Users\Lucien\Desktop\FSS.exe
2014-01-24 19:12 - 2014-01-22 00:03 - 00008373 _____ C:\Users\Lucien\Desktop\AdwCleaner[S0].txt
2014-01-24 19:12 - 2014-01-22 00:02 - 00008522 _____ C:\Users\Lucien\Desktop\AdwCleaner[R0].txt
2014-01-24 16:48 - 2014-01-24 16:48 - 00032847 _____ C:\Users\Lucien\Desktop\gmer.zip
2014-01-24 11:34 - 2014-01-24 11:34 - 00000000 ____D C:\Program Files (x86)\ESET
2014-01-24 11:10 - 2014-01-24 11:10 - 00000749 _____ C:\Users\Lucien\Desktop\JRT.txt
2014-01-24 10:53 - 2014-01-24 10:53 - 00000000 ____D C:\WINDOWS\ERUNT
2014-01-22 21:41 - 2014-01-24 19:21 - 00020296 _____ C:\Users\Lucien\Desktop\FRST.txt
2014-01-22 21:41 - 2014-01-22 21:41 - 00000000 ____D C:\Users\Lucien\Desktop\FRST-OlderVersion
2014-01-22 21:23 - 2014-01-22 21:23 - 00022688 _____ C:\Users\Lucien\Downloads\Addition.txt
2014-01-22 21:22 - 2014-01-22 21:23 - 00046051 _____ C:\Users\Lucien\Downloads\FRST.txt
2014-01-22 13:59 - 2014-01-22 21:41 - 02077696 _____ (Farbar) C:\Users\Lucien\Desktop\FRST64.exe
2014-01-22 13:49 - 2014-01-22 13:49 - 00003576 _____ C:\WINDOWS\System32\Tasks\Bitdefender Auto-Scan
2014-01-22 12:30 - 2014-01-22 12:30 - 00000168 _____ C:\Users\Lucien\defogger_reenable
2014-01-22 00:11 - 2014-01-17 20:25 - 00379904 _____ C:\Users\Lucien\Desktop\gmer.exe
2014-01-22 00:10 - 2012-12-19 16:10 - 00000000 ____D C:\Users\Lucien\Desktop\data
2014-01-22 00:10 - 2011-10-24 13:35 - 00000000 ____D C:\Users\Lucien\Desktop\Tweaking.com - Windows Repair
2014-01-22 00:10 - 2009-10-20 21:47 - 00055936 _____ () C:\Users\Lucien\Desktop\Setup.exe
2014-01-21 23:54 - 2014-01-22 21:41 - 00000000 ____D C:\FRST
2014-01-21 22:19 - 2014-01-21 22:19 - 00000000 ____D C:\WINDOWS\LastGood
2014-01-21 15:06 - 2014-01-21 15:06 - 01037068 _____ (Thisisu) C:\Users\Lucien\Desktop\JRT.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00987425 _____ C:\Users\Lucien\Desktop\SecurityCheck.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00448512 _____ (OldTimer Tools) C:\Users\Lucien\Desktop\TFC.exe
2014-01-21 15:05 - 2014-01-21 15:05 - 01236282 _____ C:\Users\Lucien\Desktop\adwcleaner.exe
2014-01-21 15:00 - 2014-01-21 15:01 - 02347384 _____ (ESET) C:\Users\Lucien\Desktop\esetsmartinstaller_enu.exe
2014-01-21 13:15 - 2014-01-21 13:25 - 24859352 _____ (Microsoft Corporation) C:\Users\Gast\Downloads\Windows-KB890830-x64-V5.8.exe
2014-01-21 10:40 - 2014-01-22 14:01 - 00000000 ____D C:\Users\Gast\AppData\Local\My Games
2014-01-21 10:18 - 2014-01-21 10:18 - 00050477 _____ C:\Users\Lucien\Desktop\Defogger.exe
2014-01-21 10:12 - 2014-01-21 10:12 - 00000000 ____D C:\Users\Gast\AppData\Roaming\QuickScan
2014-01-21 09:38 - 2014-01-21 09:38 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Spotydl
2014-01-21 08:33 - 2014-01-21 08:33 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2014-01-20 16:10 - 2013-12-03 13:49 - 00000000 ____D C:\Users\Gast\Downloads\settings
2014-01-20 15:53 - 2014-01-20 15:53 - 00000000 ____D C:\Users\Gast\AppData\Local\NVIDIA Corporation
2014-01-20 15:52 - 2014-01-21 08:37 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Bitdefender
2014-01-20 15:52 - 2014-01-20 15:52 - 00000385 _____ C:\Users\Gast\AppData\Roaminguser_gensett.xml
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\Documents\Bluetooth Folder
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\AppData\Local\BMExplorer
2014-01-20 15:51 - 2014-01-20 15:51 - 00000000 ____D C:\Users\Lucien\Documents\AdobeStockPhotos
2014-01-19 21:21 - 2014-01-19 08:38 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-01-19 18:22 - 2014-01-19 18:22 - 00305304 _____ C:\WINDOWS\Minidump\011914-32203-01.dmp
2014-01-19 18:22 - 2014-01-19 18:22 - 00000000 ____D C:\WINDOWS\Minidump
2014-01-17 15:05 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2014-01-17 15:05 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2014-01-17 13:50 - 2014-01-20 13:49 - 00000000 ____D C:\Users\Lucien\Downloads\backups
2014-01-17 13:42 - 2014-01-19 18:46 - 00012554 _____ C:\Users\Lucien\Downloads\hijackthis.log
2014-01-17 13:42 - 2014-01-17 13:42 - 00388608 _____ (Trend Micro Inc.) C:\Users\Lucien\Downloads\HiJackThis204.exe
2014-01-17 09:54 - 2014-01-17 09:54 - 00000385 _____ C:\Users\Lucien\AppData\Roaminguser_gensett.xml
2014-01-16 14:05 - 2013-12-11 08:55 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-01-16 14:05 - 2013-12-09 01:34 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-01-16 14:05 - 2013-12-09 01:04 - 00980480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-01-16 14:05 - 2013-11-27 16:34 - 03210528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2014-01-16 14:05 - 2013-11-27 16:27 - 00809872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-01-16 14:05 - 2013-11-27 15:00 - 00663680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-01-16 14:05 - 2013-11-27 14:47 - 02804528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2014-01-16 14:05 - 2013-11-27 13:02 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ipnat.sys
2014-01-16 14:05 - 2013-11-27 11:54 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-01-16 14:05 - 2013-11-27 11:24 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll
2014-01-16 14:05 - 2013-11-27 11:08 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-01-16 14:05 - 2013-11-27 10:46 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll
2014-01-16 14:05 - 2013-11-27 10:41 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2014-01-16 14:05 - 2013-11-27 10:17 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-01-16 14:05 - 2013-11-27 10:10 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2014-01-16 14:05 - 2013-11-27 09:58 - 01503232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-01-16 14:05 - 2013-11-27 09:56 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll
2014-01-16 14:05 - 2013-11-27 09:20 - 04106240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-01-16 14:05 - 2013-11-27 05:01 - 00385614 _____ C:\WINDOWS\system32\ApnDatabase.xml
2014-01-16 14:05 - 2013-11-26 14:22 - 01928144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2014-01-16 14:05 - 2013-11-26 14:20 - 02131120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-01-16 14:05 - 2013-11-26 14:20 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-01-16 14:05 - 2013-11-26 14:20 - 01374384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-01-16 14:05 - 2013-11-26 12:50 - 01371312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2014-01-16 14:05 - 2013-11-26 12:44 - 02142936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-01-16 14:05 - 2013-11-26 12:44 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-01-16 14:05 - 2013-11-26 11:13 - 04191232 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-01-16 14:05 - 2013-11-26 10:21 - 18577920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-01-16 14:05 - 2013-11-26 09:28 - 13925888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-01-16 14:05 - 2013-11-25 02:45 - 00142680 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-01-16 14:05 - 2013-11-25 02:32 - 01119064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2014-01-16 14:05 - 2013-11-25 00:30 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2014-01-16 14:05 - 2013-11-25 00:28 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2014-01-16 14:05 - 2013-11-23 13:47 - 00032088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-01-16 14:05 - 2013-11-23 12:49 - 21196664 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-01-16 14:05 - 2013-11-23 09:19 - 18642504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-01-16 14:05 - 2013-11-23 08:13 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\bi.dll
2014-01-16 14:05 - 2013-11-23 08:13 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys
2014-01-16 14:05 - 2013-11-23 08:08 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-01-16 14:05 - 2013-11-23 05:50 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-01-16 14:05 - 2013-11-23 04:57 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2014-01-16 14:05 - 2013-11-23 04:48 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2014-01-16 14:05 - 2013-11-23 04:25 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2014-01-16 14:05 - 2013-11-23 04:25 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2014-01-16 14:05 - 2013-11-23 04:19 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-01-16 14:05 - 2013-11-23 04:15 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-01-16 14:05 - 2013-11-21 07:58 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceregistration.dll
2014-01-16 14:05 - 2013-11-21 07:26 - 01415680 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-01-16 14:05 - 2013-11-16 06:11 - 00764856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-01-16 14:05 - 2013-11-15 19:19 - 00669344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-01-16 14:05 - 2013-11-15 15:59 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2014-01-16 14:05 - 2013-11-15 15:25 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2014-01-16 14:05 - 2013-11-15 15:08 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-01-16 14:05 - 2013-11-15 14:24 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-01-16 14:05 - 2013-11-05 21:12 - 02551128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-01-16 14:05 - 2013-10-31 01:29 - 00745336 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-01-16 14:05 - 2013-10-31 00:41 - 00552624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2014-01-15 23:39 - 2013-12-09 01:15 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-01-15 23:39 - 2013-11-27 16:36 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-01-15 23:39 - 2013-11-27 12:41 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe
2014-01-15 23:39 - 2013-11-27 11:34 - 00138240 _____ C:\WINDOWS\system32\OEMLicense.dll
2014-01-15 23:39 - 2013-11-27 10:54 - 00103936 _____ C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-01-15 23:39 - 2013-11-27 09:48 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 23:39 - 2013-11-27 09:45 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-01-15 23:39 - 2013-11-27 09:40 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 23:39 - 2013-11-27 09:38 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-01-15 23:39 - 2013-11-27 09:17 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-01-15 23:39 - 2013-11-27 09:12 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-01-13 23:23 - 2014-01-13 23:23 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\system32\bdsandboxuiskin32.dll
2014-01-13 23:20 - 2014-01-19 16:08 - 00000000 ____D C:\Program Files (x86)\McAfee Security Scan
2014-01-13 23:20 - 2014-01-13 23:20 - 00002041 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-13 22:54 - 2014-01-13 22:54 - 00620542 _____ C:\ProgramData\1389649682.bdinstall.bin
2014-01-13 22:54 - 2014-01-13 22:54 - 00000385 _____ C:\WINDOWS\system32\user_gensett.xml
2014-01-13 22:53 - 2014-01-13 23:23 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\SysWOW64\bdsandboxuiskin32.dll
2014-01-13 22:53 - 2014-01-13 22:54 - 00000000 ____D C:\ProgramData\BDLogging
2014-01-13 22:53 - 2014-01-13 22:53 - 00002212 _____ C:\Users\Public\Desktop\Bitdefender Safepay.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00002164 _____ C:\Users\Public\Desktop\Bitdefender Total Security.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2014-01-13 22:53 - 2013-11-04 15:47 - 00082824 _____ (BitDefender SRL) C:\WINDOWS\system32\Drivers\bdsandbox.sys
2014-01-13 22:53 - 2013-09-08 19:04 - 00023568 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bdelam.sys
2014-01-13 22:53 - 2013-07-30 17:41 - 00079192 _____ (BitDefender) C:\WINDOWS\system32\Drivers\bdvedisk.sys
2014-01-13 22:53 - 2013-07-24 17:19 - 00098768 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\bdfndisf6.sys
2014-01-13 22:53 - 2007-04-11 10:11 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\capicom.dll
2014-01-13 22:52 - 2014-01-13 23:23 - 00261056 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avchv.sys
2014-01-13 22:52 - 2014-01-13 22:54 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Bitdefender
2014-01-13 22:52 - 2013-07-19 17:08 - 00601360 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avckf.sys
2014-01-13 22:52 - 2013-07-19 17:04 - 00727592 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avc3.sys
2014-01-13 22:48 - 2014-01-13 23:23 - 00000000 ____D C:\ProgramData\Bitdefender
2014-01-13 22:48 - 2014-01-13 22:52 - 00000000 ____D C:\Program Files\Bitdefender
2014-01-13 22:48 - 2014-01-13 22:48 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\QuickScan
2014-01-13 22:48 - 2013-11-04 15:47 - 00084848 _____ (BitDefender SRL) C:\WINDOWS\system32\BDSandBoxUISkin.dll
2014-01-13 22:48 - 2013-11-04 15:46 - 00034384 _____ (BitDefender SRL) C:\WINDOWS\system32\BDSandBoxUH.dll
2014-01-13 22:48 - 2013-08-23 12:48 - 00150256 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\gzflt.sys
2014-01-13 22:48 - 2013-08-07 12:46 - 00389240 _____ (BitDefender S.R.L.) C:\WINDOWS\system32\Drivers\trufos.sys
2014-01-12 22:56 - 2014-01-13 22:48 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2014-01-12 22:29 - 2014-01-12 22:29 - 07171632 _____ C:\Users\Lucien\Downloads\bitdefender_tsecurity.exe
2014-01-09 12:00 - 2014-01-13 14:27 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Bioshock
2014-01-09 12:00 - 2014-01-09 12:12 - 00000000 ____D C:\Users\Lucien\Documents\Bioshock
2014-01-07 21:35 - 2014-01-07 21:35 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\WINDOWS\SysWOW64\GPhotos.scr
2014-01-06 13:29 - 2014-01-21 22:13 - 00000000 ____D C:\Users\Lucien\Documents\Rockstar Games
2014-01-06 13:11 - 2014-01-06 13:11 - 00000000 __SHD C:\ProgramData\SecuROM
2014-01-06 13:10 - 2014-01-06 13:10 - 00000000 ____D C:\Users\Lucien\AppData\Local\Rockstar Games
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\WINDOWS\SysWOW64\xlive
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\Users\Lucien\Documents\Games for Windows - LIVE Demos
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2014-01-06 13:08 - 2014-01-06 13:08 - 00642712 _____ (Microsoft Corporation) C:\Users\Lucien\Downloads\gfwlivesetup.exe
2013-12-28 20:07 - 2013-12-28 20:10 - 70638408 _____ (Apple Inc.) C:\Users\Lucien\Downloads\iCloudSetup.exe
2013-12-27 10:35 - 2014-01-08 11:53 - 00000000 ___RD C:\Users\Lucien\Downloads\Microsoft.SkypeApp_kzf8qxf38zg5c!App

