Windows 7 Home Premium: Advanced System Protector und andere "Plagegeister" eingefangen

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-10-2013
Ran by Flini-Jojo at 2013-10-20 14:13:00
Running from C:\Users\Flini-Jojo\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Norton Internet Security (Enabled - Up to date) {63DF5164-9100-186D-2187-8DC619EFD8BF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton Internet Security (Enabled - Up to date) {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Internet Security (Enabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}

==================== Installed Programs ======================

Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117)
Adobe Reader X (10.1.8) MUI (x32 Version: 10.1.8)
AMD Accelerated Video Transcoding (Version: 12.5.100.21219)
AMD APP SDK Runtime (Version: 10.0.1084.4)
AMD AVIVO64 Codecs (Version: 12.3.103.20309)
AMD Catalyst Install Manager (Version: 3.0.868.0)
AMD Drag and Drop Transcoding (Version: 2.00.0000)
AMD Fuel (Version: 2012.1219.1521.27485)
AMD Media Foundation Decoders (Version: 1.0.71219.1540)
AMD Steady Video Plug-In  (Version: 2.06.0000)
AMD VISION Engine Control Center (x32 Version: 2012.1219.1521.27485)
appbarioDE 1 Toolbar for IE (x32 Version: 6.17.0.33)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
AVM FRITZ!Box Dokumentation (x32)
AVM FRITZ!Box Druckeranschluss (x32)
AVM FRITZ!DSL (x32 Version: 2.04.02)
Babylon Chrome Toolbar (x32 Version: 2.0.0.7)
Babylon toolbar on IE (x32 Version: 1.8.7.2)
Bing Bar (x32 Version: 7.0.610.0)
Bonjour (Version: 3.0.0.10)
Canon Easy-PhotoPrint EX (x32)
Canon iP4900 series Benutzerregistrierung (x32)
Canon iP4900 series On-screen Manual (x32)
Canon iP4900 series Printer Driver
Canon My Printer (x32)
Canon Solution Menu EX (x32)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.1219.1521.27485)
Catalyst Control Center InstallProxy (x32 Version: 2012.0309.43.976)
Catalyst Control Center Localization All (x32 Version: 2012.1219.1521.27485)
CCC Help Chinese Standard (x32 Version: 2012.1219.1520.27485)
CCC Help Chinese Traditional (x32 Version: 2012.1219.1520.27485)
CCC Help Czech (x32 Version: 2012.1219.1520.27485)
CCC Help Danish (x32 Version: 2012.1219.1520.27485)
CCC Help Dutch (x32 Version: 2012.1219.1520.27485)
CCC Help English (x32 Version: 2012.1219.1520.27485)
CCC Help Finnish (x32 Version: 2012.1219.1520.27485)
CCC Help French (x32 Version: 2012.1219.1520.27485)
CCC Help German (x32 Version: 2012.1219.1520.27485)
CCC Help Greek (x32 Version: 2012.1219.1520.27485)
CCC Help Hungarian (x32 Version: 2012.1219.1520.27485)
CCC Help Italian (x32 Version: 2012.1219.1520.27485)
CCC Help Japanese (x32 Version: 2012.1219.1520.27485)
CCC Help Korean (x32 Version: 2012.1219.1520.27485)
CCC Help Norwegian (x32 Version: 2012.1219.1520.27485)
CCC Help Polish (x32 Version: 2012.1219.1520.27485)
CCC Help Portuguese (x32 Version: 2012.1219.1520.27485)
CCC Help Russian (x32 Version: 2012.1219.1520.27485)
CCC Help Spanish (x32 Version: 2012.1219.1520.27485)
CCC Help Swedish (x32 Version: 2012.1219.1520.27485)
CCC Help Thai (x32 Version: 2012.1219.1520.27485)
CCC Help Turkish (x32 Version: 2012.1219.1520.27485)
ccc-utility64 (Version: 2012.1219.1521.27485)
D3DX10 (x32 Version: 15.4.2368.0902)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
Die*Sims™*3 (x32 Version: 1.42.130)
Etron USB3.0 Host Controller (x32 Version: 0.105)
FUSSBALL MANAGER 13 (x32 Version: 1.0.2.0)
GameShadow (x32 Version: 1.91.0000)
GeoGebra 4.2 (x32 Version: 4.2.56.0)
Google Update Helper (x32 Version: 1.3.23.0)
HydraVision (x32 Version: 4.2.230.0)
iCloud (Version: 3.0.2.163)
IM Lock (x32)
iTunes (Version: 11.0.5.5)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
McAfee Security Scan Plus (x32 Version: 3.0.318.3)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (x32 Version: 3.5.30730.0)
Microsoft Office 2010 Service Pack 1 (SP1) (x32)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
MiPony 2.0.2 (x32 Version: 2.0.2)
Mipony Download Manager Packages (HKCU)
Mozilla Firefox 24.0 (x86 de) (x32 Version: 24.0)
Mozilla Maintenance Service (x32 Version: 24.0)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
Norton Internet Security (x32 Version: 20.4.0.40)
Open It! (x32 Version: 1.1.1)
Optimizer Pro v3.2 (x32)
Origin (x32 Version: 9.0.11.77)
PC Speed Maximizer v3.2 (x32 Version: 3.2)
QuickTime (x32 Version: 7.74.80.86)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6526)
Search Protect by conduit (x32 Version: 1.7.0.72)
Search-Gol Chrome Toolbar (x32)
searchgol toolbar   (x32 Version: 1.8.16.19)
SeeSimilar (x32 Version: 1.0.0.6)
Silent Hunter III (x32 Version: 1.4.0000)
Skype™ 6.0 (x32 Version: 6.0.126)
Star Wars: The Force Unleashed (x32 Version: 1.0)
Star Wars: The Old Republic (x32 Version: 1.00)
Sweet Home 3D version 4.1 (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553065) (x32)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2566458) (x32)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32)
Update for Microsoft Word 2010 (KB2827323) 32-Bit Edition (x32)
Update for Mipony Download Manager (HKCU)
VIS (x32)
Wajam (x32 Version: 2.02)
Whilokii 1.0.0 (Version: 1.0.0)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3508.1109)
Windows Live Family Safety (Version: 15.4.3502.0922)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3508.1109)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
WISO Steuer-Sparbuch 2011 (x32 Version: 18.00.6928)
WISO Steuer-Sparbuch 2012 (x32 Version: 19.05.7368)
Wsys Control 10.2.1.2652 (x32 Version: 10.2.1.2652)
Zip Extractor Packages (HKCU)

==================== Restore Points  =========================

11-10-2013 13:45:04 Geplanter Prüfpunkt
12-10-2013 01:00:24 Windows Update
16-10-2013 12:32:43 RegClean Pro Mi, Okt 16, 13  14:32

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {03882FFA-143B-48E4-9DBE-989ABECB3731} - System32\Tasks\{5E41780E-8969-4289-A75A-23F19A181B37} => C:\Ubisoft\SilentHunterIII\sh3.exe
Task: {1ECFB323-7DF0-482A-8E65-37191857EA0D} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {232527E1-F307-4390-A5C5-3963AB25E70C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {319B5F30-F273-4399-B303-14FC736499B8} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-11] (Adobe Systems Incorporated)
Task: {3F7DAFDB-42CA-4337-AB28-CB74CBD5BEE2} - System32\Tasks\{AEC5FE35-891A-4C72-9788-196834E93359} => C:\Ubisoft\SilentHunterIII\sh3.exe
Task: {40394682-0B3D-451F-8287-4320820772B2} - System32\Tasks\Go for FilesUpdate => C:\Program Files (x86)\GoforFiles\GFFUpdater.exe
Task: {464C1E23-1558-44B1-91B3-EF2ED3D6B4DB} - System32\Tasks\{80DEE412-0AFD-4824-9225-B506B67FBEF5} => C:\Ubisoft\SilentHunterIII\sh3.exe
Task: {4A57D743-43A1-4C6F-B49C-CAA5371C19D1} - System32\Tasks\{D41F23E4-8042-4743-B07A-AD9A3358C046} => C:\Ubisoft\SilentHunterIII\sh3.exe
Task: {55934C9F-1B00-4C1D-815A-FF6543CD1CEF} - System32\Tasks\DigitalSite => C:\Users\Flini-Jojo\AppData\Roaming\DigitalSite\UpdateProc\UpdateTask.exe [2013-04-12] ()
Task: {6615E38D-AF3B-496E-83D2-FB4706CEE053} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe [2013-06-04] (Symantec Corporation)
Task: {7B152871-DC93-4C23-8CFF-CCFC229C7E1F} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe [2013-06-04] (Symantec Corporation)
Task: {7F5A5642-DF7C-42E4-93E9-B573B80B8D42} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\WSCStub.exe [2013-06-04] (Symantec Corporation)
Task: {B4D1B13C-27F6-43DE-AC44-B1C5389795BF} - System32\Tasks\MetaCrawler => C:\Users\FLINI-~1\AppData\Roaming\METACR~1\UPDATE~1\UPDATE~1.EXE
Task: {C7C7532E-6C94-4B0B-B195-03DFA886D93C} - System32\Tasks\{F47CA83A-9B44-408F-AD19-10E76D8925D1} => C:\Ubisoft\SilentHunterIII\sh3.exe
Task: {CBC36B10-479C-47D1-AD0F-2D6E7150F6F7} - System32\Tasks\EPUpdater => C:\Users\Flini-Jojo\AppData\Roaming\BabSolution\Shared\BabMaint.exe [2013-09-01] ()
Task: {D64E6D98-7561-4391-A4A3-0E022A5FA144} - System32\Tasks\{D86B2EF5-7119-4942-AFE7-B3D7180EDC23} => C:\Ubisoft\SilentHunterIII\sh3.exe
Task: {DC163916-9E21-461A-8330-FFB6B52F28D5} - System32\Tasks\{2FBF7C20-A91E-4474-BFE8-6EEDFAD0695D} => C:\Ubisoft\SilentHunterIII\sh3.exe
Task: {F611E6F2-ADB8-4B2A-86B5-C3F91CDE3933} - System32\Tasks\{98A79D1C-8189-48B1-A95C-464A19D792C2} => C:\Ubisoft\SilentHunterIII\sh3.exe
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\DigitalSite.job => C:\Users\FLINI-~1\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE
Task: C:\windows\Tasks\MetaCrawler.job => C:\Users\FLINI-~1\AppData\Roaming\METACR~1\UPDATE~1\UPDATE~1.EXE

==================== Loaded Modules (whitelisted) =============

2011-03-17 01:07 - 2011-03-17 01:07 - 04297568 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2012-12-19 16:32 - 2012-12-19 16:32 - 00103424 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2013-10-20 13:40 - 2013-10-03 14:46 - 02869720 _____ () C:\Program Files (x86)\Optimizer Pro\OptProCrash.dll
2012-11-28 15:13 - 2012-11-28 15:13 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-11-28 15:13 - 2012-11-28 15:13 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-06-09 16:59 - 2012-05-30 08:51 - 00699280 ____R () C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\wincfi39.dll
2011-03-17 01:11 - 2011-03-17 01:11 - 04297568 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2012-10-25 17:17 - 2009-05-14 09:37 - 00090112 _____ () C:\Program Files (x86) (x86)\Lexmark Z2300 Series\lxdpmonr.dll
2012-10-25 17:17 - 2009-02-11 13:50 - 00028672 _____ () C:\Program Files (x86) (x86)\Lexmark Z2300 Series\App4R.Monitor.Common.dll
2012-10-25 17:17 - 2009-02-11 13:50 - 00036864 _____ () C:\Program Files (x86) (x86)\Lexmark Z2300 Series\App4R.Monitor.Core.dll
2012-10-25 17:17 - 2009-02-11 13:49 - 00061440 _____ () C:\Program Files (x86) (x86)\Lexmark Z2300 Series\app4r.devmons.mcmdevmon.dll
2012-10-25 17:17 - 2007-11-22 04:55 - 00011776 _____ () C:\Program Files (x86) (x86)\Lexmark Z2300 Series\app4r.devmons.mcmdevmon.autoplayutil.dll
2013-10-01 10:17 - 2013-10-01 10:17 - 03279768 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-10-11 15:13 - 2013-10-11 15:13 - 16233864 _____ () C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (10/20/2013 02:06:38 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/20/2013 02:06:25 PM) (Source: CltMngSvc) (User: )
Description: CltMngSvcServiceMain Version 2. (Error: 87)

Error: (10/20/2013 11:57:21 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/20/2013 11:57:15 AM) (Source: CltMngSvc) (User: )
Description: CltMngSvcServiceMain Version 2. (Error: 87)

Error: (10/16/2013 02:36:46 PM) (Source: CltMngSvc) (User: )
Description: CltMngSvcServiceInstall: Fail to Start serviceSearch Protect by Conduit Updater (Error: 1056)

Error: (10/16/2013 02:36:25 PM) (Source: CltMngSvc) (User: )
Description: CltMngSvcServiceMain Version 2. (Error: 87)

Error: (10/16/2013 02:24:28 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (10/16/2013 02:24:25 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (10/16/2013 02:24:19 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (10/14/2013 03:45:36 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (10/20/2013 02:06:20 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Wsys Service" wurde nicht richtig gestartet.

Error: (10/20/2013 11:57:14 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computer Backup (MyPC Backup)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (10/20/2013 11:57:14 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Computer Backup (MyPC Backup) erreicht.

Error: (08/30/2013 02:37:10 PM) (Source: NetBT) (User: )
Description: Der Name "WORKGROUP      :1d" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.178.40
registriert werden. Der Computer mit IP-Adresse 192.168.178.1 hat nicht
zugelassen, dass dieser Computer diesen Namen verwendet.

Error: (08/22/2013 03:55:58 PM) (Source: NetBT) (User: )
Description: Der Name "WORKGROUP      :1d" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.178.40
registriert werden. Der Computer mit IP-Adresse 192.168.178.1 hat nicht
zugelassen, dass dieser Computer diesen Namen verwendet.

Error: (08/21/2013 02:09:18 PM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "FRITZ!NAS",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{FDE97923-AB30-425F-AF6F-E4FAEE4A097A}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (07/26/2013 04:50:58 PM) (Source: NetBT) (User: )
Description: Ein doppelter Name wurde im TCP-Netzwerk entdeckt. Die IP-Adresse des Computers,
der die Meldung gesendet hat, steht in den Daten. Verwenden Sie NBTSTAT -n an
der Eingabeaufforderung, um den doppelten Namen zu bestimmen.

Error: (07/26/2013 04:50:58 PM) (Source: NetBT) (User: )
Description: Ein doppelter Name wurde im TCP-Netzwerk entdeckt. Die IP-Adresse des Computers,
der die Meldung gesendet hat, steht in den Daten. Verwenden Sie NBTSTAT -n an
der Eingabeaufforderung, um den doppelten Namen zu bestimmen.

Error: (07/26/2013 04:50:58 PM) (Source: NetBT) (User: )
Description: Ein doppelter Name wurde im TCP-Netzwerk entdeckt. Die IP-Adresse des Computers,
der die Meldung gesendet hat, steht in den Daten. Verwenden Sie NBTSTAT -n an
der Eingabeaufforderung, um den doppelten Namen zu bestimmen.

Error: (07/26/2013 04:50:58 PM) (Source: NetBT) (User: )
Description: Ein doppelter Name wurde im TCP-Netzwerk entdeckt. Die IP-Adresse des Computers,
der die Meldung gesendet hat, steht in den Daten. Verwenden Sie NBTSTAT -n an
der Eingabeaufforderung, um den doppelten Namen zu bestimmen.


Microsoft Office Sessions:
=========================
Error: (10/20/2013 02:06:38 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/20/2013 02:06:25 PM) (Source: CltMngSvc)(User: )
Description: CltMngSvcServiceMain Version 2. (Error: 87)

Error: (10/20/2013 11:57:21 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/20/2013 11:57:15 AM) (Source: CltMngSvc)(User: )
Description: CltMngSvcServiceMain Version 2. (Error: 87)

Error: (10/16/2013 02:36:46 PM) (Source: CltMngSvc)(User: )
Description: CltMngSvcServiceInstall: Fail to Start serviceSearch Protect by Conduit Updater (Error: 1056)

Error: (10/16/2013 02:36:25 PM) (Source: CltMngSvc)(User: )
Description: CltMngSvcServiceMain Version 2. (Error: 87)

Error: (10/16/2013 02:24:28 PM) (Source: SideBySide)(User: )
Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Flini-Jojo\Downloads\SoftonicDownloader_fuer_sweet-home-3d.exe

Error: (10/16/2013 02:24:25 PM) (Source: SideBySide)(User: )
Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Flini-Jojo\Downloads\SoftonicDownloader_fuer_sweet-home-3d.exe

Error: (10/16/2013 02:24:19 PM) (Source: SideBySide)(User: )
Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Flini-Jojo\Downloads\SoftonicDownloader_fuer_sweet-home-3d.exe

Error: (10/14/2013 03:45:36 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info =========================== 

Percentage of memory in use: 28%
Total physical RAM: 8173.41 MB
Available physical RAM: 5862.59 MB
Total Pagefile: 16345 MB
Available Pagefile: 13857.27 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:482.72 GB) (Free:214.98 GB) NTFS
Drive d: (Sims3) (CDROM) (Total:6.93 GB) (Free:0 GB) UDF
Drive i: (Volume) (Fixed) (Total:438.69 GB) (Free:433.23 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 0F9B1331)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=483 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=439 GB) - (Type=OF Extended)
Partition 4: (Not Active) - (Size=10 GB) - (Type=27)

==================== End Of Log ============================
         

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-10-2013
Ran by Flini-Jojo (administrator) on FLINI-JOJO-PC on 20-10-2013 14:12:23
Running from C:\Users\Flini-Jojo\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\windows\system32\atiesrxx.exe
(AMD) C:\windows\system32\atieclxx.exe
(Wsys Co., Ltd.) C:\ProgramData\eSafe\eGdpSvc.exe
() c:\progra~2\optimi~1\OptProCrash.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Conduit) C:\Program Files (x86)\SearchProtect\bin\CltMngSvc.exe
(AVM Berlin) C:\Program Files (x86)\FRITZ!DSL\IGDCTRL.EXE
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Whilokii) C:\Program Files (x86)\Whilokii\updateWhilokii.exe
(Wajam) C:\Program Files (x86)\Wajam\Updater\WajamUpdaterV2.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
(Conduit) C:\Users\Flini-Jojo\AppData\Roaming\SearchProtect\bin\cltmng.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
(PC Utilities Pro) C:\Program Files (x86)\Optimizer Pro\OptProSmartScan.exe
(Smart PC Solutions) C:\Program Files (x86)\PC Speed Maximizer\SPMSmartScan.exe
(PC Utilities Pro) C:\Program Files (x86)\Optimizer Pro\OptProReminder.exe
(Smart PC Solutions) C:\Program Files (x86)\PC Speed Maximizer\SPMReminder.exe
(AVM Berlin) C:\Program Files (x86)\FRITZ!DSL\StCenter.exe
() C:\Program Files (x86) (x86)\Lexmark Z2300 Series\lxdpmon.exe
(Microsoft Corporation) C:\windows\System32\WScript.exe
() C:\Program Files (x86) (x86)\Lexmark Z2300 Series\lxdpMsdMon.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Comvigo, Inc.) C:\Windows\SysWOW64\qimlsrv.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Comvigo, Inc.) C:\Windows\SysWOW64\dsrviml.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
(Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13374568 2011-12-13] (Realtek Semiconductor)
HKCU\...\Run: [HydraVisionDesktopManager] - C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [393216 2012-03-09] (AMD)
HKCU\...\Run: [SearchProtect] - C:\Users\Flini-Jojo\AppData\Roaming\SearchProtect\bin\cltmng.exe [3470624 2013-09-22] (Conduit)
HKCU\...\Run: [Optimizer Pro] - C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe [135672 2013-09-29] (PC Utilities Pro)
HKCU\...\Run: [PC Speed Maximizer] - C:\Program Files (x86)\PC Speed Maximizer\SPMLauncher.exe [134456 2013-03-09] (Smart PC Solutions)
MountPoints2: {7769e0ba-0221-11e2-97dd-806e6f6e6963} - D:\Autorun.exe
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2013-09-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [lxdpmon.exe] - C:\Program Files (x86) (x86)\Lexmark Z2300 Series\lxdpmon.exe [672424 2009-09-14] ()
HKLM-x32\...\Run: [lxdpamon] - C:\Program Files (x86) (x86)\Lexmark Z2300 Series\lxdpamon.exe [16040 2009-09-14] ()
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SearchProtectAll] - C:\Program Files (x86)\SearchProtect\bin\cltmng.exe [3470624 2013-09-22] (Conduit)
AppInit_DLLs:  C:\PROGRA~2\OPTIMI~1\OPTPRO~2.DLL [2603312 2013-10-20] ()
AppInit_DLLs-x32: c:\progra~2\optimi~1\optpro~1.dll [2869720 2013-10-03] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=ST1000DM003-9YN162_S1D358EBXXXXS1D358EB&ts=1382269236
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=ST1000DM003-9YN162_S1D358EBXXXXS1D358EB&ts=1382269236
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.hyrican.de
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.hyrican.de
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www.searchgol.com/?babsrc=HP_ss&mntrId=F231B6487AC153E0&affID=125036&tsp=5037
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=ST1000DM003-9YN162_S1D358EBXXXXS1D358EB&ts=1382269236
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=ST1000DM003-9YN162_S1D358EBXXXXS1D358EB&ts=1382269236
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=ST1000DM003-9YN162_S1D358EBXXXXS1D358EB&ts=1382269236
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=ST1000DM003-9YN162_S1D358EBXXXXS1D358EB&ts=1382269236
URLSearchHook: (No Name) - {66b103a7-d772-4fcd-ace4-16f79a9056e0} -  No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=sc&from=cor&uid=ST1000DM003-9YN162_S1D358EBXXXXS1D358EB&ts=1382269236
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=ST1000DM003-9YN162_S1D358EBXXXXS1D358EB&ts=1382269236&type=default&q={searchTerms}
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=ST1000DM003-9YN162_S1D358EBXXXXS1D358EB&ts=1382269236&type=default&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=ST1000DM003-9YN162_S1D358EBXXXXS1D358EB&ts=1382269236&type=default&q={searchTerms}
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=ST1000DM003-9YN162_S1D358EBXXXXS1D358EB&ts=1382269236&type=default&q={searchTerms}
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=ST1000DM003-9YN162_S1D358EBXXXXS1D358EB&ts=1382269236&type=default&q={searchTerms}
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://isearch.babylon.com/?q={searchTerms}&affID=116633&tt=5212_7&babsrc=SP_ss&mntrId=f2313843000000000000b6487ac153e0
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=ST1000DM003-9YN162_S1D358EBXXXXS1D358EB&ts=1382269236&type=default&q={searchTerms}
SearchScopes: HKCU - {42E8ADFF-A054-405D-856E-7A63125F1F6F} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3312329&CUI=UN45983048243095668&UM=2
BHO: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: SeeSimilar - {7549CA81-7BB5-41AF-AF7D-4689F5CF8340} - C:\Program Files (x86)\SeeSimilar\ScriptHost64.dll (SeeSimilar.com)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Whilokii - {204df522-9a96-4a72-abb0-60f7a216d6d2} - C:\Program Files (x86)\Whilokii\Whilokiibho.dll (Whilokii)
BHO-x32: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.8.7.2\bh\BabylonToolbar.dll (Babylon BHO)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
BHO-x32: appbarioDE 1 Toolbar - {66b103a7-d772-4fcd-ace4-16f79a9056e0} - C:\Program Files (x86)\appbarioDE_1\prxtbappb.dll (Conduit Ltd.)
BHO-x32: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: SeeSimilar - {7549CA81-7BB5-41AF-AF7D-4689F5CF8340} - C:\Program Files (x86)\SeeSimilar\ScriptHost.dll (SeeSimilar.com)
BHO-x32: searchgol Helper Object - {8F547BDD-FCD4-48F8-A06F-573D6F404A3C} - C:\Program Files (x86)\searchgol\searchgol\1.8.16.19\bh\searchgol.dll (Montera Technologeis LTD)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Wajam - {A7A6995D-6EE1-4FD1-A258-49395D5BF99C} - C:\Program Files (x86)\Wajam\IE\priam_bho.dll (Wajam)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.8.7.2\BabylonToolbarTlbr.dll (Babylon Ltd.)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - searchgol Toolbar - {00078E95-3A4A-4137-8DE7-2824908D1C17} - C:\Program Files (x86)\searchgol\searchgol\1.8.16.19\searchgolTlbr.dll (Montera Technologeis LTD)
Toolbar: HKLM-x32 - appbarioDE 1 Toolbar - {66b103a7-d772-4fcd-ace4-16f79a9056e0} - C:\Program Files (x86)\appbarioDE_1\prxtbappb.dll (Conduit Ltd.)
Toolbar: HKCU -  No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Flini-Jojo\AppData\Roaming\Mozilla\Firefox\Profiles\3wwapypj.default
FF user.js: detected! => C:\Users\Flini-Jojo\AppData\Roaming\Mozilla\Firefox\Profiles\3wwapypj.default\user.js
FF NewTab: hxxp://www.qvo6.com/newtab/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=nt&from=cor&uid=ST1000DM003-9YN162_S1D358EBXXXXS1D358EB&ts=1382269236
FF DefaultSearchEngine: qvo6
FF SearchEngineOrder.1: metaCrawler
FF SelectedSearchEngine: qvo6
FF Homepage: hxxp://search.conduit.com/?ctid=CT3312329&octid=CT3312329&SearchSource=61&CUI=UN15724286812507308&UM=2&UP=SP7F26023C-EA0F-405C-8071-73A2A69B9536
FF Keyword.URL: hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3312329&SearchSource=2&CUI=UN15724286812507308&UM=2&q=
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Flini-Jojo\AppData\Roaming\Mozilla\Firefox\Profiles\3wwapypj.default\searchplugins\babylon1.xml
FF SearchPlugin: C:\Users\Flini-Jojo\AppData\Roaming\Mozilla\Firefox\Profiles\3wwapypj.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Users\Flini-Jojo\AppData\Roaming\Mozilla\Firefox\Profiles\3wwapypj.default\searchplugins\searchgol.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\qvo6.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: vis - C:\Users\Flini-Jojo\AppData\Roaming\Mozilla\Firefox\Profiles\3wwapypj.default\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM
FF Extension: Babylon Toolbar - C:\Users\Flini-Jojo\AppData\Roaming\Mozilla\Firefox\Profiles\3wwapypj.default\Extensions\ffxtlbr@babylon.com
FF Extension: SearchGol - C:\Users\Flini-Jojo\AppData\Roaming\Mozilla\Firefox\Profiles\3wwapypj.default\Extensions\ffxtlbr@searchgol.com
FF Extension: SeeSimilar - C:\Users\Flini-Jojo\AppData\Roaming\Mozilla\Firefox\Profiles\3wwapypj.default\Extensions\seesimilar@SeeSimilar.com
FF Extension: appbarioDE 1  - C:\Users\Flini-Jojo\AppData\Roaming\Mozilla\Firefox\Profiles\3wwapypj.default\Extensions\{66b103a7-d772-4fcd-ace4-16f79a9056e0}
FF Extension: firefox - C:\Users\Flini-Jojo\AppData\Roaming\Mozilla\Firefox\Profiles\3wwapypj.default\Extensions\firefox@whilokii.net.xpi
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.2.0.19\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.2.0.19\coFFPlgn\
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.2.0.19\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.2.0.19\IPSFF
FF HKCU\...\Firefox\Extensions: [{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}] - C:\Program Files (x86)\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi
FF Extension: No Name - C:\Program Files (x86)\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=sc&from=cor&uid=ST1000DM003-9YN162_S1D358EBXXXXS1D358EB&ts=1382269236

Chrome: 
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: () - C:\Users\FLINI-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmlgoencnlndpglbocajlimaikjohmab\background.html
CHR Extension: () - C:\Users\FLINI-~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\hekmimebcpbncnklfjadbpnjiaffabee\1.0.0.6
CHR HKLM-x32\...\Chrome\Extension: [aipfmkinhleccnodemkoofnnofpbbpac] - C:\Users\Flini-Jojo\AppData\Roaming\BabSolution\CR\searchgol.crx
CHR HKLM-x32\...\Chrome\Extension: [dhkplhfnhceodhffomolpfigojocbpcb] - C:\Users\Flini-Jojo\AppData\Roaming\BabSolution\CR\BabylonChrome1.crx
CHR HKLM-x32\...\Chrome\Extension: [hekmimebcpbncnklfjadbpnjiaffabee] - C:\Users\Flini-Jojo\AppData\Roaming\SeeSimilar\SeeSimilar.crx
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\Exts\Chrome.crx

==================== Services (Whitelisted) =================

R2 70e6ca8c; c:\progra~2\optimi~1\OptProCrash.exe [143488 2013-10-20] ()
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-12-19] (Advanced Micro Devices, Inc.)
R2 CltMngSvc; C:\Program Files (x86)\SearchProtect\bin\CltMngSvc.exe [220960 2013-09-22] (Conduit)
R2 IGDCTRL; C:\Program Files (x86)\FRITZ!DSL\IGDCTRL.EXE [87344 2007-09-04] (AVM Berlin)
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation)
R2 Update Whilokii; C:\Program Files (x86)\Whilokii\updateWhilokii.exe [65304 2013-10-05] (Whilokii)
R2 WajamUpdaterV2; C:\Program Files (x86)\Wajam\Updater\WajamUpdaterV2.exe [113152 2013-10-10] (Wajam)
R2 WsysSvc; C:\ProgramData\eSafe\eGdpSvc.exe [1706064 2013-10-20] (Wsys Co., Ltd.)

==================== Drivers (Whitelisted) ====================

R2 AODDriver4.2; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [57472 2012-04-09] (Advanced Micro Devices)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2012-12-25] ()
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.2.0.19\Definitions\BASHDefs\20131002.001\BHDrvx64.sys [1525848 2013-10-02] (Symantec Corporation)
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.2.0.19\Definitions\BASHDefs\20131002.001\BHDrvx64.sys [1525848 2013-10-02] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-27] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-27] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [140376 2013-08-27] (Symantec Corporation)
R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [24496 2011-12-19] (Intel Corporation)
S3 iaStorS; C:\Windows\system32\drivers\iaStorS.sys [637360 2011-12-19] (Intel Corporation)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.2.0.19\Definitions\IPSDefs\20131018.001\IDSvia64.sys [521816 2013-10-17] (Symantec Corporation)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.2.0.19\Definitions\IPSDefs\20131018.001\IDSvia64.sys [521816 2013-10-17] (Symantec Corporation)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2012-12-25] ()
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.2.0.19\Definitions\VirusDefs\20131019.005\ENG64.SYS [126040 2013-08-31] (Symantec Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.2.0.19\Definitions\VirusDefs\20131019.005\ENG64.SYS [126040 2013-08-31] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.2.0.19\Definitions\VirusDefs\20131019.005\EX64.SYS [2099288 2013-08-31] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.2.0.19\Definitions\VirusDefs\20131019.005\EX64.SYS [2099288 2013-08-31] (Symantec Corporation)
S3 PciIsaSerial; C:\Windows\system32\drivers\PciIsaSerial.sys [68608 2008-12-19] (Windows (R) Codename Longhorn DDK provider)
S3 PciPPorts; C:\Windows\system32\drivers\PciPPorts.sys [96768 2009-07-23] ()
S3 PciSPorts; C:\Windows\system32\drivers\PciSPorts.sys [122880 2008-12-19] ()
R1 SRTSP; C:\Windows\System32\Drivers\NISx64\1404000.028\SRTSP64.SYS [796760 2013-05-16] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [36952 2013-03-05] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1404000.028\SYMDS64.SYS [493656 2013-05-21] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-23] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-06-20] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [224416 2013-03-05] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1404000.028\SYMNETS.SYS [433752 2013-04-25] (Symantec Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-20 14:12 - 2013-10-20 14:12 - 00000000 ____D C:\FRST
2013-10-20 14:11 - 2013-10-20 14:11 - 01954548 _____ (Farbar) C:\Users\Flini-Jojo\Desktop\FRST64.exe
2013-10-20 14:08 - 2013-10-20 14:08 - 00001106 _____ C:\Users\Flini-Jojo\Desktop\Defogger - Verknüpfung.lnk
2013-10-20 14:07 - 2013-10-20 14:07 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Roaming\Mipony
2013-10-20 13:57 - 2013-10-20 14:09 - 00000482 _____ C:\Users\Flini-Jojo\Downloads\defogger_disable.log
2013-10-20 13:57 - 2013-10-20 13:57 - 00000000 _____ C:\Users\Flini-Jojo\defogger_reenable
2013-10-20 13:56 - 2013-10-20 13:56 - 00050477 _____ C:\Users\Flini-Jojo\Downloads\Defogger.exe
2013-10-20 13:54 - 2013-10-20 13:54 - 00000000 ____D C:\Users\Flini-Jojo\Documents\PC Speed Maximizer
2013-10-20 13:54 - 2013-10-20 13:54 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Roaming\PC Speed Maximizer
2013-10-20 13:50 - 2013-10-20 13:50 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z
2013-10-20 13:49 - 2013-10-20 14:04 - 00000308 _____ C:\windows\Tasks\MetaCrawler.job
2013-10-20 13:49 - 2013-10-20 13:54 - 00000000 ____D C:\Program Files (x86)\BonanzaDealsLive
2013-10-20 13:49 - 2013-10-20 13:52 - 00000000 ____D C:\Program Files (x86)\BonanzaDeals
2013-10-20 13:49 - 2013-10-20 13:49 - 00003268 _____ C:\windows\System32\Tasks\MetaCrawler
2013-10-20 13:49 - 2013-10-20 13:49 - 00001128 _____ C:\Users\Flini-Jojo\Desktop\PC Speed Maximizer.lnk
2013-10-20 13:49 - 2013-10-20 13:49 - 00001006 _____ C:\Users\Flini-Jojo\Desktop\MiPony.lnk
2013-10-20 13:49 - 2013-10-20 13:49 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam
2013-10-20 13:49 - 2013-10-20 13:49 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MiPony
2013-10-20 13:49 - 2013-10-20 13:49 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Roaming\MetaCrawler
2013-10-20 13:49 - 2013-10-20 13:49 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Local\BonanzaDealsLive
2013-10-20 13:49 - 2013-10-20 13:49 - 00000000 ____D C:\ProgramData\BonanzaDealsLive
2013-10-20 13:49 - 2013-10-20 13:49 - 00000000 ____D C:\Program Files (x86)\Wajam
2013-10-20 13:49 - 2013-10-20 13:49 - 00000000 ____D C:\Program Files (x86)\PC Speed Maximizer
2013-10-20 13:49 - 2013-10-20 13:49 - 00000000 ____D C:\Program Files (x86)\MiPony
2013-10-20 13:48 - 2013-10-20 13:48 - 00707880 _____ C:\Users\Flini-Jojo\Downloads\DownloadManagerSetup.exe
2013-10-20 13:45 - 2013-10-20 13:45 - 00000000 ____D C:\Users\Flini-Jojo\Documents\Optimizer Pro
2013-10-20 13:45 - 2013-10-20 13:45 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Roaming\Optimizer Pro
2013-10-20 13:41 - 2013-10-20 13:41 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Roaming\0D0S1L2Z1P1B
2013-10-20 13:41 - 2013-10-20 13:41 - 00000000 ____D C:\ProgramData\eSafe
2013-10-20 13:40 - 2013-10-20 14:04 - 00000308 _____ C:\windows\Tasks\DigitalSite.job
2013-10-20 13:40 - 2013-10-20 13:49 - 00003268 _____ C:\windows\System32\Tasks\DigitalSite
2013-10-20 13:40 - 2013-10-20 13:40 - 00001121 _____ C:\Users\Public\Desktop\Open It!.lnk
2013-10-20 13:40 - 2013-10-20 13:40 - 00001073 _____ C:\Users\Flini-Jojo\Desktop\Optimizer Pro.lnk
2013-10-20 13:40 - 2013-10-20 13:40 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Roaming\DigitalSite
2013-10-20 13:40 - 2013-10-20 13:40 - 00000000 ____D C:\Program Files (x86)\Whilokii
2013-10-20 13:40 - 2013-10-20 13:40 - 00000000 ____D C:\Program Files (x86)\Optimizer Pro
2013-10-20 13:40 - 2013-10-20 13:40 - 00000000 ____D C:\Program Files (x86)\OpenIt
2013-10-20 13:39 - 2013-10-20 13:39 - 00752296 _____ C:\Users\Flini-Jojo\Downloads\ZipExtractorSetup.exe
2013-10-16 14:44 - 2013-10-16 14:44 - 00000000 ____D C:\Users\Flini-Jojo\eTeks
2013-10-16 14:36 - 2013-10-16 14:41 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Roaming\SearchProtect
2013-10-16 14:36 - 2013-10-16 14:36 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Local\Conduit
2013-10-16 14:36 - 2013-10-16 14:36 - 00000000 ____D C:\ProgramData\Conduit
2013-10-16 14:36 - 2013-10-16 14:36 - 00000000 ____D C:\Program Files (x86)\SearchProtect
2013-10-16 14:36 - 2013-10-16 14:36 - 00000000 ____D C:\Program Files (x86)\Conduit
2013-10-16 14:36 - 2013-10-16 14:36 - 00000000 ____D C:\Program Files (x86)\appbarioDE_1
2013-10-16 14:35 - 2013-10-16 14:35 - 00003414 _____ C:\windows\System32\Tasks\EPUpdater
2013-10-16 14:35 - 2013-10-16 14:35 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Roaming\SeeSimilar
2013-10-16 14:35 - 2013-10-16 14:35 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Local\Google
2013-10-16 14:35 - 2013-10-16 14:35 - 00000000 ____D C:\ProgramData\IBUpdaterService
2013-10-16 14:35 - 2013-10-16 14:35 - 00000000 ____D C:\ProgramData\BitGuard
2013-10-16 14:35 - 2013-10-16 14:35 - 00000000 ____D C:\Program Files (x86)\SeeSimilar
2013-10-16 14:35 - 2013-10-16 14:35 - 00000000 ____D C:\Program Files (x86)\searchgol
2013-10-16 14:34 - 2013-10-16 14:34 - 00001140 _____ C:\Users\Flini-Jojo\Desktop\Sweet Home 3D.lnk
2013-10-16 14:34 - 2013-10-16 14:34 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Roaming\Windows Net Data
2013-10-16 14:34 - 2013-10-16 14:34 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Roaming\OpenCandy
2013-10-16 14:34 - 2013-10-16 14:34 - 00000000 ____D C:\Program Files (x86)\Sweet Home 3D
2013-10-16 14:27 - 2013-10-20 13:54 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-10-16 14:26 - 2013-10-20 13:55 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Roaming\Systweak
2013-10-16 14:26 - 2013-10-16 14:26 - 05709168 _____ (Systweak Inc                                                ) C:\Users\Flini-Jojo\Downloads\rcpsetup_softonic_soft_util_300_250_ppage.exe
2013-10-16 14:26 - 2013-08-22 18:36 - 00020312 _____ (Systweak Inc., (www.systweak.com)) C:\windows\system32\roboot64.exe
2013-10-16 14:25 - 2013-10-16 14:25 - 33703888 _____ (eTeks                                                       ) C:\Users\Flini-Jojo\Desktop\SweetHome3D-4.1-windows-oc.exe
2013-10-16 14:24 - 2013-10-16 14:24 - 00400728 _____ (Softonic                                        ) C:\Users\Flini-Jojo\Downloads\SoftonicDownloader_fuer_sweet-home-3d.exe
2013-10-12 03:08 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-10-12 03:08 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-10-12 03:08 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-10-12 03:08 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-10-12 03:08 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-10-12 03:08 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-10-12 03:08 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-10-12 03:08 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-10-12 03:08 - 2013-09-23 01:27 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-10-12 03:08 - 2013-09-23 01:27 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-10-12 03:08 - 2013-09-23 01:27 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-10-12 03:08 - 2013-09-23 01:27 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-10-12 03:08 - 2013-09-23 01:27 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-10-12 03:08 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-10-12 03:08 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-10-12 03:08 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-10-12 03:08 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-10-12 03:08 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-10-12 03:08 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-10-12 03:08 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-10-12 03:08 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-10-12 03:08 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-10-12 03:08 - 2013-09-23 00:54 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-10-12 03:08 - 2013-09-23 00:54 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-10-12 03:08 - 2013-09-23 00:54 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-10-12 03:08 - 2013-09-23 00:54 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-10-12 03:08 - 2013-09-23 00:54 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-10-12 03:08 - 2013-09-21 05:38 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-10-12 03:08 - 2013-09-21 05:30 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-10-12 03:08 - 2013-09-21 04:48 - 00089600 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-10-12 03:08 - 2013-09-21 04:39 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2013-10-11 15:03 - 2013-10-11 15:04 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Local\{AF7C4842-1EAF-4D6E-ABE8-A429A6600C6A}
2013-10-11 14:35 - 2013-10-11 14:35 - 00000000 ____D C:\Users\Flini-Jojo\Ebay
2013-10-11 13:23 - 2013-07-04 14:50 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\comctl32.dll
2013-10-11 13:23 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\windows\SysWOW64\comctl32.dll
2013-10-11 13:23 - 2013-06-06 07:50 - 00041472 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll
2013-10-11 13:23 - 2013-06-06 07:49 - 00100864 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll
2013-10-11 13:23 - 2013-06-06 07:49 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll
2013-10-11 13:23 - 2013-06-06 07:47 - 00046080 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2013-10-11 13:23 - 2013-06-06 06:57 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\lpk.dll
2013-10-11 13:23 - 2013-06-06 06:51 - 00070656 _____ (Microsoft Corporation) C:\windows\SysWOW64\fontsub.dll
2013-10-11 13:23 - 2013-06-06 06:50 - 00010240 _____ (Microsoft Corporation) C:\windows\SysWOW64\dciman32.dll
2013-10-11 13:23 - 2013-06-06 05:30 - 00368128 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2013-10-11 13:23 - 2013-06-06 05:01 - 00295424 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\atmfd.dll
2013-10-11 13:23 - 2013-06-06 05:01 - 00034304 _____ (Adobe Systems) C:\windows\SysWOW64\atmlib.dll
2013-10-11 13:22 - 2013-06-26 00:55 - 00785624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Wdf01000.sys
2013-10-11 13:21 - 2013-09-14 03:10 - 00497152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2013-10-11 13:21 - 2013-09-08 04:30 - 01903552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2013-10-11 13:21 - 2013-09-08 04:27 - 00327168 _____ (Microsoft Corporation) C:\windows\system32\mswsock.dll
2013-10-11 13:21 - 2013-09-08 04:03 - 00231424 _____ (Microsoft Corporation) C:\windows\SysWOW64\mswsock.dll
2013-10-11 13:21 - 2013-08-29 04:17 - 05549504 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2013-10-11 13:21 - 2013-08-29 04:16 - 01732032 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2013-10-11 13:21 - 2013-08-29 04:16 - 00859648 _____ (Microsoft Corporation) C:\windows\system32\tdh.dll
2013-10-11 13:21 - 2013-08-29 04:16 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2013-10-11 13:21 - 2013-08-29 04:13 - 00878080 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll
2013-10-11 13:21 - 2013-08-29 03:51 - 03969472 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2013-10-11 13:21 - 2013-08-29 03:51 - 03914176 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2013-10-11 13:21 - 2013-08-29 03:50 - 01292192 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2013-10-11 13:21 - 2013-08-29 03:50 - 00619520 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdh.dll
2013-10-11 13:21 - 2013-08-29 03:50 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2013-10-11 13:21 - 2013-08-29 03:48 - 00640512 _____ (Microsoft Corporation) C:\windows\SysWOW64\advapi32.dll
2013-10-11 13:21 - 2013-08-29 02:49 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2013-10-11 13:21 - 2013-08-29 02:49 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2013-10-11 13:21 - 2013-08-29 02:49 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2013-10-11 13:21 - 2013-08-29 02:49 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2013-10-11 13:21 - 2013-08-28 03:21 - 03155968 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-10-11 13:21 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\windows\system32\scavengeui.dll
2013-10-11 13:21 - 2013-08-01 14:09 - 00983488 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys
2013-10-11 13:21 - 2013-07-20 12:33 - 00124112 _____ (Microsoft Corporation) C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-11 13:21 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-11 13:21 - 2013-07-12 12:41 - 00185344 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbvideo.sys
2013-10-11 13:21 - 2013-07-12 12:41 - 00100864 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbcir.sys
2013-10-11 13:21 - 2013-07-04 14:57 - 00259584 _____ (Microsoft Corporation) C:\windows\system32\WebClnt.dll
2013-10-11 13:21 - 2013-07-04 14:50 - 00102400 _____ (Microsoft Corporation) C:\windows\system32\davclnt.dll
2013-10-11 13:21 - 2013-07-04 13:57 - 00205824 _____ (Microsoft Corporation) C:\windows\SysWOW64\WebClnt.dll
2013-10-11 13:21 - 2013-07-04 13:51 - 00081920 _____ (Microsoft Corporation) C:\windows\SysWOW64\davclnt.dll
2013-10-11 13:21 - 2013-07-04 12:11 - 00140800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys
2013-10-11 13:21 - 2013-07-03 06:05 - 00076800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidclass.sys
2013-10-11 13:21 - 2013-07-03 06:05 - 00032896 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidparse.sys
2013-10-06 14:02 - 2013-10-06 14:02 - 00000000 ____D C:\windows\pss
2013-10-06 13:19 - 2013-10-06 13:19 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Local\{E62B289E-658A-4324-AB89-AC7F7BECC14B}
2013-10-01 10:17 - 2013-10-01 10:17 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-30 17:30 - 2013-09-30 17:30 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Local\{3C134424-7DD9-4C02-807D-C03E84D6D0E2}
2013-09-29 21:52 - 2013-09-29 21:52 - 00002064 _____ C:\Users\Public\Desktop\Die*Sims™*3.lnk
2013-09-29 20:22 - 2013-09-29 20:22 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Local\{E9A9C7EE-A786-4C29-BA8B-97E0CF3DC7BE}
2013-09-27 20:06 - 2013-09-27 20:06 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Local\{CD519812-6668-4368-A9DB-4A7C77DD9B28}
2013-09-26 13:29 - 2013-09-27 08:05 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Local\{95814344-E813-4D04-9585-A7CB9970D1FA}
2013-09-25 13:24 - 2013-09-25 13:25 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Local\{CEFB6E4A-B1E6-4363-A5BD-C68B92CB8280}
2013-09-24 13:46 - 2013-09-24 13:46 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Local\{E83155C2-D5ED-49CE-948A-BC4424729A0F}
2013-09-22 15:30 - 2013-09-22 15:30 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Local\{CE88FCDC-6C66-4B2B-BF52-AED476C6047E}

==================== One Month Modified Files and Folders =======

2013-10-20 14:12 - 2013-10-20 14:12 - 00000000 ____D C:\FRST
2013-10-20 14:11 - 2013-10-20 14:11 - 01954548 _____ (Farbar) C:\Users\Flini-Jojo\Desktop\FRST64.exe
2013-10-20 14:11 - 2012-09-19 08:21 - 01680627 _____ C:\windows\WindowsUpdate.log
2013-10-20 14:09 - 2013-10-20 13:57 - 00000482 _____ C:\Users\Flini-Jojo\Downloads\defogger_disable.log
2013-10-20 14:08 - 2013-10-20 14:08 - 00001106 _____ C:\Users\Flini-Jojo\Desktop\Defogger - Verknüpfung.lnk
2013-10-20 14:07 - 2013-10-20 14:07 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Roaming\Mipony
2013-10-20 14:04 - 2013-10-20 13:49 - 00000308 _____ C:\windows\Tasks\MetaCrawler.job
2013-10-20 14:04 - 2013-10-20 13:40 - 00000308 _____ C:\windows\Tasks\DigitalSite.job
2013-10-20 14:04 - 2009-07-14 07:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-10-20 14:04 - 2009-07-14 06:51 - 00238651 _____ C:\windows\setupact.log
2013-10-20 13:57 - 2013-10-20 13:57 - 00000000 _____ C:\Users\Flini-Jojo\defogger_reenable
2013-10-20 13:57 - 2012-10-10 20:12 - 00000000 ____D C:\Users\Flini-Jojo
2013-10-20 13:56 - 2013-10-20 13:56 - 00050477 _____ C:\Users\Flini-Jojo\Downloads\Defogger.exe
2013-10-20 13:55 - 2013-10-16 14:26 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Roaming\Systweak
2013-10-20 13:54 - 2013-10-20 13:54 - 00000000 ____D C:\Users\Flini-Jojo\Documents\PC Speed Maximizer
2013-10-20 13:54 - 2013-10-20 13:54 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Roaming\PC Speed Maximizer
2013-10-20 13:54 - 2013-10-20 13:49 - 00000000 ____D C:\Program Files (x86)\BonanzaDealsLive
2013-10-20 13:54 - 2013-10-16 14:27 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-10-20 13:54 - 2012-10-10 21:08 - 00000000 ___RD C:\Users\Flini-Jojo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-20 13:52 - 2013-10-20 13:49 - 00000000 ____D C:\Program Files (x86)\BonanzaDeals
2013-10-20 13:50 - 2013-10-20 13:50 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z
2013-10-20 13:49 - 2013-10-20 13:49 - 00003268 _____ C:\windows\System32\Tasks\MetaCrawler
2013-10-20 13:49 - 2013-10-20 13:49 - 00001128 _____ C:\Users\Flini-Jojo\Desktop\PC Speed Maximizer.lnk
2013-10-20 13:49 - 2013-10-20 13:49 - 00001006 _____ C:\Users\Flini-Jojo\Desktop\MiPony.lnk
2013-10-20 13:49 - 2013-10-20 13:49 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam
2013-10-20 13:49 - 2013-10-20 13:49 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MiPony
2013-10-20 13:49 - 2013-10-20 13:49 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Roaming\MetaCrawler
2013-10-20 13:49 - 2013-10-20 13:49 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Local\BonanzaDealsLive
2013-10-20 13:49 - 2013-10-20 13:49 - 00000000 ____D C:\ProgramData\BonanzaDealsLive
2013-10-20 13:49 - 2013-10-20 13:49 - 00000000 ____D C:\Program Files (x86)\Wajam
2013-10-20 13:49 - 2013-10-20 13:49 - 00000000 ____D C:\Program Files (x86)\PC Speed Maximizer
2013-10-20 13:49 - 2013-10-20 13:49 - 00000000 ____D C:\Program Files (x86)\MiPony
2013-10-20 13:49 - 2013-10-20 13:40 - 00003268 _____ C:\windows\System32\Tasks\DigitalSite
2013-10-20 13:48 - 2013-10-20 13:48 - 00707880 _____ C:\Users\Flini-Jojo\Downloads\DownloadManagerSetup.exe
2013-10-20 13:45 - 2013-10-20 13:45 - 00000000 ____D C:\Users\Flini-Jojo\Documents\Optimizer Pro
2013-10-20 13:45 - 2013-10-20 13:45 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Roaming\Optimizer Pro
2013-10-20 13:41 - 2013-10-20 13:41 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Roaming\0D0S1L2Z1P1B
2013-10-20 13:41 - 2013-10-20 13:41 - 00000000 ____D C:\ProgramData\eSafe
2013-10-20 13:41 - 2012-10-10 21:08 - 00001740 _____ C:\Users\Flini-Jojo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-10-20 13:40 - 2013-10-20 13:40 - 00001121 _____ C:\Users\Public\Desktop\Open It!.lnk
2013-10-20 13:40 - 2013-10-20 13:40 - 00001073 _____ C:\Users\Flini-Jojo\Desktop\Optimizer Pro.lnk
2013-10-20 13:40 - 2013-10-20 13:40 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Roaming\DigitalSite
2013-10-20 13:40 - 2013-10-20 13:40 - 00000000 ____D C:\Program Files (x86)\Whilokii
2013-10-20 13:40 - 2013-10-20 13:40 - 00000000 ____D C:\Program Files (x86)\Optimizer Pro
2013-10-20 13:40 - 2013-10-20 13:40 - 00000000 ____D C:\Program Files (x86)\OpenIt
2013-10-20 13:39 - 2013-10-20 13:39 - 00752296 _____ C:\Users\Flini-Jojo\Downloads\ZipExtractorSetup.exe
2013-10-20 13:13 - 2012-11-08 14:26 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-10-20 12:30 - 2012-10-25 17:51 - 00015664 _____ C:\ProgramData\lxdp.log
2013-10-20 12:05 - 2009-07-14 06:45 - 00016752 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-20 12:05 - 2009-07-14 06:45 - 00016752 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-20 11:56 - 2010-11-21 05:47 - 00108432 _____ C:\windows\PFRO.log
2013-10-16 14:44 - 2013-10-16 14:44 - 00000000 ____D C:\Users\Flini-Jojo\eTeks
2013-10-16 14:41 - 2013-10-16 14:36 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Roaming\SearchProtect
2013-10-16 14:36 - 2013-10-16 14:36 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Local\Conduit
2013-10-16 14:36 - 2013-10-16 14:36 - 00000000 ____D C:\ProgramData\Conduit
2013-10-16 14:36 - 2013-10-16 14:36 - 00000000 ____D C:\Program Files (x86)\SearchProtect
2013-10-16 14:36 - 2013-10-16 14:36 - 00000000 ____D C:\Program Files (x86)\Conduit
2013-10-16 14:36 - 2013-10-16 14:36 - 00000000 ____D C:\Program Files (x86)\appbarioDE_1
2013-10-16 14:35 - 2013-10-16 14:35 - 00003414 _____ C:\windows\System32\Tasks\EPUpdater
2013-10-16 14:35 - 2013-10-16 14:35 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Roaming\SeeSimilar
2013-10-16 14:35 - 2013-10-16 14:35 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Local\Google
2013-10-16 14:35 - 2013-10-16 14:35 - 00000000 ____D C:\ProgramData\IBUpdaterService
2013-10-16 14:35 - 2013-10-16 14:35 - 00000000 ____D C:\ProgramData\BitGuard
2013-10-16 14:35 - 2013-10-16 14:35 - 00000000 ____D C:\Program Files (x86)\SeeSimilar
2013-10-16 14:35 - 2013-10-16 14:35 - 00000000 ____D C:\Program Files (x86)\searchgol
2013-10-16 14:34 - 2013-10-16 14:34 - 00001140 _____ C:\Users\Flini-Jojo\Desktop\Sweet Home 3D.lnk
2013-10-16 14:34 - 2013-10-16 14:34 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Roaming\Windows Net Data
2013-10-16 14:34 - 2013-10-16 14:34 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Roaming\OpenCandy
2013-10-16 14:34 - 2013-10-16 14:34 - 00000000 ____D C:\Program Files (x86)\Sweet Home 3D
2013-10-16 14:26 - 2013-10-16 14:26 - 05709168 _____ (Systweak Inc                                                ) C:\Users\Flini-Jojo\Downloads\rcpsetup_softonic_soft_util_300_250_ppage.exe
2013-10-16 14:25 - 2013-10-16 14:25 - 33703888 _____ (eTeks                                                       ) C:\Users\Flini-Jojo\Desktop\SweetHome3D-4.1-windows-oc.exe
2013-10-16 14:24 - 2013-10-16 14:24 - 00400728 _____ (Softonic                                        ) C:\Users\Flini-Jojo\Downloads\SoftonicDownloader_fuer_sweet-home-3d.exe
2013-10-13 14:48 - 2009-07-14 05:20 - 00000000 ____D C:\windows\rescache
2013-10-12 03:34 - 2011-04-12 09:43 - 00654150 _____ C:\windows\system32\perfh007.dat
2013-10-12 03:34 - 2011-04-12 09:43 - 00130022 _____ C:\windows\system32\perfc007.dat
2013-10-12 03:34 - 2009-07-14 07:13 - 01498742 _____ C:\windows\system32\PerfStringBackup.INI
2013-10-12 03:27 - 2013-03-20 04:01 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-10-12 03:27 - 2013-03-20 04:01 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-10-12 03:27 - 2009-07-14 06:45 - 00416952 _____ C:\windows\system32\FNTCACHE.DAT
2013-10-12 03:10 - 2012-11-07 20:42 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-12 03:04 - 2013-07-26 03:00 - 00000000 ____D C:\windows\system32\MRT
2013-10-12 03:03 - 2012-03-30 08:42 - 80541720 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-10-11 15:13 - 2012-11-08 14:26 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-10-11 15:13 - 2012-11-08 14:26 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-11 15:13 - 2012-11-08 14:26 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-10-11 15:04 - 2013-10-11 15:03 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Local\{AF7C4842-1EAF-4D6E-ABE8-A429A6600C6A}
2013-10-11 14:35 - 2013-10-11 14:35 - 00000000 ____D C:\Users\Flini-Jojo\Ebay
2013-10-06 14:03 - 2012-10-11 21:42 - 00000000 ___RD C:\Users\Flini-Jojo\Desktop\Ablage
2013-10-06 14:03 - 2012-10-10 21:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-10-06 14:02 - 2013-10-06 14:02 - 00000000 ____D C:\windows\pss
2013-10-06 13:36 - 2012-12-11 19:33 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Roaming\Skype
2013-10-06 13:24 - 2012-10-10 21:30 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Local\Mozilla
2013-10-06 13:21 - 2012-12-04 17:59 - 00000000 ____D C:\Program Files (x86)\Origin
2013-10-06 13:19 - 2013-10-06 13:19 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Local\{E62B289E-658A-4324-AB89-AC7F7BECC14B}
2013-10-06 13:18 - 2012-11-30 23:59 - 00000000 ____D C:\Users\Flini-Jojo\Tracing
2013-10-01 16:19 - 2012-12-23 14:34 - 00000000 ____D C:\Users\Flini-Jojo\Documents\Outlook-Dateien
2013-10-01 10:17 - 2013-10-01 10:17 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-30 17:30 - 2013-09-30 17:30 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Local\{3C134424-7DD9-4C02-807D-C03E84D6D0E2}
2013-09-29 22:05 - 2012-11-23 18:41 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Local\CrashDumps
2013-09-29 21:52 - 2013-09-29 21:52 - 00002064 _____ C:\Users\Public\Desktop\Die*Sims™*3.lnk
2013-09-29 21:37 - 2012-03-30 08:21 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-09-29 21:35 - 2012-12-04 18:02 - 00000000 ____D C:\Program Files (x86)\Origin Games
2013-09-29 20:22 - 2013-09-29 20:22 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Local\{E9A9C7EE-A786-4C29-BA8B-97E0CF3DC7BE}
2013-09-27 20:06 - 2013-09-27 20:06 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Local\{CD519812-6668-4368-A9DB-4A7C77DD9B28}
2013-09-27 08:05 - 2013-09-26 13:29 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Local\{95814344-E813-4D04-9585-A7CB9970D1FA}
2013-09-25 13:25 - 2013-09-25 13:24 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Local\{CEFB6E4A-B1E6-4363-A5BD-C68B92CB8280}
2013-09-24 13:46 - 2013-09-24 13:46 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Local\{E83155C2-D5ED-49CE-948A-BC4424729A0F}
2013-09-23 01:28 - 2013-10-12 03:08 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-09-23 01:28 - 2013-10-12 03:08 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-09-23 01:27 - 2013-10-12 03:08 - 14335488 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-09-23 01:27 - 2013-10-12 03:08 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-09-23 01:27 - 2013-10-12 03:08 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-09-23 01:27 - 2013-10-12 03:08 - 02048512 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-09-23 01:27 - 2013-10-12 03:08 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-09-23 01:27 - 2013-10-12 03:08 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-09-23 01:27 - 2013-10-12 03:08 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-09-23 01:27 - 2013-10-12 03:08 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-09-23 01:27 - 2013-10-12 03:08 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-09-23 01:27 - 2013-10-12 03:08 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-09-23 01:27 - 2013-10-12 03:08 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-09-23 00:55 - 2013-10-12 03:08 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-09-23 00:55 - 2013-10-12 03:08 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-09-23 00:55 - 2013-10-12 03:08 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-09-23 00:54 - 2013-10-12 03:08 - 19252224 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-09-23 00:54 - 2013-10-12 03:08 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-09-23 00:54 - 2013-10-12 03:08 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-09-23 00:54 - 2013-10-12 03:08 - 02647552 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-09-23 00:54 - 2013-10-12 03:08 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-09-23 00:54 - 2013-10-12 03:08 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-09-23 00:54 - 2013-10-12 03:08 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-09-23 00:54 - 2013-10-12 03:08 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-09-23 00:54 - 2013-10-12 03:08 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-09-23 00:54 - 2013-10-12 03:08 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-09-23 00:54 - 2013-10-12 03:08 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-09-22 15:30 - 2013-09-22 15:30 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Local\{CE88FCDC-6C66-4B2B-BF52-AED476C6047E}
2013-09-21 18:40 - 2013-09-14 03:58 - 00000000 ____D C:\Users\Flini-Jojo\AppData\Local\{06B6DDFA-018D-447A-9416-A04169BF759A}
2013-09-21 05:38 - 2013-10-12 03:08 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-09-21 05:30 - 2013-10-12 03:08 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-09-21 04:48 - 2013-10-12 03:08 - 00089600 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-09-21 04:39 - 2013-10-12 03:08 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe

Files to move or delete:
====================
C:\ProgramData\winiml.dat
C:\Users\Flini-Jojo\196.21_desktop_win7_winvista_32bit_international_whql.exe


Some content of TEMP:
====================
C:\Users\Flini-Jojo\AppData\Local\Temp\61001uninstall.exe
C:\Users\Flini-Jojo\AppData\Local\Temp\BackupSetup.exe
C:\Users\Flini-Jojo\AppData\Local\Temp\devcon.exe
C:\Users\Flini-Jojo\AppData\Local\Temp\drm_dyndata_7400009.dll
C:\Users\Flini-Jojo\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Flini-Jojo\AppData\Local\Temp\htmlayout.dll
C:\Users\Flini-Jojo\AppData\Local\Temp\install_helper.exe
C:\Users\Flini-Jojo\AppData\Local\Temp\mgsqlite3.dll
C:\Users\Flini-Jojo\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Flini-Jojo\AppData\Local\Temp\nsa557A.exe
C:\Users\Flini-Jojo\AppData\Local\Temp\nsa9528.exe
C:\Users\Flini-Jojo\AppData\Local\Temp\nsk2A71.exe
C:\Users\Flini-Jojo\AppData\Local\Temp\nsp8A3C.exe
C:\Users\Flini-Jojo\AppData\Local\Temp\ose00000.exe
C:\Users\Flini-Jojo\AppData\Local\Temp\SeesimilarSetup-29-.exe
C:\Users\Flini-Jojo\AppData\Local\Temp\Shortcut_sweetimsetup.exe
C:\Users\Flini-Jojo\AppData\Local\Temp\SIMEEI2Installer.exe
C:\Users\Flini-Jojo\AppData\Local\Temp\SIMEEIInstaller.exe
C:\Users\Flini-Jojo\AppData\Local\Temp\SPStub.exe
C:\Users\Flini-Jojo\AppData\Local\Temp\Sqlite3.dll
C:\Users\Flini-Jojo\AppData\Local\Temp\tmp51E.exe
C:\Users\Flini-Jojo\AppData\Local\Temp\tmpCEF2.exe
C:\Users\Flini-Jojo\AppData\Local\Temp\toolbar29473924.exe
C:\Users\Flini-Jojo\AppData\Local\Temp\uninstall29648442.exe
C:\Users\Flini-Jojo\AppData\Local\Temp\vcredist_x64.exe
C:\Users\Flini-Jojo\AppData\Local\Temp\vis-de.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-11 15:38

==================== End Of Log ============================
         

GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-10-20 14:54:09
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 ST1000DM003-9YN162 rev.CC4B 931,51GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\FLINI-~1\AppData\Local\Temp\awldapoc.sys


---- User code sections - GMER 2.1 ----

.text  C:\ProgramData\eSafe\eGdpSvc.exe[1220] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                   0000000075f01465 2 bytes [F0, 75]
.text  C:\ProgramData\eSafe\eGdpSvc.exe[1220] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                  0000000075f014bb 2 bytes [F0, 75]
.text  ...                                                                                                                              * 2
.text  C:\Program Files (x86)\FRITZ!DSL\IGDCTRL.EXE[1740] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                       0000000075f01465 2 bytes [F0, 75]
.text  C:\Program Files (x86)\FRITZ!DSL\IGDCTRL.EXE[1740] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                      0000000075f014bb 2 bytes [F0, 75]
.text  ...                                                                                                                              * 2
.text  C:\Program Files (x86)\Whilokii\updateWhilokii.exe[2280] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                 0000000075f01465 2 bytes [F0, 75]
.text  C:\Program Files (x86)\Whilokii\updateWhilokii.exe[2280] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                0000000075f014bb 2 bytes [F0, 75]
.text  ...                                                                                                                              * 2
.text  C:\Users\Flini-Jojo\AppData\Roaming\SearchProtect\bin\cltmng.exe[3124] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   0000000075f01465 2 bytes [F0, 75]
.text  C:\Users\Flini-Jojo\AppData\Roaming\SearchProtect\bin\cltmng.exe[3124] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  0000000075f014bb 2 bytes [F0, 75]
.text  ...                                                                                                                              * 2
.text  C:\Users\Flini-Jojo\Desktop\gmer_2.1.19163.exe[5496] C:\windows\SysWOW64\ntdll.dll!NtTerminateProcess                            00000000778bfcb0 5 bytes JMP 000000010032091c
.text  C:\Users\Flini-Jojo\Desktop\gmer_2.1.19163.exe[5496] C:\windows\SysWOW64\ntdll.dll!NtWriteVirtualMemory                          00000000778bfe14 5 bytes JMP 0000000100320048
.text  C:\Users\Flini-Jojo\Desktop\gmer_2.1.19163.exe[5496] C:\windows\SysWOW64\ntdll.dll!NtOpenEvent                                   00000000778bfea8 5 bytes JMP 00000001003202ee
.text  C:\Users\Flini-Jojo\Desktop\gmer_2.1.19163.exe[5496] C:\windows\SysWOW64\ntdll.dll!NtCreateThread                                00000000778c0004 5 bytes JMP 00000001003204b2
.text  C:\Users\Flini-Jojo\Desktop\gmer_2.1.19163.exe[5496] C:\windows\SysWOW64\ntdll.dll!NtProtectVirtualMemory                        00000000778c0038 5 bytes JMP 00000001003209fe
.text  C:\Users\Flini-Jojo\Desktop\gmer_2.1.19163.exe[5496] C:\windows\SysWOW64\ntdll.dll!NtResumeThread                                00000000778c0068 5 bytes JMP 0000000100320ae0
.text  C:\Users\Flini-Jojo\Desktop\gmer_2.1.19163.exe[5496] C:\windows\SysWOW64\ntdll.dll!NtTerminateThread                             00000000778c0084 5 bytes JMP 0000000100020050
.text  C:\Users\Flini-Jojo\Desktop\gmer_2.1.19163.exe[5496] C:\windows\SysWOW64\ntdll.dll!NtCreateMutant                                00000000778c079c 5 bytes JMP 000000010032012a
.text  C:\Users\Flini-Jojo\Desktop\gmer_2.1.19163.exe[5496] C:\windows\SysWOW64\ntdll.dll!NtCreateSymbolicLinkObject                    00000000778c088c 5 bytes JMP 0000000100320758
.text  C:\Users\Flini-Jojo\Desktop\gmer_2.1.19163.exe[5496] C:\windows\SysWOW64\ntdll.dll!NtCreateThreadEx                              00000000778c08a4 5 bytes JMP 0000000100320676
.text  C:\Users\Flini-Jojo\Desktop\gmer_2.1.19163.exe[5496] C:\windows\SysWOW64\ntdll.dll!NtLoadDriver                                  00000000778c0df4 5 bytes JMP 00000001003203d0
.text  C:\Users\Flini-Jojo\Desktop\gmer_2.1.19163.exe[5496] C:\windows\SysWOW64\ntdll.dll!NtSetContextThread                            00000000778c1920 5 bytes JMP 0000000100320594
.text  C:\Users\Flini-Jojo\Desktop\gmer_2.1.19163.exe[5496] C:\windows\SysWOW64\ntdll.dll!NtSetSystemInformation                        00000000778c1be4 5 bytes JMP 000000010032083a
.text  C:\Users\Flini-Jojo\Desktop\gmer_2.1.19163.exe[5496] C:\windows\SysWOW64\ntdll.dll!NtSuspendThread                               00000000778c1d70 5 bytes JMP 000000010032020c
.text  C:\Users\Flini-Jojo\Desktop\gmer_2.1.19163.exe[5496] C:\windows\SysWOW64\sechost.dll!SetServiceObjectSecurity + 206              00000000764e524f 7 bytes JMP 0000000100320f52
.text  C:\Users\Flini-Jojo\Desktop\gmer_2.1.19163.exe[5496] C:\windows\SysWOW64\sechost.dll!ChangeServiceConfigA + 380                  00000000764e53d0 7 bytes JMP 0000000100330210
.text  C:\Users\Flini-Jojo\Desktop\gmer_2.1.19163.exe[5496] C:\windows\SysWOW64\sechost.dll!ChangeServiceConfig2W + 149                 00000000764e5677 1 byte JMP 0000000100330048
.text  C:\Users\Flini-Jojo\Desktop\gmer_2.1.19163.exe[5496] C:\windows\SysWOW64\sechost.dll!ChangeServiceConfig2W + 151                 00000000764e5679 5 bytes {JMP 0xffffffff89e4a9d1}
.text  C:\Users\Flini-Jojo\Desktop\gmer_2.1.19163.exe[5496] C:\windows\SysWOW64\sechost.dll!CreateServiceA + 542                        00000000764e589a 7 bytes JMP 0000000100320ca6
.text  C:\Users\Flini-Jojo\Desktop\gmer_2.1.19163.exe[5496] C:\windows\SysWOW64\sechost.dll!CreateServiceW + 382                        00000000764e5a1d 7 bytes JMP 00000001003303d8
.text  C:\Users\Flini-Jojo\Desktop\gmer_2.1.19163.exe[5496] C:\windows\SysWOW64\sechost.dll!QueryServiceConfigW + 370                   00000000764e5c9b 7 bytes JMP 000000010033012c
.text  C:\Users\Flini-Jojo\Desktop\gmer_2.1.19163.exe[5496] C:\windows\SysWOW64\sechost.dll!ControlServiceExA + 231                     00000000764e5d87 7 bytes JMP 00000001003302f4
.text  C:\Users\Flini-Jojo\Desktop\gmer_2.1.19163.exe[5496] C:\windows\SysWOW64\sechost.dll!I_ScBroadcastServiceControlMessage + 123    00000000764e7240 7 bytes JMP 0000000100320e6e
.text  C:\Users\Flini-Jojo\Desktop\gmer_2.1.19163.exe[5496] C:\windows\syswow64\USER32.dll!RecordShutdownReason + 882                   00000000753b1492 7 bytes JMP 00000001003304bc

---- EOF - GMER 2.1 ----