So hier die FRST
FRST Logfile:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 23-07-2013
Ran by mk (administrator) on 23-07-2013 22:34:55
Running from C:\Users\mk\Downloads
Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(ASUSTeK Computer Inc.) C:\Program Files\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe
(Conduit) C:\Program Files\SearchProtect\bin\CltMngSvc.exe
() C:\ProgramData\IBUpdaterService\ibsvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
() C:\Windows\system32\PnkBstrA.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft) C:\Program Files\Yontoo\Y2Desktop.Updater.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS Ai Charger\AiChargerAP.exe
(ASUSTeK Computer Inc.) C:\Program Files\ASUS\TurboV\TurboV.exe
(VIA) C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe
(PixArt Imaging Incorporation) C:\Windows\PixArt\Pac207\Monitor.exe
() C:\Program Files\DivX\DivX Update\DivXUpdate.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Valve Corporation) C:\Program Files\Steam\Steam.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Yontoo LLC) C:\Users\mk\AppData\Roaming\Yontoo\YontooDesktop.exe
(Spotify Ltd) C:\Users\mk\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
() C:\Users\mk\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
(Dropbox, Inc.) C:\Users\mk\AppData\Roaming\Dropbox\bin\Dropbox.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin
(Valve Corporation) C:\Program Files\Common Files\Steam\SteamService.exe
(Google Inc.) C:\Users\mk\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\mk\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\mk\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\mk\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\mk\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\mk\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\mk\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\mk\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\mk\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\mk\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\mk\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\mk\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\mk\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\mk\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\mk\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MpCmdRun.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [ASUS Ai Charger] - C:\Program Files\ASUS\ASUS Ai Charger\AiChargerAP.exe [465536 2010-05-10] (ASUSTek Computer Inc.)
HKLM\...\Run: [TurboV] - C:\Program Files\ASUS\TurboV\TurboV.exe [5516800 2009-10-02] (ASUSTeK Computer Inc.)
HKLM\...\Run: [HDAudDeck] - C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe [1686128 2010-06-25] (VIA)
HKLM\...\Run: [Monitor] - C:\Windows\PixArt\PAC207\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation)
HKLM\...\Run: [DivXUpdate] - C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1259376 2011-07-29] ()
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [995176 2013-06-20] (Microsoft Corporation)
HKLM\...\Run: [ROC_ROC_JULY_P1] - "C:\Program Files\AVG Secure Search\ROC_ROC_JULY_P1.exe" / /PROMPT /CMPID=ROC_JULY_P1 [x]
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [SearchProtectAll] - C:\Program Files\SearchProtect\bin\cltmng.exe [2852640 2013-05-08] (Conduit)
HKCU\...\Run: [Google Update] - C:\Users\mk\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-02-16] (Google Inc.)
HKCU\...\Run: [msnmsgr] - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background [x]
HKCU\...\Run: [Steam] - C:\Program Files\Steam\Steam.exe [1672616 2013-07-10] (Valve Corporation)
HKCU\...\Run: [Facebook Update] - C:\Users\mk\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-07-20] (Facebook Inc.)
HKCU\...\Run: [Sidebar] - C:\Program Files\Windows Sidebar\sidebar.exe [1174016 2010-11-20] (Microsoft Corporation)
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.)
HKCU\...\Run: [Yontoo Desktop] - C:\Users\mk\AppData\Roaming\Yontoo\YontooDesktop.exe [42784 2013-03-23] (Yontoo LLC)
HKCU\...\Run: [Spotify] - C:\Users\mk\AppData\Roaming\Spotify\Spotify.exe [4640768 2013-07-18] (Spotify Ltd)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\mk\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104384 2013-07-18] (Spotify Ltd)
HKCU\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\mk\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-09] ()
HKCU\...\Run: [{3BD285BC-A8EB-4419-A6F3-0F350C8F77B0}] - "C:\Users\mk\Downloads\AMM_4.2.0.0.exe" /cmdloc "HKCU\Software\Corona Development AiTemp\{3BD285BC-A8EB-4419-A6F3-0F350C8F77B0}" [x]
HKCU\...\Run: [SearchProtect] - C:\Users\mk\AppData\Roaming\SearchProtect\bin\cltmng.exe [2852640 2013-05-08] (Conduit)
MountPoints2: {737762fe-391f-11e0-a517-806e6f6e6963} - D:\Launch.exe
MountPoints2: {74276e97-c8e0-11e1-9114-20cf30eb2265} - E:\windows\Data\setup.exe
HKU\Default\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [ 2009-07-14] (Microsoft Corporation)
HKU\Default User\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [ 2009-07-14] (Microsoft Corporation)
HKU\DefaultAppPool\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [ 2009-07-14] (Microsoft Corporation)
Startup: C:\Users\mk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\mk\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\mk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,BrowserMngr Start Page = hxxp://search.babylon.com/?affID=110823&tt=120912_pcp_3812_5&babsrc=HP_ss&mntrId=9612e47500000000000020cf30eb2265
HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-DE&Src=MSE&Tid=0002F86C&OHP=http%3A%2F%2Fhome.sweetim.com%2F%3Fcrg%3D3.36010003%26st%3D12%26barid%3D%7BFBE7855D%2D96D9%2D4015%2D8594%2DC8B78CB56D53%7D&OSP=http%3A%2F%2Fsearch.sweetim.com%2Fsearch.asp%3Fsrc%3D6%26crg%3D3.36010003%26st%3D12%26q%3D%7BsearchTerms%7D%26barid%3D%7BFBE7855D%2D96D9%2D4015%2D8594%2DC8B78CB56D53%7D
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
URLSearchHook: (No Name) - {1ce76c93-a797-4ca2-ab3c-f4a6cfba3440} - No File
SearchScopes: HKLM - DefaultScope {95D7CE60-0A2F-44AB-8E8E-1DB57F9D7175} URL =
SearchScopes: HKLM - {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=394&systemid=406&sr=0&q={searchTerms}
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2410} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=0&systemid=410&sr=0&q={searchTerms}
SearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2967869
SearchScopes: HKLM - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&crg=3.36010003&st=12&q={searchTerms}&barid={FBE7855D-96D9-4015-8594-C8B78CB56D53}
SearchScopes: HKCU - BrowserMngrDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.delta-search.com/?q={searchTerms}&affID=120519&tt=gc_&babsrc=SP_ss&mntrId=96121CC63C8447C8
SearchScopes: HKCU - {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = https://isearch.avg.com/search?cid={C8E88741-D014-4A06-A396-0727484E59CA}&mid=ee903948989a47d0b066f186760fcb96-959b2016eaf478f9e190133f7a446275d085245b&lang=de&ds=cv011&pr=sa&d=2012-05-25 18:37:01&v=12.2.5.32&sap=dsp&q={searchTerms}
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=394&systemid=406&sr=0&q={searchTerms}
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2410} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=0&systemid=410&sr=0&q={searchTerms}
SearchScopes: HKCU - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = hxxp://mystart.incredibar.com/mb143/?search={searchTerms}&loc=IB_DS&a=6OyDdxZ11p&i=26
SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&crg=3.36010003&st=12&q={searchTerms}&barid={FBE7855D-96D9-4015-8594-C8B78CB56D53}
BHO: LyricsSpeaker - {18FD5330-A5FC-43D2-8B96-7EA1C50F526F} - C:\Program Files\LyricsSpeaker\125.dll (LyricsSpeaker LTD)
BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.6.9.12\bh\BabylonToolbar.dll No File
BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO: Web Assistant - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\Web Assistant\Extension32.dll No File
BHO: SpeedAnalysis.com - {45564571-A21B-48ED-B584-69752EEE9C3D} - C:\Program Files\SpeedAnalysis.com\ScriptHost.dll (SpeedAnalysis.com)
BHO: Incredibar.com Helper Object - {6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99} - C:\Program Files\Incredibar.com\incredibar\1.5.11.14\bh\incredibar.dll (Montera Technologeis LTD)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO: Wajam - {A7A6995D-6EE1-4FD1-A258-49395D5BF99C} - C:\Program Files\Wajam\IE\priam_bho.dll No File
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
BHO: Yontoo - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files\Yontoo\YontooIEClient.dll (Yontoo LLC)
Toolbar: HKLM - Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.6.9.12\BabylonToolbarTlbr.dll No File
Toolbar: HKLM - toolplugin - {DFEFCDEE-CF1A-4FC8-89AF-189327213627} - C:\Users\mk\AppData\Roaming\toolplugin\toolbar.dll ()
Toolbar: HKLM - No Name - !{95B7759C-8C7F-4BF1-B163-73684A933233} - No File
Toolbar: HKLM - No Name - !{DFEFCDEE-CF1A-4FC8-88AD-129872198372} - No File
Toolbar: HKLM - No Name - !{F9639E4A-801B-4843-AEE3-03D9DA199E77} - No File
DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} hxxp://support.asus.de/common/asusTek_sys_ctrl.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\mk\AppData\Roaming\Mozilla\Firefox\Profiles\szlwoq5u.default
FF user.js: detected! => C:\Users\mk\AppData\Roaming\Mozilla\Firefox\Profiles\szlwoq5u.default\user.js
FF Keyword.URL: hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1561552&SearchSource=2&CUI=UN11005492734394810&UM=2&sspv=TB_TH5&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon)
FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=15.0.6.14 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.5 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @eximion.com/KalydoPlayer - C:\Users\mk\AppData\Roaming\Kalydo\KalydoPlayer\bin2\npkalydo.dll (Eximion B.V.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\mk\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\mk\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\mk\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\mk\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF SearchPlugin: C:\Users\mk\AppData\Roaming\Mozilla\Firefox\Profiles\szlwoq5u.default\searchplugins\hotspot-shield-customized-web-search.xml
FF Extension: SpeedAnalysis.com - C:\Users\mk\AppData\Roaming\Mozilla\Extensions\speedanalysis@SpeedAnalysis.com
FF Extension: No Name - C:\Users\mk\AppData\Roaming\Mozilla\Firefox\profiles\extensions\extensions
FF Extension: OneClickDownloader - C:\Users\mk\AppData\Roaming\Mozilla\Firefox\profiles\extensions\OneClickDownload@OneClickDownload.com
FF Extension: No Name - C:\Users\mk\AppData\Roaming\Mozilla\Firefox\profiles\extensions\user.js
FF Extension: No Name - C:\Users\mk\AppData\Roaming\Mozilla\Firefox\profiles\extensions\user.js.orig
FF Extension: Hotspot Shield - C:\Users\mk\AppData\Roaming\Mozilla\Firefox\Profiles\szlwoq5u.default\Extensions\{c95a4e8e-816d-4655-8c79-d736da1adb6d}
FF Extension: plugin - C:\Users\mk\AppData\Roaming\Mozilla\Firefox\Profiles\szlwoq5u.default\Extensions\plugin@yontoo.com.xpi
FF Extension: DealPly - C:\Program Files\Mozilla Firefox\extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}
FF Extension: Default - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] C:\Program Files\Web Assistant\Firefox
FF HKLM\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF HKLM\...\Firefox\Extensions: [{0153E448-190B-4987-BDE1-F256CADA672F}] C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF HKLM\...\Firefox\Extensions: [speedanalysis@SpeedAnalysis.com] C:\Users\mk\AppData\Roaming\Mozilla\Extensions\speedanalysis@SpeedAnalysis.com
FF Extension: SpeedAnalysis.com - C:\Users\mk\AppData\Roaming\Mozilla\Extensions\speedanalysis@SpeedAnalysis.com
FF HKCU\...\Firefox\Extensions: [speedanalysis@SpeedAnalysis.com] C:\Users\mk\AppData\Roaming\Mozilla\Extensions\speedanalysis@SpeedAnalysis.com
FF Extension: SpeedAnalysis.com - C:\Users\mk\AppData\Roaming\Mozilla\Extensions\speedanalysis@SpeedAnalysis.com
FF HKCU\...\Firefox\Extensions: [lspeaker@lyricsspeaker.net] C:\Program Files\LyricsSpeaker\125.xpi
FF Extension: No Name - C:\Program Files\LyricsSpeaker\125.xpi
Chrome:
=======
CHR RestoreOnStartup: "hxxp://www.searchnu.com/406", "hxxp://search.babylon.com/?affID=110823&tt=120912_pcp_3812_5&babsrc=HP_ss&mntrId=9612e47500000000000020cf30eb2265", "hxxp://home.sweetim.com/?crg=3.36010003&st=12&barid={FBE7855D-96D9-4015-8594-C8B78CB56D53}"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\mk\AppData\Local\Google\Chrome\Application\28.0.1500.72\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\mk\AppData\Local\Google\Chrome\Application\28.0.1500.72\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\mk\AppData\Local\Google\Chrome\Application\28.0.1500.72\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Users\mk\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (DivX Plus Web Player) - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll No File
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll No File
CHR Plugin: (Pando Web Plugin) - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - c:\program files\real\realplayer\Netscape6\nppl3260.dll No File
CHR Plugin: (RealPlayer Version Plugin) - c:\program files\real\realplayer\Netscape6\nprpjplug.dll No File
CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\mk\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Plugin: (RealJukebox NS Plugin) - c:\program files\real\realplayer\Netscape6\nprjplug.dll No File
CHR Extension: (SmallringFX MetalSliver Theme) - C:\Users\mk\AppData\Local\Google\Chrome\User Data\Default\Extensions\amoaokkohdcekgomnddkdfocbifmiafo\1.9_0
CHR Extension: (Hide My Ass! Web Proxy) - C:\Users\mk\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmgnmcnlncejehjlnhaglpnoolgbflbd\1.2.5_0
CHR Extension: (Google Calendar) - C:\Users\mk\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn\4.5.3_0
CHR Extension: (PanicButton) - C:\Users\mk\AppData\Local\Google\Chrome\User Data\Default\Extensions\faminaibgiklngmfpfbhmokfmnglamcm\0.14.2.2_0
CHR Extension: (AdBlock) - C:\Users\mk\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.2_0
CHR Extension: (UNO Online) - C:\Users\mk\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjfncmhihlfbkinpfenkeliekjpoakbf\1.0.0.0_0
CHR Extension: (Windows Media Player Extension for HTML5) - C:\Users\mk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hokdglbhghcebcopdbanieangmcamaak\1.0_0
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\mk\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0
CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Users\mk\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0
CHR HKLM\...\Chrome\Extension: [cfcbmgbfdbijmjgjihagbomfbjfjmgon] - C:\Users\mk\AppData\Roaming\SpeedanAlysis\speedanalysis.crx
CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\Web Assistant\source.crx
CHR HKLM\...\Chrome\Extension: [eooncjejnppfjjklapaamhcdmjbilmde] - C:\Users\mk\AppData\Roaming\BabSolution\CR\Delta.crx
CHR HKLM\...\Chrome\Extension: [fgodkoijafkgadkkmhkaocpkemobgpgn] - C:\ProgramData\Bcool\fgodkoijafkgadkkmhkaocpkemobgpgn.crx
CHR HKLM\...\Chrome\Extension: [gaiilaahiahdejapggenmdmafpmbipje] - C:\Program Files\DealPly\DealPly.crx
CHR HKLM\...\Chrome\Extension: [jcdgjdiieiljkfkdcloehkohchhpekkn] - C:\Users\mk\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx
CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx
CHR HKLM\...\Chrome\Extension: [jpmbfleldcgkldadpdinhjjopdfpjfjp] - C:\Users\mk\AppData\Local\Wajam\Chrome\wajam.crx
CHR HKLM\...\Chrome\Extension: [kmgeophbbmfgkjghdgfgelpipdoclljo] - C:\Program Files\LyricsSpeaker\125.crx
CHR HKLM\...\Chrome\Extension: [niapdbllcanepiiimjjndipklodoedlc] - C:\Program Files\Yontoo\YontooLayers.crx
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx
CHR HKLM\...\Chrome\Extension: [ofahndfepeaeelmhdkjiihmofnokhmik] - C:\Users\mk\AppData\Local\Temp\tbch.crx
CHR HKLM\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Users\mk\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetNT.crx
CHR HKLM\...\Chrome\Extension: [pmlghpafmmnmmkjdhacccolfgnkiboco] - C:\Program Files\1ClickDownload\oneclickdownloader11.crx
CHR StartMenuInternet: Google Chrome - "C:\Users\mk\AppData\Local\Google\Chrome\Application\chrome.exe"
========================== Services (Whitelisted) =================
R2 AsSysCtrlService; C:\Program Files\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe [90112 2011-02-15] (ASUSTeK Computer Inc.)
R2 CltMngSvc; C:\Program Files\SearchProtect\bin\CltMngSvc.exe [97056 2013-05-08] (Conduit)
R2 IBUpdaterService; C:\ProgramData\IBUpdaterService\ibsvc.exe [681248 2013-04-08] ()
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22208 2013-06-20] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [295376 2013-06-20] (Microsoft Corporation)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2013-03-23] ()
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013a\RpcAgentSrv.exe [68760 2008-12-07] (SiSoftware)
R2 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.)
R2 Yontoo Desktop Updater; C:\Users\mk\AppData\Roaming\Yontoo\YontooDesktop.exe [42784 2013-03-23] (Yontoo LLC)
S2 Web Assistant Updater; C:\Program Files\Web Assistant\ExtensionUpdaterService.exe [x]
==================== Drivers (Whitelisted) ====================
R0 AiCharger; C:\Windows\System32\DRIVERS\AiCharger.sys [13224 2010-05-05] (ASUSTek Computer Inc.)
R1 AsIO; C:\Windows\System32\drivers\AsIO.sys [12400 2011-02-15] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [281760 2012-04-02] ()
S3 HSPADataCardusbmdm; C:\Windows\System32\DRIVERS\HSPADataCardusbmdm.sys [106880 2011-08-19] (HSPADataCard Incorporated)
S3 HSPADataCardusbnmea; C:\Windows\System32\DRIVERS\HSPADataCardusbnmea.sys [106880 2011-08-19] (HSPADataCard Incorporated)
S3 HSPADataCardusbser; C:\Windows\System32\DRIVERS\HSPADataCardusbser.sys [106880 2011-08-19] (HSPADataCard Incorporated)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2012-04-02] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [211560 2013-06-18] (Microsoft Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [13216 2011-02-15] ()
R3 netr28u; C:\Windows\System32\DRIVERS\netr28u.sys [657408 2009-07-14] (Ralink Technology Corp.)