==================== One Month Modified Files and Folders =======

2014-01-24 19:22 - 2014-01-22 21:41 - 00020296 _____ C:\Users\Lucien\Desktop\FRST.txt
2014-01-24 19:21 - 2014-01-24 19:21 - 00000000 ____D C:\Users\Lucien\Desktop\Logs alt
2014-01-24 19:19 - 2014-01-24 19:19 - 00003293 _____ C:\Users\Lucien\Desktop\FSS.txt
2014-01-24 19:17 - 2014-01-24 19:17 - 00361185 _____ (Farbar) C:\Users\Lucien\Desktop\FSS.exe
2014-01-24 19:16 - 2013-07-18 20:55 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3506778915-1287356822-3408950579-1002
2014-01-24 19:15 - 2013-11-05 22:24 - 00000000 __RDO C:\Users\Lucien\SkyDrive
2014-01-24 19:15 - 2013-09-30 05:14 - 01804156 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2014-01-24 19:15 - 2013-09-30 04:56 - 00775588 _____ C:\WINDOWS\system32\perfh007.dat
2014-01-24 19:15 - 2013-09-30 04:56 - 00163774 _____ C:\WINDOWS\system32\perfc007.dat
2014-01-24 19:13 - 2013-08-19 19:08 - 00002197 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-24 19:11 - 2013-08-19 19:06 - 00001130 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-24 19:11 - 2013-07-18 20:49 - 00000074 _____ C:\Users\Lucien\AppData\Roaming\sp_data.sys
2014-01-24 19:10 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2014-01-24 19:07 - 2013-11-05 21:43 - 01465992 _____ C:\WINDOWS\WindowsUpdate.log
2014-01-24 19:07 - 2013-08-22 14:25 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2014-01-24 19:06 - 2013-08-31 15:58 - 00000000 ____D C:\AdwCleaner
2014-01-24 19:02 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\sru
2014-01-24 16:48 - 2014-01-24 16:48 - 00032847 _____ C:\Users\Lucien\Desktop\gmer.zip
2014-01-24 16:28 - 2013-08-19 19:07 - 00001134 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-24 12:00 - 2013-06-26 08:07 - 00003474 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1
2014-01-24 12:00 - 2013-06-26 08:07 - 00003464 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2
2014-01-24 11:43 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2014-01-24 11:35 - 2013-08-22 11:25 - 00000000 ____D C:\Users\Lucien\AppData\Local\Adobe
2014-01-24 11:34 - 2014-01-24 11:34 - 00000000 ____D C:\Program Files (x86)\ESET
2014-01-24 11:10 - 2014-01-24 11:10 - 00000749 _____ C:\Users\Lucien\Desktop\JRT.txt
2014-01-24 10:53 - 2014-01-24 10:53 - 00000000 ____D C:\WINDOWS\ERUNT
2014-01-23 22:15 - 2013-09-10 15:25 - 00164352 ___SH C:\Users\Lucien\Desktop\Thumbs.db
2014-01-23 21:47 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2014-01-22 21:41 - 2014-01-22 21:41 - 00000000 ____D C:\Users\Lucien\Desktop\FRST-OlderVersion
2014-01-22 21:41 - 2014-01-22 13:59 - 02077696 _____ (Farbar) C:\Users\Lucien\Desktop\FRST64.exe
2014-01-22 21:41 - 2014-01-21 23:54 - 00000000 ____D C:\FRST
2014-01-22 21:23 - 2014-01-22 21:23 - 00022688 _____ C:\Users\Lucien\Downloads\Addition.txt
2014-01-22 21:23 - 2014-01-22 21:22 - 00046051 _____ C:\Users\Lucien\Downloads\FRST.txt
2014-01-22 21:21 - 2013-11-05 21:47 - 00000000 ____D C:\Users\Lucien
2014-01-22 21:07 - 2013-09-29 20:04 - 09441346 _____ C:\WINDOWS\PFRO.log
2014-01-22 14:01 - 2014-01-21 10:40 - 00000000 ____D C:\Users\Gast\AppData\Local\My Games
2014-01-22 14:01 - 2013-10-01 15:03 - 00000000 ____D C:\Users\Gast\Documents\My Games
2014-01-22 14:01 - 2013-09-01 19:44 - 00000000 ____D C:\Users\Lucien\AppData\Local\My Games
2014-01-22 14:01 - 2013-08-20 09:54 - 00000000 ____D C:\Users\Lucien\Documents\My Games
2014-01-22 13:52 - 2013-09-12 10:02 - 00296960 ___SH C:\Users\Lucien\Downloads\Thumbs.db
2014-01-22 13:49 - 2014-01-22 13:49 - 00003576 _____ C:\WINDOWS\System32\Tasks\Bitdefender Auto-Scan
2014-01-22 12:30 - 2014-01-22 12:30 - 00000168 _____ C:\Users\Lucien\defogger_reenable
2014-01-22 00:03 - 2014-01-24 19:12 - 00008373 _____ C:\Users\Lucien\Desktop\AdwCleaner[S0].txt
2014-01-22 00:02 - 2014-01-24 19:12 - 00008522 _____ C:\Users\Lucien\Desktop\AdwCleaner[R0].txt
2014-01-21 22:19 - 2014-01-21 22:19 - 00000000 ____D C:\WINDOWS\LastGood
2014-01-21 22:13 - 2014-01-06 13:29 - 00000000 ____D C:\Users\Lucien\Documents\Rockstar Games
2014-01-21 22:13 - 2013-09-04 07:48 - 00000000 ____D C:\Users\Lucien\Documents\Blender
2014-01-21 22:00 - 2013-11-04 09:24 - 00069120 ___SH C:\Users\Gast\Downloads\Thumbs.db
2014-01-21 22:00 - 2013-08-22 15:46 - 00380728 _____ C:\WINDOWS\setupact.log
2014-01-21 15:06 - 2014-01-21 15:06 - 01037068 _____ (Thisisu) C:\Users\Lucien\Desktop\JRT.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00987425 _____ C:\Users\Lucien\Desktop\SecurityCheck.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00448512 _____ (OldTimer Tools) C:\Users\Lucien\Desktop\TFC.exe
2014-01-21 15:05 - 2014-01-21 15:05 - 01236282 _____ C:\Users\Lucien\Desktop\adwcleaner.exe
2014-01-21 15:01 - 2014-01-21 15:00 - 02347384 _____ (ESET) C:\Users\Lucien\Desktop\esetsmartinstaller_enu.exe
2014-01-21 14:51 - 2013-10-19 09:42 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Spotify
2014-01-21 13:25 - 2014-01-21 13:15 - 24859352 _____ (Microsoft Corporation) C:\Users\Gast\Downloads\Windows-KB890830-x64-V5.8.exe
2014-01-21 10:38 - 2013-09-01 18:18 - 00281688 _____ C:\WINDOWS\SysWOW64\PnkBstrB.xtr
2014-01-21 10:18 - 2014-01-21 10:18 - 00050477 _____ C:\Users\Lucien\Desktop\Defogger.exe
2014-01-21 10:12 - 2014-01-21 10:12 - 00000000 ____D C:\Users\Gast\AppData\Roaming\QuickScan
2014-01-21 09:38 - 2014-01-21 09:38 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Spotydl
2014-01-21 09:37 - 2013-09-26 11:23 - 00000000 ____D C:\Users\Gast\AppData\Local\VirtualStore
2014-01-21 08:37 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Bitdefender
2014-01-21 08:37 - 2013-09-26 11:23 - 00000062 _____ C:\Users\Gast\AppData\Roaming\sp_data.sys
2014-01-21 08:33 - 2014-01-21 08:33 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2014-01-20 15:53 - 2014-01-20 15:53 - 00000000 ____D C:\Users\Gast\AppData\Local\NVIDIA Corporation
2014-01-20 15:53 - 2013-06-26 08:06 - 00000000 ____D C:\ProgramData\Atheros
2014-01-20 15:52 - 2014-01-20 15:52 - 00000385 _____ C:\Users\Gast\AppData\Roaminguser_gensett.xml
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\Documents\Bluetooth Folder
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\AppData\Local\BMExplorer
2014-01-20 15:52 - 2013-10-29 11:55 - 00000000 ____D C:\Users\Gast\AppData\Local\NVIDIA
2014-01-20 15:52 - 2013-10-19 09:42 - 00000000 ____D C:\Users\Gast\AppData\Local\Spotify
2014-01-20 15:52 - 2013-09-26 11:24 - 00000000 ___RD C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-20 15:52 - 2013-09-26 11:24 - 00000000 ___RD C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-20 15:51 - 2014-01-20 15:51 - 00000000 ____D C:\Users\Lucien\Documents\AdobeStockPhotos
2014-01-20 15:51 - 2013-07-18 20:48 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Adobe
2014-01-20 13:49 - 2014-01-17 13:50 - 00000000 ____D C:\Users\Lucien\Downloads\backups
2014-01-20 12:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache
2014-01-19 18:46 - 2014-01-17 13:42 - 00012554 _____ C:\Users\Lucien\Downloads\hijackthis.log
2014-01-19 18:22 - 2014-01-19 18:22 - 00305304 _____ C:\WINDOWS\Minidump\011914-32203-01.dmp
2014-01-19 18:22 - 2014-01-19 18:22 - 00000000 ____D C:\WINDOWS\Minidump
2014-01-19 18:22 - 2013-09-13 12:11 - 1134103589 _____ C:\WINDOWS\MEMORY.DMP
2014-01-19 16:08 - 2014-01-13 23:20 - 00000000 ____D C:\Program Files (x86)\McAfee Security Scan
2014-01-19 08:38 - 2014-01-19 21:21 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-01-17 20:25 - 2014-01-22 00:11 - 00379904 _____ C:\Users\Lucien\Desktop\gmer.exe
2014-01-17 13:42 - 2014-01-17 13:42 - 00388608 _____ (Trend Micro Inc.) C:\Users\Lucien\Downloads\HiJackThis204.exe
2014-01-17 13:42 - 2013-07-18 20:48 - 00000000 ____D C:\Users\Lucien\AppData\Local\VirtualStore
2014-01-17 09:54 - 2014-01-17 09:54 - 00000385 _____ C:\Users\Lucien\AppData\Roaminguser_gensett.xml
2014-01-17 09:54 - 2013-07-18 20:49 - 00000000 ___RD C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-17 09:54 - 2013-07-18 20:49 - 00000000 ___RD C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-16 16:41 - 2013-08-22 15:44 - 05147912 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\MediaViewer
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\FileManager
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Camera
2014-01-16 16:37 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2014-01-16 16:37 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\Dism
2014-01-16 14:31 - 2013-08-23 10:50 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-16 13:51 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\WinStore
2014-01-16 13:29 - 2013-08-19 19:19 - 00000000 ____D C:\WINDOWS\system32\MRT
2014-01-13 23:23 - 2014-01-13 23:23 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\system32\bdsandboxuiskin32.dll
2014-01-13 23:23 - 2014-01-13 22:53 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\SysWOW64\bdsandboxuiskin32.dll
2014-01-13 23:23 - 2014-01-13 22:52 - 00261056 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avchv.sys
2014-01-13 23:23 - 2014-01-13 22:48 - 00000000 ____D C:\ProgramData\Bitdefender
2014-01-13 23:20 - 2014-01-13 23:20 - 00002041 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-13 23:20 - 2013-04-26 00:18 - 00000000 ____D C:\ProgramData\McAfee
2014-01-13 23:19 - 2013-04-26 00:15 - 00000000 ____D C:\ProgramData\Adobe
2014-01-13 23:19 - 2013-04-26 00:15 - 00000000 ____D C:\Program Files (x86)\Adobe
2014-01-13 22:54 - 2014-01-13 22:54 - 00620542 _____ C:\ProgramData\1389649682.bdinstall.bin
2014-01-13 22:54 - 2014-01-13 22:54 - 00000385 _____ C:\WINDOWS\system32\user_gensett.xml
2014-01-13 22:54 - 2014-01-13 22:53 - 00000000 ____D C:\ProgramData\BDLogging
2014-01-13 22:54 - 2014-01-13 22:52 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Bitdefender
2014-01-13 22:53 - 2014-01-13 22:53 - 00002212 _____ C:\Users\Public\Desktop\Bitdefender Safepay.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00002164 _____ C:\Users\Public\Desktop\Bitdefender Total Security.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2014-01-13 22:52 - 2014-01-13 22:48 - 00000000 ____D C:\Program Files\Bitdefender
2014-01-13 22:48 - 2014-01-13 22:48 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\QuickScan
2014-01-13 22:48 - 2014-01-12 22:56 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2014-01-13 22:46 - 2013-08-30 00:06 - 00000000 ____D C:\avast! sandbox
2014-01-13 22:45 - 2013-08-19 19:05 - 00000000 ____D C:\Program Files\AVAST Software
2014-01-13 22:45 - 2013-08-19 19:04 - 00000000 ____D C:\ProgramData\AVAST Software
2014-01-13 22:44 - 2013-08-19 19:06 - 00000000 _____ C:\WINDOWS\SysWOW64\config.nt
2014-01-13 14:27 - 2014-01-09 12:00 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Bioshock
2014-01-12 22:29 - 2014-01-12 22:29 - 07171632 _____ C:\Users\Lucien\Downloads\bitdefender_tsecurity.exe
2014-01-09 12:12 - 2014-01-09 12:00 - 00000000 ____D C:\Users\Lucien\Documents\Bioshock
2014-01-09 11:59 - 2013-04-26 00:16 - 00502089 _____ C:\WINDOWS\DirectX.log
2014-01-08 12:09 - 2013-10-14 09:56 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Spotify
2014-01-08 11:53 - 2013-12-27 10:35 - 00000000 ___RD C:\Users\Lucien\Downloads\Microsoft.SkypeApp_kzf8qxf38zg5c!App
2014-01-07 21:35 - 2014-01-07 21:35 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2014-01-07 21:05 - 2013-11-22 17:15 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-01-06 23:31 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-01-06 23:31 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\WINDOWS\SysWOW64\GPhotos.scr
2014-01-06 16:20 - 2013-08-19 19:19 - 86054176 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-01-06 13:11 - 2014-01-06 13:11 - 00000000 __SHD C:\ProgramData\SecuROM
2014-01-06 13:10 - 2014-01-06 13:10 - 00000000 ____D C:\Users\Lucien\AppData\Local\Rockstar Games
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\WINDOWS\SysWOW64\xlive
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\Users\Lucien\Documents\Games for Windows - LIVE Demos
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2014-01-06 13:08 - 2014-01-06 13:08 - 00642712 _____ (Microsoft Corporation) C:\Users\Lucien\Downloads\gfwlivesetup.exe
2014-01-03 18:23 - 2013-09-09 20:00 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\vlc
2013-12-30 23:47 - 2013-10-14 09:58 - 00000000 ____D C:\Users\Lucien\AppData\Local\Spotify
2013-12-29 16:19 - 2013-11-29 21:45 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\dvdcss
2013-12-29 13:36 - 2013-08-20 22:12 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Apple Computer
2013-12-29 13:34 - 2013-08-20 22:12 - 00000000 ____D C:\Users\Lucien\AppData\Local\Apple Computer
2013-12-28 20:12 - 2013-08-20 22:10 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-12-28 20:10 - 2013-12-28 20:07 - 70638408 _____ (Apple Inc.) C:\Users\Lucien\Downloads\iCloudSetup.exe

Some content of TEMP:
====================
C:\Users\Gast\AppData\Local\Temp\drm_dyndata_7390004.dll
C:\Users\Gast\AppData\Local\Temp\ubiB23E.tmp.exe
C:\Users\Lucien\AppData\Local\Temp\Quarantine.exe
C:\Users\Lucien\AppData\Local\Temp\UpdateCheckerSetup.exe
C:\Users\Lucien\AppData\Local\Temp\wajam_download.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-24 11:44

==================== End Of Log ============================

--- --- ---

--- --- ---

Secure Banking meldet weiterhin nach jedem Browserstart die Maleware in chrome.exe
er ist immer noch relativ langsam und nvidia treiber lässt sich trotz de-& wieder Neuinstallation nicht aufs aktuelle updaten, da tritt immer ein fehler auf wie bei einigen anderen treibern auch

allerdings lässt sich bitdefender wieder updaten

danke soweit schonmal!
Gruß KitsuneNoir

mir ist noch was aufgefallen, ich werde sehr oft willkürlich dazu aufgefordert den pc neuzustarten. das ist doch nicht normal oder?

sunjojo · 27.01.2014, 16:19

Zitat:

Secure Banking meldet weiterhin nach jedem Browserstart die Maleware in chrome.exe
er ist immer noch relativ langsam

Das Securebanking diese Meldung anzeigt, könnte auch an Bitdefender liegen. Bitte deaktivere einmal komplett Bitdefender und überprüfe, ob die Meldung von Securebanking noch angezeigt wird. Ist Google Chrome dann immernoch relativ langsam?

Zitat:

nvidia treiber lässt sich trotz de-& wieder Neuinstallation nicht aufs aktuelle updaten, da tritt immer ein fehler auf wie bei einigen anderen treibern auch

Kannst du den Fehler beschreiben, der auftritt? Welche weiteren Treiber sind davon auch betroffen?

Zitat:

mir ist noch was aufgefallen, ich werde sehr oft willkürlich dazu aufgefordert den pc neuzustarten. das ist doch nicht normal oder?

Nein, das ist nicht normal. Wann wirst du aufgefordert, den Rechner neuzustarten (wenn du bestimmte Programme geöffnet hast)?

Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

cmd: type "C:\ProgramData\SetStretch.cmd"
C:\ProgramData\SetStretch.cmd
Reg: reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile" /v EnableFirewall /t REG_DWORD /d 0x00000001 /f
Reg: reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinDefend" /v Start /t REG_DWORD /d 0x00000002 /f
Reg: reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender" /v DisableAntiSpyware /t REG_DWORD /d 0x00000000 /f

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Schritt 2
Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Schritt 3
Starte noch einmal FRST.

Ändere keine der Voreinstellungen und drücke auf Scan.
Wenn der Scan abgeschlossen ist, wird ein neues Logfile FRST.txt erstellt und auf dem Desktop gespeichert.
Poste den Inhalt dieses Logfiles bitte hier in deinen Thread.

Poste folgende Logfiles in deiner nächsten Antwort:

FRST-Fix
MBAR-Scan
FRST-Scan

KitsuneNoir · 27.01.2014, 20:54

Hi,
- also Secure Banking meldet sich nach wie vor bei jedem Browserstart und meckert rum, ob mit oder ohne Bitdefender
- beim Updateversuch des nvidia Treibers kommt die Nachricht: "Die Verbindung mit Nvidia kann nicht hergestellt werden - Überprüfen Sie Ihren Internetanschluss"
aber Internet ist vorhanden und auf diese Nachricht habe ich im Internet auch keine weiteren Problemlösungen gefunden.
--> andere Treiber sind Adobe Reader, der Realtek audiotreiber und nvidia grafikkartentreiber da kommt immer die Meldung "Try again later"
- Die Aufforderung zum Neustart kommt wie gesagt sehr willkürlich, also ich kann das Gerät auch ohne etwas zu tun 1-2h anlassen bis die Meldung erscheint. Und manchmal erscheint sie nachdem ich den Browser schließe, oder in Open Office gearbeitet habe. Ich soll dann einen Neustart machen, damit die Installation von Dingen abgeschlossen werden kann.

FIRST-Fix:

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 27-01-2014
Ran by Lucien at 2014-01-27 19:49:39 Run:2
Running from C:\Users\Lucien\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
cmd: type "C:\ProgramData\SetStretch.cmd"
C:\ProgramData\SetStretch.cmd
Reg: reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile" /v EnableFirewall /t REG_DWORD /d 0x00000001 /f
Reg: reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinDefend" /v Start /t REG_DWORD /d 0x00000002 /f
Reg: reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender" /v DisableAntiSpyware /t REG_DWORD /d 0x00000000 /f
         
*****************


=========  type "C:\ProgramData\SetStretch.cmd" =========

start /w C:\ProgramData\SetStretch.exe /stretch
rem regedit /s c:\windows\delsetwallpaper.reg
del /q C:\ProgramData\SetStretch.exe
rem del /q C:\ProgramData\delsetwallpaper.reg
del /q C:\ProgramData\SetStretch.cmd
attrib C:\ProgramData\SetStretch.* +h
========= End of CMD: =========

C:\ProgramData\SetStretch.cmd => Moved successfully.

========= reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile" /v EnableFirewall /t REG_DWORD /d 0x00000001 /f =========

Der Vorgang wurde erfolgreich beendet.



========= End of Reg: =========


========= reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinDefend" /v Start /t REG_DWORD /d 0x00000002 /f =========

Der Vorgang wurde erfolgreich beendet.



========= End of Reg: =========


========= reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender" /v DisableAntiSpyware /t REG_DWORD /d 0x00000000 /f =========

FEHLER: Zugriff verweigert



========= End of Reg: =========


==== End of Fixlog ====

MBAR-Scan:

Code:

ATTFilter

Malwarebytes Anti-Rootkit BETA 1.07.0.1009
www.malwarebytes.org

Database version: v2014.01.27.08

Windows 8 x64 NTFS
Internet Explorer 11.0.9600.16476
Lucien :: LUCIENSNOTE [administrator]

27.01.2014 19:54:40
mbar-log-2014-01-27 (19-54-40).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 274486
Time elapsed: 36 minute(s), 49 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-01-2014
Ran by Lucien (administrator) on LUCIENSNOTE on 27-01-2014 20:36:19
Running from C:\Users\Lucien\Desktop
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\vsserv.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(ASUS) C:\Program Files\ASUS\P4G\InsOnSrv.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender Safebox\safeboxservice.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files\ASUS\P4G\InsOnWMI.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe\livecomm.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS Console\ASUS Console Starter.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\bdagent.exe
(Secure Banking) C:\Program Files (x86)\Secure Banking\SecureBanking.exe
() C:\Program Files (x86)\Secure Banking\sbservice.exe
(Akamai Technologies, Inc.) C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe
(Akamai Technologies, Inc.) C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\seccenter.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Spotify Ltd) C:\Users\Lucien\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(VideoLAN) C:\Program Files\VideoLAN\VLC\vlc.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13530184 2013-04-22] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1278024 2013-03-08] (Realtek Semiconductor)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-09-25] (Adobe Systems Incorporated)
HKLM\...\Run: [PrnStatusMX] - C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe [1240064 2012-07-04] (Marvell Semiconductor, Inc.)
HKLM\...\Run: [ShadowPlay] - C:\WINDOWS\system32\nvspcap64.dll [1100248 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [Bdagent] - C:\Program Files\Bitdefender\Bitdefender\bdagent.exe [1735872 2014-01-13] (Bitdefender)
HKLM-x32\...\Run: [ASUSPRP] - C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-04-26] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-01-15] (cyberlink)
HKLM-x32\...\Run: [ASUS InstantKey] - C:\Program Files (x86)\ASUS\ASUS Instant Key\Ikey_start.exe [13936 2013-04-16] (ASUS)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2237328 2013-11-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-04-24] ( (Atheros Communications))
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\steam.exe [1815464 2014-01-07] (Valve Corporation)
HKCU\...\Run: [SecureBanking] - C:\Program Files (x86)\Secure Banking\SecureBanking.exe [507904 2013-06-30] (Secure Banking)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Lucien\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-10] (Spotify Ltd)
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
HKCU\...\Run: [Bitdefender-Geldbörse-Agent] - C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [561672 2014-01-13] (Bitdefender)
HKCU\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] - C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [612696 2014-01-13] (Bitdefender)
HKCU\...\Run: [Bitdefender-Geldbörse] - C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe [1001512 2014-01-13] (Bitdefender)
HKU\Gast\...\Run: [Spotify] - C:\Users\Gast\AppData\Roaming\Spotify\Spotify.exe [6118400 2014-01-20] (Spotify Ltd)
HKU\Gast\...\Run: [Spotify Web Helper] - C:\Users\Gast\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-01-20] (Spotify Ltd)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [168616 2013-11-14] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [141336 2013-11-14] (NVIDIA Corporation)
Startup: C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;form=IE10TR&amp;src=IE10TR&amp;pc=ASU2JS
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;form=IE10TR&amp;src=IE10TR&amp;pc=ASU2JS
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\pmbxie.dll (Bitdefender)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxie.dll (Bitdefender)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Chrome: 
=======
CHR HomePage: hxxp://www.google.de/
CHR Extension: (Google Docs) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-14]
CHR Extension: (Google Drive) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-19]
CHR Extension: (YouTube) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-19]
CHR Extension: (Bitdefender Wallet) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccahoghmggldkcdjiebjkidpfongdfbl [2014-01-13]
CHR Extension: (Google-Suche) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-19]
CHR Extension: (Google Wallet) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR Extension: (Google Mail) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-19]
CHR HKLM-x32\...\Chrome\Extension: [ccahoghmggldkcdjiebjkidpfongdfbl] - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxcr.crx [2014-01-13]

==================== Services (Whitelisted) =================

U3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-12-18] (Adobe Systems)
U2 ASUS InstantOn; C:\Program Files\ASUS\P4G\InsOnSrv.exe [277120 2013-04-29] (ASUS)
U2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [310400 2013-04-24] (Windows (R) Win 7 DDK provider)
U4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender\bdparentalservice.exe [77632 2013-11-21] (Bitdefender)
U2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [247768 2013-01-15] (CyberLink)
U3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
U2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-04-11] (Intel Corporation)
U2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
U2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
U2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
U2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
U2 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [94624 2013-07-08] (Bitdefender)
U2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe [67320 2013-10-07] (Bitdefender)
U2 VSSERV; C:\Program Files\Bitdefender\Bitdefender\vsserv.exe [1507248 2013-11-15] (Bitdefender)
U3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
U2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
U2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [18384 2013-09-04] (Intel(R) Corporation)
U2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-04-24] (Atheros)

==================== Drivers (Whitelisted) ====================

U0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
U3 ATP; C:\Windows\System32\drivers\AsusTP.sys [70416 2013-09-23] (ASUS Corporation)
U0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [727592 2013-07-19] (BitDefender)
U3 avchv; C:\Windows\system32\DRIVERS\avchv.sys [261056 2014-01-13] (BitDefender)
U3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [601360 2013-07-19] (BitDefender)
U3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
U0 bdelam; C:\Windows\System32\drivers\bdelam.sys [23568 2013-09-08] (Bitdefender)
U1 BdfNdisf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys [98768 2013-07-24] (BitDefender LLC)
U1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107008 2013-07-29] (BitDefender LLC)
U4 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-07-02] (Bitdefender SRL)
U3 BDSandBox; C:\WINDOWS\system32\drivers\bdsandbox.sys [82824 2013-11-04] (BitDefender SRL)
U1 BDVEDISK; C:\Windows\system32\DRIVERS\bdvedisk.sys [79192 2013-07-30] (BitDefender)
U3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-04-24] (Qualcomm Atheros)
U3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
U3 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2013-09-01] (DT Soft Ltd)
U0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [150256 2013-08-23] (BitDefender LLC)
U3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
U3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
U0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
U0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)
U2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [26328 2013-07-23] (Intel Corporation)
U3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
U0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
U3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
U3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-07-26] (Intel Corporation)
U3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
U3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
U3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
U3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
U0 rtcrfilt64; C:\Windows\System32\DRIVERS\rtcrfilt64.sys [19600 2000-01-01] (Realtek Semiconductor Corp.)
U3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)
U0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
U3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16152 2013-09-03] ()
U0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [389240 2013-08-07] (BitDefender S.R.L.)
U3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
U3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
U3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [x]
U3 GPU-Z; \??\C:\Users\Lucien\AppData\Local\Temp\GPU-Z.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-27 20:36 - 2014-01-27 20:36 - 00020519 _____ C:\Users\Lucien\Desktop\FRST.txt
2014-01-27 19:59 - 2014-01-27 19:59 - 00059392 _____ C:\Users\Lucien\Desktop\30-31.01.2014 Teilnehmerliste.xls
2014-01-27 19:54 - 2014-01-27 20:33 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-27 19:54 - 2014-01-27 19:54 - 00119000 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-01-27 19:53 - 2014-01-27 19:53 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-01-27 19:52 - 2014-01-27 19:52 - 00000000 ____D C:\Users\Lucien\Desktop\mbar
2014-01-27 19:47 - 2014-01-27 19:48 - 00000000 ____D C:\Users\Lucien\Desktop\Logs2
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2014-01-27 18:56 - 2014-01-27 18:56 - 00003576 _____ C:\WINDOWS\System32\Tasks\Bitdefender Auto-Scan
2014-01-26 20:53 - 2014-01-26 20:53 - 00003186 _____ C:\WINDOWS\System32\Tasks\{E66DEEF7-845B-48C8-BBEE-CE6EA6F2EE96}
2014-01-26 19:26 - 2014-01-26 19:26 - 00003362 _____ C:\WINDOWS\System32\Tasks\{63C03234-5B71-4184-AD48-4EE22D315F87}
2014-01-25 15:01 - 2014-01-25 15:01 - 00000000 ____H C:\Users\Lucien\Documents\Default.rdp
2014-01-24 20:12 - 2014-01-24 20:12 - 02002088 _____ (PC Drivers HeadQuarters) C:\Users\Lucien\Downloads\DriverDetective.exe
2014-01-24 19:21 - 2014-01-24 19:21 - 00000000 ____D C:\Users\Lucien\Desktop\Logs alt
2014-01-24 19:17 - 2014-01-24 19:17 - 00361185 _____ (Farbar) C:\Users\Lucien\Desktop\FSS.exe
2014-01-24 16:48 - 2014-01-24 16:48 - 00032847 _____ C:\Users\Lucien\Desktop\gmer.zip
2014-01-24 11:34 - 2014-01-24 11:34 - 00000000 ____D C:\Program Files (x86)\ESET
2014-01-24 10:53 - 2014-01-24 10:53 - 00000000 ____D C:\WINDOWS\ERUNT
2014-01-22 21:41 - 2014-01-27 19:49 - 00000000 ____D C:\Users\Lucien\Desktop\FRST-OlderVersion
2014-01-22 21:23 - 2014-01-22 21:23 - 00022688 _____ C:\Users\Lucien\Downloads\Addition.txt
2014-01-22 21:22 - 2014-01-22 21:23 - 00046051 _____ C:\Users\Lucien\Downloads\FRST.txt
2014-01-22 13:59 - 2014-01-27 19:49 - 02078208 _____ (Farbar) C:\Users\Lucien\Desktop\FRST64.exe
2014-01-22 12:30 - 2014-01-22 12:30 - 00000168 _____ C:\Users\Lucien\defogger_reenable
2014-01-22 00:11 - 2014-01-17 20:25 - 00379904 _____ C:\Users\Lucien\Desktop\gmer.exe
2014-01-22 00:10 - 2012-12-19 16:10 - 00000000 ____D C:\Users\Lucien\Desktop\data
2014-01-22 00:10 - 2011-10-24 13:35 - 00000000 ____D C:\Users\Lucien\Desktop\Tweaking.com - Windows Repair
2014-01-22 00:10 - 2009-10-20 21:47 - 00055936 _____ () C:\Users\Lucien\Desktop\Setup.exe
2014-01-21 23:54 - 2014-01-27 19:49 - 00000000 ____D C:\FRST
2014-01-21 22:19 - 2014-01-21 22:19 - 00000000 ____D C:\WINDOWS\LastGood
2014-01-21 15:06 - 2014-01-21 15:06 - 01037068 _____ (Thisisu) C:\Users\Lucien\Desktop\JRT.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00987425 _____ C:\Users\Lucien\Desktop\SecurityCheck.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00448512 _____ (OldTimer Tools) C:\Users\Lucien\Desktop\TFC.exe
2014-01-21 15:05 - 2014-01-21 15:05 - 01236282 _____ C:\Users\Lucien\Desktop\adwcleaner.exe
2014-01-21 15:00 - 2014-01-21 15:01 - 02347384 _____ (ESET) C:\Users\Lucien\Desktop\esetsmartinstaller_enu.exe
2014-01-21 13:15 - 2014-01-21 13:25 - 24859352 _____ (Microsoft Corporation) C:\Users\Gast\Downloads\Windows-KB890830-x64-V5.8.exe
2014-01-21 10:40 - 2014-01-22 14:01 - 00000000 ____D C:\Users\Gast\AppData\Local\My Games
2014-01-21 10:18 - 2014-01-21 10:18 - 00050477 _____ C:\Users\Lucien\Desktop\Defogger.exe
2014-01-21 10:12 - 2014-01-21 10:12 - 00000000 ____D C:\Users\Gast\AppData\Roaming\QuickScan
2014-01-21 09:38 - 2014-01-21 09:38 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Spotydl
2014-01-21 08:33 - 2014-01-21 08:33 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2014-01-20 16:10 - 2013-12-03 13:49 - 00000000 ____D C:\Users\Gast\Downloads\settings
2014-01-20 15:53 - 2014-01-20 15:53 - 00000000 ____D C:\Users\Gast\AppData\Local\NVIDIA Corporation
2014-01-20 15:52 - 2014-01-21 08:37 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Bitdefender
2014-01-20 15:52 - 2014-01-20 15:52 - 00000385 _____ C:\Users\Gast\AppData\Roaminguser_gensett.xml
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\Documents\Bluetooth Folder
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\AppData\Local\BMExplorer
2014-01-20 15:51 - 2014-01-20 15:51 - 00000000 ____D C:\Users\Lucien\Documents\AdobeStockPhotos
2014-01-19 21:21 - 2014-01-19 08:38 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-01-19 18:22 - 2014-01-19 18:22 - 00305304 _____ C:\WINDOWS\Minidump\011914-32203-01.dmp
2014-01-19 18:22 - 2014-01-19 18:22 - 00000000 ____D C:\WINDOWS\Minidump
2014-01-17 15:05 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2014-01-17 15:05 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2014-01-17 13:50 - 2014-01-20 13:49 - 00000000 ____D C:\Users\Lucien\Downloads\backups
2014-01-17 13:42 - 2014-01-19 18:46 - 00012554 _____ C:\Users\Lucien\Downloads\hijackthis.log
2014-01-17 13:42 - 2014-01-17 13:42 - 00388608 _____ (Trend Micro Inc.) C:\Users\Lucien\Downloads\HiJackThis204.exe
2014-01-17 09:54 - 2014-01-17 09:54 - 00000385 _____ C:\Users\Lucien\AppData\Roaminguser_gensett.xml
2014-01-16 14:05 - 2013-12-11 08:55 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-01-16 14:05 - 2013-12-09 01:34 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-01-16 14:05 - 2013-12-09 01:04 - 00980480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-01-16 14:05 - 2013-11-27 16:34 - 03210528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2014-01-16 14:05 - 2013-11-27 16:27 - 00809872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-01-16 14:05 - 2013-11-27 15:00 - 00663680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-01-16 14:05 - 2013-11-27 14:47 - 02804528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2014-01-16 14:05 - 2013-11-27 13:02 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ipnat.sys
2014-01-16 14:05 - 2013-11-27 11:54 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-01-16 14:05 - 2013-11-27 11:24 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll
2014-01-16 14:05 - 2013-11-27 11:08 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-01-16 14:05 - 2013-11-27 10:46 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll
2014-01-16 14:05 - 2013-11-27 10:41 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2014-01-16 14:05 - 2013-11-27 10:17 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-01-16 14:05 - 2013-11-27 10:10 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2014-01-16 14:05 - 2013-11-27 09:58 - 01503232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-01-16 14:05 - 2013-11-27 09:56 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll
2014-01-16 14:05 - 2013-11-27 09:20 - 04106240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-01-16 14:05 - 2013-11-27 05:01 - 00385614 _____ C:\WINDOWS\system32\ApnDatabase.xml
2014-01-16 14:05 - 2013-11-26 14:22 - 01928144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2014-01-16 14:05 - 2013-11-26 14:20 - 02131120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-01-16 14:05 - 2013-11-26 14:20 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-01-16 14:05 - 2013-11-26 14:20 - 01374384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-01-16 14:05 - 2013-11-26 12:50 - 01371312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2014-01-16 14:05 - 2013-11-26 12:44 - 02142936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-01-16 14:05 - 2013-11-26 12:44 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-01-16 14:05 - 2013-11-26 11:13 - 04191232 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-01-16 14:05 - 2013-11-26 10:21 - 18577920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-01-16 14:05 - 2013-11-26 09:28 - 13925888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-01-16 14:05 - 2013-11-25 02:45 - 00142680 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-01-16 14:05 - 2013-11-25 02:32 - 01119064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2014-01-16 14:05 - 2013-11-25 00:30 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2014-01-16 14:05 - 2013-11-25 00:28 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2014-01-16 14:05 - 2013-11-23 13:47 - 00032088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-01-16 14:05 - 2013-11-23 12:49 - 21196664 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-01-16 14:05 - 2013-11-23 09:19 - 18642504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-01-16 14:05 - 2013-11-23 08:13 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\bi.dll
2014-01-16 14:05 - 2013-11-23 08:13 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys
2014-01-16 14:05 - 2013-11-23 08:08 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-01-16 14:05 - 2013-11-23 05:50 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-01-16 14:05 - 2013-11-23 04:57 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2014-01-16 14:05 - 2013-11-23 04:48 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2014-01-16 14:05 - 2013-11-23 04:25 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2014-01-16 14:05 - 2013-11-23 04:25 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2014-01-16 14:05 - 2013-11-23 04:19 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-01-16 14:05 - 2013-11-23 04:15 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-01-16 14:05 - 2013-11-21 07:58 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceregistration.dll
2014-01-16 14:05 - 2013-11-21 07:26 - 01415680 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-01-16 14:05 - 2013-11-16 06:11 - 00764856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-01-16 14:05 - 2013-11-15 19:19 - 00669344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-01-16 14:05 - 2013-11-15 15:59 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2014-01-16 14:05 - 2013-11-15 15:25 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2014-01-16 14:05 - 2013-11-15 15:08 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-01-16 14:05 - 2013-11-15 14:24 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-01-16 14:05 - 2013-11-05 21:12 - 02551128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-01-16 14:05 - 2013-10-31 01:29 - 00745336 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-01-16 14:05 - 2013-10-31 00:41 - 00552624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2014-01-15 23:39 - 2013-12-09 01:15 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-01-15 23:39 - 2013-11-27 16:36 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-01-15 23:39 - 2013-11-27 12:41 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe
2014-01-15 23:39 - 2013-11-27 11:34 - 00138240 _____ C:\WINDOWS\system32\OEMLicense.dll
2014-01-15 23:39 - 2013-11-27 10:54 - 00103936 _____ C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-01-15 23:39 - 2013-11-27 09:48 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 23:39 - 2013-11-27 09:45 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-01-15 23:39 - 2013-11-27 09:40 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 23:39 - 2013-11-27 09:38 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-01-15 23:39 - 2013-11-27 09:17 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-01-15 23:39 - 2013-11-27 09:12 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-01-13 23:23 - 2014-01-13 23:23 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\system32\bdsandboxuiskin32.dll
2014-01-13 23:20 - 2014-01-19 16:08 - 00000000 ____D C:\Program Files (x86)\McAfee Security Scan
2014-01-13 23:20 - 2014-01-13 23:20 - 00002041 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-13 22:54 - 2014-01-13 22:54 - 00620542 _____ C:\ProgramData\1389649682.bdinstall.bin
2014-01-13 22:54 - 2014-01-13 22:54 - 00000385 _____ C:\WINDOWS\system32\user_gensett.xml
2014-01-13 22:53 - 2014-01-13 23:23 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\SysWOW64\bdsandboxuiskin32.dll
2014-01-13 22:53 - 2014-01-13 22:54 - 00000000 ____D C:\ProgramData\BDLogging
2014-01-13 22:53 - 2014-01-13 22:53 - 00002212 _____ C:\Users\Public\Desktop\Bitdefender Safepay.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00002164 _____ C:\Users\Public\Desktop\Bitdefender Total Security.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2014-01-13 22:53 - 2013-11-04 15:47 - 00082824 _____ (BitDefender SRL) C:\WINDOWS\system32\Drivers\bdsandbox.sys
2014-01-13 22:53 - 2013-09-08 19:04 - 00023568 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bdelam.sys
2014-01-13 22:53 - 2013-07-30 17:41 - 00079192 _____ (BitDefender) C:\WINDOWS\system32\Drivers\bdvedisk.sys
2014-01-13 22:53 - 2013-07-24 17:19 - 00098768 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\bdfndisf6.sys
2014-01-13 22:53 - 2007-04-11 10:11 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\capicom.dll
2014-01-13 22:52 - 2014-01-13 23:23 - 00261056 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avchv.sys
2014-01-13 22:52 - 2014-01-13 22:54 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Bitdefender
2014-01-13 22:52 - 2013-07-19 17:08 - 00601360 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avckf.sys
2014-01-13 22:52 - 2013-07-19 17:04 - 00727592 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avc3.sys
2014-01-13 22:48 - 2014-01-13 23:23 - 00000000 ____D C:\ProgramData\Bitdefender
2014-01-13 22:48 - 2014-01-13 22:52 - 00000000 ____D C:\Program Files\Bitdefender
2014-01-13 22:48 - 2014-01-13 22:48 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\QuickScan
2014-01-13 22:48 - 2013-11-04 15:47 - 00084848 _____ (BitDefender SRL) C:\WINDOWS\system32\BDSandBoxUISkin.dll
2014-01-13 22:48 - 2013-11-04 15:46 - 00034384 _____ (BitDefender SRL) C:\WINDOWS\system32\BDSandBoxUH.dll
2014-01-13 22:48 - 2013-08-23 12:48 - 00150256 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\gzflt.sys
2014-01-13 22:48 - 2013-08-07 12:46 - 00389240 _____ (BitDefender S.R.L.) C:\WINDOWS\system32\Drivers\trufos.sys
2014-01-12 22:56 - 2014-01-13 22:48 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2014-01-12 22:29 - 2014-01-12 22:29 - 07171632 _____ C:\Users\Lucien\Downloads\bitdefender_tsecurity.exe
2014-01-09 12:00 - 2014-01-13 14:27 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Bioshock
2014-01-09 12:00 - 2014-01-09 12:12 - 00000000 ____D C:\Users\Lucien\Documents\Bioshock
2014-01-07 21:35 - 2014-01-07 21:35 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\WINDOWS\SysWOW64\GPhotos.scr
2014-01-06 13:29 - 2014-01-21 22:13 - 00000000 ____D C:\Users\Lucien\Documents\Rockstar Games
2014-01-06 13:11 - 2014-01-06 13:11 - 00000000 __SHD C:\ProgramData\SecuROM
2014-01-06 13:10 - 2014-01-06 13:10 - 00000000 ____D C:\Users\Lucien\AppData\Local\Rockstar Games
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\WINDOWS\SysWOW64\xlive
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\Users\Lucien\Documents\Games for Windows - LIVE Demos
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2014-01-06 13:08 - 2014-01-06 13:08 - 00642712 _____ (Microsoft Corporation) C:\Users\Lucien\Downloads\gfwlivesetup.exe
2013-12-28 20:07 - 2013-12-28 20:10 - 70638408 _____ (Apple Inc.) C:\Users\Lucien\Downloads\iCloudSetup.exe

