| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: System Care AVWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
20.05.2013, 10:12
| #1 |
| |  System Care AV Hi, ich habe mir gestern den System Care AV eingefangen (PC, Win7, 32-bit, Bullguard) und, da der Task-Manager blockiert war, versucht, es zu deinstallieren. Das sah zunächst ok aus, ich konnte Bullguard wieder starten. Beim Scan wurde eine Malware-Datei, AU_.exe, gefunden. Ich habe die Datei nicht in Quarantäne gestellt, sondern gleich gelöscht. Dann habe ich 3 von Bullguard empfohlene SW-updates installiert (die neuesten für Adobe Air 3.x, Adobe Acrobat X 10.x und Java RE 1.6x / 6.x). Der Rechner sah zwar wieder ok aus, aber die CPU-Auslastung war auf 80%, und nach einem Neustart war der Trojaner wieder aktiv. Ich habe vor dem Neustart einen OTL-Scan durchgeführt -> otl.txt, extras.txt Heute morgen habe ich den Rechner im abgesicherten Modus mit Netzwerktreibern hochgefahren (kein Anschuß ans Netzwerk), Bullguard deaktiviert und - Eurem Leitfaden folgend - defogger ausgeführt und - ohne Neustart - einen OTL-Scan durchgeführt. Im Gegensatz zu gestern findet sich jetzt bei 'folders' C:\Users\vivtane\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Care ein SC AV - Eintrag unter , aber OTL generiert keine extras.txt mehr. Leider habe ich die von gestern gelöscht... Da ich im defogger ja nicht ohne Anweisung die Emulatoren wieder reaktivieren soll, wende ich mich an Euch mit der Bitte, mir weiterzuhelfen  Falls ich im Verlauf Eurer Anweisungen einen Neustart durchführen soll, schreibt mir bitte dazu, ob ich defogger schließen / re-aktivate anklicken soll. Herzlichen Dank und lg Marion Es gibt auf dem Rechner auch eine SW-Installation (JNLP), die ich gestern deinstalliert habe, die sich aber heute wieder in der Liste findet. Kann das ein Teil des erwähnten Java-updates sein? defogger-LOG Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 09:08 on 20/05/2013 (vivtane)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
OTL Logfile: Code:
ATTFilter OTL logfile created on: 20.05.2013 09:35:13 - Run 5 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\vivtane\Desktop Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000C07 | Country: Österreich | Language: DEA | Date Format: dd.MM.yyyy 3,00 Gb Total Physical Memory | 2,04 Gb Available Physical Memory | 67,89% Memory free 6,00 Gb Paging File | 5,30 Gb Available in Paging File | 88,29% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 581,17 Gb Total Space | 28,62 Gb Free Space | 4,92% Space Free | Partition Type: NTFS Drive D: | 14,99 Gb Total Space | 2,94 Gb Free Space | 19,62% Space Free | Partition Type: FAT32 Drive K: | 1863,01 Gb Total Space | 1659,72 Gb Free Space | 89,09% Space Free | Partition Type: NTFS Computer Name: GEPARD | User Name: vivtane | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: All users Company Name Whitelist: On | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2013.05.19 16:34:16 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\vivtane\Desktop\OTL.exe ========== Modules (No Company Name) ========== ========== Services (SafeList) ========== SRV - File not found [Auto | Stopped] -- C:\Windows\system32\Pen_Tablet.exe -- (TabletServicePen) SRV - [2013.05.15 16:04:28 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2013.05.10 00:57:24 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Stopped] -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2012.12.11 14:07:00 | 000,528,256 | ---- | M] (Wacom Technology, Corp.) [Auto | Stopped] -- C:\Programme\Tablet\Pen\WTabletServiceCon.exe -- (WTabletServiceCon) SRV - [2012.07.13 13:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Programme\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012.07.02 13:33:20 | 000,014,528 | ---- | M] (Seagate Technology LLC) [Auto | Stopped] -- C:\Programme\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.DASWindowsService.exe -- (Seagate Dashboard Services) SRV - [2012.05.26 16:14:26 | 000,189,784 | ---- | M] (BullGuard Ltd.) [Auto | Running] -- C:\Programme\BullGuard Ltd\BullGuard\BsMain.dll -- (BsMain) SRV - [2012.05.26 16:11:24 | 000,331,096 | ---- | M] (BullGuard Ltd.) [Auto | Running] -- C:\Programme\BullGuard Ltd\BullGuard\BullGuardUpdate.exe -- (BsUpdate) SRV - [2012.03.16 10:37:16 | 000,197,464 | ---- | M] (BullGuard Ltd.) [Auto | Stopped] -- C:\Programme\BullGuard Ltd\BullGuard\BsMailProxy\BsMailProxy.dll -- (BsMailProxy) SRV - [2012.02.26 23:36:19 | 000,500,568 | ---- | M] (BullGuard Ltd.) [Auto | Stopped] -- C:\Programme\BullGuard Ltd\BullGuard\BsFire.dll -- (BsFire) SRV - [2012.02.26 23:36:19 | 000,324,440 | ---- | M] (BullGuard Ltd.) [Auto | Stopped] -- C:\Programme\BullGuard Ltd\BullGuard\BsFileScan.dll -- (BsFileScan) SRV - [2011.12.19 12:02:31 | 000,338,776 | ---- | M] (BullGuard Ltd.) [Auto | Stopped] -- C:\Programme\BullGuard Ltd\BullGuard\BullGuardBhvScanner.exe -- (BsBhvScan) SRV - [2011.12.18 23:14:24 | 000,066,560 | ---- | M] (Nalpeiron Ltd.) [Auto | Stopped] -- C:\Windows\System32\nlssrv32.exe -- (nlsX86cc) SRV - [2011.11.12 02:31:00 | 000,288,600 | ---- | M] (BullGuard Ltd.) [On_Demand | Running] -- C:\Programme\BullGuard Ltd\BullGuard\BullGuardScanner.exe -- (BsScanner) SRV - [2011.07.20 06:18:24 | 000,440,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\microsoft shared\OFFICE12\ODSERV.EXE -- (odserv) SRV - [2011.05.26 14:34:34 | 000,191,752 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Programme\Microsoft\BingBar\BBSvc.EXE -- (BBSvc) SRV - [2011.05.20 11:42:41 | 000,125,784 | ---- | M] (BullGuard Ltd.) [On_Demand | Stopped] -- C:\Programme\BullGuard Ltd\BullGuard\Support\BgRaSvc.exe -- (BgRaSvc) SRV - [2011.05.20 11:42:41 | 000,067,928 | ---- | M] (BullGuard Ltd.) [Auto | Stopped] -- C:\Programme\BullGuard Ltd\BullGuard\BsBrowser.dll -- (BsBrowser) SRV - [2011.03.10 20:57:04 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Programme\Microsoft\BingBar\SeaPort.EXE -- (BBUpdate) SRV - [2010.12.10 18:30:50 | 000,086,880 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- c:\Programme\Microsoft SQL Server\90\Shared\sqlwriter.exe -- (SQLWriter) SRV - [2010.12.10 18:29:30 | 029,293,408 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- c:\Programme\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe -- (MSSQL$MSSMLBIZ) SRV - [2010.12.10 18:29:30 | 000,238,944 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- c:\Programme\Microsoft SQL Server\90\Shared\sqlbrowser.exe -- (SQLBrowser) SRV - [2010.12.10 18:29:30 | 000,044,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- c:\Programme\Microsoft SQL Server\90\Shared\sqladhlp90.exe -- (MSSQLServerADHelper) SRV - [2010.11.20 14:17:56 | 001,121,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc) SRV - [2010.05.31 21:02:06 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc) SRV - [2010.03.18 11:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) [Auto | Stopped] -- C:\Programme\Common Files\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon) SRV - [2010.02.19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Programme\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard) SRV - [2009.08.18 11:29:22 | 001,529,728 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE -- (wlidsvc) SRV - [2009.07.14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV - [2009.07.14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2008.01.11 18:50:16 | 000,030,312 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Programme\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe -- (BcmSqlStartupSvc) SRV - [2007.07.24 11:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) [Auto | Stopped] -- c:\Programme\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2) SRV - [2007.06.05 13:20:32 | 000,177,704 | ---- | M] () [Auto | Stopped] -- C:\Windows\System32\PSIService.exe -- (ProtexisLicensing) SRV - [2007.05.31 16:21:24 | 000,379,784 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm) SRV - [2007.05.31 16:21:18 | 000,183,688 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr) SRV - [2006.12.14 17:00:00 | 000,544,768 | ---- | M] (Magix AG) [On_Demand | Stopped] -- C:\Programme\Common Files\MAGIX Shared\UPnPService\UPnPService.exe -- (UPnPService) SRV - [2006.10.26 14:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\microsoft shared\Source Engine\OSE.EXE -- (ose) SRV - [2005.11.17 15:18:52 | 001,527,900 | ---- | M] (MAGIX®) [On_Demand | Stopped] -- C:\Programme\MAGIX\Common\Database\bin\fbserver.exe -- (FirebirdServerMAGIXInstance) ========== Driver Services (SafeList) ========== DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\wacomvhid.sys -- (wacomvhid) DRV - File not found [Kernel | System | Stopped] -- system32\DRIVERS\aiptektp.sys -- (aiptektp) DRV - [2012.12.03 17:36:34 | 000,070,048 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\wachidrouter.sys -- (WacHidRouter) DRV - [2012.12.03 17:36:32 | 000,011,680 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\hidkmdf.sys -- (hidkmdf) DRV - [2012.11.15 10:41:06 | 000,013,728 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\wacomrouterfilter.sys -- (wacomrouterfilter) DRV - [2011.05.02 19:25:38 | 000,215,624 | ---- | M] (NovaShield, Inc.) [File_System | System | Stopped] -- C:\Windows\System32\drivers\NSKernel.sys -- (NovaShieldFilterDriver) DRV - [2011.05.02 19:25:38 | 000,020,040 | ---- | M] (NovaShield, Inc.) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\NSNetmon.sys -- (NovaShieldTDIDriver) DRV - [2011.04.23 15:32:42 | 000,328,296 | R--- | M] (Agnitum Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AfwCore.sys -- (afwcore) DRV - [2011.04.23 15:32:41 | 000,034,920 | R--- | M] (Agnitum Ltd.) [Kernel | System | Running] -- C:\Windows\System32\drivers\Afw.sys -- (afw) DRV - [2011.04.23 15:32:08 | 000,061,152 | ---- | M] (BullGuard Ltd.) [File_System | System | Stopped] -- C:\Windows\System32\drivers\BdSpy.sys -- (BdSpy) DRV - [2011.04.23 15:32:04 | 000,304,712 | ---- | M] (BitDefender S.R.L.) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\Trufos.sys -- (Trufos) DRV - [2010.11.20 12:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV - [2010.11.20 11:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WINUSB) DRV - [2010.04.03 22:55:32 | 011,573,800 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2009.12.04 11:59:52 | 000,014,720 | ---- | M] (BitDefender S.R.L.) [Kernel | On_Demand | Stopped] -- C:\Programme\BullGuard Ltd\BullGuard\Antirootkit\profos.sys -- (Profos) DRV - [2009.07.14 01:52:10 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\vwifimp.sys -- (vwifimp) DRV - [2009.07.14 00:02:53 | 000,657,408 | ---- | M] (Ralink Technology Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\netr28u.sys -- (netr28u) DRV - [2009.07.14 00:02:52 | 000,347,264 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvm62x32.sys -- (NVENETFD) DRV - [2009.07.09 19:16:24 | 000,013,480 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\WacomVTHid.sys -- (WacomVTHid) DRV - [2009.06.26 22:55:12 | 000,066,080 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA) DRV - [2008.08.25 04:22:52 | 000,015,872 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvsmu.sys -- (nvsmu) DRV - [2008.08.18 19:58:16 | 000,145,952 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\nvstor32.sys -- (nvstor32) DRV - [2008.01.23 10:19:44 | 000,501,560 | ---- | M] (Protect Software GmbH) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\ACEDRV11.sys -- (acedrv11) DRV - [2006.11.10 15:05:00 | 000,018,688 | ---- | M] (Arcsoft, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\afc.sys -- (Afc) DRV - [2006.07.31 07:44:00 | 000,580,992 | ---- | M] (Omnivision Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ov550i.sys -- (APL531) DRV - [2003.12.19 22:16:26 | 000,016,035 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VocTrace.sys -- (SAFAUSB) ========== Standard Registry (All) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Corporation) IE - HKU\S-1-5-20\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Corporation) IE - HKU\S-1-5-21-1856749932-630562057-1855922848-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com IE - HKU\S-1-5-21-1856749932-630562057-1855922848-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://medion.msn.com [binary data] IE - HKU\S-1-5-21-1856749932-630562057-1855922848-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm IE - HKU\S-1-5-21-1856749932-630562057-1855922848-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 IE - HKU\S-1-5-21-1856749932-630562057-1855922848-1000\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKU\S-1-5-21-1856749932-630562057-1855922848-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\S-1-5-21-1856749932-630562057-1855922848-1000\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Corporation) IE - HKU\S-1-5-21-1856749932-630562057-1855922848-1000\..\SearchScopes,DefaultScope = {6765B302-91A3-4FA2-82BD-A7D2D843C146} IE - HKU\S-1-5-21-1856749932-630562057-1855922848-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-1856749932-630562057-1855922848-1000\..\SearchScopes\{6765B302-91A3-4FA2-82BD-A7D2D843C146}: "URL" = hxxp://www.google.de/search?q={searchTerms}&rlz= IE - HKU\S-1-5-21-1856749932-630562057-1855922848-1000\..\SearchScopes\{C53EC8B9-2F95-4EA4-95DD-BC43D97D0C23}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=MEDTDF&pc=MAMD&src=IE-SearchBox IE - HKU\S-1-5-21-1856749932-630562057-1855922848-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1856749932-630562057-1855922848-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@canon.com/EPPEX: C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_45: C:\Windows\system32\npdeployJava1.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.3: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8051.1204: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@Musicnotes.com/Musicnotes Viewer: C:\Program Files\Musicnotes\npmusicn.dll (Musicnotes, Inc.) FF - HKLM\Software\MozillaPlugins\@Sibelius.com/Scorch Plugin: C:\Program Files\Musicnotes\npsibelius.dll () FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@wacom.com/wtPlugin,version=2.1.0.2: C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF - HKLM\Software\MozillaPlugins\Adobe Acrobat: C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.) FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems) FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeExManDetect: C:\Program Files\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems) FF - HKCU\Software\MozillaPlugins\wacom.com/WacomTabletPlugin: C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2010.02.16 22:48:46 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\antiphishing@bullguard: C:\Program Files\BullGuard Ltd\BullGuard\Antiphishing\FF\antiphishing@bullguard\ [2012.01.12 04:22:57 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\web2pdfextension@web2pdf.adobedotcom: C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2013.05.19 16:22:29 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Thunderbird\Extensions\\{380AE6CB-09B9-4373-B360-D01C2462A6E7}: C:\Program Files\BullGuard Ltd\BullGuard\backup\thunderbirdbkplugin [2010.05.22 09:38:25 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Thunderbird\Extensions\\{0E810812-F4BB-4309-942A-755587587A5E}: C:\Program Files\BullGuard Ltd\BullGuard\Spamfilter\TbSpamfilter [2011.04.23 15:35:15 | 000,000,000 | ---D | M] ========== Chrome ========== CHR - homepage: hxxp://www.google.com/ CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\22.0.1229.79\PepperFlash\pepflashplayer.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_278.dll CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\25.0.1364.172\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\25.0.1364.172\pdf.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Browser\nppdf32.dll CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll CHR - plugin: CANON iMAGE GATEWAY Album Plugin Utility (Enabled) = C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll CHR - plugin: Java(TM) Platform SE 6 U35 (Enabled) = C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll CHR - plugin: Java Deployment Toolkit 6.0.350.10 (Enabled) = C:\Windows\system32\npdeployJava1.dll CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Program Files\Microsoft\Office Live\npOLW.dll CHR - plugin: Musicnotes (Enabled) = C:\Program Files\Musicnotes\npmusicn.dll CHR - plugin: ScorchPlugin (Enabled) = C:\Program Files\Musicnotes\npsibelius.dll CHR - plugin: Wacom Dynamic Link Library (Enabled) = C:\Program Files\TabletPlugins\npwacom.dll CHR - plugin: Windows Live\u00AE Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll CHR - plugin: Windows Presentation Foundation (Enabled) = c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll CHR - Extension: YouTube = C:\Users\vivtane\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_1\ CHR - Extension: Google-Suche = C:\Users\vivtane\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_1\ CHR - Extension: Google Mail = C:\Users\vivtane\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\ O1 HOSTS File: ([2006.09.18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Programme\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Windows Live ID-Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Programme\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Programme\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O2 - BHO: (BGAntiphishingBHO Class) - {FC872B94-35E3-4B94-B028-184A2A1C7CCE} - C:\Programme\BullGuard Ltd\BullGuard\Antiphishing\IE\BGAntiphishingIEBHO.dll (BullGuard Ltd.) O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programme\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Programme\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.) O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) O3 - HKU\S-1-5-21-1856749932-630562057-1855922848-1000\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found. O3 - HKU\S-1-5-21-1856749932-630562057-1855922848-1000\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programme\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKU\S-1-5-21-1856749932-630562057-1855922848-1000\..