S3 NuidFltr; C:\Windows\System32\DRIVERS\NuidFltr.sys [14736 2009-05-09] (Microsoft Corporation)
S3 PAC207; C:\Windows\System32\DRIVERS\PFC027.SYS [507136 2006-12-05] (PixArt Imaging Inc.)
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013a\WNt500x86\Sandra.sys [23112 2009-08-07] (SiSoftware)
R3 VIAHdAudAddService; C:\Windows\System32\drivers\viahduaa.sys [1150880 2010-05-15] (VIA Technologies, Inc.)
S1 dpecpvfv; \??\C:\Windows\system32\drivers\dpecpvfv.sys [x]
S3 EagleNT; \??\C:\Windows\system32\drivers\EagleNT.sys [x]
S3 EagleXNt; \??\C:\Users\mk\AppData\Local\Temp\EagleXNt.sys [x]
S4 nvlddmkm; system32\DRIVERS\nvlddmkm.sys [x]
S3 taphss6; system32\DRIVERS\taphss6.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-07-23 22:34 - 2013-07-23 22:34 - 00000000 ____D C:\FRST
2013-07-23 22:33 - 2013-07-23 22:34 - 01779757 _____ (Farbar) C:\Users\mk\Downloads\FRST64.exe
2013-07-23 22:31 - 2013-07-23 22:32 - 01220240 _____ (Farbar) C:\Users\mk\Downloads\FRST.exe
2013-07-23 22:24 - 2013-07-23 22:24 - 00000000 ____D C:\ProgramData\hsswpr
2013-07-23 22:16 - 2013-07-23 22:16 - 00602112 _____ (OldTimer Tools) C:\Users\mk\Downloads\OTL.exe
2013-07-23 22:16 - 2013-07-23 22:16 - 00050477 _____ C:\Users\mk\Downloads\Defogger.exe
2013-07-23 21:52 - 2013-07-23 21:52 - 00000000 ____D C:\Users\mk\AppData\Roaming\Malwarebytes
2013-07-23 21:51 - 2013-07-23 21:51 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-23 21:51 - 2013-07-23 21:51 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-07-23 21:51 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-07-23 21:50 - 2013-07-23 21:51 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\mk\Downloads\mbam-setup-1.75.0.1300.exe
2013-07-23 17:34 - 2013-07-23 17:34 - 00099702 _____ C:\Users\mk\Downloads\Civ5_Wunder.zip
2013-07-23 17:10 - 2013-07-23 17:10 - 00000000 ____D C:\Program Files\LyricsSpeaker
2013-07-23 14:43 - 2013-07-23 14:43 - 00000000 ____D C:\Windows\system32\Hotspot Shield
2013-07-22 18:48 - 2013-07-22 18:48 - 01201628 _____ C:\Users\mk\Downloads\FAB_EMB-120_VC-97.zip
2013-07-22 18:46 - 2013-07-22 18:46 - 00287006 _____ C:\Users\mk\Downloads\Emb-120_AF.zip
2013-07-22 18:46 - 2013-07-22 18:46 - 00220380 _____ C:\Users\mk\Downloads\d84fac22.zip
2013-07-22 18:43 - 2013-07-22 18:43 - 00239354 _____ C:\Users\mk\Downloads\dh6pel22.zip
2013-07-22 18:43 - 2013-07-22 18:43 - 00183267 _____ C:\Users\mk\Downloads\d83bwi22.zip
2013-07-22 18:42 - 2013-07-22 18:42 - 00674667 _____ C:\Users\mk\Downloads\satr72.zip
2013-07-22 18:06 - 2013-07-22 18:07 - 01599048 _____ C:\Users\mk\Downloads\BA_ATR72.zip
2013-07-22 18:06 - 2013-07-22 18:06 - 01693358 _____ C:\Users\mk\Downloads\KTHY72AG.zip
2013-07-20 02:41 - 2013-07-20 02:41 - 00000000 ____D C:\Program Files\Conduit
2013-07-20 02:40 - 2013-07-20 02:45 - 00000000 ____D C:\Users\mk\AppData\Roaming\SearchProtect
2013-07-20 02:40 - 2013-07-20 02:40 - 00000000 ____D C:\Program Files\SearchProtect
2013-07-20 02:39 - 2013-07-20 02:41 - 00000009 _____ C:\END
2013-07-20 02:35 - 2013-07-20 02:36 - 08478120 _____ C:\Users\mk\Downloads\HSS-3.09-install-chip-389-conduit.exe
2013-07-19 07:18 - 2013-07-19 07:18 - 00000000 ____D C:\Users\mk\Downloads\Mods
2013-07-19 07:18 - 2009-11-01 18:38 - 00586240 _____ (JoneSoft) C:\Users\mk\Downloads\JSGME.exe
2013-07-19 07:13 - 2013-07-19 07:17 - 95719406 _____ C:\Users\mk\Downloads\Bardo_devPackRS2f.rar
2013-07-18 19:17 - 2013-07-18 19:17 - 00000214 _____ C:\Users\mk\Desktop\Rome Total War - Alexander.url
2013-07-18 15:54 - 2013-07-18 16:29 - 603503371 _____ () C:\Users\mk\Downloads\LOTRTW_PATCH_v2.0_to_v3.0.exe
2013-07-18 15:26 - 2013-07-18 15:42 - 258485862 _____ () C:\Users\mk\Downloads\LOTRTW_v2.0b_OB.exe
2013-07-17 14:40 - 2013-07-17 14:40 - 05546406 _____ C:\Users\mk\Downloads\Unbenannt.bmp
2013-07-16 23:40 - 2013-07-16 23:40 - 00000000 ____D C:\Users\Default\Documents\Visual Studio 2010
2013-07-16 23:40 - 2013-07-16 23:40 - 00000000 ____D C:\Users\Default User\Documents\Visual Studio 2010
2013-07-15 22:52 - 2013-07-15 22:52 - 00000215 _____ C:\Users\mk\Desktop\Sid Meier's Civilization V SDK.url
2013-07-15 22:33 - 2013-07-17 11:09 - 00000000 ____D C:\Users\mk\Documents\Firaxis ModBuddy
2013-07-15 22:33 - 2013-07-15 22:33 - 00000000 ____D C:\Users\mk\AppData\Roaming\Firaxis
2013-07-15 22:33 - 2013-07-15 22:33 - 00000000 ____D C:\Users\mk\AppData\Local\Firaxis
2013-07-15 22:23 - 2013-07-15 22:23 - 00000000 ____D C:\Program Files\Microsoft Help Viewer
2013-07-15 22:22 - 2013-07-15 22:22 - 00000000 ____D C:\Users\mk\Documents\Visual Studio 2010
2013-07-15 22:22 - 2013-07-15 22:22 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2013-07-15 22:21 - 2013-07-15 22:21 - 00000000 ____D C:\Windows\system32\1033
2013-07-15 22:21 - 2013-07-15 22:21 - 00000000 ____D C:\Program Files\Common Files\Designer
2013-07-15 22:20 - 2013-07-15 22:21 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 10.0
2013-07-15 22:20 - 2013-07-15 22:20 - 00000000 ____D C:\Program Files\Microsoft SDKs
2013-07-15 22:20 - 2013-07-15 22:20 - 00000000 ____D C:\Program Files\Common Files\Merge Modules
2013-07-15 22:05 - 2013-07-15 22:17 - 174883152 _____ (Microsoft Corporation) C:\Users\mk\Downloads\VSIsoShell.exe
2013-07-15 21:39 - 2013-07-15 21:39 - 00001067 _____ C:\Users\mk\Desktop\Steam - Verknüpfung.lnk
2013-07-14 12:41 - 2013-07-14 12:42 - 00000000 ____D C:\Program Files\Microsoft Mouse and Keyboard Center
2013-07-14 12:39 - 2012-08-23 16:48 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2013-07-14 12:39 - 2012-08-23 16:44 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2013-07-14 12:39 - 2012-08-23 16:40 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2013-07-14 12:39 - 2012-08-23 16:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-07-14 12:39 - 2012-08-23 16:10 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-07-14 12:39 - 2012-08-23 15:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2013-07-14 12:39 - 2012-08-23 15:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2013-07-14 12:39 - 2012-08-23 15:46 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2013-07-14 12:39 - 2012-08-23 15:32 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-07-14 12:39 - 2012-08-23 15:18 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2013-07-14 12:39 - 2012-08-23 13:40 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2013-07-14 12:39 - 2012-08-23 13:32 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2013-07-14 12:39 - 2012-08-23 13:15 - 00269312 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2013-07-14 12:39 - 2012-08-23 13:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2013-07-14 12:39 - 2012-08-23 12:39 - 01048064 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2013-07-14 12:39 - 2012-08-23 12:08 - 02739712 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2013-07-14 12:39 - 2012-08-23 10:19 - 04916224 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2013-07-14 12:33 - 2013-07-14 12:33 - 00000000 ____D C:\Windows\system32\MRT
2013-07-14 12:14 - 2012-08-24 19:05 - 00136560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-07-14 12:14 - 2012-08-24 19:02 - 00369856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-07-14 12:14 - 2012-08-24 18:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-07-14 12:14 - 2012-08-24 18:56 - 01039360 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-07-14 12:14 - 2012-05-04 11:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2013-07-14 12:01 - 2013-07-14 12:02 - 00144440 _____ C:\Windows\Minidump\071413-20794-01.dmp
2013-07-14 08:22 - 2013-07-14 08:22 - 00001908 _____ C:\Users\mk\Desktop\Civilization V.lnk
2013-07-13 00:10 - 2013-05-29 03:56 - 12333568 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-13 00:10 - 2013-05-29 03:50 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-13 00:10 - 2013-05-29 03:48 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-13 00:10 - 2013-05-29 03:41 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-07-13 00:10 - 2013-05-29 03:41 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-13 00:10 - 2013-05-29 03:41 - 01104384 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-13 00:10 - 2013-05-29 03:40 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-07-13 00:10 - 2013-05-29 03:38 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-13 00:10 - 2013-05-29 03:37 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-07-13 00:10 - 2013-05-29 03:36 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-07-13 00:10 - 2013-05-29 03:35 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-13 00:10 - 2013-05-29 03:35 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-13 00:10 - 2013-05-29 03:33 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-13 00:10 - 2013-05-29 03:33 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-13 00:10 - 2013-05-29 03:33 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-07-13 00:10 - 2013-05-29 03:29 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-12 14:36 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-12 14:35 - 2013-06-05 05:05 - 02347520 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-12 14:35 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-12 14:35 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-05 21:13 - 2013-07-05 21:13 - 00001624 _____ C:\Users\mk\Desktop\IAAM 1404.lnk
2013-07-05 14:21 - 2013-07-05 14:21 - 00000000 ____D C:\Users\mk\Documents\Paradox Interactive
2013-07-05 13:18 - 2013-07-05 13:18 - 00000215 _____ C:\Users\mk\Desktop\Hearts of Iron III.url
2013-07-04 14:17 - 2013-07-12 23:31 - 00000366 _____ C:\Windows\Tasks\LyricsSpeaker Update.job
2013-07-03 21:38 - 2013-07-03 21:37 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-07-03 21:38 - 2013-07-03 21:37 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-07-03 18:51 - 2013-07-03 18:51 - 00000216 _____ C:\Users\mk\Desktop\Company of Heroes 2.url
==================== One Month Modified Files and Folders =======
2013-07-23 22:34 - 2013-07-23 22:34 - 00000000 ____D C:\FRST
2013-07-23 22:34 - 2013-07-23 22:33 - 01779757 _____ (Farbar) C:\Users\mk\Downloads\FRST64.exe
2013-07-23 22:32 - 2013-07-23 22:31 - 01220240 _____ (Farbar) C:\Users\mk\Downloads\FRST.exe
2013-07-23 22:28 - 2009-07-14 06:34 - 00013792 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-23 22:28 - 2009-07-14 06:34 - 00013792 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-23 22:26 - 2011-02-15 18:23 - 01777731 _____ C:\Windows\WindowsUpdate.log
2013-07-23 22:25 - 2011-06-30 23:22 - 00000000 ____D C:\Users\mk\AppData\Roaming\Skype
2013-07-23 22:25 - 2011-02-21 00:19 - 00001090 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-23 22:24 - 2013-07-23 22:24 - 00000000 ____D C:\ProgramData\hsswpr
2013-07-23 22:24 - 2013-03-02 09:48 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-23 22:24 - 2009-07-14 04:37 - 00000000 __RHD C:\Users\Public\Desktop
2013-07-23 22:23 - 2013-06-03 12:56 - 00000000 ___RD C:\Users\mk\Dropbox
2013-07-23 22:23 - 2013-06-03 12:53 - 00000000 ____D C:\Users\mk\AppData\Roaming\Dropbox
2013-07-23 22:23 - 2013-04-18 20:01 - 00000000 ____D C:\Users\mk\AppData\Roaming\Spotify
2013-07-23 22:23 - 2011-04-28 17:32 - 00000000 ____D C:\Program Files\Steam
2013-07-23 22:22 - 2013-04-08 08:04 - 00000000 ____D C:\Users\mk\AppData\Roaming\Yontoo
2013-07-23 22:21 - 2012-10-07 16:37 - 00000406 ____H C:\Windows\Tasks\OptimizerPro1UpdaterTask{71490623-5DDC-4570-B3D7-58C497DCB86C}.job
2013-07-23 22:21 - 2011-02-21 00:19 - 00001086 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-23 22:21 - 2011-02-18 13:34 - 00134534 _____ C:\Windows\PFRO.log
2013-07-23 22:21 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-23 22:21 - 2009-07-14 06:39 - 00114611 _____ C:\Windows\setupact.log
2013-07-23 22:16 - 2013-07-23 22:16 - 00602112 _____ (OldTimer Tools) C:\Users\mk\Downloads\OTL.exe
2013-07-23 22:16 - 2013-07-23 22:16 - 00050477 _____ C:\Users\mk\Downloads\Defogger.exe
2013-07-23 22:16 - 2009-07-14 10:47 - 00000000 ____D C:\Windows\DigitalLocker
2013-07-23 22:05 - 2012-03-31 12:55 - 00001126 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-937208402-233253843-2107414545-1001UA.job
2013-07-23 21:52 - 2013-07-23 21:52 - 00000000 ____D C:\Users\mk\AppData\Roaming\Malwarebytes
2013-07-23 21:51 - 2013-07-23 21:51 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-23 21:51 - 2013-07-23 21:51 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-07-23 21:51 - 2013-07-23 21:50 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\mk\Downloads\mbam-setup-1.75.0.1300.exe
2013-07-23 21:48 - 2011-08-09 20:21 - 00000000 ____D C:\Users\mk\AppData\Local\Conduit
2013-07-23 21:21 - 2011-02-16 19:09 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-937208402-233253843-2107414545-1001UA.job
2013-07-23 19:52 - 2011-02-18 19:26 - 00000000 ____D C:\Users\mk\Desktop\Schule
2013-07-23 19:11 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\NDF
2013-07-23 17:34 - 2013-07-23 17:34 - 00099702 _____ C:\Users\mk\Downloads\Civ5_Wunder.zip
2013-07-23 17:13 - 2012-10-14 17:13 - 00000000 ____D C:\Program Files\DealPly
2013-07-23 17:10 - 2013-07-23 17:10 - 00000000 ____D C:\Program Files\LyricsSpeaker
2013-07-23 14:43 - 2013-07-23 14:43 - 00000000 ____D C:\Windows\system32\Hotspot Shield
2013-07-22 23:21 - 2011-02-16 19:09 - 00001056 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-937208402-233253843-2107414545-1001Core.job
2013-07-22 22:01 - 2011-02-15 19:42 - 00006838 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-22 18:48 - 2013-07-22 18:48 - 01201628 _____ C:\Users\mk\Downloads\FAB_EMB-120_VC-97.zip
2013-07-22 18:46 - 2013-07-22 18:46 - 00287006 _____ C:\Users\mk\Downloads\Emb-120_AF.zip
2013-07-22 18:46 - 2013-07-22 18:46 - 00220380 _____ C:\Users\mk\Downloads\d84fac22.zip
2013-07-22 18:43 - 2013-07-22 18:43 - 00239354 _____ C:\Users\mk\Downloads\dh6pel22.zip
2013-07-22 18:43 - 2013-07-22 18:43 - 00183267 _____ C:\Users\mk\Downloads\d83bwi22.zip
2013-07-22 18:42 - 2013-07-22 18:42 - 00674667 _____ C:\Users\mk\Downloads\satr72.zip
2013-07-22 18:07 - 2013-07-22 18:06 - 01599048 _____ C:\Users\mk\Downloads\BA_ATR72.zip
2013-07-22 18:06 - 2013-07-22 18:06 - 01693358 _____ C:\Users\mk\Downloads\KTHY72AG.zip
2013-07-21 23:20 - 2011-02-15 19:38 - 00000000 ____D C:\Users\mk