==================== One Month Modified Files and Folders =======

2014-01-27 20:36 - 2014-01-27 20:36 - 00020519 _____ C:\Users\Lucien\Desktop\FRST.txt
2014-01-27 20:33 - 2014-01-27 19:54 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-27 20:29 - 2013-08-19 19:07 - 00001134 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-27 20:26 - 2013-09-09 20:00 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\vlc
2014-01-27 20:20 - 2013-09-12 10:02 - 00296960 ___SH C:\Users\Lucien\Downloads\Thumbs.db
2014-01-27 20:07 - 2013-11-05 21:43 - 02083185 _____ C:\WINDOWS\WindowsUpdate.log
2014-01-27 20:01 - 2013-10-14 09:56 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Spotify
2014-01-27 20:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\sru
2014-01-27 19:59 - 2014-01-27 19:59 - 00059392 _____ C:\Users\Lucien\Desktop\30-31.01.2014 Teilnehmerliste.xls
2014-01-27 19:54 - 2014-01-27 19:54 - 00119000 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-01-27 19:53 - 2014-01-27 19:53 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-01-27 19:52 - 2014-01-27 19:52 - 00000000 ____D C:\Users\Lucien\Desktop\mbar
2014-01-27 19:49 - 2014-01-22 21:41 - 00000000 ____D C:\Users\Lucien\Desktop\FRST-OlderVersion
2014-01-27 19:49 - 2014-01-22 13:59 - 02078208 _____ (Farbar) C:\Users\Lucien\Desktop\FRST64.exe
2014-01-27 19:49 - 2014-01-21 23:54 - 00000000 ____D C:\FRST
2014-01-27 19:48 - 2014-01-27 19:47 - 00000000 ____D C:\Users\Lucien\Desktop\Logs2
2014-01-27 19:08 - 2013-07-18 20:55 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3506778915-1287356822-3408950579-1002
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2014-01-27 18:56 - 2014-01-27 18:56 - 00003576 _____ C:\WINDOWS\System32\Tasks\Bitdefender Auto-Scan
2014-01-27 18:54 - 2013-08-22 11:25 - 00000000 ____D C:\Users\Lucien\AppData\Local\Adobe
2014-01-27 18:54 - 2013-06-26 08:07 - 00003474 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1
2014-01-27 18:54 - 2013-06-26 08:07 - 00003464 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2
2014-01-27 18:51 - 2013-08-19 19:08 - 00002197 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-27 18:51 - 2013-07-18 20:49 - 00000074 _____ C:\Users\Lucien\AppData\Roaming\sp_data.sys
2014-01-27 18:50 - 2013-08-19 19:06 - 00001130 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-26 21:38 - 2013-08-23 10:50 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-26 20:53 - 2014-01-26 20:53 - 00003186 _____ C:\WINDOWS\System32\Tasks\{E66DEEF7-845B-48C8-BBEE-CE6EA6F2EE96}
2014-01-26 19:26 - 2014-01-26 19:26 - 00003362 _____ C:\WINDOWS\System32\Tasks\{63C03234-5B71-4184-AD48-4EE22D315F87}
2014-01-26 19:01 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2014-01-25 15:05 - 2013-09-10 15:25 - 00179200 ___SH C:\Users\Lucien\Desktop\Thumbs.db
2014-01-25 15:01 - 2014-01-25 15:01 - 00000000 ____H C:\Users\Lucien\Documents\Default.rdp
2014-01-25 14:26 - 2013-09-30 05:14 - 01804156 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2014-01-25 14:26 - 2013-09-30 04:56 - 00775588 _____ C:\WINDOWS\system32\perfh007.dat
2014-01-25 14:26 - 2013-09-30 04:56 - 00163774 _____ C:\WINDOWS\system32\perfc007.dat
2014-01-25 14:22 - 2013-08-22 15:46 - 00381523 _____ C:\WINDOWS\setupact.log
2014-01-25 13:55 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2014-01-25 13:53 - 2013-11-05 22:24 - 00000000 __RDO C:\Users\Lucien\SkyDrive
2014-01-25 13:51 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2014-01-25 13:48 - 2013-08-22 14:25 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2014-01-24 20:12 - 2014-01-24 20:12 - 02002088 _____ (PC Drivers HeadQuarters) C:\Users\Lucien\Downloads\DriverDetective.exe
2014-01-24 19:21 - 2014-01-24 19:21 - 00000000 ____D C:\Users\Lucien\Desktop\Logs alt
2014-01-24 19:17 - 2014-01-24 19:17 - 00361185 _____ (Farbar) C:\Users\Lucien\Desktop\FSS.exe
2014-01-24 19:06 - 2013-08-31 15:58 - 00000000 ____D C:\AdwCleaner
2014-01-24 16:48 - 2014-01-24 16:48 - 00032847 _____ C:\Users\Lucien\Desktop\gmer.zip
2014-01-24 11:34 - 2014-01-24 11:34 - 00000000 ____D C:\Program Files (x86)\ESET
2014-01-24 10:53 - 2014-01-24 10:53 - 00000000 ____D C:\WINDOWS\ERUNT
2014-01-23 21:47 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2014-01-22 21:23 - 2014-01-22 21:23 - 00022688 _____ C:\Users\Lucien\Downloads\Addition.txt
2014-01-22 21:23 - 2014-01-22 21:22 - 00046051 _____ C:\Users\Lucien\Downloads\FRST.txt
2014-01-22 21:21 - 2013-11-05 21:47 - 00000000 ____D C:\Users\Lucien
2014-01-22 21:07 - 2013-09-29 20:04 - 09441346 _____ C:\WINDOWS\PFRO.log
2014-01-22 14:01 - 2014-01-21 10:40 - 00000000 ____D C:\Users\Gast\AppData\Local\My Games
2014-01-22 14:01 - 2013-10-01 15:03 - 00000000 ____D C:\Users\Gast\Documents\My Games
2014-01-22 14:01 - 2013-09-01 19:44 - 00000000 ____D C:\Users\Lucien\AppData\Local\My Games
2014-01-22 14:01 - 2013-08-20 09:54 - 00000000 ____D C:\Users\Lucien\Documents\My Games
2014-01-22 12:30 - 2014-01-22 12:30 - 00000168 _____ C:\Users\Lucien\defogger_reenable
2014-01-21 22:19 - 2014-01-21 22:19 - 00000000 ____D C:\WINDOWS\LastGood
2014-01-21 22:13 - 2014-01-06 13:29 - 00000000 ____D C:\Users\Lucien\Documents\Rockstar Games
2014-01-21 22:13 - 2013-09-04 07:48 - 00000000 ____D C:\Users\Lucien\Documents\Blender
2014-01-21 22:00 - 2013-11-04 09:24 - 00069120 ___SH C:\Users\Gast\Downloads\Thumbs.db
2014-01-21 15:06 - 2014-01-21 15:06 - 01037068 _____ (Thisisu) C:\Users\Lucien\Desktop\JRT.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00987425 _____ C:\Users\Lucien\Desktop\SecurityCheck.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00448512 _____ (OldTimer Tools) C:\Users\Lucien\Desktop\TFC.exe
2014-01-21 15:05 - 2014-01-21 15:05 - 01236282 _____ C:\Users\Lucien\Desktop\adwcleaner.exe
2014-01-21 15:01 - 2014-01-21 15:00 - 02347384 _____ (ESET) C:\Users\Lucien\Desktop\esetsmartinstaller_enu.exe
2014-01-21 14:51 - 2013-10-19 09:42 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Spotify
2014-01-21 13:25 - 2014-01-21 13:15 - 24859352 _____ (Microsoft Corporation) C:\Users\Gast\Downloads\Windows-KB890830-x64-V5.8.exe
2014-01-21 10:38 - 2013-09-01 18:18 - 00281688 _____ C:\WINDOWS\SysWOW64\PnkBstrB.xtr
2014-01-21 10:18 - 2014-01-21 10:18 - 00050477 _____ C:\Users\Lucien\Desktop\Defogger.exe
2014-01-21 10:12 - 2014-01-21 10:12 - 00000000 ____D C:\Users\Gast\AppData\Roaming\QuickScan
2014-01-21 09:38 - 2014-01-21 09:38 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Spotydl
2014-01-21 09:37 - 2013-09-26 11:23 - 00000000 ____D C:\Users\Gast\AppData\Local\VirtualStore
2014-01-21 08:37 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Bitdefender
2014-01-21 08:37 - 2013-09-26 11:23 - 00000062 _____ C:\Users\Gast\AppData\Roaming\sp_data.sys
2014-01-21 08:33 - 2014-01-21 08:33 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2014-01-20 15:53 - 2014-01-20 15:53 - 00000000 ____D C:\Users\Gast\AppData\Local\NVIDIA Corporation
2014-01-20 15:53 - 2013-06-26 08:06 - 00000000 ____D C:\ProgramData\Atheros
2014-01-20 15:52 - 2014-01-20 15:52 - 00000385 _____ C:\Users\Gast\AppData\Roaminguser_gensett.xml
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\Documents\Bluetooth Folder
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\AppData\Local\BMExplorer
2014-01-20 15:52 - 2013-10-29 11:55 - 00000000 ____D C:\Users\Gast\AppData\Local\NVIDIA
2014-01-20 15:52 - 2013-10-19 09:42 - 00000000 ____D C:\Users\Gast\AppData\Local\Spotify
2014-01-20 15:52 - 2013-09-26 11:24 - 00000000 ___RD C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-20 15:52 - 2013-09-26 11:24 - 00000000 ___RD C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-20 15:51 - 2014-01-20 15:51 - 00000000 ____D C:\Users\Lucien\Documents\AdobeStockPhotos
2014-01-20 15:51 - 2013-07-18 20:48 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Adobe
2014-01-20 13:49 - 2014-01-17 13:50 - 00000000 ____D C:\Users\Lucien\Downloads\backups
2014-01-20 12:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache
2014-01-19 18:46 - 2014-01-17 13:42 - 00012554 _____ C:\Users\Lucien\Downloads\hijackthis.log
2014-01-19 18:22 - 2014-01-19 18:22 - 00305304 _____ C:\WINDOWS\Minidump\011914-32203-01.dmp
2014-01-19 18:22 - 2014-01-19 18:22 - 00000000 ____D C:\WINDOWS\Minidump
2014-01-19 18:22 - 2013-09-13 12:11 - 1134103589 _____ C:\WINDOWS\MEMORY.DMP
2014-01-19 16:08 - 2014-01-13 23:20 - 00000000 ____D C:\Program Files (x86)\McAfee Security Scan
2014-01-19 08:38 - 2014-01-19 21:21 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-01-17 20:25 - 2014-01-22 00:11 - 00379904 _____ C:\Users\Lucien\Desktop\gmer.exe
2014-01-17 13:42 - 2014-01-17 13:42 - 00388608 _____ (Trend Micro Inc.) C:\Users\Lucien\Downloads\HiJackThis204.exe
2014-01-17 13:42 - 2013-07-18 20:48 - 00000000 ____D C:\Users\Lucien\AppData\Local\VirtualStore
2014-01-17 09:54 - 2014-01-17 09:54 - 00000385 _____ C:\Users\Lucien\AppData\Roaminguser_gensett.xml
2014-01-17 09:54 - 2013-07-18 20:49 - 00000000 ___RD C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-17 09:54 - 2013-07-18 20:49 - 00000000 ___RD C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-16 16:41 - 2013-08-22 15:44 - 05147912 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\MediaViewer
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\FileManager
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Camera
2014-01-16 16:37 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2014-01-16 16:37 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\Dism
2014-01-16 13:51 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\WinStore
2014-01-16 13:29 - 2013-08-19 19:19 - 00000000 ____D C:\WINDOWS\system32\MRT
2014-01-13 23:23 - 2014-01-13 23:23 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\system32\bdsandboxuiskin32.dll
2014-01-13 23:23 - 2014-01-13 22:53 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\SysWOW64\bdsandboxuiskin32.dll
2014-01-13 23:23 - 2014-01-13 22:52 - 00261056 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avchv.sys
2014-01-13 23:23 - 2014-01-13 22:48 - 00000000 ____D C:\ProgramData\Bitdefender
2014-01-13 23:20 - 2014-01-13 23:20 - 00002041 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-13 23:20 - 2013-04-26 00:18 - 00000000 ____D C:\ProgramData\McAfee
2014-01-13 23:19 - 2013-04-26 00:15 - 00000000 ____D C:\ProgramData\Adobe
2014-01-13 23:19 - 2013-04-26 00:15 - 00000000 ____D C:\Program Files (x86)\Adobe
2014-01-13 22:54 - 2014-01-13 22:54 - 00620542 _____ C:\ProgramData\1389649682.bdinstall.bin
2014-01-13 22:54 - 2014-01-13 22:54 - 00000385 _____ C:\WINDOWS\system32\user_gensett.xml
2014-01-13 22:54 - 2014-01-13 22:53 - 00000000 ____D C:\ProgramData\BDLogging
2014-01-13 22:54 - 2014-01-13 22:52 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Bitdefender
2014-01-13 22:53 - 2014-01-13 22:53 - 00002212 _____ C:\Users\Public\Desktop\Bitdefender Safepay.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00002164 _____ C:\Users\Public\Desktop\Bitdefender Total Security.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2014-01-13 22:52 - 2014-01-13 22:48 - 00000000 ____D C:\Program Files\Bitdefender
2014-01-13 22:48 - 2014-01-13 22:48 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\QuickScan
2014-01-13 22:48 - 2014-01-12 22:56 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2014-01-13 22:46 - 2013-08-30 00:06 - 00000000 ____D C:\avast! sandbox
2014-01-13 22:45 - 2013-08-19 19:05 - 00000000 ____D C:\Program Files\AVAST Software
2014-01-13 22:45 - 2013-08-19 19:04 - 00000000 ____D C:\ProgramData\AVAST Software
2014-01-13 22:44 - 2013-08-19 19:06 - 00000000 _____ C:\WINDOWS\SysWOW64\config.nt
2014-01-13 14:27 - 2014-01-09 12:00 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Bioshock
2014-01-12 22:29 - 2014-01-12 22:29 - 07171632 _____ C:\Users\Lucien\Downloads\bitdefender_tsecurity.exe
2014-01-09 12:12 - 2014-01-09 12:00 - 00000000 ____D C:\Users\Lucien\Documents\Bioshock
2014-01-09 11:59 - 2013-04-26 00:16 - 00502089 _____ C:\WINDOWS\DirectX.log
2014-01-08 11:53 - 2013-12-27 10:35 - 00000000 ___RD C:\Users\Lucien\Downloads\Microsoft.SkypeApp_kzf8qxf38zg5c!App
2014-01-07 21:35 - 2014-01-07 21:35 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2014-01-07 21:05 - 2013-11-22 17:15 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-01-06 23:31 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-01-06 23:31 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\WINDOWS\SysWOW64\GPhotos.scr
2014-01-06 16:20 - 2013-08-19 19:19 - 86054176 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-01-06 13:11 - 2014-01-06 13:11 - 00000000 __SHD C:\ProgramData\SecuROM
2014-01-06 13:10 - 2014-01-06 13:10 - 00000000 ____D C:\Users\Lucien\AppData\Local\Rockstar Games
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\WINDOWS\SysWOW64\xlive
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\Users\Lucien\Documents\Games for Windows - LIVE Demos
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2014-01-06 13:08 - 2014-01-06 13:08 - 00642712 _____ (Microsoft Corporation) C:\Users\Lucien\Downloads\gfwlivesetup.exe
2013-12-30 23:47 - 2013-10-14 09:58 - 00000000 ____D C:\Users\Lucien\AppData\Local\Spotify
2013-12-29 16:19 - 2013-11-29 21:45 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\dvdcss
2013-12-29 13:36 - 2013-08-20 22:12 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Apple Computer
2013-12-29 13:34 - 2013-08-20 22:12 - 00000000 ____D C:\Users\Lucien\AppData\Local\Apple Computer
2013-12-28 20:12 - 2013-08-20 22:10 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-12-28 20:10 - 2013-12-28 20:07 - 70638408 _____ (Apple Inc.) C:\Users\Lucien\Downloads\iCloudSetup.exe