\Toolbar\WebBrowser: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Programme\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe (Adobe Systems Inc.) O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [AdobeCS6ServiceManager] C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [BambooCore] C:\Programme\Bamboo Dock\BambooCore.exe () O4 - HKLM..\Run: [DBAgent] C:\Program Files\Seagate\Seagate Dashboard 2.0\DBAgent.exe (Seagate Technology LLC) O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QuickTime\QTTask.exe (Apple Inc.) O4 - HKLM..\Run: [SwitchBoard] C:\Programme\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [TrayServer] C:\Programme\MAGIX\Video_deluxe_2008_Premium\Trayserver.exe (MAGIX AG) O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-1856749932-630562057-1855922848-1000..\Run: [AdobeBridge] File not found O4 - HKU\S-1-5-21-1856749932-630562057-1855922848-1000..\Run: [msnmsgr] C:\Program Files\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-1856749932-630562057-1855922848-1000..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-1856749932-630562057-1855922848-1000..\Run: [Skype] C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.) O4 - HKU\S-1-5-21-1856749932-630562057-1855922848-1000..\Run: [updateMgr] C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AdobeUpdateManager.exe AcPro7_0_0 -reboot 1 File not found O4 - HKU\S-1-5-21-1856749932-630562057-1855922848-1000..\Run: [Uploader] C:\Programme\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.Uploader.exe (Seagate Technology LLC) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-1856749932-630562057-1855922848-1000..\RunOnce: [C68E63B821852AA90000C68D9D303055] C:\ProgramData\C68E63B821852AA90000C68D9D303055\C68E63B821852AA90000C68D9D303055.exe () O4 - Startup: C:\Users\vivtane\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\vivtane\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) F3 - HKU\S-1-5-21-1856749932-630562057-1855922848-1000 WinNT: Run - (RmFile.exe) - C:\Windows\rmfile.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: BindDirectlyToPropertySetStorage = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17 O8 - Extra context menu item: An vorhandene PDF-Datei anfügen - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\vivtane\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm () O8 - Extra context menu item: In Adobe PDF konvertieren - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Linkziel an vorhandene PDF-Datei anhängen - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Linkziel in Adobe PDF konvertieren - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Nach Microsoft E&xel exportieren - C:\Programme\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: eBay - Der weltweite Online-Marktplatz - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - hxxp://rover.ebay.com/rover/1/5221-29898-17534-1/4 File not found O9 - Extra 'Tools' menuitem : eBay - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - hxxp://rover.ebay.com/rover/1/5221-29898-17534-1/4 File not found O9 - Extra Button: In Blog veröffentlichen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : In Windows Live Writer in Blog veröffentliche&n - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation) O9 - Extra Button: BullGuard - {27FD17FB-CF63-486b-B2BE-8D8781CBEA01} - C:\Programme\BullGuard Ltd\BullGuard\Antiphishing\IE\BgAntiphishingIE.dll (BullGuard Ltd.) O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\System32\nlaapi.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\System32\NapiNSP.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Windows\System32\winrnr.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\BGLsp.dll (BullGuard Ltd.) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\BGLsp.dll (BullGuard Ltd.) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\System32\BGLsp.dll (BullGuard Ltd.) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\System32\BGLsp.dll (BullGuard Ltd.) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\System32\BGLsp.dll (BullGuard Ltd.) O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\System32\BGLsp.dll (BullGuard Ltd.) O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\System32\BGLsp.dll (BullGuard Ltd.) O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\System32\BGLsp.dll (BullGuard Ltd.) O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\System32\BGLsp.dll (BullGuard Ltd.) O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\System32\BGLsp.dll (BullGuard Ltd.) O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Windows\System32\BGLsp.dll (BullGuard Ltd.) O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000025 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000026 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000027 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000028 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000029 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000030 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000031 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000032 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000033 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000034 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000035 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000036 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000037 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000038 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000039 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000040 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000041 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O13 - gopher Prefix: missing O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control) O16 - DPF: {888078C6-70B2-4F88-8EE7-1F50DDEA6120} https://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab (CeWe Color AG & Co. OHG Control) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_45-windows-i586.cab (Java Plug-in 1.6.0_45) O16 - DPF: {CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_45-windows-i586.cab (Java Plug-in 1.6.0_45) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_45-windows-i586.cab (Java Plug-in 1.6.0_45) O16 - DPF: {E4CF4E86-D0DC-4864-8F0E-4F6EA2526334} https://img.ui-portal.de/webde/smartdrive/activex/gmxnet_osupload_2002.cab (UI File Upload Control) O16 - DPF: Garmin Communicator Plug-In https://static.garmincdn.com/gcp/ie/4.0.4.0/GarminAxControl_32.CAB (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1C1DAF90-64FA-41FF-8DB2-0A69EC4AE8F4}: NameServer = 213.33.99.70,80.120.17.70 O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\System32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation) O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation) O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation) O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\System32\inetcomm.dll (Microsoft Corporation) O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation) O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Common Files\microsoft shared\Web Components\11\OWC11.DLL (Microsoft Corporation) O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation) O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Programme\Windows Live\Mail\mailcomm.dll (Microsoft Corporation) O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O24 - Desktop WallPaper: O24 - Desktop BackupWallPaper: O29 - HKLM SecurityProviders - (credssp.dll) - C:\Windows\System32\credssp.dll (Microsoft Corporation) O30 - LSA: Authentication Packages - (msv1_0) - C:\Windows\System32\msv1_0.dll (Microsoft Corporation) O30 - LSA: Security Packages - (kerberos) - C:\Windows\System32\kerberos.dll (Microsoft Corporation) O30 - LSA: Security Packages - (msv1_0) - C:\Windows\System32\msv1_0.dll (Microsoft Corporation) O30 - LSA: Security Packages - (schannel) - C:\Windows\System32\schannel.dll (Microsoft Corporation) O30 - LSA: Security Packages - (wdigest) - C:\Windows\System32\wdigest.dll (Microsoft Corporation) O30 - LSA: Security Packages - (tspkg) - C:\Windows\System32\tspkg.dll (Microsoft Corporation) O30 - LSA: Security Packages - (pku2u) - C:\Windows\System32\pku2u.dll (Microsoft Corporation) O30 - LSA: Security Packages - (livessp) - C:\Windows\System32\livessp.dll (Microsoft Corporation) O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O32 - AutoRun File - [2012.04.27 09:55:18 | 000,000,038 | ---- | M] () - K:\Autorun.inf -- [ NTFS ] O33 - MountPoints2\{6c94cbab-8d47-11e0-8b9c-40618601a444}\Shell - "" = AutoRun O33 - MountPoints2\{6c94cbab-8d47-11e0-8b9c-40618601a444}\Shell\AutoRun\command - "" = J:\start.exe O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2013.05.19 16:34:15 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\vivtane\Desktop\OTL.exe [2013.05.19 11:48:47 | 000,000,000 | ---D | C] -- C:\Users\vivtane\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Care Antivirus [2013.05.19 11:41:25 | 000,000,000 | ---D | C] -- C:\ProgramData\C68E63B821852AA90000C68D9D303055 [2013.05.16 03:09:43 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2013.05.16 03:09:42 | 000,607,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2013.05.16 03:09:42 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2013.05.16 03:09:42 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2013.05.16 03:09:41 | 001,800,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll [2013.05.16 03:09:41 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll [2013.05.16 03:09:39 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2013.05.16 03:04:53 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2013.05.15 05:26:13 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wwanprotdim.dll [2013.05.15 05:26:11 | 002,347,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys [2013.05.15 05:25:52 | 000,218,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxgmms1.sys [2013.05.15 05:25:46 | 001,796,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\authui.dll [2013.05.15 05:25:46 | 000,101,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\consent.exe [2013.05.08 14:13:44 | 000,000,000 | ---D | C] -- C:\Users\vivtane\.android [2013.04.24 06:37:36 | 000,000,000 | ---D | C] -- C:\ProgramData\McAfee ========== Files - Modified Within 30 Days ========== [2013.05.20 09:35:07 | 007,864,320 | -HS- | M] () -- C:\Users\vivtane\ntuser.dat [2013.05.20 09:08:35 | 000,000,000 | ---- | M] () -- C:\Users\vivtane\defogger_reenable [2013.05.20 09:00:16 | 001,629,916 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI [2013.05.20 09:00:16 | 000,700,858 | ---- | M] () -- C:\Windows\System32\perfh007.dat [2013.05.20 09:00:16 | 000,662,740 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2013.05.20 09:00:16 | 000,147,544 | ---- | M] () -- C:\Windows\System32\perfc007.dat [2013.05.20 09:00:16 | 000,123,934 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2013.05.20 08:56:05 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2013.05.20 08:55:56 | 2415,370,240 | -HS- | M] () -- C:\hiberfil.sys [2013.05.20 08:45:42 | 000,377,856 | ---- | M] () -- C:\Users\vivtane\Desktop\gmer_2.1.19163.exe [2013.05.20 08:43:28 | 000,050,477 | ---- | M] () -- C:\Users\vivtane\Desktop\Defogger.exe [2013.05.19 20:20:47 | 000,006,192 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2013.05.19 20:20:47 | 000,006,192 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2013.05.19 20:13:38 | 000,001,096 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2013.05.19 20:13:21 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2013.05.19 19:23:01 | 000,007,614 | ---- | M] () -- C:\Users\vivtane\AppData\Local\Resmon.ResmonCfg [2013.05.19 19:04:00 | 000,001,100 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2013.05.19 19:03:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2013.05.19 16:34:16 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\vivtane\Desktop\OTL.exe [2013.05.17 09:48:22 | 000,001,456 | ---- | M] () -- C:\Users\vivtane\AppData\Local\Adobe Save for Web 13.0 Prefs [2013.05.16 03:29:58 | 003,902,400 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2013.05.05 21:12:55 | 002,382,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2013.05.02 02:06:08 | 000,238,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe [2013.04.25 14:02:29 | 000,110,670 | ---- | M] () -- C:\Users\Public\Documents\Antrag auf Mitgliedschaft ARGE.pdf ========== Files Created - No Company Name ========== [2013.05.20 09:08:35 | 000,000,000 | ---- | C] () -- C:\Users\vivtane\defogger_reenable [2013.05.20 08:48:45 | 000,377,856 | ---- | C] () -- C:\Users\vivtane\Desktop\gmer_2.1.19163.exe [2013.05.20 08:48:45 | 000,050,477 | ---- | C] () -- C:\Users\vivtane\Desktop\Defogger.exe [2013.05.06 01:20:55 | 000,001,071 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Content Viewer.lnk [2013.04.25 14:02:29 | 000,110,670 | ---- | C] () -- C:\Users\Public\Documents\Antrag auf Mitgliedschaft ARGE.pdf [2012.12.18 11:06:06 | 000,974,848 | ---- | C] () -- C:\Windows\System32\cis-2.4.dll [2012.12.18 11:06:06 | 000,081,920 | ---- | C] () -- C:\Windows\System32\issacapi_bs-2.3.dll [2012.12.18 11:06:06 | 000,065,536 | ---- | C] () -- C:\Windows\System32\issacapi_pe-2.3.dll [2012.12.18 11:06:06 | 000,057,344 | ---- | C] () -- C:\Windows\System32\issacapi_se-2.3.dll [2012.08.30 20:05:41 | 000,001,456 | ---- | C] () -- C:\Users\vivtane\AppData\Local\Adobe Save for Web 13.0 Prefs [2012.06.30 12:16:51 | 000,000,000 | ---- | C] () -- C:\Windows\DMM.INI [2012.04.14 21:03:53 | 000,001,456 | ---- | C] () -- C:\Users\vivtane\AppData\Local\Adobe Save for Web 12.0 Prefs [2012.02.25 11:03:04 | 000,524,288 | -HS- | C] () -- C:\Users\vivtane\ntuser.dat{78888358-5f8f-11e1-9230-0025d361138d}.TMContainer00000000000000000002.regtrans-ms [2012.02.25 11:03:04 | 000,524,288 | -HS- | C] () -- C:\Users\vivtane\ntuser.dat{78888358-5f8f-11e1-9230-0025d361138d}.TMContainer00000000000000000001.regtrans-ms [2012.02.25 11:03:04 | 000,065,536 | -HS- | C] () -- C:\Users\vivtane\ntuser.dat{78888358-5f8f-11e1-9230-0025d361138d}.TM.blf [2010.10.25 14:33:39 | 000,524,288 | -HS- | C] () -- C:\Users\vivtane\ntuser.dat{023ede5b-e034-11df-b0c1-0025d361138d}.TMContainer00000000000000000002.regtrans-ms [2010.10.25 14:33:39 | 000,524,288 | -HS- | C] () -- C:\Users\vivtane\ntuser.dat{023ede5b-e034-11df-b0c1-0025d361138d}.TMContainer00000000000000000001.regtrans-ms [2010.10.25 14:33:39 | 000,065,536 | -HS- | C] () -- C:\Users\vivtane\ntuser.dat{023ede5b-e034-11df-b0c1-0025d361138d}.TM.blf [2010.07.18 17:35:41 | 000,003,584 | ---- | C] () -- C:\Users\vivtane\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010.04.09 02:50:59 | 001,456,640 | ---- | C] () -- C:\Program Files\Common Files\Falk Navi-Manager.msi [2010.03.21 19:46:45 | 000,007,614 | ---- | C] () -- C:\Users\vivtane\AppData\Local\Resmon.ResmonCfg [2010.02.20 20:27:57 | 000,000,952 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys [2010.02.17 10:51:06 | 000,153,280 | ---- | C] () -- C:\Users\vivtane\AppData\Local\GDIPFONTCACHEV1.DAT [2010.02.16 23:43:17 | 000,000,020 | -HS- | C] () -- C:\Users\vivtane\ntuser.ini [2010.02.16 22:45:42 | 007,864,320 | -HS- | C] () -- C:\Users\vivtane\ntuser.dat [2010.02.16 22:45:42 | 000,524,288 | -HS- | C] () -- C:\Users\vivtane\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms [2010.02.16 22:45:42 | 000,524,288 | -HS- | C] () -- C:\Users\vivtane\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms [2010.02.16 22:45:42 | 000,065,536 | -HS- | C] () -- C:\Users\vivtane\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf [2008.03.03 15:23:42 | 000,000,904 | -H-- | C] () -- C:\ProgramData\TDV4H73DS0Ampsd43.dat [2006.12.14 14:11:22 | 000,000,544 | -H-- | C] () -- C:\ProgramData\winpmltsTDV4H73DS0A ========== ZeroAccess Check ========== [2009.07.14 06:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2013.02.27 06:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 03:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both ========== LOP Check ========== [2011.08.17 23:22:55 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\onOne Software [2011.08.17 23:22:55 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\onOne Software [2010.12.20 18:26:18 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\Anthropics [2012.10.23 20:24:52 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\Artisteer [2011.04.23 15:49:15 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\BullGuard [2010.07.10 21:12:43 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\Canon [2012.07.02 20:45:55 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\capella-software [2010.05.09 17:15:10 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\ChaosPro [2012.04.11 16:59:42 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 [2012.11.03 22:06:36 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\com.adobe.bridge.PublishPanel [2013.01.14 00:28:54 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\com.adobe.dmp.contentviewer [2013.05.19 20:14:00 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\Dropbox [2011.10.15 21:14:44 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\DVDVideoSoft [2011.10.15 21:14:33 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\DVDVideoSoftIEHelpers [2013.02.13 01:07:30 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\e-on software [2010.06.23 22:05:00 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\Eovia [2013.04.12 00:58:24 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\FileZilla [2013.03.17 18:49:26 