2013-07-20 02:45 - 2013-07-20 02:40 - 00000000 ____D C:\Users\mk\AppData\Roaming\SearchProtect
2013-07-20 02:41 - 2013-07-20 02:41 - 00000000 ____D C:\Program Files\Conduit
2013-07-20 02:41 - 2013-07-20 02:39 - 00000009 _____ C:\END
2013-07-20 02:40 - 2013-07-20 02:40 - 00000000 ____D C:\Program Files\SearchProtect
2013-07-20 02:38 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\DriverStore
2013-07-20 02:36 - 2013-07-20 02:35 - 08478120 _____ C:\Users\mk\Downloads\HSS-3.09-install-chip-389-conduit.exe
2013-07-20 01:05 - 2012-03-31 12:55 - 00001104 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-937208402-233253843-2107414545-1001Core.job
2013-07-19 07:38 - 2011-02-15 19:38 - 00000000 ___RD C:\Users\mk\Desktop
2013-07-19 07:18 - 2013-07-19 07:18 - 00000000 ____D C:\Users\mk\Downloads\Mods
2013-07-19 07:17 - 2013-07-19 07:13 - 95719406 _____ C:\Users\mk\Downloads\Bardo_devPackRS2f.rar
2013-07-19 07:13 - 2013-03-02 09:47 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-07-19 07:13 - 2011-08-10 14:37 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-07-19 07:13 - 2011-03-10 14:49 - 00000000 ____D C:\Users\mk\AppData\Local\Adobe
2013-07-18 19:41 - 2012-06-27 13:25 - 00000000 ____D C:\Users\mk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The Lord of the Rings - Total War OPEN BETA
2013-07-18 19:17 - 2013-07-18 19:17 - 00000214 _____ C:\Users\mk\Desktop\Rome Total War - Alexander.url
2013-07-18 16:29 - 2013-07-18 15:54 - 603503371 _____ () C:\Users\mk\Downloads\LOTRTW_PATCH_v2.0_to_v3.0.exe
2013-07-18 15:42 - 2013-07-18 15:26 - 258485862 _____ () C:\Users\mk\Downloads\LOTRTW_v2.0b_OB.exe
2013-07-18 15:35 - 2011-02-15 20:18 - 00000000 ____D C:\Program Files\Common Files\InstallShield
2013-07-18 12:24 - 2013-03-05 11:11 - 00000000 ____D C:\Users\mk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-07-18 10:43 - 2013-04-18 20:02 - 00000000 ____D C:\Users\mk\AppData\Local\Spotify
2013-07-17 23:32 - 2011-06-30 23:22 - 00000000 ___RD C:\Program Files\Skype
2013-07-17 23:32 - 2011-06-30 23:22 - 00000000 ____D C:\ProgramData\Skype
2013-07-17 14:56 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-07-17 14:40 - 2013-07-17 14:40 - 05546406 _____ C:\Users\mk\Downloads\Unbenannt.bmp
2013-07-17 11:09 - 2013-07-15 22:33 - 00000000 ____D C:\Users\mk\Documents\Firaxis ModBuddy
2013-07-17 09:23 - 2011-04-28 17:32 - 00000000 ____D C:\Program Files\Common Files\Steam
2013-07-16 23:40 - 2013-07-16 23:40 - 00000000 ____D C:\Users\Default\Documents\Visual Studio 2010
2013-07-16 23:40 - 2013-07-16 23:40 - 00000000 ____D C:\Users\Default User\Documents\Visual Studio 2010
2013-07-15 22:52 - 2013-07-15 22:52 - 00000215 _____ C:\Users\mk\Desktop\Sid Meier's Civilization V SDK.url
2013-07-15 22:34 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\MSBuild
2013-07-15 22:33 - 2013-07-15 22:33 - 00000000 ____D C:\Users\mk\AppData\Roaming\Firaxis
2013-07-15 22:33 - 2013-07-15 22:33 - 00000000 ____D C:\Users\mk\AppData\Local\Firaxis
2013-07-15 22:23 - 2013-07-15 22:23 - 00000000 ____D C:\Program Files\Microsoft Help Viewer
2013-07-15 22:22 - 2013-07-15 22:22 - 00000000 ____D C:\Users\mk\Documents\Visual Studio 2010
2013-07-15 22:22 - 2013-07-15 22:22 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2013-07-15 22:21 - 2013-07-15 22:21 - 00000000 ____D C:\Windows\system32\1033
2013-07-15 22:21 - 2013-07-15 22:21 - 00000000 ____D C:\Program Files\Common Files\Designer
2013-07-15 22:21 - 2013-07-15 22:20 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 10.0
2013-07-15 22:21 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-07-15 22:20 - 2013-07-15 22:20 - 00000000 ____D C:\Program Files\Microsoft SDKs
2013-07-15 22:20 - 2013-07-15 22:20 - 00000000 ____D C:\Program Files\Common Files\Merge Modules
2013-07-15 22:20 - 2011-02-16 22:59 - 00000000 ____D C:\Program Files\Microsoft.NET
2013-07-15 22:17 - 2013-07-15 22:05 - 174883152 _____ (Microsoft Corporation) C:\Users\mk\Downloads\VSIsoShell.exe
2013-07-15 21:40 - 2013-01-19 21:48 - 00000000 ____D C:\Program Files\Origin
2013-07-15 21:39 - 2013-07-15 21:39 - 00001067 _____ C:\Users\mk\Desktop\Steam - Verknüpfung.lnk
2013-07-15 19:33 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache
2013-07-14 12:43 - 2009-07-14 10:47 - 00000000 ____D C:\Windows\system32\Drivers\de-DE
2013-07-14 12:43 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-07-14 12:42 - 2013-07-14 12:41 - 00000000 ____D C:\Program Files\Microsoft Mouse and Keyboard Center
2013-07-14 12:36 - 2013-07-14 12:33 - 00000000 ____D C:\Windows\system32\MRT
2013-07-14 12:33 - 2011-02-15 19:45 - 00001912 _____ C:\Windows\epplauncher.mif
2013-07-14 12:17 - 2011-02-15 19:43 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-07-14 12:02 - 2013-07-14 12:01 - 00144440 _____ C:\Windows\Minidump\071413-20794-01.dmp
2013-07-14 12:01 - 2012-03-03 17:28 - 309688503 _____ C:\Windows\MEMORY.DMP
2013-07-14 12:01 - 2012-03-03 17:28 - 00000000 ____D C:\Windows\Minidump
2013-07-14 08:22 - 2013-07-14 08:22 - 00001908 _____ C:\Users\mk\Desktop\Civilization V.lnk
2013-07-13 08:53 - 2009-07-14 06:33 - 00309360 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-13 08:52 - 2011-02-16 19:20 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-13 08:52 - 2009-07-14 10:57 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-13 08:52 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-12 23:31 - 2013-07-04 14:17 - 00000366 _____ C:\Windows\Tasks\LyricsSpeaker Update.job
2013-07-06 22:59 - 2012-09-23 18:46 - 00001872 _____ C:\Users\mk\Desktop\SimCity 4.lnk
2013-07-06 22:59 - 2011-02-16 19:55 - 00000000 ____D C:\Users\mk\Documents\SimCity 4
2013-07-06 14:06 - 2013-03-25 12:16 - 00280600 _____ C:\Windows\system32\PnkBstrB.xtr
2013-07-06 14:06 - 2013-03-23 19:29 - 00139128 _____ C:\Windows\system32\Drivers\PnkBstrK.sys
2013-07-06 14:06 - 2013-03-23 19:28 - 00280600 _____ C:\Windows\system32\PnkBstrB.exe
2013-07-06 13:58 - 2013-03-23 19:28 - 00280600 _____ C:\Windows\system32\PnkBstrB.ex0
2013-07-06 13:14 - 2011-07-28 12:54 - 00000000 ____D C:\Users\mk\Documents\Settlers7
2013-07-05 21:13 - 2013-07-05 21:13 - 00001624 _____ C:\Users\mk\Desktop\IAAM 1404.lnk
2013-07-05 15:56 - 2012-11-04 12:42 - 00000000 ____D C:\Games
2013-07-05 14:21 - 2013-07-05 14:21 - 00000000 ____D C:\Users\mk\Documents\Paradox Interactive
2013-07-05 14:21 - 2011-02-20 16:40 - 00360381 _____ C:\Windows\DirectX.log
2013-07-05 13:18 - 2013-07-05 13:18 - 00000215 _____ C:\Users\mk\Desktop\Hearts of Iron III.url
2013-07-04 15:41 - 2012-10-14 17:12 - 00000000 ____D C:\Users\mk\AppData\Roaming\vlc
2013-07-04 15:38 - 2013-01-04 01:33 - 00000000 ____D C:\Users\mk\AppData\Roaming\dvdcss
2013-07-04 14:17 - 2013-05-30 15:49 - 00000000 ____D C:\Program Files\SingAlong
2013-07-04 08:11 - 2013-06-13 13:20 - 00000000 ____D C:\Users\mk\Documents\My Games
2013-07-04 00:22 - 2012-07-04 13:59 - 00007602 _____ C:\Users\mk\AppData\Local\Resmon.ResmonCfg