Some content of TEMP:
====================
C:\Users\Gast\AppData\Local\Temp\drm_dyndata_7390004.dll
C:\Users\Gast\AppData\Local\Temp\ubiB23E.tmp.exe
C:\Users\Lucien\AppData\Local\Temp\Quarantine.exe
C:\Users\Lucien\AppData\Local\Temp\UpdateCheckerSetup.exe
C:\Users\Lucien\AppData\Local\Temp\wajam_download.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-27 19:46

==================== End Of Log ============================

--- --- ---

--- --- ---

KitsuneNoir · 28.01.2014, 13:16

Ich hab den nvidia treiber installieren können und auch die anderen.
Im abgesicherten modus gings dann

aber das problem mit dem neustart (siehe bild im anhang) und secure banking besteht noch.

sunjojo · 28.01.2014, 18:22

Zitat:

also Secure Banking meldet sich nach wie vor bei jedem Browserstart und meckert rum, ob mit oder ohne Bitdefender

Ok, hab nochmal nachgeguckt, reicht doch nicht, diesen einfach nur zu deaktivieren. Bitte führe Schritt 1 (entnommen aus dem Secure Banking Thread) aus und gucke, ob die Fehlermeldung weg ist. Wenn nicht, würde ich den Programmierer von Secure Banking um Rat bitten

.
Schritt 1

Gehe bei Bitdefender in die Antivirus-Einstellungen
Wähle den Tab "Ausschlüsse" aus
Setzt den Regler bei "Ausschlüsse für Dateien" auf ON
Klicke dann auf Ausgeschlossene Prozesse - Hinzufügen -
Navigiere in das Installationsverzeichnis von Secure Banking (Standardmäßig: "C:/programme/secure banking software/secure banking")
Füge die Datei sbservice.exe und vorsichtshalber auch SecureBanking.exe hinzu

Falls die Meldung von Secure Banking trotz den Einstellung nicht weg sind, deinstalliere bitte Chrome einmal vollständig und installiere diesen wieder. Berichte mir, ob das funktioniert hat.

Schritt 2
Downloade dir bitte Windows Repair (All In One) von hier.

Installiere das Programm. Starte es, nachdem die Installation abgeschlossen wurde.
Klicke auf Step 2 und drücke unter Check Disk auf Do It.
Wenn der Vorgang abgeschlossen ist, klicke auf Step 3 und drücke unter System File Check auf Do It.
Nachdem der Vorgang abgeschlossen ist, klicke auf Start Repairs, wähle den Advanced Mode und drücke Start.
Gehe bitte sicher, dass die Kästchen wie unten zu sehen angehakt sind. Bitte hake zusätzlich noch Set Windows Services to Default Startup an.
Hake Restart System when Finished an.
Drücke Start.

Schritt 3
Starte noch einmal FRST.

Ändere keine der Voreinstellungen und drücke auf Scan.
Wenn der Scan abgeschlossen ist, wird ein neues Logfile FRST.txt erstellt und auf dem Desktop gespeichert.
Poste den Inhalt dieses Logfiles bitte hier in deinen Thread.

Wenn das Fenster mit der Aufforderung zum Neustart erscheint, kannst du erkennen, ob Updates installiert wurden, bzw. was installiert wurde?

Poste folgende Logfiles in deiner nächsten Antwort:

FRST-Scan

KitsuneNoir · 29.01.2014, 16:24

Hi,
also Secure Banking meldet sich trotz aller befolgten Schritte weiterhin mit einer Malware.
Und bei dem Neustartfenster war nicht bemerkbar ob etwas geupdatet oder installiert wurde :/

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-01-2014 01
Ran by Lucien (administrator) on LUCIENSNOTE on 29-01-2014 16:21:01
Running from C:\Users\Lucien\Desktop
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\vsserv.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(ASUS) C:\Program Files\ASUS\P4G\InsOnSrv.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender Safebox\safeboxservice.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files\ASUS\P4G\InsOnWMI.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe\livecomm.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS Console\ASUS Console Starter.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\bdagent.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Secure Banking) C:\Program Files (x86)\Secure Banking\SecureBanking.exe
() C:\Program Files (x86)\Secure Banking\sbservice.exe
(Akamai Technologies, Inc.) C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe
(Akamai Technologies, Inc.) C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-09-25] (Adobe Systems Incorporated)
HKLM\...\Run: [PrnStatusMX] - C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe [1240064 2012-07-04] (Marvell Semiconductor, Inc.)
HKLM\...\Run: [Bdagent] - C:\Program Files\Bitdefender\Bitdefender\bdagent.exe [1735872 2014-01-13] (Bitdefender)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\WINDOWS\system32\nvspcap64.dll [1179576 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [BTMTrayAgent] - C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [7818040 2013-09-19] (Motorola Solutions, Inc.)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1361112 2013-11-05] (Realtek Semiconductor)
HKLM-x32\...\Run: [ASUSPRP] - C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-04-26] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-01-15] (cyberlink)
HKLM-x32\...\Run: [ASUS InstantKey] - C:\Program Files (x86)\ASUS\ASUS Instant Key\Ikey_start.exe [13936 2013-04-16] (ASUS)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2237328 2013-11-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-09-25] ( (Atheros Communications))
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\steam.exe [1815464 2014-01-07] (Valve Corporation)
HKCU\...\Run: [SecureBanking] - C:\Program Files (x86)\Secure Banking\SecureBanking.exe [507904 2013-06-30] (Secure Banking)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Lucien\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-10] (Spotify Ltd)
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
HKCU\...\Run: [Bitdefender-Geldbörse-Agent] - C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [561672 2014-01-13] (Bitdefender)
HKCU\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] - C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [612696 2014-01-13] (Bitdefender)
HKU\Gast\...\Run: [Spotify] - C:\Users\Gast\AppData\Roaming\Spotify\Spotify.exe [6118400 2014-01-20] (Spotify Ltd)
HKU\Gast\...\Run: [Spotify Web Helper] - C:\Users\Gast\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-01-20] (Spotify Ltd)
HKU\Gast\...\Run: [Steam] - C:\Program Files (x86)\Steam\steam.exe [1815464 2014-01-07] (Valve Corporation)
HKU\Gast\...\Run: [SecureBanking] - C:\Program Files (x86)\Secure Banking\SecureBanking.exe [507904 2013-06-30] (Secure Banking)
HKU\Gast\...\Run: [Akamai NetSession Interface] - C:\Users\Lucien\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKU\Gast\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKU\Gast\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
HKU\Gast\...\Run: [Bitdefender-Geldbörse-Agent] - C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [561672 2014-01-13] (Bitdefender)
HKU\Gast\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] - C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [612696 2014-01-13] (Bitdefender)
HKU\Gast\...\Run: [Bitdefender-Geldbörse] - C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe [1001512 2014-01-13] (Bitdefender)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [168616 2013-12-19] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll,C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [141336 2013-12-19] (NVIDIA Corporation)
Startup: C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;form=IE10TR&amp;src=IE10TR&amp;pc=ASU2JS
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;form=IE10TR&amp;src=IE10TR&amp;pc=ASU2JS
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\pmbxie.dll (Bitdefender)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxie.dll (Bitdefender)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Chrome: 
=======
CHR HomePage: hxxp://www.google.de/
CHR Extension: (Google Docs) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-14]
CHR Extension: (Google Drive) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-19]
CHR Extension: (YouTube) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-19]
CHR Extension: (Bitdefender Wallet) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccahoghmggldkcdjiebjkidpfongdfbl [2014-01-13]
CHR Extension: (Google-Suche) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-19]
CHR Extension: (Google Wallet) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR Extension: (Google Mail) - C:\Users\Lucien\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-19]
CHR HKLM-x32\...\Chrome\Extension: [ccahoghmggldkcdjiebjkidpfongdfbl] - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxcr.crx [2014-01-13]

==================== Services (Whitelisted) =================

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-12-18] (Adobe Systems)
R2 ASUS InstantOn; C:\Program Files\ASUS\P4G\InsOnSrv.exe [277120 2013-04-29] (ASUS)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-09-25] (Windows (R) Win 7 DDK provider)
S4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender\bdparentalservice.exe [77632 2013-11-21] (Bitdefender)
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [247768 2013-01-15] (CyberLink)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-04-11] (Intel Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-09-18] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16939296 2014-01-21] (NVIDIA Corporation)
R2 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [94624 2013-07-08] (Bitdefender)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe [67320 2013-10-07] (Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender\vsserv.exe [1507248 2013-11-15] (Bitdefender)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [18384 2013-09-04] (Intel(R) Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-09-25] (Atheros)