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\GARMIN [2010.08.15 14:50:20 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\GetRightToGo [2011.02.19 18:46:02 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\HDRsoft [2011.02.20 15:04:00 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\ImagingLuminaryLLC [2012.10.28 16:20:55 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\Leadertech [2010.08.01 17:44:41 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\MAGIX [2011.08.20 18:45:35 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\Mask Pro 4.0 [2012.07.28 21:09:44 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\Musicnotes [2011.08.09 19:54:56 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\NeatImage PS 32 [2011.08.25 22:44:47 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\Nik Software [2012.05.17 15:45:55 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\onOne Software [2010.09.26 16:39:39 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\Opera [2012.04.08 15:47:25 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\Poser [2010.09.25 10:46:05 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\Poser Pro [2010.08.01 16:51:24 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\ProtectDisc [2011.04.03 14:43:19 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\Recolored [2012.10.28 15:56:05 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\Seagate [2010.09.22 20:30:33 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\ShadeExplorer [2011.04.23 15:49:15 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\Software Inspection Library [2010.06.23 21:07:56 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\Spiral Graphics [2012.04.10 16:28:33 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1 [2013.05.12 23:37:23 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\Ultra Fractal 5 [2010.02.23 23:29:18 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\uTorrent [2013.01.14 12:33:48 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\Wacom [2013.01.14 12:34:09 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\wacomid-desktop-launcher.DCFD4B89A63EE70BC162777F06D4B93B6397AEC7.1 [2010.04.04 17:02:50 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\Windows Live Writer [2013.01.14 12:16:03 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\WTouch [2012.05.28 20:04:47 | 000,000,000 | ---D | M] -- C:\Users\vivtane\AppData\Roaming\Xycod ========== Purity Check ========== ========== Alternate Data Streams ========== @Alternate Data Stream - 512 bytes -> C:\Windows:nlsPreferences @Alternate Data Stream - 147 bytes -> C:\ProgramData\Temp:A8665DF4 @Alternate Data Stream - 137 bytes -> C:\ProgramData\Temp:5CB1E0D3 < End of report > [/CODE] Geändert von vivtane (20.05.2013 um 10:16 Uhr) Grund: Nachtrag |
|
20.05.2013, 11:15
| #2 |
| /// TB-Ausbilder  | System Care AV!! Hinweis an Mitlesende !! Dieses Thema und die Anweisungen sind nur für diesen speziellen Fall gedacht. Sie könnten andere Computer schwer beschädigen. Öffnet bitte euer eigenes Thema.  Ich werde dir bei deinem Problem helfen. Die Bereinigung funktioniert nur, wenn du dich an die folgenden Regeln hälst:  Bitte lesen:Regeln für die Bereinigung
Lesestoff:Banking-Trojaner Wenn du mit diesem Computer beispielsweise Onlinebanking machst, dann solltest du zumindest dein Passwort von deiner Bank ändern lassen, wenn du ein ansonsten sicheres Verfahren wie beispielsweise "chip-TAN-comfort" nutzt. Hast du noch alte TAN-Bögen auf Papierbasis? Dann ist es höchste Zeit dich bei deiner Bank zu melden und notfalls das Konto temporär sperren zu lassen. Der Sperrnotruf 116 116 von www.sperr-notruf.de kann Tag und Nacht dafür benutzt werden. Scan mit Combofix
__________________ |
|
20.05.2013, 13:33
| #3 |
| | System Care AV Hallo ryder,
__________________danke für Deine Antwort. Den Hinweis auf nicht-lizensierte Software verstehe ich nicht, da ich die vielen teuren Programme auf dem Rechner gekauft und auch registriert habe... Den Online-Banking-Zugang habe ich durch mehrmalige falsche PIN-Eingabe von diesem (sauberen) Notebook gesperrt - ich hoffe, das reicht? Combofix ist einwandfrei gelaufen und hat, wenn ich den Log richtig interpretiere, auch einiges gelöscht. Bitte nicht böse sein, wenn ich mich erst abends wieder melde; ich muss meine gehbehinderte Mom zu einer Familienfeier bringen. Im Moment ist ja hoffentlich nichts Dringendes zu tun: Der Rechner ist vom Netz und läuft im abgesicherten Modus Der Internetzugang um Konto ist gesperrt und ich informiere morgen meine Bank, um ggf. weitere Schritte zu veranlassen. Danke im Voraus für weitere Anweisungen, Lg Marion Hier der Combofix-Log: Code:
ATTFilter Combofix Logfile: |
|
20.05.2013, 16:40
| #4 |
| /// TB-Ausbilder | System Care AV Das ist schonmal gut. Und notfalls hast du dein Bankkonto umsonst gesperrt, aber besser so als anders. Schritt 1: (Erinnerung: Antworte mir erst, wenn du alle Schritte abgearbeitet hast!) Deinstallation von Programmen
Schritt 2: AdwCleaner: Werbeprogramme suchen und löschen Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Schritt 3: Nochmals Combofix.
__________________  Digitale Freibeuter gegen Malware! Keine Hilfe per PM! |
|
20.05.2013, 21:01
| #5 |
| | System Care AV Mmh, danke - leider hakt es schon bei Schritt 1: - ich habe ein Java (TM) 6 Update 45, das ich über die Systemsteuerung nicht deinstallieren kann. Fehlermeldung: 'Auf den Windows Installer-Dienst kann nicht zugegriffen werden. Dies kann auftreten, wenn der Windows Installer nicht richtig installiert wurde. Wenden Sie Sich an den Support, um weitere Unterstützung zu erhalten.' Dieselbe Fehlermeldung bekomme ich, wenn ich versuche, Apple Software Update, Quicktime, Apple Mobile Device Support und Apple Software Support zu löschen. Ich habe daraufhin zu Testzwecken Dropbox und FileZilla deinstalliert, das hat einwandfrei funkioniert. Den System Care AV finde ich nicht mehr in der Systemsteuerung, aber unter Start >>Programme gibt es den Eintrag noch. Kann/soll ich diese Java-Installation über die Kommandozeile deinstallieren oder jetzt einfach den Adware-Cleaner und Comofix laufen lassen? Danke und lg Marion |
|
20.05.2013, 21:49
| #6 |
| /// TB-Ausbilder | System Care AV Ich habe hier noch eine Anleitung die dir weiterhelfen könnte: Deine Javaversion ist veraltet. Da einige Schädlinge (z. B. Vundo) über Java-Exploits in das System eindringen, muss Java aktualisiert werden und alte Versionen müssen vom System entfernt werden, da die alten Versionen ein Sicherheitsrisiko darstellen. Downloade dir JavaRa auf deinen Desktop und starte es:
__________________ --> System Care AV |
|
22.05.2013, 08:48
| #7 |
| /// TB-Ausbilder | System Care AV Hallo, benötigst Du noch weiterhin Hilfe ? Sollte ich innerhalb der nächsten 24 Stunden keine Antwort von dir erhalten, werde ich dein Thema aus meinen Abos nehmen und bekomme dadurch keine Nachricht über neue Antworten. Das Verschwinden der Symptome bedeutet nicht, dass dein System schon sauber ist
__________________ Digitale Freibeuter gegen Malware! Keine Hilfe per PM! |
|
22.05.2013, 10:23
| #8 |
| | System Care AV entschuldige bitte, ryder, dass ich mich gestern nicht gemeldet habe. ich habe am freitag die erste vernissage meiner fotos und in den letzten tagen läuft einfach alles nach murphy's gesetzen. d.h., alles, was schiefgehen kann, geht auch schief  ... hab mehrere nächte nur stundenweise geschlafen...ich bin froh, wenn du mir weiterhilfst - natürlich ist der trojaner noch nicht weg. aber da ich den rechner im moment nicht unbedingt brauche, bitte ich dich, dass du den thread noch bibs sonntsg in deinem postfach lässt, wenn das geht. ich hatte nämlich zum zeitpunkt des 'befalls' eine 2 TB externe festplatte mit all meinen wichtigen fotos am pc hängen, um ein backup der neuesten zu machen. und wenn's geht, würde ich die bilder (ca. 2 jahre) gerne retten. auch die noch nicht gesicherten. deshalb möchte ich, wenn's irgendwie geht, den rechner nicht neu aufsetzen müssen ))bin momentan echt am limit, aber sobald die eröffnung vorbei ist, müsste es gehen. danke und lg marion |
|
22.05.2013, 12:18
| #9 |
| /// TB-Ausbilder | System Care AV In Ordnung. Unterbrechung Du hast mir mitgeteilt, dass du für mehr als 2 Tage nicht antworten kannst. Ich werde daher jetzt mein Abo für dieses Thema löschen. Sobald du hier geantwortet hast schreibe mir bitte eine kurze Notiz per PM mit Link hierher zu deinem Thema, damit wir weiter machen können. Alle anderen User: Neues Thema eröffnen
__________________ Digitale Freibeuter gegen Malware! Keine Hilfe per PM! |
|
28.05.2013, 20:01
| #10 |
| /// TB-Ausbilder | System Care AV Logfiles bitte.
__________________ Digitale Freibeuter gegen Malware! Keine Hilfe per PM! |
|
28.05.2013, 22:02
| #11 |
| | System Care AV ok, ich versuch*s nochmal... JavaRa_1 Code:
ATTFilter JavaRa 2.0 loaded without incident. Checking system...
User initialised redundant data purge.
......................
Removed registry subkey: java.exe
Removed registry subkey: javaw.exe
Removed registry subkey tree: JavaPlugin.FamilyVersionSupport
Removed registry subkey tree: {CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0031-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0031-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0032-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0032-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0033-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0033-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0034-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0034-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0035-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0035-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0036-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0036-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0037-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0037-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0038-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0038-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0023-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0023-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0024-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0024-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0025-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0025-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0026-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0026-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0027-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0027-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0028-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0028-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0028-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0029-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0029-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0029-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0030-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0030-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0031-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0031-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0031-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0032-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0032-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0032-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0033-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0033-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0033-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0034-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0034-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0034-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0035-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0035-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0035-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0036-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0036-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0036-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0034-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0028-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0028-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0028-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0032-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0032-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0034-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0034-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA}
Removed registry subkey tree: {E19F9331-3110-11D4-991C-005004D3B3DB}
Removed registry subkey: application/x-java-applet;version=1.6
Removed registry subkey tree: {CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0028-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0028-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0028-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0032-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0032-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0034-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0016-0000-0034-ABCDEFFEDCBC}
Removed registry subkey tree: JavaPlugin
Removed registry subkey tree: JavaWebStart.isInstalled.1.6.0.0
Removed registry subkey: 1.6
Removed registry subkey: 1.0.1
Removed registry subkey: 1.0.1_02
Removed registry subkey: 1.0.1_03
Removed registry subkey: 1.0.1_04
Removed registry subkey: 1.2
Removed registry subkey: 1.2.0_01
Removed registry subkey: {08B0E5C0-4FCB-11CF-AAA5-00401C608500}
Removed registry subkey: 0357E4991DA5FF14F9615B3412062B06
Removed registry subkey: 0357E4991DA5FF14F9615B3612062B06
Removed registry subkey: application/x-java-applet;version=1.1
Removed registry subkey: application/x-java-applet;version=1.1.1
Removed registry subkey: application/x-java-applet;version=1.1.2
Removed registry subkey: application/x-java-applet;version=1.1.3
Removed registry subkey: application/x-java-applet;version=1.2
Removed registry subkey: application/x-java-applet;version=1.2.1
Removed registry subkey: application/x-java-applet;version=1.3
Removed registry subkey: application/x-java-applet;version=1.3.1
Removed registry subkey: application/x-java-applet;version=1.4
Removed registry subkey: application/x-java-applet;version=1.4.1
Removed registry subkey: application/x-java-applet;version=1.4.2
Removed registry subkey: application/x-java-applet;version=1.5
Removal routine completed successfully. 663 items have been deleted.
Code:
ATTFilter JavaRa 2.0 loaded without incident. Checking system...
== Cleaning JRE temporary files ==
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\lastAccessed
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-2a491a18
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-2a491a18.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-2a491a18-n\decora-d3d.dll
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-2a491a18-n\decora-sse.dll
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-69d73d2e
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-69d73d2e.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-69d73d2e-n\jmc.dll
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-69d73d2e-n\msvcp71.dll
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-69d73d2e-n\msvcr71.dll
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\32\6c34baa0-136c3bd0.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\32\6c34baa0-3d393b87.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\32\6c34baa0-4d4df2ed
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\32\6c34baa0-4d4df2ed.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\32\6c34baa0-72d93ad5.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\32\6c34baa0-737bec0b
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\32\6c34baa0-737bec0b.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\3\1cfa1583-628ddced
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\3\1cfa1583-628ddced.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\26\457dee9a-4fbb43fe
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\26\457dee9a-4fbb43fe.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\11\21e928cb-5f69af99
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\11\21e928cb-5f69af99.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\lastAccessed
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\splash\splash.xml
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\13ed8b09-5cb391d9
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\13ed8b09-5cb391d9.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\7ceccf09-5b27d781
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\7ceccf09-5b27d781.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\8\3127dcc8-43f2113d
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\8\3127dcc8-43f2113d.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\8\622992c8-70ba8562
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\8\622992c8-70ba8562.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\8\6bf473c8-1096871f
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\8\6bf473c8-1096871f.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\5ec42607-67fa7db5
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\5ec42607-67fa7db5.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\6b0aec7-2f1d1f9d
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\6b0aec7-2f1d1f9d.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\7d365a07-1f46d9c9
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\7d365a07-1f46d9c9.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\63\1148e0bf-3b6a937b
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\63\1148e0bf-3b6a937b.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\61\55cd3ffd-3d4ee155
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\61\55cd3ffd-3d4ee155.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6\3d99706-498ce986
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6\3d99706-498ce986.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\59\23871bfb-4d38911f
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\59\23871bfb-4d38911f.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58\25f5deba-33cc2622
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58\25f5deba-33cc2622.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58\44db50fa-46f6c071
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58\44db50fa-46f6c071.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\57\7fe6b739-14f6e4e5
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\57\7fe6b739-14f6e4e5.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\56\62552ab8-43aa24c0
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\56\62552ab8-43aa24c0.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\55\254bdf77-7cb79395
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\55\254bdf77-7cb79395.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\55\37837377-23d254fd
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\55\37837377-23d254fd.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\55\65412537-50596eeb
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\55\65412537-50596eeb.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54\19044276-745d1143
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54\19044276-745d1143.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53\502518f5-60c360cc
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53\502518f5-60c360cc.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\27a522f4-258d2d83
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\461006b4-3f91813f
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\461006b4-3f91813f.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\52674ff4-110d4406
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\52674ff4-110d4406.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\51\51f170b3-125402e9
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\51\51f170b3-125402e9.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50\4a4bae32-2bcb19f3
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50\4a4bae32-2bcb19f3.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50\6ffaaeb2-68f2ade9
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50\6ffaaeb2-68f2ade9.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5\1b6eacc5-4bea21e2
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5\1b6eacc5-4bea21e2.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\49\d3f8c31-572a64bc
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\49\d3f8c31-572a64bc.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\49\f16d0b1-3e35a018
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\49\f16d0b1-3e35a018.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\47\38c6a4af-1462fbee
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\47\38c6a4af-1462fbee.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\46\53522f6e-2e3f64ed
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\46\53522f6e-2e3f64ed.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\46\66deeeee-6154e9f1
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\46\66deeeee-6154e9f1.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45\170f0e6d-347022c8
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45\170f0e6d-347022c8.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45\4255daed-163e0034
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45\4255daed-163e0034.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\44\33ab83ec-15bd0b67
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\44\33ab83ec-15bd0b67.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43\4670ceab-1ede2651
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43\4670ceab-1ede2651.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43\832652b-1045b5ee
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43\832652b-1045b5ee.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42\10c3606a-3e28411e
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42\10c3606a-3e28411e.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42\1ad0696a-7941bfb0
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42\1ad0696a-7941bfb0.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42\2812ea-67ae0c04
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42\2812ea-67ae0c04.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42\4941b7aa-55925ad1
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42\4941b7aa-55925ad1.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42\4941b7aa-6e9fe87e
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42\4941b7aa-6e9fe87e.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\41\52281329-20a8e1ef
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\41\52281329-20a8e1ef.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\40\441b8028-2fb15ba5
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\40\441b8028-2fb15ba5.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\40\4ef1a5a8-73eee04c
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\40\4ef1a5a8-73eee04c.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\40\708c79a8-23f2212a
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\40\708c79a8-23f2212a.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39\44036ca7-1838c2d2
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39\44036ca7-1838c2d2.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39\4afc27e7-46ad86dc
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39\4afc27e7-46ad86dc.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39\4d328f67-1a83e221
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39\4d328f67-1a83e221.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39\90f3e27-6431ee55
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39\90f3e27-6431ee55.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38\28a82066-7210a40a
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38\28a82066-7210a40a.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38\633f9a6-6ee597f6
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38\633f9a6-6ee597f6.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38\67661e66-4dd0b977
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38\67661e66-4dd0b977.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38\744fdba6-4215671d
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38\744fdba6-4215671d.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\37\4d923865-7f3b7592
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\37\4d923865-7f3b7592.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\37\770cd925-3901574f
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\37\770cd925-3901574f.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36\2471d164-7a8da1dc
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36\2471d164-7a8da1dc.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36\4af45a24-4c180334
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36\4af45a24-4c180334.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\35\11e77e23-22f01d01
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\35\11e77e23-22f01d01.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\35\3afdaae3-4e1ddb39
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\35\3afdaae3-4e1ddb39.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\35\6a9a163-66da45c6
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\35\6a9a163-66da45c6.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33\31b89a1-372809fd
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33\31b89a1-372809fd.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33\74563ea1-6c522e73
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33\74563ea1-6c522e73.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33\7edb6a61-6d206ade
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33\7edb6a61-6d206ade.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\32\4bf6c9e0-42bc3608
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\32\4bf6c9e0-42bc3608.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3\42d1f983-59ab3dad
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3\42d1f983-59ab3dad.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\28\42e69d1c-5831747a
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\28\42e69d1c-5831747a.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\28\4e482dc-7d32878d
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\28\4e482dc-7d32878d.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\28\50a6069c-69a4fb44
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\28\50a6069c-69a4fb44.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\28\5d90725c-2e162c9e
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\28\5d90725c-2e162c9e.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27\1ba2a8db-28d04763
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27\1ba2a8db-28d04763.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27\48c967db-7229047b
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27\48c967db-7229047b.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27\6d214e1b-363ab5a5
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27\6d214e1b-363ab5a5.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\26\1324e85a-54d9fbf0
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\26\1324e85a-54d9fbf0.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\26\1e8d421a-6ef888ea
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\26\1e8d421a-6ef888ea.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\26\4fe463da-1aacd0c0
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\26\4fe463da-1aacd0c0.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24\28113b98-62d30cf3
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24\28113b98-62d30cf3.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24\3605ac98-3daa30ff
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24\3605ac98-3daa30ff.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24\62d2c1d8-293815ac
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24\62d2c1d8-293815ac.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24\75f1358-512bd528
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24\75f1358-512bd528.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\23\6b420517-26f036f0
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\23\6b420517-26f036f0.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22\19d58f56-1d48cc03
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22\19d58f56-1d48cc03.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22\23e35096-4f1913c0
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22\23e35096-4f1913c0.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\21\11229155-17a8ad46
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\21\11229155-17a8ad46.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\21\2d0146d5-241c47be
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\21\2d0146d5-241c47be.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20\66e00314-7a37d41c
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20\66e00314-7a37d41c.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2\16b6ae42-6c3a4289
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2\16b6ae42-6c3a4289.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2\3ea05f42-35fef378
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2\3ea05f42-35fef378.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2\4e350cc2-14b54606
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2\4e350cc2-14b54606.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2\b15f8c2-7b471b39
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2\b15f8c2-7b471b39.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2\dc4b602-3e448a9c
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2\dc4b602-3e448a9c.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\19\1afdfbd3-5c878f5c
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\19\1afdfbd3-5c878f5c.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\19\250d9653-6259dc72
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\19\250d9653-6259dc72.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\18c102d2-7afc92de
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\18c102d2-7afc92de.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\1f1067d2-51cce706
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\1f1067d2-51cce706.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\26d1952-12bd2869
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\26d1952-12bd2869.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\49692ed2-321068f2
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\49692ed2-321068f2.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\61f5ba52-1caf887c
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\61f5ba52-1caf887c.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\64905fd2-25a1c2bb-0308.0004.2010.0802-
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\64905fd2-25a1c2bb-0308.0004.2010.0802-.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\7354cc12-45364ac6
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\7354cc12-45364ac6.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\7354cc12-6ba3d219
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\7354cc12-6ba3d219.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\17\1ec0f751-27dc82e7
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\17\1ec0f751-27dc82e7.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\16\6643d2d0-329246b7
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\16\6643d2d0-329246b7.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15\17197ccf-776c063b
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15\17197ccf-776c063b.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15\58c21f8f-26807c8e
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15\58c21f8f-26807c8e.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15\7d71f7cf-2c78b4a9
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15\7d71f7cf-2c78b4a9.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14\54fb9fce-757f6137
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14\54fb9fce-757f6137.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14\7a96a58e-705e8690
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14\7a96a58e-705e8690.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12\2250e68c-7e297736
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12\2250e68c-7e297736.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12\2666d2cc-77ceac30
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12\2666d2cc-77ceac30.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12\2cb3c10c-5d0bbad1
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12\2cb3c10c-5d0bbad1.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12\7defbc4c-1ef7ff79
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12\7defbc4c-1ef7ff79.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\11\48fa33cb-773c71ee
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\11\48fa33cb-773c71ee.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\11\6730200b-7ea5c1a6
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\11\6730200b-7ea5c1a6.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10\234aae0a-10e68e94
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10\234aae0a-10e68e94.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10\4f64a50a-5b80d512
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10\4f64a50a-5b80d512.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\40789781-5605bca0
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\40789781-5605bca0.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\469c2c81-1fec7702
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\469c2c81-1fec7702.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\4cf26a81-74e5f43f
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\4cf26a81-74e5f43f.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\518d0941-1412fc23
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\518d0941-1412fc23.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\5b7b3701-7eae7fad
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\5b7b3701-7eae7fad.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\d454d01-598a78b0
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\d454d01-598a78b0.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\0\2eea0280-25058207
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\0\2eea0280-25058207.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\0\53877140-4fa7840b
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\0\53877140-4fa7840b.idx
Code:
ATTFilter JavaRa 2.0 loaded without incident. Checking system...
User initialised redundant data purge.
......................
Removed registry subkey tree: {CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0031-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0031-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0032-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0032-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0033-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0033-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0034-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0034-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0035-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0035-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0036-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0036-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0037-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0037-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0038-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0014-0002-0038-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0023-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0023-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0024-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0024-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0025-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0025-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0026-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0026-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0027-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0027-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0028-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0028-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0028-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0029-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0029-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0029-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0030-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0030-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0031-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0031-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0031-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0032-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0032-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0032-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0033-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0033-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0033-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0034-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0034-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0035-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0035-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0035-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0036-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0036-ABCDEFFEDCBB}
Removed registry subkey tree: {CAFEEFAC-0015-0000-0036-ABCDEFFEDCBC}
Removed registry subkey tree: {CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}
Removed registry subkey tree: {CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA}
Removal routine completed successfully. 105 items have been deleted.
Code:
ATTFilter JavaRa 2.0 loaded without incident. Checking system...
Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
== Cleaning JRE temporary files ==
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\lastAccessed
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-2a491a18
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-2a491a18.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-2a491a18-n\decora-d3d.dll
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-2a491a18-n\decora-sse.dll
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-69d73d2e
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-69d73d2e.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-69d73d2e-n\jmc.dll
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-69d73d2e-n\msvcp71.dll
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-69d73d2e-n\msvcr71.dll
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\32\6c34baa0-136c3bd0.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\32\6c34baa0-3d393b87.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\32\6c34baa0-4d4df2ed
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\32\6c34baa0-4d4df2ed.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\32\6c34baa0-72d93ad5.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\32\6c34baa0-737bec0b
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\32\6c34baa0-737bec0b.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\3\1cfa1583-628ddced
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\3\1cfa1583-628ddced.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\26\457dee9a-4fbb43fe
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\26\457dee9a-4fbb43fe.idx
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\11\21e928cb-5f69af99
Deleted file: C:\Users\vivtane\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\11\21e928cb-5f69af99.idx
Code:
ATTFilter JavaRa 2.0 loaded without incident. Checking system...
Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
User initialised redundant data purge.
......................
Removal routine completed successfully. 0 items have been deleted.
AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v2.301 - Datei am 20/05/2013 um 22:54:50 erstellt
# Aktualisiert am 16/05/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (32 bits)
# Benutzer : vivtane - GEPARD
# Bootmodus : Abgesicherter Modus mit Netzwerkunterstützung
# Ausgeführt unter : C:\Users\vivtane\Desktop\adwcleaner.exe
# Option [Löschen]
**** [Dienste] ****
***** [Dateien / Ordner] *****
Datei Gelöscht : C:\Users\Public\Desktop\eBay.lnk
Ordner Gelöscht : C:\Users\vivtane\AppData\Local\PackageAware
Ordner Gelöscht : C:\Users\vivtane\AppData\Roaming\dvdvideosoftiehelpers
***** [Registrierungsdatenbank] *****
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\NCTAudioCDGrabber2.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5EB0259D-AB79-4AE6-A6E6-24FFE21C3DA4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CADAF6BE-BF50-4669-8BFD-C27BD4E6181B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\063A857434EDED11A893800002C0A966
***** [Internet Browser] *****
-\\ Internet Explorer v9.0.8112.16483
[OK] Die Registrierungsdatenbank ist sauber.
-\\ Google Chrome v26.0.1410.64
Datei : C:\Users\vivtane\AppData\Local\Google\Chrome\User Data\Default\Preferences
[OK] Die Datei ist sauber.
*************************
AdwCleaner[S1].txt - [2177 octets] - [20/05/2013 22:54:50]
########## EOF - C:\AdwCleaner[S1].txt - [2237 octets] ##########
[/CODE] AdwCleaner_2 (2013_05_20, vor JavaRa) AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v2.301 - Datei am 20/05/2013 um 23:00:30 erstellt
# Aktualisiert am 16/05/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (32 bits)
# Benutzer : vivtane - GEPARD
# Bootmodus : Abgesicherter Modus mit Netzwerkunterstützung
# Ausgeführt unter : C:\Users\vivtane\Desktop\adwcleaner.exe
# Option [Löschen]
**** [Dienste] ****
***** [Dateien / Ordner] *****
***** [Registrierungsdatenbank] *****
***** [Internet Browser] *****
-\\ Internet Explorer v9.0.8112.16483
[OK] Die Registrierungsdatenbank ist sauber.
-\\ Google Chrome v26.0.1410.64
Datei : C:\Users\vivtane\AppData\Local\Google\Chrome\User Data\Default\Preferences
[OK] Die Datei ist sauber.
*************************
AdwCleaner[S1].txt - [2306 octets] - [20/05/2013 22:54:50]
AdwCleaner[S2].txt - [818 octets] - [20/05/2013 23:00:30]
########## EOF - C:\AdwCleaner[S2].txt - [877 octets] ##########
[/CODE] AdCleaner_3 (2013_05_20, vor JavaRa) AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v2.301 - Datei am 20/05/2013 um 23:03:18 erstellt
# Aktualisiert am 16/05/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (32 bits)
# Benutzer : vivtane - GEPARD
# Bootmodus : Abgesicherter Modus mit Netzwerkunterstützung
# Ausgeführt unter : C:\Users\vivtane\Desktop\adwcleaner.exe
# Option [Löschen]
**** [Dienste] ****
***** [Dateien / Ordner] *****
***** [Registrierungsdatenbank] *****
***** [Internet Browser] *****
-\\ Internet Explorer v9.0.8112.16483
[OK] Die Registrierungsdatenbank ist sauber.
-\\ Google Chrome v26.0.1410.64
Datei : C:\Users\vivtane\AppData\Local\Google\Chrome\User Data\Default\Preferences
[OK] Die Datei ist sauber.
*************************
AdwCleaner[S1].txt - [2306 octets] - [20/05/2013 22:54:50]
AdwCleaner[S2].txt - [945 octets] - [20/05/2013 23:00:30]
AdwCleaner[S3].txt - [877 octets] - [20/05/2013 23:03:18]
########## EOF - C:\AdwCleaner[S3].txt - [936 octets] ##########
[/CODE] AdwCleaner_4 (heute, nach JavaRa) AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v2.301 - Datei am 28/05/2013 um 13:01:44 erstellt
# Aktualisiert am 16/05/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (32 bits)
# Benutzer : vivtane - GEPARD
# Bootmodus : Abgesicherter Modus mit Netzwerkunterstützung
# Ausgeführt unter : C:\Users\vivtane\Desktop\adwcleaner.exe
# Option [Löschen]
**** [Dienste] ****
***** [Dateien / Ordner] *****
***** [Registrierungsdatenbank] *****
***** [Internet Browser] *****
-\\ Internet Explorer v9.0.8112.16483
[OK] Die Registrierungsdatenbank ist sauber.
-\\ Google Chrome v26.0.1410.64
Datei : C:\Users\vivtane\AppData\Local\Google\Chrome\User Data\Default\Preferences
[OK] Die Datei ist sauber.
*************************
AdwCleaner[S1].txt - [2306 octets] - [20/05/2013 22:54:50]
AdwCleaner[S2].txt - [945 octets] - [20/05/2013 23:00:30]
AdwCleaner[S3].txt - [1004 octets] - [20/05/2013 23:03:18]
AdwCleaner[S4].txt - [937 octets] - [28/05/2013 13:01:44]
########## EOF - C:\AdwCleaner[S4].txt - [996 octets] ##########
[/CODE] |
|
28.05.2013, 22:18
| #12 |
| /// TB-Ausbilder | System Care AV Und Combofix?
__________________ Digitale Freibeuter gegen Malware! Keine Hilfe per PM! |
|
28.05.2013, 22:18
| #13 |
| | System Care AV AdwCleaner_5 (heute, nach JavaRa) AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v2.301 - Datei am 28/05/2013 um 13:09:14 erstellt
# Aktualisiert am 16/05/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (32 bits)
# Benutzer : vivtane - GEPARD
# Bootmodus : Abgesicherter Modus mit Netzwerkunterstützung
# Ausgeführt unter : C:\Users\vivtane\Desktop\adwcleaner.exe
# Option [Löschen]
**** [Dienste] ****
***** [Dateien / Ordner] *****
***** [Registrierungsdatenbank] *****
***** [Internet Browser] *****
-\\ Internet Explorer v9.0.8112.16483
[OK] Die Registrierungsdatenbank ist sauber.
-\\ Google Chrome v26.0.1410.64
Datei : C:\Users\vivtane\AppData\Local\Google\Chrome\User Data\Default\Preferences
[OK] Die Datei ist sauber.
*************************
AdwCleaner[S1].txt - [2306 octets] - [20/05/2013 22:54:50]
AdwCleaner[S2].txt - [945 octets] - [20/05/2013 23:00:30]
AdwCleaner[S3].txt - [1004 octets] - [20/05/2013 23:03:18]
AdwCleaner[S4].txt - [1064 octets] - [28/05/2013 13:01:44]
AdwCleaner[S5].txt - [997 octets] - [28/05/2013 13:09:14]
########## EOF - C:\AdwCleaner[S5].txt - [1056 octets] ##########
[/CODE] ComboFix (heute, nach JavaRa, AdwCleaner) Code:
ATTFilter Combofix Logfile: |
|
29.05.2013, 15:18
| #14 |
| /// TB-Ausbilder | System Care AV Gut!  Soweit ich das sehe haben wir damit alles Schädliche entfernt. Um sicher sein zu können müssen jetzt noch ein paar Kontrollen machen und werden dann deinen Computer noch auf einen sicheren Stand bringen. Da diese Scans jetzt sehr lange dauern können bitte ich dich mir erst wieder zu schreiben, wenn du auch wirklich alles erledigt hast oder Probleme auftreten sollten. Schritt 1: Quick-Scan mit Malwarebytes Downloade Dir bitteSchritt 2: Hinweis: Der Scan kann sehr lange (einige Stunden) dauern!  Schritt 3: Scan mit SecurityCheck Downloade Dir bitte  SecurityCheck und:
__________________ Digitale Freibeuter gegen Malware! Keine Hilfe per PM! |
|
30.05.2013, 09:11
| #15 |
| | System Care AV Hallo ryder, Malwarebytes hat noch ein file gefunden - der Ordner C:\Qoobox gehört zu Combofix, oder? Eset hat nichts gefunden. Securitycheck zeigt die kaputte Java-Installation an, die ich auch mit JavaRa nicht entfenen konnte, habe noch keine neue/funktionierende JRE installiert. Die Bulluard-Firewall und den Spamfilter kann ich (wg. des abgesicherten Modus?) nicht einschalten, Virenscanner geht. Defogger ist auch noch aktiv. Wie geht's jetzt weiter? Lg Marion Malwarebytes Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.05.29.06 Windows 7 Service Pack 1 x86 NTFS (Abgesichertenmodus/Netzwerkfähig) Internet Explorer 9.0.8112.16421 vivtane :: GEPARD [Administrator] 29.05.2013 20:28:27 mbam-log-2013-05-29 (20-28-27).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|J:\|K:\|L:\|M:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 665026 Laufzeit: 2 Stunde(n), 10 Minute(n), 21 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 1 C:\Qoobox\Quarantine\C\ProgramData\C68E63B821852AA90000C68D9D303055\C68E63B821852AA90000C68D9D303055.exe.vir (Trojan.FakeAlert.RRE) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) Security Check Code:
ATTFilter Results of screen317's Security Check version 0.99.64 Windows 7 Service Pack 1 x86 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` Windows Security Center service is not running! This report may not be accurate! BullGuard Antivirus Antivirus out of date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 Java(TM) 6 Update 45 Java version out of Date! Adobe Flash Player 11.7.700.202 Adobe Reader 9 Adobe Reader out of Date! Google Chrome 26.0.1410.43 Google Chrome 26.0.1410.64 ````````Process Check: objlist.exe by Laurent```````` windows defender MpCmdRun.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` Geändert von vivtane (30.05.2013 um 09:13 Uhr) Grund: code-tag nicht geschlossen |
|
| Themen zu System Care AV |
| autorun, bho, bingbar, blockiert, bonjour, converter, ebay, error, firefox, flash player, format, ftp, home, homepage, hängen, logfile, mp3, netzwerk, plug-in, reaktivieren, registry, scan, schannel.dll, security, server, software, system, system care, system care av, trojaner, windows |
Linear-Darstellung