2013-07-03 21:37 - 2013-07-03 21:38 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-07-03 21:37 - 2013-07-03 21:38 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-07-03 21:37 - 2013-06-17 22:16 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-07-03 21:37 - 2013-06-17 22:16 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-07-03 21:37 - 2012-06-15 16:50 - 00867240 _____ (Oracle Corporation) C:\Windows\system32\npdeployJava1.dll
2013-07-03 21:37 - 2012-06-15 16:50 - 00000000 ____D C:\Program Files\Java
2013-07-03 21:37 - 2011-02-15 19:51 - 00789416 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2013-07-03 21:22 - 2012-10-04 19:08 - 00000000 ____D C:\Nexon
2013-07-03 21:21 - 2009-07-14 05:20 - 00000000 ___RD C:\Program Files (x86)
2013-07-03 21:17 - 2011-02-15 20:18 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2013-07-03 21:07 - 2012-11-03 19:08 - 00000000 ____D C:\Users\mk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EA Games
2013-07-03 21:07 - 2011-02-27 23:12 - 00000000 ____D C:\Program Files\Kalypso
2013-07-03 18:51 - 2013-07-03 18:51 - 00000216 _____ C:\Users\mk\Desktop\Company of Heroes 2.url
2013-06-27 10:07 - 2013-01-19 21:50 - 00000000 ____D C:\Users\mk\AppData\Roaming\Origin
2013-06-27 10:07 - 2013-01-19 21:48 - 00000000 ____D C:\ProgramData\Origin
2013-06-27 10:06 - 2013-01-19 21:49 - 00000000 ____D C:\Users\mk\AppData\Local\Origin
2013-06-24 00:37 - 2011-02-17 15:10 - 75733144 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-06-23 23:24 - 2012-10-23 11:53 - 00000000 ____D C:\Users\mk\.gimp-2.8
Files to move or delete:
====================
C:\Users\f014cfd7c35ea5946d\Setup.exe
C:\Users\f36ddab97810fa62f14390cc\Setup.exe
C:\Users\mk\War_Rock_20110307_G1.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-07-13 09:49
==================== End Of Log ============================
--- --- ---
--- --- ---
gefolgt von Addition Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 23-07-2013
Ran by mk at 2013-07-23 22:39:01
Running from C:\Users\mk\Downloads
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
Adobe Flash Player 11 ActiveX (Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (Version: 11.8.800.94)
Adobe Reader XI (11.0.03) - Deutsch (Version: 11.0.03)
Amazon MP3-Downloader 1.0.18 (HKCU Version: 1.0.18)
Amazon MP3-Downloader 1.0.9
AMD Accelerated Video Transcoding (Version: 12.5.100.21219)
AMD APP SDK Runtime (Version: 10.0.1084.4)
AMD Catalyst Install Manager (Version: 8.0.903.0)
AMD Drag and Drop Transcoding (Version: 2.00.0000)
AMD Media Foundation Decoders (Version: 1.0.71219.1540)
American Conquest Anthology
ANNO 1404 - Königsedition (Version: 3.10.0000)
Anno 1404 Modification Manager (Version: 4.2.0.0)
ANNO 1404 Venedig Entwickler-Tools (Version: 1.00.0000)
ANNO 2070 (Version: 1.0.0.0)
Arsenal of Democracy
ASUS Ai Charger (Version: 1.00.06)
Battlefield 1942™ (Version: 1.6.20.0)
Call of Duty
Call of Duty 2
Canon MP270 series MP Drivers
Catalyst Control Center - Branding (Version: 1.00.0000)
Catalyst Control Center (Version: 2012.1219.1521.27485)
Catalyst Control Center Graphics Previews Common (Version: 2012.1219.1521.27485)
Catalyst Control Center InstallProxy (Version: 2012.1219.1521.27485)
Catalyst Control Center Localization All (Version: 2012.1219.1521.27485)
CCC Help Chinese Standard (Version: 2012.1219.1520.27485)
CCC Help Chinese Traditional (Version: 2012.1219.1520.27485)
CCC Help Czech (Version: 2012.1219.1520.27485)
CCC Help Danish (Version: 2012.1219.1520.27485)
CCC Help Dutch (Version: 2012.1219.1520.27485)
CCC Help English (Version: 2012.1219.1520.27485)
CCC Help Finnish (Version: 2012.1219.1520.27485)
CCC Help French (Version: 2012.1219.1520.27485)
CCC Help German (Version: 2012.1219.1520.27485)
CCC Help Greek (Version: 2012.1219.1520.27485)
CCC Help Hungarian (Version: 2012.1219.1520.27485)
CCC Help Italian (Version: 2012.1219.1520.27485)
CCC Help Japanese (Version: 2012.1219.1520.27485)
CCC Help Korean (Version: 2012.1219.1520.27485)
CCC Help Norwegian (Version: 2012.1219.1520.27485)
CCC Help Polish (Version: 2012.1219.1520.27485)
CCC Help Portuguese (Version: 2012.1219.1520.27485)
CCC Help Russian (Version: 2012.1219.1520.27485)
CCC Help Spanish (Version: 2012.1219.1520.27485)
CCC Help Swedish (Version: 2012.1219.1520.27485)
CCC Help Thai (Version: 2012.1219.1520.27485)
CCC Help Turkish (Version: 2012.1219.1520.27485)
ccc-utility (Version: 2012.1219.1521.27485)
Company of Heroes 2
congstar Internet-Manager (Version: 1.0.0.3)
D3DX10 (Version: 15.4.2368.0902)
Darkest Hour
DealPly
Delta Chrome Toolbar
Diablo III (Version: 1.0.8.16603)
Die Siedler 7 (Version: 1.12.1396)
DivX-Setup (Version: 2.6.1.8)
Dropbox (HKCU Version: 2.0.22)
Empire Earth
Empire: Total War
Facebook Video Calling 1.2.0.287 (Version: 1.2.287)
Free Mp3 Wma Converter V 2.1 (Version: 2.1.0.0)
Free YouTube to MP3 Converter version 3.12.0.128 (Version: 3.12.0.128)
Frostblade Launcher 1.1
Gameforge Live 1.0 "Legend" (Version: 1.1.1724)
GameShadow (Version: 1.91.0000)
GeoGebra 4.2
GIMP 2.8.2 (Version: 2.8.2)
Google Chrome (HKCU Version: 28.0.1500.72)
Google Earth (Version: 7.0.3.8542)
Google Update Helper (Version: 1.3.21.153)
Grand Ages: Rome
Hearts of Iron III
Incredibar Toolbar on IE
Inkscape 0.48.0 (Version: 0.48.0)
Java 7 Update 25 (Version: 7.0.250)
Java Auto Updater (Version: 2.1.9.5)
Java(TM) 6 Update 37 (Version: 6.0.370)
Junk Mail filter update (Version: 15.4.3502.0922)
Kalydo Player 5.00.01 (HKCU Version: 5.00.01)
LyricsSpeaker
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300)
Medal of Honor™ Warfighter (Version: 1.0.0.3)
Medieval II Total War (Version: 1.00.0000)
Mesh Runtime (Version: 15.4.5722.2)
Messenger Companion (Version: 15.4.3502.0922)
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 (Version: 1.1.4322)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Multi-Targeting Pack (Version: 4.0.30319)
Microsoft Age of Empires
Microsoft Age of Empires Expansion
Microsoft Age of Empires II
Microsoft Age of Empires II: The Conquerors Expansion
Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Flight Simulator 2002
Microsoft Games for Windows - LIVE Redistributable (Version: 3.5.92.0)
Microsoft Help Viewer 1.0 (Version: 1.0.30319)
Microsoft Security Client (Version: 4.3.0215.0)
Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0)
Microsoft Security Essentials (Version: 4.3.215.0)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft SQL Server 2008 R2 Management Objects (Version: 10.50.1447.4)
Microsoft SQL Server System CLR Types (Version: 10.50.1447.4)
Microsoft Train Simulator
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Runtime - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual Studio 2010 Shell (Isolated) - ENU (Version: 10.0.30319)
Microsoft-Maus- und Tastatur-Center (Version: 2.2.173.0)
Mozilla Firefox 21.0 (x86 de) (Version: 21.0)
Mozilla Maintenance Service (Version: 21.0)
MSVCRT (Version: 15.4.2862.0708)
MySQL Connector/ODBC 5.1 (Version: 5.1.5)
Nexon Game Manager
Novo's Easy WoW Server 0.4.1
NVIDIA HD-Audiotreiber 1.1.13.1 (Version: 1.1.13.1)
NVIDIA Install Application (Version: 2.1002.85.551)
NVIDIA PhysX (Version: 9.10.0514)
NVIDIA PhysX-Systemsoftware 9.10.0514 (Version: 9.10.0514)
OpenOffice.org 3.3 (Version: 3.3.9567)
Origin (Version: 9.1.10.2728)
Pando Media Booster (Version: 2.6.0.1)