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [70416 2013-09-23] (ASUS Corporation)
R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [727592 2013-07-19] (BitDefender)
R3 avchv; C:\Windows\system32\DRIVERS\avchv.sys [261056 2014-01-13] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [601360 2013-07-19] (BitDefender)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
S0 bdelam; C:\Windows\System32\drivers\bdelam.sys [23568 2013-09-08] (Bitdefender)
R1 BdfNdisf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys [98768 2013-07-24] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107008 2013-07-29] (BitDefender LLC)
S4 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-07-02] (Bitdefender SRL)
S3 BDSandBox; C:\WINDOWS\system32\drivers\bdsandbox.sys [82824 2013-11-04] (BitDefender SRL)
R1 BDVEDISK; C:\Windows\system32\DRIVERS\bdvedisk.sys [79192 2013-07-30] (BitDefender)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-25] (Qualcomm Atheros)
S3 BthA2DP; C:\Windows\system32\drivers\BthA2DP.sys [131584 2013-08-22] (Microsoft Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [140600 2013-07-22] (Motorola Solutions, Inc.)
R3 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2013-09-01] (DT Soft Ltd)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [150256 2013-08-23] (BitDefender LLC)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)
R2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [26328 2013-07-23] (Intel Corporation)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-07-26] (Intel Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S0 rtcrfilt64; C:\Windows\System32\DRIVERS\rtcrfilt64.sys [19600 2000-01-01] (Realtek Semiconductor Corp.)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
S3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16152 2013-09-03] ()
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [389240 2013-08-07] (BitDefender S.R.L.)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
S3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [x]
S3 GPU-Z; \??\C:\Users\Lucien\AppData\Local\Temp\GPU-Z.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-29 16:06 - 2014-01-29 16:07 - 00298424 _____ C:\WINDOWS\Minidump\012914-53375-01.dmp
2014-01-29 15:41 - 2014-01-29 16:04 - 00181064 _____ (Sysinternals) C:\WINDOWS\PSEXESVC.EXE
2014-01-29 15:37 - 2014-01-29 15:37 - 00000207 _____ C:\WINDOWS\tweaking.com-regbackup-LUCIENSNOTE-Microsoft-Windows-8.1-(64-bit).dat
2014-01-29 15:36 - 2014-01-29 15:36 - 00000000 ____D C:\RegBackup
2014-01-29 15:04 - 2014-01-29 15:04 - 00003296 ____N C:\bootsqm.dat
2014-01-29 14:56 - 2014-01-29 14:56 - 00000000 ____D C:\Users\Lucien\Downloads\Tweaking.com - Windows Repair
2014-01-29 14:48 - 2014-01-29 14:48 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2014-01-29 14:45 - 2013-11-05 19:47 - 03707864 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2014-01-29 14:45 - 2013-11-05 18:54 - 38385664 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
2014-01-29 14:45 - 2013-11-05 15:48 - 00681905 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2014-01-29 14:45 - 2013-11-04 19:26 - 00153304 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2014-01-29 14:45 - 2013-11-04 11:11 - 02587864 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkAPO64.dll
2014-01-29 14:45 - 2013-10-30 16:31 - 00929080 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICAPOSettingsIPC.dll
2014-01-29 14:45 - 2013-10-28 17:29 - 01021656 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2014-01-29 14:45 - 2013-10-25 10:49 - 05751576 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICAPOlfx.dll
2014-01-29 14:45 - 2013-10-18 16:41 - 01286360 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2014-01-29 14:45 - 2013-10-11 11:31 - 00947760 _____ (Sony Corporation) C:\WINDOWS\system32\SFSS_APO.dll
2014-01-29 14:45 - 2013-10-09 20:13 - 01286400 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxSpeechAPO64.dll
2014-01-29 14:45 - 2013-10-09 20:12 - 03714304 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioVnN64.dll
2014-01-29 14:45 - 2013-10-09 20:12 - 02103040 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\WavesGUILib64.dll
2014-01-29 14:45 - 2013-10-07 11:05 - 02810072 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2014-01-29 14:45 - 2013-10-02 17:10 - 00617176 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2014-01-29 14:45 - 2013-09-09 15:32 - 05681192 _____ C:\WINDOWS\system32\Drivers\rtvienna.dat
2014-01-29 14:45 - 2013-08-24 03:14 - 01014016 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\slcnt64.dll
2014-01-29 14:45 - 2013-08-24 03:14 - 00897792 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll
2014-01-29 14:45 - 2013-08-24 03:14 - 00722688 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll
2014-01-29 14:45 - 2013-08-24 03:14 - 00244480 _____ (TODO: <Company name>) C:\WINDOWS\system32\slprp64.dll
2014-01-29 14:45 - 2013-08-14 16:36 - 00662784 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVolumeSDAPO.dll
2014-01-29 14:45 - 2013-08-14 16:35 - 00907008 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO2064.dll
2014-01-29 14:45 - 2013-06-25 12:47 - 00871856 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tossaeapo64.dll
2014-01-29 14:45 - 2013-06-25 12:47 - 00162224 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\toseaeapo64.dll
2014-01-29 14:45 - 2013-06-25 12:46 - 00582056 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosasfapo64.dll
2014-01-29 14:45 - 2013-04-24 17:16 - 01662024 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2014-01-29 14:45 - 2013-04-03 14:13 - 00906800 _____ (Sony Corporation) C:\WINDOWS\system32\MISS_APO.dll
2014-01-29 14:45 - 2012-08-31 19:18 - 07164176 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEP64A.dll
2014-01-29 14:45 - 2012-08-31 19:17 - 00434960 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EED64A.dll
2014-01-29 14:45 - 2012-08-31 19:17 - 00141584 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEL64A.dll
2014-01-29 14:45 - 2012-08-31 19:17 - 00124176 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEA64A.dll
2014-01-29 14:45 - 2012-08-31 19:17 - 00075024 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEG64A.dll
2014-01-29 14:45 - 2012-01-30 11:43 - 00836544 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo264.dll
2014-01-29 14:45 - 2012-01-10 10:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\WINDOWS\system32\tepeqapo64.dll
2014-01-29 14:45 - 2011-12-20 15:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2014-01-29 14:45 - 2011-11-22 16:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2014-01-29 14:45 - 2011-09-02 14:21 - 00221024 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFNHK64.dll
2014-01-29 14:45 - 2011-09-02 14:21 - 00081248 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFCOM64.dll
2014-01-29 14:45 - 2011-09-02 14:21 - 00078688 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFAPO64.dll
2014-01-29 14:45 - 2011-03-17 12:17 - 01361336 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosade.dll
2014-01-29 14:45 - 2011-03-07 17:11 - 00148416 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo.dll
2014-01-29 14:45 - 2010-11-08 07:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2014-01-29 14:45 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2014-01-29 14:45 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2014-01-29 14:45 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2014-01-29 14:45 - 2010-11-08 07:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2014-01-29 14:45 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2014-01-29 14:45 - 2010-11-03 18:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2014-01-29 14:45 - 2010-07-22 16:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\WINDOWS\SysWOW64\SFCOM.dll
2014-01-29 14:45 - 2009-11-24 09:55 - 00518896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2014-01-29 14:45 - 2009-11-24 09:55 - 00211184 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll
2014-01-29 14:45 - 2009-11-24 09:55 - 00198896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll
2014-01-29 14:45 - 2009-11-24 09:55 - 00155888 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2014-01-29 14:44 - 2013-10-16 03:43 - 00209096 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll
2014-01-29 14:44 - 2013-10-11 12:47 - 00113576 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2014-01-29 14:44 - 2013-10-09 20:13 - 01921792 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek264.dll
2014-01-29 14:44 - 2013-10-09 20:13 - 01345280 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO5064.dll
2014-01-29 14:44 - 2013-10-09 20:12 - 27644160 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioVnA64.dll
2014-01-29 14:44 - 2013-10-09 20:12 - 14152960 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek64.dll
2014-01-29 14:44 - 2013-10-09 20:12 - 02036992 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioEQ64.dll
2014-01-29 14:44 - 2013-10-09 20:12 - 01012992 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPOShell64.dll
2014-01-29 14:44 - 2013-10-07 00:26 - 00501184 _____ (DTS) C:\WINDOWS\system32\DTSU2PLFX64.dll
2014-01-29 14:44 - 2013-10-07 00:26 - 00487360 _____ (DTS) C:\WINDOWS\system32\DTSU2PGFX64.dll
2014-01-29 14:44 - 2013-10-07 00:26 - 00415680 _____ (DTS) C:\WINDOWS\system32\DTSU2PREC64.dll
2014-01-29 14:44 - 2013-09-10 04:02 - 06217904 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64A.dll
2014-01-29 14:44 - 2013-09-10 04:02 - 00313520 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64A.dll
2014-01-29 14:44 - 2013-09-10 04:01 - 01938608 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64A.dll
2014-01-29 14:44 - 2013-09-10 04:01 - 00260272 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64.dll
2014-01-29 14:44 - 2013-08-20 17:37 - 00605496 _____ C:\WINDOWS\system32\audioLibVc.dll
2014-01-29 14:44 - 2013-08-14 16:35 - 01084160 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO4064.dll
2014-01-29 14:44 - 2013-08-14 16:35 - 00663296 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO30.dll
2014-01-29 14:44 - 2013-08-05 18:11 - 02743328 _____ (Fortemedia Corporation) C:\WINDOWS\system32\FMAPO64.dll
2014-01-29 14:44 - 2013-07-23 15:39 - 00790272 _____ (Waves Audio Ltd.) C:\WINDOWS\SysWOW64\MaxxAudioAPOShell.dll
2014-01-29 14:44 - 2013-06-21 11:01 - 00109848 _____ C:\WINDOWS\system32\AcpiServiceVnA64.dll
2014-01-29 14:44 - 2012-03-08 11:47 - 00108640 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll
2014-01-29 14:44 - 2011-08-23 17:00 - 00603984 _____ (Knowles Acoustics ) C:\WINDOWS\system32\KAAPORT64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 01756264 _____ (DTS) C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 01568360 _____ (DTS) C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 01486952 _____ (DTS) C:\WINDOWS\system32\DTSBoostDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00728680 _____ (DTS) C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00712296 _____ (DTS) C:\WINDOWS\system32\DTSSymmetryDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00693352 _____ (DTS) C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00491112 _____ (DTS) C:\WINDOWS\system32\DTSNeoPCDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00432744 _____ (DTS) C:\WINDOWS\system32\DTSLimiterDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00428648 _____ (DTS) C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\WINDOWS\system32\DTSLFXAPO64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPO64.dll
2014-01-29 14:44 - 2011-05-31 09:42 - 00241768 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPONS64.dll
2014-01-29 14:44 - 2010-09-27 09:34 - 00318808 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO20.dll
2014-01-29 14:29 - 2014-01-29 14:37 - 109595877 _____ C:\Users\Lucien\Downloads\Audio_Realtek_Win81_64_VER6017083.zip
2014-01-29 14:20 - 2014-01-29 14:20 - 02903255 _____ C:\Users\Lucien\Downloads\tweaking.com_windows_repair_aio.zip
2014-01-29 13:10 - 2014-01-29 16:18 - 00002197 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-29 13:09 - 2014-01-29 14:46 - 00000000 ____D C:\Program Files (x86)\GUMCBFB.tmp
2014-01-29 13:05 - 2014-01-29 13:07 - 37739976 _____ (Google Inc.) C:\Users\Lucien\Downloads\ChromeStandalone32Setup.exe
2014-01-29 13:02 - 2014-01-29 13:02 - 00000000 ____D C:\Users\Lucien\AppData\Local\Deployment
2014-01-29 12:56 - 2014-01-29 12:56 - 00000000 ____D C:\Users\Lucien\Desktop\chrome default
2014-01-29 12:49 - 2014-01-29 12:49 - 00001124 _____ C:\Users\Lucien\Desktop\Absolute Uninstaller.lnk
2014-01-29 12:49 - 2014-01-29 12:49 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\GlarySoft
2014-01-29 12:48 - 2014-01-29 12:48 - 02194784 _____ (Glarysoft.com                                               ) C:\Users\Lucien\Downloads\au29setup.exe
2014-01-29 09:54 - 2014-01-29 09:54 - 00048629 _____ C:\Users\Lucien\Documents\Namenschilder%20fertig.ppt_0.odp
2014-01-29 09:40 - 2014-01-29 14:55 - 00000000 ____D C:\ProgramData\Atheros
2014-01-29 09:40 - 2014-01-29 09:40 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Atheros
2014-01-28 14:00 - 2014-01-28 14:05 - 00000000 ____D C:\Program Files\Common Files\QCA_Bluetooth
2014-01-28 13:56 - 2014-01-28 13:56 - 00000000 ____D C:\Users\Lucien\Downloads\Win8 Key
2014-01-28 13:51 - 2014-01-28 13:52 - 00000000 ____D C:\Users\Lucien\Downloads\wlan
2014-01-28 13:51 - 2014-01-28 13:51 - 00000000 ____D C:\Users\Lucien\Downloads\lan
2014-01-28 13:50 - 2014-01-28 13:50 - 00000000 ____D C:\Users\Lucien\Downloads\bluetooth
2014-01-28 13:48 - 2014-01-28 13:49 - 00000000 ____D C:\Users\Lucien\Downloads\audio
2014-01-28 13:46 - 2014-01-28 13:46 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_btmaux_01009.Wdf
2014-01-28 13:45 - 2014-01-28 13:45 - 00000000 ____D C:\Users\Lucien\Downloads\blue
2014-01-28 13:44 - 2014-01-28 13:45 - 00000000 ____D C:\Users\Lucien\Downloads\Lang
2014-01-28 12:12 - 2014-01-28 12:12 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2014-01-28 12:11 - 2014-01-29 09:40 - 00000000 ____D C:\WINDOWS\SysWOW64\NV
2014-01-28 12:11 - 2014-01-29 09:39 - 00000000 ____D C:\WINDOWS\system32\NV
2014-01-28 12:10 - 2013-12-19 21:33 - 30372640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 25257248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 22960416 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 18310112 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 18222008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 17560352 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 15877216 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 15230352 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 12645664 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2014-01-28 12:10 - 2013-12-19 21:33 - 11605752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 11554264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 09700224 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 09657464 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 03132704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 03125024 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvenc.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 02947872 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 02747680 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvenc.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00882464 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00879392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00852768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00847648 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00479520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00405280 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00317472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00266984 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2014-01-28 12:10 - 2013-12-19 21:33 - 00032544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys
2014-01-28 11:40 - 2014-01-28 11:40 - 00001369 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2014-01-28 11:40 - 2014-01-28 11:40 - 00000000 ____D C:\Users\Lucien\AppData\Local\NVIDIA Corporation
2014-01-28 11:39 - 2014-01-28 11:41 - 00000000 ____D C:\Users\Lucien\AppData\Local\NVIDIA
2014-01-28 11:39 - 2014-01-21 03:54 - 01179576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2014-01-28 11:39 - 2014-01-21 03:54 - 01048152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2014-01-28 11:39 - 2013-12-27 19:42 - 00039200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2014-01-28 11:39 - 2013-12-27 19:42 - 00035104 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2014-01-28 11:39 - 2013-12-27 19:42 - 00033056 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2014-01-28 10:55 - 2014-01-28 12:11 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-28 10:55 - 2013-12-19 19:53 - 06671648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2014-01-28 10:55 - 2013-12-19 19:53 - 03490080 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2014-01-28 10:55 - 2013-12-19 19:53 - 02559776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2014-01-28 10:55 - 2013-12-19 19:53 - 01065248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2014-01-28 10:55 - 2013-12-19 19:53 - 00922912 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2014-01-28 10:55 - 2013-12-19 19:53 - 00386336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2014-01-28 10:55 - 2013-12-19 19:53 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2014-01-28 10:55 - 2013-12-19 19:53 - 00063776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2014-01-28 10:55 - 2013-12-19 06:01 - 03539040 _____ C:\WINDOWS\system32\nvcoproc.bin
2014-01-28 10:54 - 2014-01-28 11:40 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2014-01-28 10:53 - 2014-01-28 10:53 - 00000000 ____D C:\NVIDIA
2014-01-28 10:41 - 2014-01-28 10:41 - 00000000 ____D C:\WINDOWS\pss
2014-01-28 09:59 - 2014-01-28 10:01 - 31475128 _____ (NVIDIA Corporation) C:\Users\Lucien\Downloads\GeForce_Experience_v1.8.2.0.exe
2014-01-27 23:55 - 2013-12-19 21:33 - 01884448 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6433221.dll
2014-01-27 23:55 - 2013-12-19 21:33 - 01511712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6433221.dll
2014-01-27 23:55 - 2013-12-19 21:33 - 00357152 _____ C:\WINDOWS\system32\NvIFROpenGL.dll
2014-01-27 23:55 - 2013-12-19 21:33 - 00314656 _____ C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2014-01-27 22:46 - 2014-01-27 22:59 - 266633424 _____ (NVIDIA Corporation) C:\Users\Lucien\Downloads\332.21-notebook-win8-win7-64bit-international-whql.exe
2014-01-27 20:36 - 2014-01-29 16:21 - 00021288 _____ C:\Users\Lucien\Desktop\FRST.txt
2014-01-27 19:54 - 2014-01-27 20:33 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-27 19:53 - 2014-01-27 19:53 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-01-27 19:52 - 2014-01-27 19:52 - 00000000 ____D C:\Users\Lucien\Desktop\mbar
2014-01-27 19:47 - 2014-01-27 19:48 - 00000000 ____D C:\Users\Lucien\Desktop\Logs2
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2014-01-26 20:53 - 2014-01-26 20:53 - 00003186 _____ C:\WINDOWS\System32\Tasks\{E66DEEF7-845B-48C8-BBEE-CE6EA6F2EE96}
2014-01-26 19:26 - 2014-01-26 19:26 - 00003362 _____ C:\WINDOWS\System32\Tasks\{63C03234-5B71-4184-AD48-4EE22D315F87}
2014-01-25 15:01 - 2014-01-25 15:01 - 00000000 ____H C:\Users\Lucien\Documents\Default.rdp
2014-01-24 19:21 - 2014-01-24 19:21 - 00000000 ____D C:\Users\Lucien\Desktop\Logs alt
2014-01-24 19:17 - 2014-01-24 19:17 - 00361185 _____ (Farbar) C:\Users\Lucien\Desktop\FSS.exe
2014-01-24 16:48 - 2014-01-24 16:48 - 00032847 _____ C:\Users\Lucien\Desktop\gmer.zip
2014-01-24 11:34 - 2014-01-24 11:34 - 00000000 ____D C:\Program Files (x86)\ESET
2014-01-24 10:53 - 2014-01-24 10:53 - 00000000 ____D C:\WINDOWS\ERUNT
2014-01-22 21:41 - 2014-01-29 16:20 - 00000000 ____D C:\Users\Lucien\Desktop\FRST-OlderVersion
2014-01-22 21:23 - 2014-01-22 21:23 - 00022688 _____ C:\Users\Lucien\Downloads\Addition.txt
2014-01-22 21:22 - 2014-01-22 21:23 - 00046051 _____ C:\Users\Lucien\Downloads\FRST.txt
2014-01-22 13:59 - 2014-01-29 16:20 - 02079744 _____ (Farbar) C:\Users\Lucien\Desktop\FRST64.exe
2014-01-22 12:30 - 2014-01-22 12:30 - 00000168 _____ C:\Users\Lucien\defogger_reenable
2014-01-22 00:11 - 2014-01-17 20:25 - 00379904 _____ C:\Users\Lucien\Desktop\gmer.exe
2014-01-22 00:10 - 2014-01-29 14:54 - 00000000 ____D C:\Users\Lucien\Desktop\Tweaking.com - Windows Repair
2014-01-22 00:10 - 2012-12-19 16:10 - 00000000 ____D C:\Users\Lucien\Desktop\data
2014-01-22 00:10 - 2009-10-20 21:47 - 00055936 _____ () C:\Users\Lucien\Desktop\Setup.exe
2014-01-21 23:54 - 2014-01-29 16:20 - 00000000 ____D C:\FRST
2014-01-21 22:19 - 2014-01-29 14:47 - 00000000 ____D C:\WINDOWS\LastGood
2014-01-21 15:06 - 2014-01-21 15:06 - 01037068 _____ (Thisisu) C:\Users\Lucien\Desktop\JRT.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00987425 _____ C:\Users\Lucien\Desktop\SecurityCheck.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00448512 _____ (OldTimer Tools) C:\Users\Lucien\Desktop\TFC.exe
2014-01-21 15:05 - 2014-01-21 15:05 - 01236282 _____ C:\Users\Lucien\Desktop\adwcleaner.exe
2014-01-21 15:00 - 2014-01-21 15:01 - 02347384 _____ (ESET) C:\Users\Lucien\Desktop\esetsmartinstaller_enu.exe
2014-01-21 13:15 - 2014-01-21 13:25 - 24859352 _____ (Microsoft Corporation) C:\Users\Gast\Downloads\Windows-KB890830-x64-V5.8.exe
2014-01-21 10:40 - 2014-01-22 14:01 - 00000000 ____D C:\Users\Gast\AppData\Local\My Games
2014-01-21 10:18 - 2014-01-21 10:18 - 00050477 _____ C:\Users\Lucien\Desktop\Defogger.exe
2014-01-21 10:12 - 2014-01-21 10:12 - 00000000 ____D C:\Users\Gast\AppData\Roaming\QuickScan
2014-01-21 09:38 - 2014-01-21 09:38 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Spotydl
2014-01-21 08:33 - 2014-01-21 08:33 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2014-01-20 16:10 - 2013-12-03 13:49 - 00000000 ____D C:\Users\Gast\Downloads\settings
2014-01-20 15:53 - 2014-01-20 15:53 - 00000000 ____D C:\Users\Gast\AppData\Local\NVIDIA Corporation
2014-01-20 15:52 - 2014-01-21 08:37 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Bitdefender
2014-01-20 15:52 - 2014-01-20 15:52 - 00000385 _____ C:\Users\Gast\AppData\Roaminguser_gensett.xml
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\Documents\Bluetooth Folder
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\AppData\Local\BMExplorer
2014-01-20 15:51 - 2014-01-20 15:51 - 00000000 ____D C:\Users\Lucien\Documents\AdobeStockPhotos
2014-01-19 21:21 - 2014-01-19 08:38 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-01-19 18:22 - 2014-01-29 16:06 - 00000000 ____D C:\WINDOWS\Minidump
2014-01-19 18:22 - 2014-01-19 18:22 - 00305304 _____ C:\WINDOWS\Minidump\011914-32203-01.dmp
2014-01-17 13:50 - 2014-01-20 13:49 - 00000000 ____D C:\Users\Lucien\Downloads\backups
2014-01-17 13:42 - 2014-01-19 18:46 - 00012554 _____ C:\Users\Lucien\Downloads\hijackthis.log
2014-01-17 13:42 - 2014-01-17 13:42 - 00388608 _____ (Trend Micro Inc.) C:\Users\Lucien\Downloads\HiJackThis204.exe
2014-01-17 09:54 - 2014-01-17 09:54 - 00000385 _____ C:\Users\Lucien\AppData\Roaminguser_gensett.xml
2014-01-16 14:05 - 2013-12-11 08:55 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-01-16 14:05 - 2013-12-09 01:34 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-01-16 14:05 - 2013-12-09 01:04 - 00980480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-01-16 14:05 - 2013-11-27 16:34 - 03210528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2014-01-16 14:05 - 2013-11-27 16:27 - 00809872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-01-16 14:05 - 2013-11-27 15:00 - 00663680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-01-16 14:05 - 2013-11-27 14:47 - 02804528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2014-01-16 14:05 - 2013-11-27 13:02 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ipnat.sys
2014-01-16 14:05 - 2013-11-27 11:54 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-01-16 14:05 - 2013-11-27 11:24 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll
2014-01-16 14:05 - 2013-11-27 11:08 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-01-16 14:05 - 2013-11-27 10:46 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll
2014-01-16 14:05 - 2013-11-27 10:41 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2014-01-16 14:05 - 2013-11-27 10:17 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-01-16 14:05 - 2013-11-27 10:10 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2014-01-16 14:05 - 2013-11-27 09:58 - 01503232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-01-16 14:05 - 2013-11-27 09:56 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll
2014-01-16 14:05 - 2013-11-27 09:20 - 04106240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-01-16 14:05 - 2013-11-27 05:01 - 00385614 _____ C:\WINDOWS\system32\ApnDatabase.xml
2014-01-16 14:05 - 2013-11-26 14:22 - 01928144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2014-01-16 14:05 - 2013-11-26 14:20 - 02131120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-01-16 14:05 - 2013-11-26 14:20 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-01-16 14:05 - 2013-11-26 14:20 - 01374384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-01-16 14:05 - 2013-11-26 12:50 - 01371312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2014-01-16 14:05 - 2013-11-26 12:44 - 02142936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-01-16 14:05 - 2013-11-26 12:44 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-01-16 14:05 - 2013-11-26 11:13 - 04191232 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-01-16 14:05 - 2013-11-26 10:21 - 18577920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-01-16 14:05 - 2013-11-26 09:28 - 13925888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-01-16 14:05 - 2013-11-25 02:45 - 00142680 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-01-16 14:05 - 2013-11-25 02:32 - 01119064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2014-01-16 14:05 - 2013-11-25 00:30 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2014-01-16 14:05 - 2013-11-25 00:28 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2014-01-16 14:05 - 2013-11-23 13:47 - 00032088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-01-16 14:05 - 2013-11-23 12:49 - 21196664 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-01-16 14:05 - 2013-11-23 09:19 - 18642504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-01-16 14:05 - 2013-11-23 08:13 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\bi.dll
2014-01-16 14:05 - 2013-11-23 08:13 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys
2014-01-16 14:05 - 2013-11-23 08:08 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-01-16 14:05 - 2013-11-23 05:50 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-01-16 14:05 - 2013-11-23 04:57 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2014-01-16 14:05 - 2013-11-23 04:48 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2014-01-16 14:05 - 2013-11-23 04:25 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2014-01-16 14:05 - 2013-11-23 04:25 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2014-01-16 14:05 - 2013-11-23 04:19 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-01-16 14:05 - 2013-11-23 04:15 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-01-16 14:05 - 2013-11-21 07:58 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceregistration.dll
2014-01-16 14:05 - 2013-11-21 07:26 - 01415680 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-01-16 14:05 - 2013-11-16 06:11 - 00764856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-01-16 14:05 - 2013-11-15 19:19 - 00669344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-01-16 14:05 - 2013-11-15 15:59 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2014-01-16 14:05 - 2013-11-15 15:25 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2014-01-16 14:05 - 2013-11-15 15:08 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-01-16 14:05 - 2013-11-15 14:24 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-01-16 14:05 - 2013-11-05 21:12 - 02551128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-01-16 14:05 - 2013-10-31 01:29 - 00745336 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-01-16 14:05 - 2013-10-31 00:41 - 00552624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2014-01-15 23:39 - 2013-12-09 01:15 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-01-15 23:39 - 2013-11-27 16:36 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-01-15 23:39 - 2013-11-27 12:41 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe
2014-01-15 23:39 - 2013-11-27 11:34 - 00138240 _____ C:\WINDOWS\system32\OEMLicense.dll
2014-01-15 23:39 - 2013-11-27 10:54 - 00103936 _____ C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-01-15 23:39 - 2013-11-27 09:48 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 23:39 - 2013-11-27 09:45 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-01-15 23:39 - 2013-11-27 09:40 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 23:39 - 2013-11-27 09:38 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-01-15 23:39 - 2013-11-27 09:17 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-01-15 23:39 - 2013-11-27 09:12 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-01-13 23:23 - 2014-01-13 23:23 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\system32\bdsandboxuiskin32.dll
2014-01-13 23:20 - 2014-01-19 16:08 - 00000000 ____D C:\Program Files (x86)\McAfee Security Scan
2014-01-13 23:20 - 2014-01-13 23:20 - 00002041 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-13 22:54 - 2014-01-13 22:54 - 00620542 _____ C:\ProgramData\1389649682.bdinstall.bin
2014-01-13 22:54 - 2014-01-13 22:54 - 00000385 _____ C:\WINDOWS\system32\user_gensett.xml
2014-01-13 22:53 - 2014-01-13 23:23 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\SysWOW64\bdsandboxuiskin32.dll
2014-01-13 22:53 - 2014-01-13 22:54 - 00000000 ____D C:\ProgramData\BDLogging
2014-01-13 22:53 - 2014-01-13 22:53 - 00002212 _____ C:\Users\Public\Desktop\Bitdefender Safepay.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00002164 _____ C:\Users\Public\Desktop\Bitdefender Total Security.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2014-01-13 22:53 - 2013-11-04 15:47 - 00082824 _____ (BitDefender SRL) C:\WINDOWS\system32\Drivers\bdsandbox.sys
2014-01-13 22:53 - 2013-09-08 19:04 - 00023568 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bdelam.sys
2014-01-13 22:53 - 2013-07-30 17:41 - 00079192 _____ (BitDefender) C:\WINDOWS\system32\Drivers\bdvedisk.sys
2014-01-13 22:53 - 2013-07-24 17:19 - 00098768 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\bdfndisf6.sys
2014-01-13 22:53 - 2007-04-11 10:11 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\capicom.dll
2014-01-13 22:52 - 2014-01-13 23:23 - 00261056 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avchv.sys
2014-01-13 22:52 - 2014-01-13 22:54 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Bitdefender
2014-01-13 22:52 - 2013-07-19 17:08 - 00601360 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avckf.sys
2014-01-13 22:52 - 2013-07-19 17:04 - 00727592 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avc3.sys
2014-01-13 22:48 - 2014-01-13 23:23 - 00000000 ____D C:\ProgramData\Bitdefender
2014-01-13 22:48 - 2014-01-13 22:52 - 00000000 ____D C:\Program Files\Bitdefender
2014-01-13 22:48 - 2014-01-13 22:48 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\QuickScan
2014-01-13 22:48 - 2013-11-04 15:47 - 00084848 _____ (BitDefender SRL) C:\WINDOWS\system32\BDSandBoxUISkin.dll
2014-01-13 22:48 - 2013-11-04 15:46 - 00034384 _____ (BitDefender SRL) C:\WINDOWS\system32\BDSandBoxUH.dll
2014-01-13 22:48 - 2013-08-23 12:48 - 00150256 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\gzflt.sys
2014-01-13 22:48 - 2013-08-07 12:46 - 00389240 _____ (BitDefender S.R.L.) C:\WINDOWS\system32\Drivers\trufos.sys
2014-01-12 22:56 - 2014-01-13 22:48 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2014-01-12 22:29 - 2014-01-12 22:29 - 07171632 _____ C:\Users\Lucien\Downloads\bitdefender_tsecurity.exe
2014-01-09 12:00 - 2014-01-13 14:27 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Bioshock
2014-01-09 12:00 - 2014-01-09 12:12 - 00000000 ____D C:\Users\Lucien\Documents\Bioshock
2014-01-07 21:35 - 2014-01-07 21:35 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\WINDOWS\SysWOW64\GPhotos.scr
2014-01-06 13:29 - 2014-01-21 22:13 - 00000000 ____D C:\Users\Lucien\Documents\Rockstar Games
2014-01-06 13:11 - 2014-01-06 13:11 - 00000000 __SHD C:\ProgramData\SecuROM
2014-01-06 13:10 - 2014-01-06 13:10 - 00000000 ____D C:\Users\Lucien\AppData\Local\Rockstar Games
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\WINDOWS\SysWOW64\xlive
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\Users\Lucien\Documents\Games for Windows - LIVE Demos
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2014-01-06 13:08 - 2014-01-06 13:08 - 00642712 _____ (Microsoft Corporation) C:\Users\Lucien\Downloads\gfwlivesetup.exe

==================== One Month Modified Files and Folders =======

2014-01-29 16:21 - 2014-01-27 20:36 - 00021288 _____ C:\Users\Lucien\Desktop\FRST.txt
2014-01-29 16:21 - 2014-01-21 23:54 - 00000000 ____D C:\FRST
2014-01-29 16:20 - 2014-01-22 21:41 - 00000000 ____D C:\Users\Lucien\Desktop\FRST-OlderVersion
2014-01-29 16:20 - 2014-01-22 13:59 - 02079744 _____ (Farbar) C:\Users\Lucien\Desktop\FRST64.exe
2014-01-29 16:18 - 2014-01-29 13:10 - 00002197 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-29 16:18 - 2013-08-19 19:06 - 00001130 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-29 16:17 - 2013-11-05 21:47 - 00000000 ____D C:\Users\Lucien
2014-01-29 16:11 - 2013-09-30 05:14 - 01804156 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2014-01-29 16:11 - 2013-09-30 04:56 - 00761880 _____ C:\WINDOWS\system32\perfh007.dat
2014-01-29 16:11 - 2013-09-30 04:56 - 00159758 _____ C:\WINDOWS\system32\perfc007.dat
2014-01-29 16:10 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2014-01-29 16:07 - 2014-01-29 16:06 - 00298424 _____ C:\WINDOWS\Minidump\012914-53375-01.dmp
2014-01-29 16:07 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2014-01-29 16:06 - 2014-01-19 18:22 - 00000000 ____D C:\WINDOWS\Minidump
2014-01-29 16:06 - 2013-09-13 12:11 - 894753829 _____ C:\WINDOWS\MEMORY.DMP
2014-01-29 16:06 - 2013-08-22 15:44 - 05147912 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2014-01-29 16:04 - 2014-01-29 15:41 - 00181064 _____ (Sysinternals) C:\WINDOWS\PSEXESVC.EXE
2014-01-29 16:04 - 2013-08-20 17:50 - 00000000 ____D C:\Users\Lucien\AppData\Local\CrashDumps
2014-01-29 16:03 - 2012-07-26 06:26 - 00000160 _____ C:\WINDOWS\win.ini
2014-01-29 16:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\sru
2014-01-29 15:37 - 2014-01-29 15:37 - 00000207 _____ C:\WINDOWS\tweaking.com-regbackup-LUCIENSNOTE-Microsoft-Windows-8.1-(64-bit).dat
2014-01-29 15:36 - 2014-01-29 15:36 - 00000000 ____D C:\RegBackup
2014-01-29 15:28 - 2013-08-19 19:07 - 00001134 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-29 15:22 - 2013-11-05 21:43 - 01402911 _____ C:\WINDOWS\WindowsUpdate.log
2014-01-29 15:15 - 2013-07-18 20:55 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3506778915-1287356822-3408950579-1002
2014-01-29 15:11 - 2013-07-18 20:49 - 00000074 _____ C:\Users\Lucien\AppData\Roaming\sp_data.sys
2014-01-29 15:04 - 2014-01-29 15:04 - 00003296 ____N C:\bootsqm.dat
2014-01-29 14:58 - 2013-08-22 14:25 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2014-01-29 14:56 - 2014-01-29 14:56 - 00000000 ____D C:\Users\Lucien\Downloads\Tweaking.com - Windows Repair
2014-01-29 14:55 - 2014-01-29 09:40 - 00000000 ____D C:\ProgramData\Atheros
2014-01-29 14:54 - 2014-01-22 00:10 - 00000000 ____D C:\Users\Lucien\Desktop\Tweaking.com - Windows Repair
2014-01-29 14:54 - 2013-11-05 22:24 - 00000000 __RDO C:\Users\Lucien\SkyDrive
2014-01-29 14:48 - 2014-01-29 14:48 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2014-01-29 14:48 - 2013-11-05 21:42 - 00109524 _____ C:\WINDOWS\system32\Drivers\RTWAVES30.dat
2014-01-29 14:48 - 2013-11-05 21:41 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2014-01-29 14:48 - 2013-08-22 15:46 - 00384808 _____ C:\WINDOWS\setupact.log
2014-01-29 14:47 - 2014-01-21 22:19 - 00000000 ____D C:\WINDOWS\LastGood
2014-01-29 14:47 - 2013-08-22 15:46 - 00000974 _____ C:\WINDOWS\setuperr.log
2014-01-29 14:46 - 2014-01-29 13:09 - 00000000 ____D C:\Program Files (x86)\GUMCBFB.tmp
2014-01-29 14:46 - 2013-09-29 20:04 - 09446394 _____ C:\WINDOWS\PFRO.log
2014-01-29 14:37 - 2014-01-29 14:29 - 109595877 _____ C:\Users\Lucien\Downloads\Audio_Realtek_Win81_64_VER6017083.zip
2014-01-29 14:34 - 2013-06-26 07:58 - 00000000 ____D C:\Program Files (x86)\Realtek
2014-01-29 14:34 - 2013-06-26 07:51 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2014-01-29 14:20 - 2014-01-29 14:20 - 02903255 _____ C:\Users\Lucien\Downloads\tweaking.com_windows_repair_aio.zip
2014-01-29 13:07 - 2014-01-29 13:05 - 37739976 _____ (Google Inc.) C:\Users\Lucien\Downloads\ChromeStandalone32Setup.exe
2014-01-29 13:06 - 2013-04-26 00:19 - 00000000 ____D C:\ProgramData\WildTangent
2014-01-29 13:02 - 2014-01-29 13:02 - 00000000 ____D C:\Users\Lucien\AppData\Local\Deployment
2014-01-29 13:01 - 2013-08-22 11:25 - 00000000 ____D C:\Users\Lucien\AppData\Local\Adobe
2014-01-29 12:56 - 2014-01-29 12:56 - 00000000 ____D C:\Users\Lucien\Desktop\chrome default
2014-01-29 12:49 - 2014-01-29 12:49 - 00001124 _____ C:\Users\Lucien\Desktop\Absolute Uninstaller.lnk
2014-01-29 12:49 - 2014-01-29 12:49 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\GlarySoft
2014-01-29 12:48 - 2014-01-29 12:48 - 02194784 _____ (Glarysoft.com                                               ) C:\Users\Lucien\Downloads\au29setup.exe
2014-01-29 12:02 - 2013-06-26 08:07 - 00003474 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1
2014-01-29 12:02 - 2013-06-26 08:07 - 00003464 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2
2014-01-29 09:54 - 2014-01-29 09:54 - 00048629 _____ C:\Users\Lucien\Documents\Namenschilder%20fertig.ppt_0.odp
2014-01-29 09:40 - 2014-01-29 09:40 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Atheros
2014-01-29 09:40 - 2014-01-28 12:11 - 00000000 ____D C:\WINDOWS\SysWOW64\NV
2014-01-29 09:39 - 2014-01-28 12:11 - 00000000 ____D C:\WINDOWS\system32\NV
2014-01-28 14:05 - 2014-01-28 14:00 - 00000000 ____D C:\Program Files\Common Files\QCA_Bluetooth
2014-01-28 14:00 - 2013-06-26 08:02 - 00000000 ____D C:\Program Files (x86)\Bluetooth Suite
2014-01-28 13:56 - 2014-01-28 13:56 - 00000000 ____D C:\Users\Lucien\Downloads\Win8 Key
2014-01-28 13:52 - 2014-01-28 13:51 - 00000000 ____D C:\Users\Lucien\Downloads\wlan
2014-01-28 13:51 - 2014-01-28 13:51 - 00000000 ____D C:\Users\Lucien\Downloads\lan
2014-01-28 13:50 - 2014-01-28 13:50 - 00000000 ____D C:\Users\Lucien\Downloads\bluetooth
2014-01-28 13:49 - 2014-01-28 13:48 - 00000000 ____D C:\Users\Lucien\Downloads\audio
2014-01-28 13:46 - 2014-01-28 13:46 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_btmaux_01009.Wdf
2014-01-28 13:46 - 2013-11-05 21:42 - 00000000 ____D C:\Program Files (x86)\Intel
2014-01-28 13:45 - 2014-01-28 13:45 - 00000000 ____D C:\Users\Lucien\Downloads\blue
2014-01-28 13:45 - 2014-01-28 13:44 - 00000000 ____D C:\Users\Lucien\Downloads\Lang
2014-01-28 12:12 - 2014-01-28 12:12 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2014-01-28 12:12 - 2013-11-05 21:42 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2014-01-28 12:11 - 2014-01-28 10:55 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-28 11:41 - 2014-01-28 11:39 - 00000000 ____D C:\Users\Lucien\AppData\Local\NVIDIA
2014-01-28 11:40 - 2014-01-28 11:40 - 00001369 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2014-01-28 11:40 - 2014-01-28 11:40 - 00000000 ____D C:\Users\Lucien\AppData\Local\NVIDIA Corporation
2014-01-28 11:40 - 2014-01-28 10:54 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2014-01-28 11:39 - 2013-11-05 21:42 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2014-01-28 10:53 - 2014-01-28 10:53 - 00000000 ____D C:\NVIDIA
2014-01-28 10:48 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Help
2014-01-28 10:41 - 2014-01-28 10:41 - 00000000 ____D C:\WINDOWS\pss
2014-01-28 10:01 - 2014-01-28 09:59 - 31475128 _____ (NVIDIA Corporation) C:\Users\Lucien\Downloads\GeForce_Experience_v1.8.2.0.exe
2014-01-28 09:25 - 2013-09-10 15:25 - 00179200 ___SH C:\Users\Lucien\Desktop\Thumbs.db
2014-01-27 22:59 - 2014-01-27 22:46 - 266633424 _____ (NVIDIA Corporation) C:\Users\Lucien\Downloads\332.21-notebook-win8-win7-64bit-international-whql.exe
2014-01-27 22:38 - 2013-09-09 20:00 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\vlc
2014-01-27 20:33 - 2014-01-27 19:54 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-27 20:20 - 2013-09-12 10:02 - 00296960 ___SH C:\Users\Lucien\Downloads\Thumbs.db
2014-01-27 20:01 - 2013-10-14 09:56 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Spotify
2014-01-27 19:53 - 2014-01-27 19:53 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-01-27 19:52 - 2014-01-27 19:52 - 00000000 ____D C:\Users\Lucien\Desktop\mbar
2014-01-27 19:48 - 2014-01-27 19:47 - 00000000 ____D C:\Users\Lucien\Desktop\Logs2
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2014-01-27 19:03 - 2014-01-27 19:03 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2014-01-26 21:38 - 2013-08-23 10:50 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-26 20:53 - 2014-01-26 20:53 - 00003186 _____ C:\WINDOWS\System32\Tasks\{E66DEEF7-845B-48C8-BBEE-CE6EA6F2EE96}
2014-01-26 19:26 - 2014-01-26 19:26 - 00003362 _____ C:\WINDOWS\System32\Tasks\{63C03234-5B71-4184-AD48-4EE22D315F87}
2014-01-26 19:01 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2014-01-25 15:01 - 2014-01-25 15:01 - 00000000 ____H C:\Users\Lucien\Documents\Default.rdp
2014-01-25 13:55 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2014-01-24 19:21 - 2014-01-24 19:21 - 00000000 ____D C:\Users\Lucien\Desktop\Logs alt
2014-01-24 19:17 - 2014-01-24 19:17 - 00361185 _____ (Farbar) C:\Users\Lucien\Desktop\FSS.exe
2014-01-24 19:06 - 2013-08-31 15:58 - 00000000 ____D C:\AdwCleaner
2014-01-24 16:48 - 2014-01-24 16:48 - 00032847 _____ C:\Users\Lucien\Desktop\gmer.zip
2014-01-24 11:34 - 2014-01-24 11:34 - 00000000 ____D C:\Program Files (x86)\ESET
2014-01-24 10:53 - 2014-01-24 10:53 - 00000000 ____D C:\WINDOWS\ERUNT
2014-01-22 21:23 - 2014-01-22 21:23 - 00022688 _____ C:\Users\Lucien\Downloads\Addition.txt
2014-01-22 21:23 - 2014-01-22 21:22 - 00046051 _____ C:\Users\Lucien\Downloads\FRST.txt
2014-01-22 14:01 - 2014-01-21 10:40 - 00000000 ____D C:\Users\Gast\AppData\Local\My Games
2014-01-22 14:01 - 2013-10-01 15:03 - 00000000 ____D C:\Users\Gast\Documents\My Games
2014-01-22 14:01 - 2013-09-01 19:44 - 00000000 ____D C:\Users\Lucien\AppData\Local\My Games
2014-01-22 14:01 - 2013-08-20 09:54 - 00000000 ____D C:\Users\Lucien\Documents\My Games
2014-01-22 12:30 - 2014-01-22 12:30 - 00000168 _____ C:\Users\Lucien\defogger_reenable
2014-01-21 22:13 - 2014-01-06 13:29 - 00000000 ____D C:\Users\Lucien\Documents\Rockstar Games
2014-01-21 22:13 - 2013-09-04 07:48 - 00000000 ____D C:\Users\Lucien\Documents\Blender
2014-01-21 22:00 - 2013-11-04 09:24 - 00069120 ___SH C:\Users\Gast\Downloads\Thumbs.db
2014-01-21 15:06 - 2014-01-21 15:06 - 01037068 _____ (Thisisu) C:\Users\Lucien\Desktop\JRT.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00987425 _____ C:\Users\Lucien\Desktop\SecurityCheck.exe
2014-01-21 15:06 - 2014-01-21 15:06 - 00448512 _____ (OldTimer Tools) C:\Users\Lucien\Desktop\TFC.exe
2014-01-21 15:05 - 2014-01-21 15:05 - 01236282 _____ C:\Users\Lucien\Desktop\adwcleaner.exe
2014-01-21 15:01 - 2014-01-21 15:00 - 02347384 _____ (ESET) C:\Users\Lucien\Desktop\esetsmartinstaller_enu.exe
2014-01-21 14:51 - 2013-10-19 09:42 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Spotify
2014-01-21 13:25 - 2014-01-21 13:15 - 24859352 _____ (Microsoft Corporation) C:\Users\Gast\Downloads\Windows-KB890830-x64-V5.8.exe
2014-01-21 10:38 - 2013-09-01 18:18 - 00281688 _____ C:\WINDOWS\SysWOW64\PnkBstrB.xtr
2014-01-21 10:18 - 2014-01-21 10:18 - 00050477 _____ C:\Users\Lucien\Desktop\Defogger.exe
2014-01-21 10:12 - 2014-01-21 10:12 - 00000000 ____D C:\Users\Gast\AppData\Roaming\QuickScan
2014-01-21 09:38 - 2014-01-21 09:38 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Spotydl
2014-01-21 09:37 - 2013-09-26 11:23 - 00000000 ____D C:\Users\Gast\AppData\Local\VirtualStore
2014-01-21 08:37 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\AppData\Roaming\Bitdefender
2014-01-21 08:37 - 2013-09-26 11:23 - 00000062 _____ C:\Users\Gast\AppData\Roaming\sp_data.sys
2014-01-21 08:33 - 2014-01-21 08:33 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2014-01-21 03:54 - 2014-01-28 11:39 - 01179576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2014-01-21 03:54 - 2014-01-28 11:39 - 01048152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2014-01-20 15:53 - 2014-01-20 15:53 - 00000000 ____D C:\Users\Gast\AppData\Local\NVIDIA Corporation
2014-01-20 15:52 - 2014-01-20 15:52 - 00000385 _____ C:\Users\Gast\AppData\Roaminguser_gensett.xml
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\Documents\Bluetooth Folder
2014-01-20 15:52 - 2014-01-20 15:52 - 00000000 ____D C:\Users\Gast\AppData\Local\BMExplorer
2014-01-20 15:52 - 2013-10-29 11:55 - 00000000 ____D C:\Users\Gast\AppData\Local\NVIDIA
2014-01-20 15:52 - 2013-10-19 09:42 - 00000000 ____D C:\Users\Gast\AppData\Local\Spotify
2014-01-20 15:52 - 2013-09-26 11:24 - 00000000 ___RD C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-20 15:52 - 2013-09-26 11:24 - 00000000 ___RD C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-20 15:51 - 2014-01-20 15:51 - 00000000 ____D C:\Users\Lucien\Documents\AdobeStockPhotos
2014-01-20 15:51 - 2013-07-18 20:48 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Adobe
2014-01-20 13:49 - 2014-01-17 13:50 - 00000000 ____D C:\Users\Lucien\Downloads\backups
2014-01-20 12:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache
2014-01-19 18:46 - 2014-01-17 13:42 - 00012554 _____ C:\Users\Lucien\Downloads\hijackthis.log
2014-01-19 18:22 - 2014-01-19 18:22 - 00305304 _____ C:\WINDOWS\Minidump\011914-32203-01.dmp
2014-01-19 16:08 - 2014-01-13 23:20 - 00000000 ____D C:\Program Files (x86)\McAfee Security Scan
2014-01-19 08:38 - 2014-01-19 21:21 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-01-17 20:25 - 2014-01-22 00:11 - 00379904 _____ C:\Users\Lucien\Desktop\gmer.exe
2014-01-17 13:42 - 2014-01-17 13:42 - 00388608 _____ (Trend Micro Inc.) C:\Users\Lucien\Downloads\HiJackThis204.exe
2014-01-17 13:42 - 2013-07-18 20:48 - 00000000 ____D C:\Users\Lucien\AppData\Local\VirtualStore
2014-01-17 09:54 - 2014-01-17 09:54 - 00000385 _____ C:\Users\Lucien\AppData\Roaminguser_gensett.xml
2014-01-17 09:54 - 2013-07-18 20:49 - 00000000 ___RD C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-17 09:54 - 2013-07-18 20:49 - 00000000 ___RD C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\MediaViewer
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\FileManager
2014-01-16 16:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Camera
2014-01-16 16:37 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2014-01-16 16:37 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\Dism
2014-01-16 13:51 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\WinStore
2014-01-16 13:29 - 2013-08-19 19:19 - 00000000 ____D C:\WINDOWS\system32\MRT
2014-01-13 23:23 - 2014-01-13 23:23 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\system32\bdsandboxuiskin32.dll
2014-01-13 23:23 - 2014-01-13 22:53 - 00074512 _____ (BitDefender SRL) C:\WINDOWS\SysWOW64\bdsandboxuiskin32.dll
2014-01-13 23:23 - 2014-01-13 22:52 - 00261056 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avchv.sys
2014-01-13 23:23 - 2014-01-13 22:48 - 00000000 ____D C:\ProgramData\Bitdefender
2014-01-13 23:20 - 2014-01-13 23:20 - 00002041 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-13 23:20 - 2013-04-26 00:18 - 00000000 ____D C:\ProgramData\McAfee
2014-01-13 23:19 - 2013-04-26 00:15 - 00000000 ____D C:\ProgramData\Adobe
2014-01-13 23:19 - 2013-04-26 00:15 - 00000000 ____D C:\Program Files (x86)\Adobe
2014-01-13 22:54 - 2014-01-13 22:54 - 00620542 _____ C:\ProgramData\1389649682.bdinstall.bin
2014-01-13 22:54 - 2014-01-13 22:54 - 00000385 _____ C:\WINDOWS\system32\user_gensett.xml
2014-01-13 22:54 - 2014-01-13 22:53 - 00000000 ____D C:\ProgramData\BDLogging
2014-01-13 22:54 - 2014-01-13 22:52 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Bitdefender
2014-01-13 22:53 - 2014-01-13 22:53 - 00002212 _____ C:\Users\Public\Desktop\Bitdefender Safepay.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00002164 _____ C:\Users\Public\Desktop\Bitdefender Total Security.lnk
2014-01-13 22:53 - 2014-01-13 22:53 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2014-01-13 22:52 - 2014-01-13 22:48 - 00000000 ____D C:\Program Files\Bitdefender
2014-01-13 22:48 - 2014-01-13 22:48 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\QuickScan
2014-01-13 22:48 - 2014-01-12 22:56 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2014-01-13 22:46 - 2013-08-30 00:06 - 00000000 ____D C:\avast! sandbox
2014-01-13 22:45 - 2013-08-19 19:05 - 00000000 ____D C:\Program Files\AVAST Software
2014-01-13 22:45 - 2013-08-19 19:04 - 00000000 ____D C:\ProgramData\AVAST Software
2014-01-13 22:44 - 2013-08-19 19:06 - 00000000 _____ C:\WINDOWS\SysWOW64\config.nt
2014-01-13 14:27 - 2014-01-09 12:00 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Bioshock
2014-01-12 22:29 - 2014-01-12 22:29 - 07171632 _____ C:\Users\Lucien\Downloads\bitdefender_tsecurity.exe
2014-01-09 12:12 - 2014-01-09 12:00 - 00000000 ____D C:\Users\Lucien\Documents\Bioshock
2014-01-09 11:59 - 2013-04-26 00:16 - 00502089 _____ C:\WINDOWS\DirectX.log
2014-01-08 11:53 - 2013-12-27 10:35 - 00000000 ___RD C:\Users\Lucien\Downloads\Microsoft.SkypeApp_kzf8qxf38zg5c!App
2014-01-07 21:35 - 2014-01-07 21:35 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2014-01-07 21:05 - 2013-11-22 17:15 - 00000000 ____D C:\Users\Lucien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-01-06 23:31 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-01-06 23:31 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\WINDOWS\SysWOW64\GPhotos.scr
2014-01-06 16:20 - 2013-08-19 19:19 - 86054176 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-01-06 13:11 - 2014-01-06 13:11 - 00000000 __SHD C:\ProgramData\SecuROM
2014-01-06 13:10 - 2014-01-06 13:10 - 00000000 ____D C:\Users\Lucien\AppData\Local\Rockstar Games
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\WINDOWS\SysWOW64\xlive
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\Users\Lucien\Documents\Games for Windows - LIVE Demos
2014-01-06 13:09 - 2014-01-06 13:09 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2014-01-06 13:08 - 2014-01-06 13:08 - 00642712 _____ (Microsoft Corporation) C:\Users\Lucien\Downloads\gfwlivesetup.exe
2013-12-30 23:47 - 2013-10-14 09:58 - 00000000 ____D C:\Users\Lucien\AppData\Local\Spotify

Some content of TEMP:
====================
C:\Users\Gast\AppData\Local\Temp\drm_dyndata_7390004.dll
C:\Users\Gast\AppData\Local\Temp\ubiB23E.tmp.exe
C:\Users\Lucien\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-28 11:14

==================== End Of Log ============================

--- --- ---

SecureBanking · 29.01.2014, 19:54

Hallo zusammen, ich klink mich hier mal kurz ein.

Hast du alle Module von Bitdefender mal deaktiviert? Speziell die Active Virus Control Engine.
Bringt Secure Banking dann immer noch diese Meldung?

sunjojo · 30.01.2014, 06:28

Hey,

wegen Secure Banking bist du jetzt in besten Händen. Probiere bitte folgende Anleitung aus, um das Zwangsneustarten nach Updates zu verhinden: Windows 8: Zwangsneustart nach Update verhindern. Beobachte bitte, ob weiterhin ein Fenster mit der Aufforderung zum Neustarten kommt.

29.01.2014, 19:54	#14
SecureBanking /// Helfer-Team	System durch verschiedenes infiziert Hallo zusammen, ich klink mich hier mal kurz ein. Hast du alle Module von Bitdefender mal deaktiviert? Speziell die Active Virus Control Engine. Bringt Secure Banking dann immer noch diese Meldung? __________________ MfG, Niklas

30.01.2014, 06:28	#15
sunjojo /// Malwareteam	System durch verschiedenes infiziert Hey, wegen Secure Banking bist du jetzt in besten Händen. Probiere bitte folgende Anleitung aus, um das Zwangsneustarten nach Updates zu verhinden: Windows 8: Zwangsneustart nach Update verhindern. Beobachte bitte, ob weiterhin ein Fenster mit der Aufforderung zum Neustarten kommt. __________________ Gruß, Jonas

System durch verschiedenes infiziert

Plagegeister aller Art und deren Bekämpfung: System durch verschiedenes infiziert