Paradox Interactive Launcher (HKCU Version: 1.0.0.22)
Platform (Version: 1.34)
PremiumSoft Navicat Lite 10.0
ProTrain 2.1 2.1
ProTrain Rheintal 1.0
PunkBuster Services (Version: 0.993)
Realtek Ethernet Controller Driver For Windows Vista and Later (Version: 1.00.0009)
Rome: Total War
Rome: Total War - Alexander
SAMSUNG USB Driver for Mobile Phones (Version: 1.3.2300.0)
Search Protect by conduit (Version: 1.5.0.71)
Sid Meier's Civilization IV
Sid Meier's Civilization V SDK
Silent Hunter 4 Wolves of the Pacific (Version: 1.05.0000)
Silent Hunter 5 (Version: 1.2.0)
Silent Hunter III (Version: 1.4.0000)
SimCity 4 Deluxe
SimCity™ (Version: 1.0.0.0)
SiSoftware Sandra Lite 2013a (Version: 19.19.2013.1)
Skype Click to Call (Version: 6.3.11079)
Skype™ 6.6 (Version: 6.6.106)
SpeedAnalysis.com (Version: 1.0.0.1)
Spotify (HKCU Version: 0.9.1.57.ge7405149)
STANLY Track
Steam (Version: 1.0.0.0)
TeamSpeak 3 Client
The Lord of the Rings - Total War OPEN BETA
TurboV (Version: 1.01.03)
Ubisoft Game Launcher (Version: 1.0.0.0)
Uninstall 1.0.0.1
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (Version: 1)
Updater Service (Version: 15,9,28,27)
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0)
VIA Plattform-Geräte-Manager (Version: 1.34)
VLC media player 2.0.5 (Version: 2.0.5)
Web Assistant 2.0.0.440
Windows Live Communications Platform (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3555.0308)
Windows Live Family Safety (Version: 15.4.3555.0308)
Windows Live Fotogalerie (Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (Version: 15.4.3502.0922)
Windows Live Mail (Version: 15.4.3502.0922)
Windows Live Mesh (Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (Version: 15.4.5722.2)
Windows Live Messenger Companion Core (Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (Version: 15.4.3502.0922)
Windows Live Photo Common (Version: 15.4.3502.0922)
Windows Live Photo Gallery (Version: 15.4.3502.0922)
Windows Live PIMT Platform (Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (Version: 15.4.3502.0922)
Windows Live SOXE Definitions (Version: 15.4.3502.0922)
Windows Live UX Platform (Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109)
Windows Live Writer (Version: 15.4.3502.0922)
Windows Live Writer Resources (Version: 15.4.3502.0922)
Windows Media Player Firefox Plugin (Version: 1.0.0.8)
Windows Searchqu Toolbar (Version: 3.0.0.117623)
WinRAR 4.01 (32-Bit) (Version: 4.01.0)
WinUHA 2.0 RC1 (2005.02.27)
WinX Free FLV to WMV Converter 4.1.4
WinZip 15.0 (Version: 15.0.9411)
World of Warcraft (Version: 5.3.0.17128)
World of Warcraft Public Test (Version: 0.0.0.0)
Yontoo 2.051 (Version: 2.051)
==================== Restore Points =========================
20-07-2013 00:36:49 Gerätetreiber-Paketinstallation: Anchorfree Inc Netzwerkdienst
20-07-2013 00:38:38 Gerätetreiber-Paketinstallation: Anchorfree HSS VPN Adapter Netzwerkadapter
21-07-2013 04:49:25 Windows Update
==================== Hosts content: ==========================
2009-07-14 04:04 - 2011-12-22 17:11 - 00000833 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {0166519E-4368-4BD3-81F2-D118532D1D21} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {02DE7D5B-E143-4C4D-AF33-2F870D150302} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {0BED1ABF-487A-4254-B0A4-3953E281DF0E} - System32\Tasks\OptimizerPro1UpdaterTask{71490623-5DDC-4570-B3D7-58C497DCB86C} => C:\ProgramData\Premium\OptimizerPro1\OptimizerPro1.exe No File
Task: {1D2DE987-BB18-4521-8604-F3918D24D5FE} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {1F3F84A5-3DE7-42E6-AD02-AFB289556790} - System32\Tasks\EPUpdater => C:\Users\mk\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe [2013-05-09] ()
Task: {230875BC-30D7-41F9-B46B-EE5A371F1C2E} - System32\Tasks\{B6E1E6EA-D56A-4E8C-96D5-9D1A608711AC} => C:\Program Files\Maxis\SimCity 4 Deluxe\Apps\SimCity 4.exe [2010-07-15] (Maxis)
Task: {27BCFEA5-DF36-450D-BE1B-53814FF11BA0} - System32\Tasks\{17EA50EB-99E5-4193-81D8-5613BAC482A4} => C:\Program Files\Skype\\Phone\Skype.exe [2013-06-21] (Skype Technologies S.A.)
Task: {29EFF3AC-69E2-41B4-B262-8AB3DB490E49} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-937208402-233253843-2107414545-1001UA => C:\Users\mk\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-07-20] (Facebook Inc.)
Task: {319C8D16-7E94-4D3A-A70D-6723136A6935} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-937208402-233253843-2107414545-1001Core => C:\Users\mk\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-07-20] (Facebook Inc.)
Task: {37D894ED-C1B2-4132-869A-9F4C8B4B13CE} - System32\Tasks\RunAsStdUser Task => C:\Program Files\ClickPotatoLite\bin\10.0.728.0\ClickPotatoLiteSA.exe No File
Task: {38118776-2E77-4CED-A531-064DFF0A7ED0} - System32\Tasks\LyricsSpeaker Update => C:\Program Files\LyricsSpeaker\LyricsUpd.exe [2013-07-23] (LyricsSpeaker LTD)
Task: {3A4EDCB1-9BC3-4A8F-8C67-CEA280B3203F} - System32\Tasks\{02F53FA6-2791-40CC-84EE-4C369D3AC065} => C:\Program Files\Maxis\SimCity 4 Deluxe\Apps\SimCity 4.exe [2010-07-15] (Maxis)
Task: {40CFCF9D-756B-4F47-A25C-1D321B7F8FF2} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {4C80BBD6-8DAC-4558-A2B8-55A55B5BEC79} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-937208402-233253843-2107414545-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe No File
Task: {4CB234D3-0133-42D3-8851-01E417784B98} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-05-13] (Microsoft)
Task: {56D3760D-A439-419E-BFB5-533719116C5E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-02-21] (Google Inc.)
Task: {5B7C2FE5-505E-4BEA-9A33-4AAC44F3AB80} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-02-21] (Google Inc.)
Task: {74BBF362-4045-4285-83A3-B67910BF0627} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {759E3D79-1F81-489E-8DB4-08A137B50FB7} - System32\Tasks\Microsoft\Microsoft Antimalware\MpIdleTask => c:\Program Files\Microsoft Security Client\MpCmdRun.exe [2013-06-20] (Microsoft Corporation)
Task: {7F0AD854-4F11-4A08-8FEA-FB4EC9741A80} - System32\Tasks\{10F76126-9602-4D0C-B022-F07FC2F7ACFC} => C:\Program Files\Maxis\SimCity 4 Deluxe\Apps\SimCity 4.exe [2010-07-15] (Maxis)
Task: {80472E15-DE57-4C26-A9DB-A65358420355} - System32\Tasks\DealPlyUpdate => C:\Program Files\DealPly\DealPlyUpdate.exe [2012-05-09] (DealPly)
Task: {822203D8-B20B-4BA0-AB1D-08851D7049BF} - System32\Tasks\{3BB5A849-EA51-4C3B-B068-2992A5BA0867} => C:\Program Files\Maxis\SimCity 4 Deluxe\Apps\SimCity 4.exe [2010-07-15] (Maxis)
Task: {8CD50E4D-FD30-456D-AD0C-127906B8EABD} - System32\Tasks\{BBD2AC04-5611-45C7-A2AB-5238978D2D4D} => C:\Program Files\Maxis\SimCity 4 Deluxe\Apps\SimCity 4.exe [2010-07-15] (Maxis)
Task: {8FBBF2EE-92EE-4476-872B-1CB31426C7D8} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-11] (Microsoft Corporation)
Task: {943E8E7C-9DBE-41E0-99EE-8168869DC2E7} - System32\Tasks\DealPly => C:\Users\mk\AppData\Roaming\DealPly\UPDATE~1\UPDATE~1.EXE [2013-03-10] ()
Task: {B141A142-5BD0-46BA-AA94-6BAC623CE557} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-937208402-233253843-2107414545-1001UA => C:\Users\mk\AppData\Local\Google\Update\GoogleUpdate.exe [2011-02-16] (Google Inc.)
Task: {B3FFF884-B868-4E73-8FF5-24DAABFBBD1B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-19] (Adobe Systems Incorporated)
Task: {D5437B04-436B-4AE2-B51A-5C85747526F4} - System32\Tasks\User_Feed_Synchronization-{F8C458C0-96F4-4551-9F91-A268152600F3} => C:\Windows\system32\msfeedssync.exe [2011-11-09] (Microsoft Corporation)
Task: {EB2ACFD1-997C-41A6-B613-7C317D15E725} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-937208402-233253843-2107414545-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe No File
Task: {FA0F84AC-553F-4DFC-926C-7C6AC0F20989} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-937208402-233253843-2107414545-1001Core => C:\Users\mk\AppData\Local\Google\Update\GoogleUpdate.exe [2011-02-16] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-937208402-233253843-2107414545-1001Core.job => C:\Users\mk\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-937208402-233253843-2107414545-1001UA.job => C:\Users\mk\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-937208402-233253843-2107414545-1001Core.job => C:\Users\mk\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-937208402-233253843-2107414545-1001UA.job => C:\Users\mk\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\LyricsSpeaker Update.job => C:\Program Files\LyricsSpeaker\LyricsUpd.exe
Task: C:\Windows\Tasks\OptimizerPro1UpdaterTask{71490623-5DDC-4570-B3D7-58C497DCB86C}.job => C:\ProgramData\Premium\OptimizerPro1\OptimizerPro1.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (07/23/2013 05:48:44 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: CivilizationV_DX11.exe, Version: 1.0.3.18, Zeitstempel: 0x51c2ef3f
Name des fehlerhaften Moduls: CivilizationV_DX11.exe, Version: 1.0.3.18, Zeitstempel: 0x51c2ef3f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00034c2f
ID des fehlerhaften Prozesses: 0x1f60
Startzeit der fehlerhaften Anwendung: 0xCivilizationV_DX11.exe0
Pfad der fehlerhaften Anwendung: CivilizationV_DX11.exe1
Pfad des fehlerhaften Moduls: CivilizationV_DX11.exe2
Berichtskennung: CivilizationV_DX11.exe3
Error: (07/23/2013 02:40:50 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: CivilizationV_DX11.exe, Version: 1.0.3.18, Zeitstempel: 0x51c2ef3f
Name des fehlerhaften Moduls: CivilizationV_DX11.exe, Version: 1.0.3.18, Zeitstempel: 0x51c2ef3f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00034c2f
ID des fehlerhaften Prozesses: 0x1900
Startzeit der fehlerhaften Anwendung: 0xCivilizationV_DX11.exe0
Pfad der fehlerhaften Anwendung: CivilizationV_DX11.exe1
Pfad des fehlerhaften Moduls: CivilizationV_DX11.exe2
Berichtskennung: CivilizationV_DX11.exe3
Error: (07/23/2013 01:46:52 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: CivilizationV_DX11.exe, Version: 1.0.3.18, Zeitstempel: 0x51c2ef3f
Name des fehlerhaften Moduls: CivilizationV_DX11.exe, Version: 1.0.3.18, Zeitstempel: 0x51c2ef3f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00034c2f
ID des fehlerhaften Prozesses: 0x17cc
Startzeit der fehlerhaften Anwendung: 0xCivilizationV_DX11.exe0
Pfad der fehlerhaften Anwendung: CivilizationV_DX11.exe1
Pfad des fehlerhaften Moduls: CivilizationV_DX11.exe2
Berichtskennung: CivilizationV_DX11.exe3
Error: (07/23/2013 00:21:58 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: CivilizationV_DX11.exe, Version: 1.0.3.18, Zeitstempel: 0x51c2ef3f
Name des fehlerhaften Moduls: CivilizationV_DX11.exe, Version: 1.0.3.18, Zeitstempel: 0x51c2ef3f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00034c2f
ID des fehlerhaften Prozesses: 0x1a48
Startzeit der fehlerhaften Anwendung: 0xCivilizationV_DX11.exe0
Pfad der fehlerhaften Anwendung: CivilizationV_DX11.exe1
Pfad des fehlerhaften Moduls: CivilizationV_DX11.exe2
Berichtskennung: CivilizationV_DX11.exe3
Error: (07/23/2013 00:12:16 PM) (Source: Application Hang) (User: )
Description: Programm CivilizationV_DX11.exe, Version 1.0.3.18 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 16b8
Startzeit: 01ce878cf9144d54
Endzeit: 34
Anwendungspfad: C:\Program Files\Steam\steamapps\common\Sid Meier's Civilization V\CivilizationV_DX11.exe
Berichts-ID:
Error: (07/23/2013 00:09:47 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: CivilizationV_DX11.exe, Version: 1.0.3.18, Zeitstempel: 0x51c2ef3f
Name des fehlerhaften Moduls: CivilizationV_DX11.exe, Version: 1.0.3.18, Zeitstempel: 0x51c2ef3f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00034c2f
ID des fehlerhaften Prozesses: 0x1f14
Startzeit der fehlerhaften Anwendung: 0xCivilizationV_DX11.exe0
Pfad der fehlerhaften Anwendung: CivilizationV_DX11.exe1
Pfad des fehlerhaften Moduls: CivilizationV_DX11.exe2
Berichtskennung: CivilizationV_DX11.exe3
Error: (07/22/2013 10:01:13 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
Error: (07/22/2013 10:01:13 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (07/22/2013 10:01:13 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (07/22/2013 06:18:30 PM) (Source: Application Hang) (User: )
Description: Programm spotify.exe, Version 0.9.1.57 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 10c8
Startzeit: 01ce86d413803907
Endzeit: 174
Anwendungspfad: C:\Users\mk\AppData\Roaming\Spotify\spotify.exe
Berichts-ID:
System errors:
=============
Error: (07/23/2013 10:24:44 PM) (Source: Service Control Manager) (User: )
Description: Dienst "Hotspot Shield Monitoring Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (07/23/2013 10:21:45 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
sfdrv01
sfsync02
Error: (07/23/2013 10:21:21 PM) (Source: Application Popup) (User: )
Description: Treiber sfdrv01.sys konnte nicht geladen werden.
Error: (07/23/2013 10:21:18 PM) (Source: Application Popup) (User: )
Description: Treiber sfsync02.sys konnte nicht geladen werden.
Error: (07/23/2013 05:06:12 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
sfdrv01
sfsync02
Error: (07/23/2013 05:05:50 PM) (Source: Application Popup) (User: )
Description: Treiber sfdrv01.sys konnte nicht geladen werden.
Error: (07/23/2013 05:05:47 PM) (Source: Application Popup) (User: )
Description: Treiber sfsync02.sys konnte nicht geladen werden.
Error: (07/23/2013 08:22:13 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
sfdrv01
sfsync02
Error: (07/23/2013 08:21:44 AM) (Source: Application Popup) (User: )
Description: Treiber sfdrv01.sys konnte nicht geladen werden.
Error: (07/23/2013 08:21:41 AM) (Source: Application Popup) (User: )
Description: Treiber sfsync02.sys konnte nicht geladen werden.
Microsoft Office Sessions:
=========================
Error: (07/23/2013 05:48:44 PM) (Source: Application Error)(User: )
Description: CivilizationV_DX11.exe1.0.3.1851c2ef3fCivilizationV_DX11.exe1.0.3.1851c2ef3fc000000500034c2f1f6001ce87bab727f513C:\Program Files\Steam\steamapps\common\Sid Meier's Civilization V\CivilizationV_DX11.exeC:\Program Files\Steam\steamapps\common\Sid Meier's Civilization V\CivilizationV_DX11.exe5a526b5f-f3af-11e2-9c1a-20cf30eb2265
Error: (07/23/2013 02:40:50 PM) (Source: Application Error)(User: )
Description: CivilizationV_DX11.exe1.0.3.1851c2ef3fCivilizationV_DX11.exe1.0.3.1851c2ef3fc000000500034c2f190001ce879a63dbadeeC:\Program Files\Steam\steamapps\common\Sid Meier's Civilization V\CivilizationV_DX11.exeC:\Program Files\Steam\steamapps\common\Sid Meier's Civilization V\CivilizationV_DX11.exe1aa3ab5a-f395-11e2-9c6f-20cf30eb2265
Error: (07/23/2013 01:46:52 PM) (Source: Application Error)(User: )
Description: CivilizationV_DX11.exe1.0.3.1851c2ef3fCivilizationV_DX11.exe1.0.3.1851c2ef3fc000000500034c2f17cc01ce878e97be409aC:\Program Files\Steam\steamapps\common\Sid Meier's Civilization V\CivilizationV_DX11.exeC:\Program Files\Steam\steamapps\common\Sid Meier's Civilization V\CivilizationV_DX11.exe9086c1f2-f38d-11e2-9c6f-20cf30eb2265
Error: (07/23/2013 00:21:58 PM) (Source: Application Error)(User: )
Description: CivilizationV_DX11.exe1.0.3.1851c2ef3fCivilizationV_DX11.exe1.0.3.1851c2ef3fc000000500034c2f1a4801ce878d214e49e4C:\Program Files\Steam\steamapps\common\Sid Meier's Civilization V\CivilizationV_DX11.exeC:\Program Files\Steam\steamapps\common\Sid Meier's Civilization V\CivilizationV_DX11.exeb4833f02-f381-11e2-9c6f-20cf30eb2265
Error: (07/23/2013 00:12:16 PM) (Source: Application Hang)(User: )
Description: CivilizationV_DX11.exe1.0.3.1816b801ce878cf9144d5434C:\Program Files\Steam\steamapps\common\Sid Meier's Civilization V\CivilizationV_DX11.exe
Error: (07/23/2013 00:09:47 PM) (Source: Application Error)(User: )
Description: CivilizationV_DX11.exe1.0.3.1851c2ef3fCivilizationV_DX11.exe1.0.3.1851c2ef3fc000000500034c2f1f1401ce877b5843af6bC:\Program Files\Steam\steamapps\common\Sid Meier's Civilization V\CivilizationV_DX11.exeC:\Program Files\Steam\steamapps\common\Sid Meier's Civilization V\CivilizationV_DX11.exe0076b5fd-f380-11e2-9c6f-20cf30eb2265
Error: (07/22/2013 10:01:13 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: WmiApRplWmiApRpl8F20300004D070000
Error: (07/22/2013 10:01:13 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000
Error: (07/22/2013 10:01:13 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000
Error: (07/22/2013 06:18:30 PM) (Source: Application Hang)(User: )
Description: spotify.exe0.9.1.5710c801ce86d413803907174C:\Users\mk\AppData\Roaming\Spotify\spotify.exe
==================== Memory info ===========================
Percentage of memory in use: 58%
Total physical RAM: 3575.05 MB
Available physical RAM: 1493.41 MB
Total Pagefile: 7148.4 MB
Available Pagefile: 4322.78 MB
Total Virtual: 2047.88 MB
Available Virtual: 1875.62 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:931.41 GB) (Free:517.28 GB) NTFS
Drive d: (ROMEALX) (CDROM) (Total:0.64 GB) (Free:0 GB) CDFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 7D2B6A60)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)
==================== End Of Log ============================
hoffentlich war das richtig :X |
FRST 32-Bit | FRST 64-Bit
Malwarebytes Anti-Malware 
AdwCleaner auf deinen Desktop.
SecurityCheck und:
