Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
DuckDuckGo läßt sich nicht enfernen

DuckDuckGo läßt sich nicht enfernen


Plagegeister aller Art und deren Bekämpfung: DuckDuckGo läßt sich nicht enfernen

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 02.09.2013, 09:33   #1
M-K-D-B
/// TB-Ausbilder
 
DuckDuckGo läßt sich nicht enfernen - Standard

DuckDuckGo läßt sich nicht enfernen


Servus,



Zitat:
Zitat von Pechvogel44 Beitrag anzeigen
was ist das mit dem DuckDuckGo eigentlich, bzw. was hat es mit meinem Problema auf sich?

Ich bin davon ausgegangen, dass das 'ne anonyme Suchmaschine ist. Was ja gut ist! Aber warum wird man die dann nicht mehr los? Hab ich mir da Schadsoftware eingefangen, die so tut, als ob sie DuckDuckGo ist, oder ist DuckDuckGo selber so penetrant?
DuckDuckGo ist eine Toolbar in Firefox, die man nicht benötigt. Zudem, wie du festgestellt hast, ist sie teilweise wieder schwer zu entfernen.





Wir spüren die letzten Reste auf, damit wir sie später entfernen können:





Schritt 1
Kontrollscan mit FRST
Führe wie zuvor beschrieben einen Scan mit FRST aus.
Setze dazu eine Haken bei Addition.txt rechts unten und klicke auf Scan.
Es werden wieder zwei Logdateien erzeugt. Poste mir diese.





Schritt 2
Lade dir die passende Version von SystemLook vom folgenden Spiegel herunter und speichere das Tool auf dem Desktop:
SystemLook (32 bit) | SystemLook (64 bit)
  • Doppelklicke auf die SystemLook.exe, um das Tool zu starten.
  • Kopiere den Inhalt der folgenden Codebox in das Textfeld des Tools:

    Code:
    ATTFilter
    :filefind
*Ask.com*
*Ask Toolbar*
*Ask Search*
*SoftonicDownloader*
*Conduit*
*Babylon*
*Crossrider*
*ZoneAlarm LTD Toolbar*
*DuckDuckGo*

:folderfind
*Ask.com*
*Ask Toolbar*
*Ask Search*
*SoftonicDownloader*
*Conduit*
*Babylon*
*Crossrider*
*ZoneAlarm LTD Toolbar*
*DuckDuckGo*

:regfind
Ask.com
Ask Toolbar
Ask Search
SoftonicDownloader
Conduit
Babylon
Crossrider
ZoneAlarm LTD Toolbar
DuckDuckGo
  • Klicke nun auf den Button Look, um den Scan zu starten.
  • Der Suchlauf kann einige Zeit dauern.
  • Wenn der Suchlauf beendet ist, wird sich dein Editor mit den Ergebnissen öffnen, poste diese in deinen Thread.
  • Die Ergebnisse werden auch auf dem Desktop als SystemLook.txt gespeichert.








Gibt es noch Probleme mit Malware? Wenn ja, welche?
Wie läuft der Rechner derzeit?





Bitte poste mit deiner nächsten Antwort
  • die beiden Logdateien von FRST,
  • die Logdatei von SystemLook,
  • die Beantwortung der gestellten Fragen.
Alt 02.09.2013, 19:28   #2
Pechvogel44
 
DuckDuckGo läßt sich nicht enfernen - Standard

DuckDuckGo läßt sich nicht enfernen


Zitat:
Zitat von M-K-D-B Beitrag anzeigen
Gibt es noch Probleme mit Malware? Wenn ja, welche?
Wie läuft der Rechner derzeit?
Bis jetzt hat sich nix geändert: DuckDuckGo ist immer noch im FF aktiv (an erster Stelle der Suchmaschinen).

Allerdings kommt mir der Rechner inzwischen bei manchen Aktionen extrem langsam vor...

Zitat:
Zitat von M-K-D-B Beitrag anzeigen
Bitte poste mit deiner nächsten Antwort
  • die beiden Logdateien von FRST,
  • die Logdatei von SystemLook,
  • die Beantwortung der gestellten Fragen.
FRST:


FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-09-2013 05
Ran by ADMIN (administrator) on ACE on 02-09-2013 20:06:42
Running from C:\Users\xxxxxxx\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(AMD) C:\Windows\system32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVerMedia) C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe
() C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe
() C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Acer Incorporated) C:\Program Files\Acer\Optical Drive Power Management\ODDPWR.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Windows\PLFSetI.exe
(The Eraser Project) C:\Program Files\Eraser\Eraser.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
() C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
(AVerMedia TECHNOLOGIES, Inc.) C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe
(Mozilla Messaging) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerEvent.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(PortableApps.com) E:\Portable\KeePassPortable\KeePassPortable.exe
(Dominik Reichl) E:\Portable\KeePassPortable\App\keepass\keepass.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\system32\taskmgr.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [320000 2009-04-09] (AlcorMicro Co., Ltd.)
HKLM\...\Run: [ODDPwr] - C:\Program Files\Acer\Optical Drive Power Management\ODDPwr.exe [223264 2010-04-22] (Acer Incorporated)
HKLM\...\Run: [mwlDaemon] - C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe [349552 2010-04-17] (Egis Technology Inc.)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10775072 2010-04-22] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2040352 2010-04-22] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1842472 2009-09-17] (Synaptics Incorporated)
HKLM\...\Run: [PLFSetI] - C:\Windows\PLFSetI.exe [206208 2010-01-13] ()
HKLM\...\Run: [Acer ePower Management] - C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe [496160 2010-04-23] (Acer Incorporated)
HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-03-18] (CANON INC.)
HKLM\...\Run: [Eraser] - C:\PROGRA~1\Eraser\Eraser.exe [979344 2010-04-10] (The Eraser Project)
HKLM\...\Policies\Explorer: [NoDrives] 0
HKCU\...\Policies\Explorer: [NoDrives] 0
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-04] (Intel Corporation)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1300560 2010-03-03] (Dritek System Inc.)
HKLM-x32\...\Run: [SuiteTray] - C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [337264 2010-04-17] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisUpdate] - C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201584 2010-03-11] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisTecPMMUpdate] - C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [407920 2010-03-11] (Egis Technology Inc.)
HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [260608 2010-03-09] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [MDS_Menu] - C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] -  [x]
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-06-13] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKU\Admin\...\Run: [CONNMGRTRAY] - C:\Program Files\Acer\Acer 3G Connection Manager \ConnMgrLauncher.exe Silent [x]
HKU\Admin\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-01-15] ()
HKU\Default\...\Run: [CONNMGRTRAY] - C:\Program Files\Acer\Acer 3G Connection Manager \ConnMgrLauncher.exe Silent [x]
HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-01-15] ()
HKU\Default User\...\Run: [CONNMGRTRAY] - C:\Program Files\Acer\Acer 3G Connection Manager \ConnMgrLauncher.exe Silent [x]
HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-01-15] ()
HKU\xxxxi\...\Run: [CONNMGRTRAY] - C:\Program Files\Acer\Acer 3G Connection Manager \ConnMgrLauncher.exe Silent [x]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AVer HID Receiver.lnk
ShortcutTarget: AVer HID Receiver.lnk -> C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AVerQuick.lnk
ShortcutTarget: AVerQuick.lnk -> C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe (AVerMedia TECHNOLOGIES, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = 
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {FC2B76FC-2132-4D80-A9A3-1F5C6E49066B} -  No File
Toolbar: HKCU - No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} -  No File
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Acer\Acer VCM\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 62.109.121.2 62.109.121.1

FireFox:
========
FF ProfilePath: C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default
FF SearchEngineOrder.1: Ask.com
FF SelectedSearchEngine: Google
FF Homepage: about:home
FF NetworkProxy: "http", "127.0.0.1"
FF NetworkProxy: "http_port", 62707
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\searchplugins\youtube.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF

==================== Services (Whitelisted) =================

R2 a2AntiMalware; C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe [3082640 2012-09-19] (Emsisoft GmbH)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 AVerRemote; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe [352256 2008-06-06] (AVerMedia)
R2 AVerScheduleService; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe [409600 2008-07-14] ()
R2 ePowerSvc; C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [820768 2010-04-23] (Acer Incorporated)
S3 MWLService; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [305520 2010-04-17] (Egis Technology Inc.)
R2 ODDPwrSvc; C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe [171040 2010-04-22] (Acer Incorporated)
R2 RichVideo; C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [244904 2010-02-03] ()
R2 RS_Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [260640 2010-01-30] (Acer Incorporated)

==================== Drivers (Whitelisted) ====================

S3 a2acc; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2accx64.sys [66320 2012-04-30] (Emsisoft GmbH)
S3 a2acc; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2accx64.sys [66320 2012-04-30] (Emsisoft GmbH)
R1 A2DDA; C:\Program Files (x86)\Emsisoft Anti-Malware\a2ddax64.sys [23208 2011-05-19] (Emsi Software GmbH)
R1 A2DDA; C:\Program Files (x86)\Emsisoft Anti-Malware\a2ddax64.sys [23208 2011-05-19] (Emsi Software GmbH)
R1 a2injectiondriver; C:\Program Files (x86)\Emsisoft Anti-Malware\a2dix64.sys [44688 2012-04-30] (Emsisoft GmbH)
R1 a2injectiondriver; C:\Program Files (x86)\Emsisoft Anti-Malware\a2dix64.sys [44688 2012-04-30] (Emsisoft GmbH)
R1 a2util; C:\Program Files (x86)\Emsisoft Anti-Malware\a2util64.sys [14720 2010-05-05] (Emsi Software GmbH)
R1 a2util; C:\Program Files (x86)\Emsisoft Anti-Malware\a2util64.sys [14720 2010-05-05] (Emsi Software GmbH)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-27] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-27] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-27] ()
R3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [245248 2010-01-26] (Huawei Technologies Co., Ltd.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-01 12:06 - 2013-09-01 12:06 - 00004983 _____ C:\Users\ADMIN.Ace\Desktop\JRT.txt
2013-09-01 11:53 - 2013-09-01 11:53 - 00000000 ____D C:\Windows\ERUNT
2013-09-01 11:41 - 2013-09-01 11:43 - 00000000 ____D C:\AdwCleaner
2013-09-01 11:37 - 2013-09-01 11:37 - 00026915 _____ C:\Users\ADMIN.Ace\Desktop\ComboFix.txt
2013-09-01 11:16 - 2013-09-01 11:16 - 00026914 _____ C:\ComboFix.txt
2013-09-01 10:26 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-09-01 10:26 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-09-01 10:26 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-09-01 10:26 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-09-01 10:26 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-09-01 10:26 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-09-01 10:26 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-09-01 10:26 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-09-01 10:24 - 2013-09-01 11:16 - 00000000 ____D C:\Qoobox
2013-09-01 10:21 - 2013-09-01 10:20 - 01027511 _____ (Thisisu) C:\Users\xxxxxxx\Desktop\JRT.exe
2013-09-01 10:21 - 2013-09-01 10:20 - 00994642 _____ C:\Users\xxxxxxx\Desktop\adwcleaner.exe
2013-09-01 10:14 - 2013-09-01 10:12 - 05115930 ____R (Swearware) C:\Users\xxxxxxx\Desktop\ComboFix.exe
2013-08-31 14:19 - 2013-08-31 14:19 - 00000000 ____D C:\FRST
2013-08-31 13:28 - 2013-08-31 14:09 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-08-31 13:27 - 2013-08-31 14:09 - 00000000 ____D C:\Users\ADMIN.Ace\Desktop\mbar
2013-08-31 13:27 - 2013-08-31 13:27 - 00000000 ____D C:\Users\ADMIN.Ace\Neuer Ordner
2013-08-25 19:59 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-25 19:59 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-25 19:59 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-25 19:59 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-25 19:59 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-25 19:59 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-25 19:59 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-25 19:59 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-25 19:59 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-25 19:59 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-25 19:59 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-25 19:59 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-25 19:59 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-25 19:59 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-25 19:59 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-25 19:59 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-25 19:59 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-25 19:59 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-25 19:59 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-08-25 19:58 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-25 19:58 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-25 19:58 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-25 19:58 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-25 19:58 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-25 19:58 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-25 19:58 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-25 19:58 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-25 19:58 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-25 19:58 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-25 19:58 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-25 19:58 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-25 17:26 - 2013-08-25 19:46 - 00000000 ____D C:\Windows\system32\MRT
2013-08-25 11:01 - 2013-08-25 11:02 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-25 10:56 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-25 10:56 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-25 10:56 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-25 10:56 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-25 10:56 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-25 10:56 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-25 10:56 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-25 10:56 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-25 10:55 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-25 10:55 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-25 10:55 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-25 10:55 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-25 10:55 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-25 10:55 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-25 10:55 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-25 10:55 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys

==================== One Month Modified Files and Folders =======

2013-09-02 20:06 - 2013-09-02 20:05 - 01951954 _____ (Farbar) C:\Users\xxxxxxx\Desktop\FRST64.exe
2013-09-02 20:02 - 2011-01-24 22:26 - 01652979 _____ C:\Windows\WindowsUpdate.log
2013-09-02 19:49 - 2012-09-23 18:09 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-09-02 19:49 - 2012-09-21 09:49 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-02 19:49 - 2012-09-16 20:48 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-01 14:58 - 2010-07-22 23:34 - 00654852 _____ C:\Windows\system32\perfh007.dat
2013-09-01 14:58 - 2010-07-22 23:34 - 00130434 _____ C:\Windows\system32\perfc007.dat
2013-09-01 14:58 - 2009-07-14 07:13 - 01500294 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-01 14:14 - 2012-12-29 16:23 - 00010129 _____ C:\Windows\setupact.log
2013-09-01 12:58 - 2009-07-14 06:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-01 12:58 - 2009-07-14 06:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-01 12:50 - 2012-09-21 09:49 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-01 12:50 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-01 12:49 - 2012-08-23 19:21 - 00000000 ____D C:\Program Files (x86)\Emsisoft Anti-Malware
2013-09-01 12:06 - 2013-09-01 12:06 - 00004983 _____ C:\Users\ADMIN.Ace\Desktop\JRT.txt
2013-09-01 11:53 - 2013-09-01 11:53 - 00000000 ____D C:\Windows\ERUNT
2013-09-01 11:44 - 2013-01-06 01:37 - 00011470 _____ C:\Windows\PFRO.log
2013-09-01 11:43 - 2013-09-01 11:41 - 00000000 ____D C:\AdwCleaner
2013-09-01 11:37 - 2013-09-01 11:37 - 00026915 _____ C:\Users\ADMIN.Ace\Desktop\ComboFix.txt
2013-09-01 11:16 - 2013-09-01 11:16 - 00026914 _____ C:\ComboFix.txt
2013-09-01 11:16 - 2013-09-01 10:24 - 00000000 ____D C:\Qoobox
2013-09-01 11:13 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-09-01 10:20 - 2013-09-01 10:21 - 01027511 _____ (Thisisu) C:\Users\xxxxxxx\Desktop\JRT.exe
2013-09-01 10:20 - 2013-09-01 10:21 - 00994642 _____ C:\Users\xxxxxxx\Desktop\adwcleaner.exe
2013-09-01 10:12 - 2013-09-01 10:14 - 05115930 ____R (Swearware) C:\Users\xxxxxxx\Desktop\ComboFix.exe
2013-08-31 14:19 - 2013-08-31 14:19 - 00000000 ____D C:\FRST
2013-08-31 14:09 - 2013-08-31 13:28 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-08-31 14:09 - 2013-08-31 13:27 - 00000000 ____D C:\Users\ADMIN.Ace\Desktop\mbar
2013-08-31 13:27 - 2013-08-31 13:27 - 00000000 ____D C:\Users\ADMIN.Ace\Neuer Ordner
2013-08-31 13:27 - 2010-10-16 13:59 - 00000000 ____D C:\Users\ADMIN.Ace
2013-08-29 21:44 - 2010-10-16 20:24 - 00000000 ____D C:\Users\xxxxi\AppData\Roaming\Macromedia
2013-08-28 21:10 - 2012-09-16 21:06 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-26 20:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-08-25 19:46 - 2013-08-25 17:26 - 00000000 ____D C:\Windows\system32\MRT
2013-08-25 17:26 - 2010-10-17 14:16 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-25 11:02 - 2013-08-25 11:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

Files to move or delete:
====================
C:\Users\ADMIN.Ace\AppData\Local\Temp\Quarantine.exe
C:\Users\ADMIN.Ace\AppData\Local\Temp\jrt\erunt\ERUNT.EXE
C:\Users\xxxxxxx\AppData\Local\Temp\nst51AF.tmp\FindProcDLL.dll
C:\Users\xxxxxxx\AppData\Local\Temp\nst51AF.tmp\newadvsplash.dll
C:\Users\xxxxxxx\AppData\Local\Temp\nst51AF.tmp\System.dll
C:\Users\xxxxxxx\AppData\Local\Temp\nslA8ED.tmp\FindProcDLL.dll
C:\Users\xxxxxxx\AppData\Local\Temp\nslA8ED.tmp\newadvsplash.dll
C:\Users\xxxxxxx\AppData\Local\Temp\nslA8ED.tmp\System.dll
C:\Users\xxxxxxx\AppData\Local\Temp\jrt\erunt\ERUNT.EXE

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-01 11:35

==================== End Of Log ============================
--- --- ---

--- --- ---


Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-09-2013 05
Ran by ADMIN at 2013-09-02 20:12:50
Running from C:\Users\xxxxxxx\Desktop
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
Acer 3G Connection Manager (x32 Version: 2.00.3002)
Acer Arcade Deluxe (x32 Version: 4.0.7615)
Acer Arcade Movie (x32 Version: 9.0.6423)
Acer Backup Manager (x32 Version: 2.0.0.60)
Acer Crystal Eye Webcam (x32 Version: 5.2.11.2)
Acer eRecovery Management (x32 Version: 4.05.3011)
Acer GameZone Console (x32 Version: 6.1.0.2)
Acer PowerSmart Manager (x32 Version: 5.02.3003)
Acer Registration (x32 Version: 1.03.3003)
Acer ScreenSaver (x32 Version: 1.1.0119.2010)
Acer Updater (x32 Version: 1.02.3001)
Acer VCM (x32 Version: 4.05.3002)
Acrobat.com (x32 Version: 1.6.65)
Adobe AIR (x32 Version: 3.8.0.870)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)
Adobe Reader X (10.1.7) - Deutsch (x32 Version: 10.1.7)
Alcor Micro USB Card Reader (x32 Version: 1.2.17.05001)
Amazon MP3-Downloader 1.0.9 (x32)
Amazonia (x32)
AMD APP SDK Runtime (Version: 2.4.595.1)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.23)
ATI Catalyst Install Manager (Version: 3.0.820.0)
Audiograbber 1.83 SE  (x32 Version: 1.83 SE)
avast! Free Antivirus (x32 Version: 8.0.1489.0)
AVerMedia A850 USB DVBT 1.0.64.18 (x32 Version: 1.0.64.18)
AVerTV (x32 Version: 6.0.12)
Backup Manager Basic (x32 Version: 2.0.0.60)
Bonjour (Version: 3.0.0.10)
Cake Mania (x32)
Canon MP Navigator EX 3.0 (x32)
Canon MP550 series Benutzerregistrierung (x32)
Canon MP550 series MP Drivers
Canon Utilities Easy-PhotoPrint EX (x32)
Canon Utilities My Printer (x32)
Canon Utilities Solution Menu (x32)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center (x32 Version: 2011.0613.2238.38801)
Catalyst Control Center InstallProxy (x32 Version: 2010.0421.657.10561)
Catalyst Control Center InstallProxy (x32 Version: 2011.0613.2238.38801)
Catalyst Control Center Localization All (x32 Version: 2011.0613.2238.38801)
Catalyst Control Center Profiles Mobile (x32 Version: 2011.0613.2238.38801)
CCC Help Chinese Standard (x32 Version: 2011.0613.2237.38801)
CCC Help Chinese Traditional (x32 Version: 2011.0613.2237.38801)
CCC Help Czech (x32 Version: 2011.0613.2237.38801)
CCC Help Danish (x32 Version: 2011.0613.2237.38801)
CCC Help Dutch (x32 Version: 2011.0613.2237.38801)
CCC Help English (x32 Version: 2011.0613.2237.38801)
CCC Help Finnish (x32 Version: 2011.0613.2237.38801)
CCC Help French (x32 Version: 2011.0613.2237.38801)
CCC Help German (x32 Version: 2011.0613.2237.38801)
CCC Help Greek (x32 Version: 2011.0613.2237.38801)
CCC Help Hungarian (x32 Version: 2011.0613.2237.38801)
CCC Help Italian (x32 Version: 2011.0613.2237.38801)
CCC Help Japanese (x32 Version: 2011.0613.2237.38801)
CCC Help Korean (x32 Version: 2011.0613.2237.38801)
CCC Help Norwegian (x32 Version: 2011.0613.2237.38801)
CCC Help Polish (x32 Version: 2011.0613.2237.38801)
CCC Help Portuguese (x32 Version: 2011.0613.2237.38801)
CCC Help Russian (x32 Version: 2011.0613.2237.38801)
CCC Help Spanish (x32 Version: 2011.0613.2237.38801)
CCC Help Swedish (x32 Version: 2011.0613.2237.38801)
CCC Help Thai (x32 Version: 2011.0613.2237.38801)
CCC Help Turkish (x32 Version: 2011.0613.2237.38801)
ccc-utility64 (Version: 2011.0613.2238.38801)
CDBurnerXP (Version: 4.3.8.2474)
CDBurnerXP (x32 Version: 4.5.0.3661)
CDex - Open Source Digital Audio CD Extractor (x32 Version: 1.70.4.2009)
Chicken Invaders 2 (x32)
Dairy Dash (x32)
Dream Day First Home (x32)
eaner (Version: 3.22)
eBay Worldwide (x32 Version: 2.1.0901)
Emsisoft Anti-Malware (x32 Version: 6.6)
Eraser 6.0.7.1893 (Version: 6.7.1893)
ESET Online Scanner v3 (x32)
eSobi v2 (x32 Version: 2.0.4.000274)
FairStars CD Ripper 1.50 (x32)
Farm Frenzy 2 (x32)
Free YouTube to MP3 Converter version 3.12.0.128 (x32 Version: 3.12.0.128)
Freecom Network Storage Assistant 1.66 (x32)
FreeOCR v4.2 (x32)
Galapago (x32)
Google Earth Plug-in (x32 Version: 7.1.1.1888)
Google Update Helper (x32 Version: 1.3.21.153)
Granny In Paradise (x32)
Heroes of Hellas (x32)
Hydrogen (x32)
Identity Card (x32 Version: 1.00.3003)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Management Engine Components (x32 Version: 6.0.0.1179)
Intel(R) Rapid Storage Technology (x32 Version: 9.6.0.1014)
Intel(R) Turbo Boost Technology Driver (x32 Version: 01.00.01.1002)
iTunes (Version: 11.0.4.4)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
Junk Mail filter update (x32 Version: 14.0.8089.726)
Launch Manager (x32 Version: 4.0.7)
MediaShow Espresso (x32 Version: 5.5.1403_23691)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Choice Guard (x32 Version: 2.0.48.0)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Mozilla Firefox 18.0.1 (x86 de) (x32 Version: 18.0.1)
Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)
Mozilla Maintenance Service (x32 Version: 23.0.1)
Mozilla Thunderbird (3.1.6) (x32 Version: 3.1.6 (de))
Mp3tag v2.46a (x32 Version: v2.46a)
MSVCRT (x32 Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MyWinLocker (x32 Version: 3.1.210.0)
MyWinLocker Suite (x32 Version: 3.1.210.0)
Norton Online Backup (x32 Version: 1.2.0.36)
NTI Backup Now 5 (x32 Version: 5.1.2.628)
NTI Backup Now Standard (x32 Version: 5.1.2.628)
NTI Media Maker 8 (x32 Version: 8.0.12.6630)
OpenOffice.org 3.2 (x32 Version: 3.2.9502)
Optical Drive Power Management (x32 Version: 1.01.3007)
PDFCreator (x32 Version: 1.2.0)
Power Tab Editor 1.7 (x32 Version: 1.7.0)
PSPad editor (x32)
PX Profile Update (x32 Version: 1.00.1.)
QuickTime (x32 Version: 7.74.80.86)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6096)
Rome - Total War (x32 Version: 1.5)
Shredder (Version: 2.0.8.3)
Shredder (x32 Version: 2.0.8.3)
Sibelius Scorch (Firefox, Opera, Netscape only) (x32 Version: 6.2.0)
SimpleOCR 3.1 (x32)
Spin & Win (x32)
Synaptics Pointing Device Driver (Version: 14.0.6.0)
TrueCrypt (x32 Version: 7.0a)
UltraEdit (x32 Version: 17.10.1008)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
VC 9.0 Runtime (x32 Version: 1.0.0)
VLC media player 2.0.4 (Version: 2.0.4)
Welcome Center (x32 Version: 1.01.3002)
WIDCOMM Bluetooth Software (Version: 6.3.0.4300)
Winamp (x32 Version: 5.622 )
Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1)
Windows Live Anmelde-Assistent (x32 Version: 5.000.818.5)
Windows Live Call (x32 Version: 14.0.8064.0206)
Windows Live Communications Platform (x32 Version: 14.0.8064.206)
Windows Live Essentials (x32 Version: 14.0.8089.0726)
Windows Live Essentials (x32 Version: 14.0.8089.726)
Windows Live Fotogalerie (x32 Version: 14.0.8081.709)
Windows Live Mail (x32 Version: 14.0.8089.0726)
Windows Live Messenger (x32 Version: 14.0.8089.0726)
Windows Live Movie Maker (x32 Version: 14.0.8091.0730)
Windows Live Sync (x32 Version: 14.0.8089.726)
Windows Live Writer (x32 Version: 14.0.8089.0726)
Windows Live-Uploadtool (x32 Version: 14.0.8014.1029)
Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8)

==================== Restore Points  =========================

28-07-2013 14:14:02 Removed 7-Zip 4.65 (x64 edition)
29-07-2013 16:44:02 Windows-Sicherung
31-07-2013 17:00:47 Windows Update
25-08-2013 08:52:02 Windows Update
25-08-2013 15:25:57 Windows Update
25-08-2013 17:40:31 Windows-Sicherung
28-08-2013 19:15:44 Windows Update
01-09-2013 08:26:49 ComboFix created restore point
02-09-2013 17:50:49 Windows-Sicherung

==================== Hosts content: ==========================

2009-07-14 04:34 - 2013-09-01 11:13 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => start w32time task_started
Task: {3AB90948-6B64-411C-8F6C-76E925935472} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-05-09] (AVAST Software)
Task: {5FED9F23-473D-4B82-8A33-66E8E397A2BF} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-08-22] (Piriform Ltd)
Task: {7F42897A-DBEE-4478-B31E-CB27C4A24B4E} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => start osppsvc
Task: {85A5E0DB-7165-4387-B7B6-254CCFC3C8A5} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-20] (Microsoft Corporation)
Task: {AEBFC5A1-20D6-4E32-A321-CEFAD77B6C4A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-04-17] (Google Inc.)
Task: {C80AB018-D7B7-4956-82CC-6B6768B334B5} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\System32\sdengin2.dll [2010-11-20] (Microsoft Corporation)
Task: {DEA89DA7-6517-4020-B706-AAEF72A0160C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-04-17] (Google Inc.)
Task: {E705A20D-D574-4ED2-8A79-DBC1ACEC3A86} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-28] (Adobe Systems Incorporated)
Task: {EEE57F91-46AE-4F46-B09D-97D11ED65F6E} - \Scheduled Update for Ask Toolbar No Task File
Task: {EF6CB39C-1906-4618-983B-DDCB130BCF2A} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {F9FD6FA0-38C3-4A3F-927C-5973D56ECB05} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-20] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-05-25 09:42 - 2013-05-09 10:58 - 00302224 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\snxhk64.dll
2012-08-23 19:21 - 2012-08-23 22:39 - 00240304 _____ (Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2hooks64.dll
2010-07-22 13:57 - 2010-04-23 10:46 - 00271904 _____ (Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\SysHook.dll
2010-05-06 14:48 - 2011-06-13 22:22 - 00040448 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll
2013-02-01 21:47 - 2011-06-13 23:04 - 00787968 _____ (ATI Technologies Inc. ) C:\Windows\system32\aticfx64.dll
2010-05-06 14:48 - 2011-06-13 22:46 - 05080576 _____ (ATI Technologies Inc. ) C:\Windows\system32\atidxx64.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00133840 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\ashShA64.dll
2010-04-17 07:58 - 2010-04-17 07:58 - 00137584 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x64\psdprotect.dll
2010-04-17 07:58 - 2010-04-17 07:58 - 00277360 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x64\sysenv.dll
2009-07-14 01:30 - 2009-07-14 03:41 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\WINBRAND.dll
2010-03-26 11:46 - 2010-03-26 11:46 - 00558368 _____ (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btncopy.dll
2009-07-14 02:40 - 2009-07-14 03:41 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\prnntfy.dll
2009-07-14 02:40 - 2009-07-14 03:41 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll
2011-11-14 19:59 - 2010-11-20 06:27 - 01050624 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll
2011-11-14 19:57 - 2010-11-20 06:27 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2009-07-14 02:31 - 2009-07-14 03:41 - 02137600 _____ (Microsoft Corporation) C:\Windows\System32\NLSData0007.dll
2010-04-02 23:06 - 2010-04-02 23:06 - 00062832 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec Shredder\x64\ShredderContextMenu.dll
2010-04-02 23:06 - 2010-04-02 23:06 - 00321904 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec Shredder\x64\FrameUtility.dll
2010-04-02 23:06 - 2010-04-02 23:06 - 01066864 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec Shredder\x64\LibFrame.dll
2010-05-06 14:37 - 2010-05-06 14:37 - 00179704 _____ (Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.21022.8_none_7644f34b9721eccf\ATL90.DLL
2012-08-23 19:21 - 2012-04-14 14:47 - 00314288 _____ (Emsiûoft GmbH) C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\A2CONTMENU64.DLL
2010-04-10 09:45 - 2010-04-10 09:45 - 00250256 _____ (The Eraser Project) C:\PROGRA~1\Eraser\ERASER~3.DLL
2011-11-06 20:11 - 2011-11-06 20:11 - 05102400 _____ (Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.4148_none_04480933ab2137b1\mfc90u.dll
2011-11-06 20:11 - 2011-11-06 20:11 - 00176456 _____ (Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.4148_none_0a1d2fcba76b3f00\ATL90.DLL
2010-04-17 07:58 - 2010-04-17 07:58 - 00376688 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x64\mwlshellext.dll
2012-06-30 06:19 - 2012-06-30 06:19 - 00097792 _____ (Dropbox, Inc.) C:\Users\xxxxxxx\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
2009-07-14 01:19 - 2009-07-14 03:41 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\msvcp60.dll
2010-05-06 14:48 - 2010-08-25 13:04 - 00243200 _____ (Intel Corporation) C:\Windows\system32\igfxpph.dll
2010-05-06 14:48 - 2010-08-25 13:04 - 00108032 _____ (Intel Corporation) C:\Windows\system32\hccutils.DLL
2013-02-01 21:47 - 2010-08-25 13:05 - 00088064 _____ (Intel Corporation) C:\Windows\system32\igfxrDEU.lrc
2010-05-06 14:48 - 2010-08-25 13:04 - 00061952 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.dll
2011-06-13 23:32 - 2011-06-13 23:32 - 00838144 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll
2011-06-13 23:31 - 2011-06-13 23:31 - 00004608 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiamdeu.dll
2010-05-06 14:08 - 2010-04-22 19:56 - 00149536 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2010-05-06 14:08 - 2010-04-22 19:55 - 02607136 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2010-05-06 14:49 - 2009-09-17 14:09 - 00396072 _____ (Synaptics Incorporated) C:\Windows\system32\SynCOM.dll
2010-05-06 14:49 - 2009-09-17 14:09 - 00205608 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPAPI.dll
2013-07-11 18:24 - 2013-04-24 00:56 - 09991832 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll
2013-07-12 09:21 - 2013-07-12 09:21 - 15577088 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\mscorlib\88744044294787b99dd4a8704ab75a79\mscorlib.ni.dll
2009-07-13 22:37 - 2009-06-10 22:39 - 00085312 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsec.dll
2013-01-09 20:58 - 2012-10-05 12:52 - 01574496 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll
2010-04-10 09:45 - 2010-04-10 09:45 - 00108944 _____ (The Eraser Project) C:\Program Files\Eraser\Eraser.Manager.dll
2013-08-25 21:34 - 2013-08-25 21:34 - 10655744 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\System\af0a0b96a02f9925eb84392ee65a5cfa\System.ni.dll
2013-08-25 21:36 - 2013-08-25 21:36 - 02320384 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Drawing\868d117286ad259249f31d3fe813d39a\System.Drawing.ni.dll
2013-08-25 21:36 - 2013-08-25 21:36 - 17383424 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Forms\95674cb72317e3a5380ea450b913786f\System.Windows.Forms.ni.dll
2013-08-26 19:40 - 2013-08-26 19:40 - 02131968 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualBas#\603248adb7974762df07835b282cc90f\Microsoft.VisualBasic.ni.dll
2010-04-10 09:45 - 2010-04-10 09:45 - 00058768 _____ (The Eraser Project) C:\Program Files\Eraser\Eraser.Util.dll
2010-04-10 09:45 - 2010-04-10 09:45 - 00099216 _____ (The Eraser Project) C:\Program Files\Eraser\Plugins\Eraser.DefaultPlugins.dll
2013-08-26 19:39 - 2013-08-26 19:40 - 03315712 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Core\296ad113496c7e97a1689ffef9550b19\System.Core.ni.dll
2010-04-10 09:45 - 2010-04-10 09:45 - 00024976 _____ (The Eraser Project) C:\Program Files\Eraser\en\Eraser.resources.dll
2010-04-10 09:45 - 2010-04-10 09:45 - 00014224 _____ (DELMATIC) C:\Program Files\Eraser\BevelLine.dll
2013-08-25 21:35 - 2013-08-25 21:35 - 06964736 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Xml\3975acf49313ceea1280da91f0383480\System.Xml.ni.dll
2010-04-10 09:45 - 2010-04-10 09:45 - 00017296 _____ (The Eraser Project) C:\Program Files\Eraser\Plugins\en\Eraser.DefaultPlugins.resources.dll
2010-04-10 09:45 - 2010-04-10 09:45 - 00030096 _____ (The Eraser Project) C:\Program Files\Eraser\en\Eraser.Manager.resources.dll
2010-05-06 14:48 - 2010-08-25 13:04 - 00108032 _____ (Intel Corporation) C:\Windows\System32\hccutils.DLL
2013-08-25 19:58 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00136936 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\aswJsFlt64.dll
2013-05-25 09:42 - 2013-05-09 11:02 - 00208536 _____ (AVAST Software) C:\PROGRA~1\AVASTS~1\Avast\AavmRpch64.dll
2013-02-27 22:41 - 2013-01-13 21:51 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\D3D10Warp.dll
2009-07-14 02:00 - 2009-07-14 03:41 - 00283648 _____ (Microsoft Corporation) C:\Windows\System32\LocationApi.dll
2009-07-14 02:00 - 2009-07-14 03:41 - 00174592 _____ (Microsoft Corporation) C:\Windows\System32\SensorsApi.dll
2009-07-14 01:28 - 2009-07-14 03:41 - 00271360 _____ (Microsoft Corporation) C:\Windows\System32\WDSCORE.dll
2013-05-31 09:52 - 2013-05-31 09:52 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2010-05-06 14:48 - 2011-06-13 22:22 - 00038912 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll
2010-05-06 14:48 - 2011-06-13 22:40 - 03420672 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll
2009-07-14 01:56 - 2009-07-14 03:41 - 00163328 _____ (Microsoft Corporation) C:\Program Files\Windows Sidebar\wlsrvc.dll
2011-08-31 00:05 - 2011-08-31 00:05 - 00132968 _____ (Apple Inc.) C:\Program Files\Bonjour\mdnsNSP.dll
2010-05-06 14:48 - 2010-03-08 13:07 - 00457296 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDUtl.dll
2010-07-22 13:57 - 2010-04-23 10:46 - 00218144 _____ (Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\PowerSettingControl.dll
2010-07-22 13:57 - 2010-04-23 10:46 - 00217120 _____ (Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\CommonControl.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00095744 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.Implementation.dll
2011-06-13 23:32 - 2011-06-13 23:32 - 00021504 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\LOG.Foundation.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00024576 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\LOG.Foundation.Private.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00055296 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\LOG.Foundation.Implementation.dll
2011-11-15 22:03 - 2010-11-13 02:08 - 00315392 _____ (Microsoft Corporation) C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00005632 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.Foundation.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\LOG.Foundation.Implementation.Private.dll
2013-08-25 21:38 - 2013-08-25 21:38 - 01022976 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Remo#\bda1d99ab089bb2f18a48ba06d5a4923\System.Runtime.Remoting.ni.dll
2013-08-25 21:38 - 2013-08-25 21:38 - 15270912 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web\c804ef4dba76d2aa3db8d22ec5fbf4e0\System.Web.ni.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00021504 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.Implementation.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00015360 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\NEWAEM.Foundation.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00061440 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Foundation.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00018432 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Foundation.XManifest.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00057344 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Runtime.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00037376 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Runtime.Shared.Private.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00029184 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Foundation.Private.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00005632 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Runtime.Shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00032768 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\ATICCCom.dll
2011-03-01 05:24 - 2011-03-01 05:24 - 00081920 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\ADL.Foundation.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00034816 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Server.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00006144 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Server.Shared.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00042496 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.Source.Kit.Server.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00006656 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.DPPE.Shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00007168 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.Hotkeys.Shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00006656 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.WinMessages.Shared.dll
2009-04-22 13:13 - 2009-04-22 13:13 - 00045056 _____ (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0601.dll
2010-03-04 01:27 - 2010-03-04 01:27 - 00016384 _____ (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Foundation.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00006144 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.dll
2013-02-01 21:47 - 2011-06-13 23:01 - 00462848 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\ATIDEMGX.dll
2010-10-07 14:07 - 2010-10-07 14:07 - 00020480 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I1010.dll
2013-08-25 21:35 - 2013-08-25 21:35 - 01320448 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Configuration\1031b311ee568364d4ca1c4db634eaf0\System.Configuration.ni.dll
2013-02-01 21:47 - 2011-06-13 22:59 - 00423424 _____ (ATI Technologies, Inc.) C:\Windows\system32\atipdl64.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00005632 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.REG.Shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00290816 _____ (Advanced Mirco Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Graphics.Runtime.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00167936 _____ (Advanced Mirco Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Graphics.Shared.dll
2009-06-17 06:27 - 2009-06-17 06:27 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0709.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00005632 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.GD.Shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00008704 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Actions.CCAA.Shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00008704 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\ResourceManagement.Foundation.Private.dll
2008-04-03 17:29 - 2008-04-03 17:29 - 00020480 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0804.dll
2013-08-25 21:35 - 2013-08-25 21:35 - 04962816 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\WindowsBase\748e7e6853a66fddc80848051c076801\WindowsBase.ni.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00025088 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00045056 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00065536 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysOptions.Graphics.Runtime.dll
2011-06-13 23:37 - 2011-06-13 23:37 - 00240128 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Combined.Graphics.Aspects2.Runtime.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00008704 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Graphics.Runtime.Shared.Private.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00032768 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceLCD.Graphics.Shared.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00035840 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00077824 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.Radeon3D.Graphics.Runtime.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00053248 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceDFP.Graphics.Shared.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00013824 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.TransCode.Graphics.Runtime.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00098304 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.MMVideo.Graphics.Runtime.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00018432 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.PowerPlayDPPE.Graphics.Shared.dll
2011-06-13 23:37 - 2011-06-13 23:37 - 00013312 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.AMDHome.Graphics.Runtime.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00046592 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.PowerXpress.Graphics.Runtime.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CustomFormats.Graphics.Shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00040960 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceCV.Graphics.Shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00053248 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceCRT.Graphics.shared.dll
2011-06-13 23:37 - 2011-06-13 23:37 - 00032768 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.UpdateNotification.Graphics.Runtime.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysOptions.Graphics.shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00045056 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.TransCode.Graphics.shared.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00065536 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.Radeon3D.Graphics.Shared.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00026112 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.PowerXpress.Graphics.Shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00065536 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceTV.Graphics.shared.dll
2011-06-13 23:37 - 2011-06-13 23:37 - 00010240 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.AMDHome.Graphics.shared.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00065536 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.MMVideo.Graphics.Shared.dll
2011-06-13 23:37 - 2011-06-13 23:37 - 00012288 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.UpdateNotification.Graphics.Shared.dll
2009-06-17 11:24 - 2009-06-17 11:24 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0906.dll
2009-12-08 07:49 - 2009-12-08 07:49 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0912.dll
2007-08-09 17:58 - 2007-08-09 17:58 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0706.dll
2009-06-17 11:24 - 2009-06-17 11:24 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0712.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceProperty.Graphics.Shared.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll
2008-12-30 12:04 - 2008-12-30 12:04 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0812.dll
2009-04-22 13:13 - 2009-04-22 13:13 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0805.dll
2010-11-05 15:18 - 2010-11-05 15:18 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I1011.dll
2009-04-22 13:13 - 2009-04-22 13:13 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0702.dll
2007-10-29 15:56 - 2007-10-29 15:56 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0710.dll
2009-01-20 15:36 - 2009-01-20 15:36 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0901.dll
2009-01-20 14:51 - 2009-01-20 14:51 - 00007168 _____ ( ) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atixclib.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00011776 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.HydraVision.Runtime.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00008704 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.HydraVision.Shared.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00019968 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Fuel.Runtime.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00010752 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Fuel.Shared.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00012800 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\Fuel.Foundation.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00065536 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\APM.Server.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00024576 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\APM.Foundation.dll
2011-11-15 22:03 - 2010-11-13 02:08 - 00434176 _____ (Microsoft Corporation) C:\Windows\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_de_b77a5c561934e089\System.Windows.Forms.resources.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00007168 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Runtime.Extension.EEU.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00389120 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Dashboard.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00005632 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.EEU.Shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00036352 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Client.Shared.Private.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00007680 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Client.Shared.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00032768 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Dashboard.Shared.dll
2013-08-25 21:36 - 2013-08-25 21:36 - 16543232 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationCore\e6cc4a60a4cf6ac9bc6198ec2989c05b\PresentationCore.ni.dll
2013-08-25 21:37 - 2013-08-25 21:37 - 19197952 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\7a2f065f242923c2d898f451fa70986a\PresentationFramework.ni.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 01199616 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Dashboard.Shared.Private.dll
2012-05-19 10:40 - 2012-02-11 01:29 - 02256152 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\wpfgfx_v0300.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00131072 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Graphics.Dashboard.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00966656 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Graphics.Dashboard.Shared.dll
2011-06-13 23:37 - 2011-06-13 23:37 - 00026624 _____ (Advanced Mirco Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.AMDHome.Graphics.Dashboard.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00188416 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll
2011-06-13 23:36 - 2011-06-13 23:36 - 00252928 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysManager2.Graphics.Dashboard.dll
2011-06-13 23:36 - 2011-06-13 23:36 - 00372224 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysManager.Graphics.Dashboard.dll
2011-06-13 23:36 - 2011-06-13 23:36 - 00243712 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00032768 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll
2011-06-13 23:36 - 2011-06-13 23:36 - 00380928 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceCRT.Graphics.Dashboard.dll
2011-06-13 23:37 - 2011-06-13 23:37 - 02452992 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Combined.Graphics.Aspects2.Dashboard.dll
2011-06-13 23:36 - 2011-06-13 23:36 - 00389120 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceDFP.Graphics.Dashboard.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00372736 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll
2011-06-13 23:36 - 2011-06-13 23:36 - 00456192 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00831488 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.MMVideo.Graphics.Dashboard.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00159744 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.TransCode.Graphics.Dashboard.dll
2011-06-13 23:36 - 2011-06-13 23:36 - 00096768 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard.dll
2011-06-13 23:36 - 2011-06-13 23:36 - 00264704 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.PowerXpress.Graphics.Dashboard.dll
2011-06-13 23:36 - 2011-06-13 23:36 - 00035840 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossFireX.Graphics.Dashboard.dll
2011-06-13 23:37 - 2011-06-13 23:37 - 00019968 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.UpdateNotification.Graphics.Dashboard.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00008192 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.HydraVision.Dashboard.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00008704 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Fuel.Dashboard.dll
2011-06-13 23:32 - 2011-06-13 23:32 - 00236032 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\Localization.Foundation.Private.dll
2011-06-13 23:32 - 2011-06-13 23:32 - 00167936 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\Localization.Foundation.Implementation.de_Localization.dll
2011-06-13 23:33 - 2011-06-13 23:33 - 00258048 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Foundation.Client.dll
2013-07-12 09:24 - 2013-07-12 09:24 - 00463360 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\a36a8b8c22201786fb956a20db8b8b65\PresentationFramework.Aero.ni.dll
2010-07-22 23:33 - 2010-07-22 23:33 - 00249856 _____ (Microsoft Corporation) C:\Windows\assembly\GAC_MSIL\PresentationFramework.resources\3.0.0.0_de_31bf3856ad364e35\PresentationFramework.resources.dll
2011-11-14 20:08 - 2010-11-04 18:58 - 00212992 _____ (Microsoft Corporation) C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_de_b77a5c561934e089\System.resources.dll
2011-03-14 15:21 - 2011-03-14 15:21 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00060416 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Dashboard.ProfileManager2.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00168960 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\ResourceManagement.Foundation.Implementation.dll
2013-08-26 19:42 - 2013-08-26 19:42 - 00329216 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\WindowsFormsIntegra#\956d0065f5ddaa3d150c5df023f14ef8\WindowsFormsIntegration.ni.dll
2009-07-14 03:01 - 2009-06-10 22:31 - 01165664 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll
2009-07-14 01:39 - 2009-07-14 03:41 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\msctfui.dll
2011-06-13 23:35 - 2011-06-13 23:35 - 00524288 _____ (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceProperty.Graphics.Dashboard.Shared.dll
2011-06-13 23:34 - 2011-06-13 23:34 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CustomFormatSelection.Graphics.Dashboard.Shared.Private.dll
2009-07-14 01:19 - 2009-07-14 03:41 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\pcwum.dll
2011-11-14 19:58 - 2010-11-20 06:26 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2009-07-14 02:17 - 2009-07-14 03:41 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\UTILDLL.dll
2011-11-14 19:58 - 2010-11-20 06:26 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\LOGONCLI.DLL
2012-08-16 21:22 - 2012-07-05 00:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\BROWCLI.DLL
2013-05-25 09:42 - 2013-05-09 10:58 - 00246592 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\snxhk.dll
2010-04-17 07:56 - 2010-04-17 07:56 - 00267632 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\sysenv.dll
2008-11-12 03:16 - 2008-11-12 03:16 - 00133680 _____ (Microsoft Corporation) C:\Program Files (x86)\EgisTec MyWinLocker\x86\XmlLite.dll
2010-04-17 07:55 - 2010-04-17 07:55 - 00254320 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\ADMIN_CLASS_LIB.dll
2008-11-12 03:16 - 2008-11-12 03:16 - 00268848 _____ (EgisTec Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\keyManager.dll
2010-04-17 07:55 - 2010-04-17 07:55 - 00529776 _____ (EgisTec Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\CryptoAPI.dll
2010-04-17 07:55 - 2010-04-17 07:55 - 00177008 _____ (Egis Technology Inc.  ) C:\Program Files (x86)\EgisTec MyWinLocker\x86\PSDUtil.dll
2010-04-17 07:55 - 2010-04-17 07:55 - 00091504 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlOP.dll
2010-04-17 07:55 - 2010-04-17 07:55 - 00120176 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\ShowErrMsg.dll
2010-04-17 07:55 - 2010-04-17 07:55 - 00034160 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlRecordUI.dll
2011-08-30 13:55 - 2011-08-30 13:55 - 00065536 _____ (Microsoft Corporation) C:\Windows\WinSxS\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_03ce2c72205943d3\MFC80DEU.DLL
2012-08-23 19:21 - 2012-08-23 22:39 - 00196544 _____ (Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2hooks32.dll
2010-04-17 07:55 - 2010-04-17 07:55 - 00144752 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlUI.DLL
2010-04-17 07:55 - 2010-04-17 07:55 - 00529776 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\GDIExtendCtrl.dll
2010-04-17 07:56 - 2010-04-17 07:56 - 00029040 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\SYSTrayUI.dll
2011-11-14 19:57 - 2010-11-20 05:16 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax
2009-07-14 01:51 - 2009-07-14 03:14 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vidcap.ax
2011-11-14 19:59 - 2010-11-20 05:16 - 00107008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kswdmcap.ax
2011-04-23 09:50 - 2011-03-11 07:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFC42.dll
2011-11-14 19:58 - 2010-11-20 05:20 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ODBC32.dll
2009-07-14 02:11 - 2009-07-14 03:09 - 00229376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcint.dll
2013-07-11 18:24 - 2013-04-24 00:57 - 05932696 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
2013-07-12 09:19 - 2013-07-12 09:19 - 11499520 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\9a6c1b7af18b4d5a91dc7f8d6617522f\mscorlib.ni.dll
2013-01-09 20:58 - 2012-10-05 12:53 - 00364656 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
2013-08-25 21:39 - 2013-08-25 21:39 - 07989760 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\System\5d22a30e587e2cac106b81fb351e7c08\System.ni.dll
2013-08-25 22:51 - 2013-08-25 22:51 - 00452608 _____ (Intel Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\25c2aff138f60662bd3c4827c0a13a73\IAStorUtil.ni.dll
2013-08-25 21:39 - 2013-08-25 21:39 - 01593344 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5aa44bce7933e4de09d935848f868a4b\System.Drawing.ni.dll
2013-08-25 21:39 - 2013-08-25 21:39 - 12436480 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\28ea347a952d20959ac6ae02d7457d39\System.Windows.Forms.ni.dll
2013-08-25 21:39 - 2013-08-25 21:39 - 00978432 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\8f7d83126a3cf283e5ac97f2d6d99f12\System.Configuration.ni.dll
2013-08-25 21:39 - 2013-08-25 21:39 - 05464064 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\09db78d6068543df01862a023aca785a\System.Xml.ni.dll
2010-05-06 14:05 - 2010-03-04 05:09 - 00032768 _____ (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\de-DE\IAStorIcon.resources.dll
2010-05-06 14:05 - 2010-03-04 05:08 - 01046528 _____ (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IntelVisualDesign.dll
2010-05-06 14:05 - 2010-03-04 05:09 - 00004608 _____ (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\de-DE\IntelVisualDesign.resources.dll
2013-08-25 21:40 - 2013-08-25 21:40 - 00771584 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\dd8f4efb7e81c75fe444a180f6f1aacf\System.Runtime.Remoting.ni.dll
2010-07-22 23:32 - 2010-07-22 23:32 - 00032768 _____ (Microsoft Corporation) C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_de_b77a5c561934e089\System.Runtime.Remoting.resources.dll
2011-11-14 19:58 - 2010-11-04 18:57 - 00572760 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
2013-08-25 21:39 - 2013-08-25 21:39 - 03348480 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\7a14ef318277377516a89c89fc4d9a05\WindowsBase.ni.dll
2010-05-06 14:05 - 2010-03-04 05:08 - 00163328 _____ (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorUIHelper.dll
2010-05-06 14:48 - 2009-07-20 09:12 - 00137736 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\ComFnUtl.dll
2010-05-06 14:48 - 2009-07-14 08:53 - 00128008 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\CDRomUtl.dll
2010-05-06 14:48 - 2009-07-27 06:42 - 00062472 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MixerUtl.dll
2010-05-06 14:48 - 2009-07-27 06:47 - 00068104 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\Wnd2File.dll
2010-05-06 14:48 - 2009-07-27 12:43 - 00068104 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\PowerUtl.dll
2010-05-06 14:48 - 2009-12-30 11:13 - 00326736 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\OSDUtl2.dll
2010-05-06 14:48 - 2009-07-27 06:38 - 00088584 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\SzUPFUtl.dll
2010-05-06 14:48 - 2010-03-01 10:43 - 00351312 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\RadioWndUtl.dll
2010-05-06 14:48 - 2009-07-03 10:29 - 00147464 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\VistaVol.DLL
2010-05-06 14:48 - 2009-05-20 08:02 - 00072200 _____ () C:\Program Files (x86)\Launch Manager\CdDirIo.dll
2010-05-06 14:48 - 2010-02-10 03:49 - 00082000 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LmSmbKel.dll
2010-05-06 14:48 - 2010-03-03 15:21 - 00280656 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\aipflib.dll
2011-08-30 14:18 - 2011-08-30 14:18 - 03766600 _____ (Microsoft Corporation) C:\Windows\WinSxS\x86_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_4bf7e3e2bf9ada4c\mfc90.dll
2011-08-30 14:18 - 2011-08-30 14:18 - 00063312 _____ (Microsoft Corporation) C:\Windows\WinSxS\x86_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_49768ef57548175e\MFC90DEU.DLL
2011-08-31 00:05 - 2011-08-31 00:05 - 00121704 _____ (Apple Inc.) C:\Program Files (x86)\Bonjour\mdnsNSP.dll
2011-08-30 14:18 - 2011-08-30 14:18 - 03781960 _____ (Microsoft Corporation) C:\Windows\WinSxS\x86_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_4bf7e3e2bf9ada4c\mfc90u.dll
2010-03-09 02:18 - 2010-03-09 02:18 - 00465576 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\sqlite3.dll
2010-03-09 02:14 - 2010-03-09 02:14 - 00018688 _____ (NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\MUI\0407\lang.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00038032 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\aswUtil.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00943408 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\ashBase.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00051952 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\aswEngLdr.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00116848 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\aswCmnOS.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00206440 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\aswCmnIS.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00380528 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\aswCmnBS.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00156512 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\ashTask.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00682824 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\aswAux.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00073064 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\avastIP.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00260536 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\aswProperty.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00149272 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\AavmRpch.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00226552 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\aswLog.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00476800 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\aswSqLt.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00065848 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\1031\Base.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 02105248 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\aswAra.dll
2013-05-25 09:42 - 2013-04-02 15:14 - 00265216 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Program Files\AVAST Software\Avast\SSLEAY32.dll
2013-05-25 09:42 - 2013-04-02 15:14 - 01169408 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Program Files\AVAST Software\Avast\LIBEAY32.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00206976 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\aswData.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00062752 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\ashTaskEx.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00902720 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\Aavm4h.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00277528 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\1031\UILangRes.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 06449776 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\CommonRes.dll
2013-09-02 19:51 - 2013-08-19 15:26 - 00042688 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\defs\13090200\uiExt.dll
2009-07-14 02:07 - 2009-07-14 03:14 - 00064000 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\SysWOW64\l3codeca.acm
2010-03-11 07:11 - 2010-03-11 07:11 - 00068976 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\KernelController.dll
2010-03-11 07:11 - 2010-03-11 07:11 - 00788848 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\LiveUpdateUI.dll
2010-03-11 07:11 - 2010-03-11 07:11 - 00068976 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\LicenseCenter.dll
2010-03-11 07:12 - 2010-03-11 07:12 - 00072560 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\UpdateModel.dll
2013-05-31 11:56 - 2013-05-31 11:56 - 00148808 _____ (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.dll
2012-11-28 15:13 - 2012-11-28 15:13 - 01079184 _____ (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\CoreFoundation.dll
2011-11-02 00:26 - 2011-11-02 00:26 - 00053608 _____ (Open Source Software community project) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\pthreadVC2.dll
2012-11-28 15:13 - 2012-11-28 15:13 - 00124816 _____ (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\objc.dll
2012-11-28 15:13 - 2012-11-28 15:13 - 00043408 _____ (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libdispatch.dll
2011-11-02 00:26 - 2011-11-02 00:26 - 01292136 _____ (The ICU Project) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libicuin.dll
2011-11-02 00:26 - 2011-11-02 00:26 - 00923496 _____ (The ICU Project) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libicuuc.dll
2011-11-02 00:26 - 2011-11-02 00:26 - 16303976 _____ (The ICU Project) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\icudt46.dll
2012-11-28 15:13 - 2012-11-28 15:13 - 00075664 _____ (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\ASL.dll
2013-05-31 12:39 - 2013-05-31 12:39 - 00041800 _____ (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.Resources\de.lproj\iTunesHelperLocalized.DLL
2013-05-31 11:56 - 2013-05-31 11:56 - 00040264 _____ (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.Resources\iTunesHelper.DLL
2012-12-21 16:27 - 2012-12-21 16:27 - 01449648 _____ (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\iTunesMobileDevice.dll
2011-11-02 00:26 - 2011-11-02 00:26 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2013-04-21 21:43 - 2013-04-21 21:43 - 02464072 _____ (Apple, Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\CFNetwork.dll
2011-11-02 00:26 - 2011-11-02 00:26 - 00456552 _____ (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\SQLite3.dll
2011-11-02 00:26 - 2011-11-02 00:26 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2011-08-31 00:05 - 2011-08-31 00:05 - 00085864 _____ (Apple Inc.) C:\Windows\system32\dnssd.dll
2010-05-06 14:48 - 2010-02-03 06:31 - 00071248 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\NTKCUtl.dll
2010-10-16 15:06 - 2010-11-14 17:57 - 00848048 _____ () C:\Program Files (x86)\Mozilla Thunderbird\js3250.dll
2010-10-16 15:06 - 2010-11-14 17:57 - 00174256 _____ (Mozilla Foundation) C:\Program Files (x86)\Mozilla Thunderbird\nspr4.dll
2010-10-16 15:06 - 2010-11-14 17:57 - 00719024 _____ (Mozilla Foundation) C:\Program Files (x86)\Mozilla Thunderbird\MOZCRT19.dll
2010-10-16 15:06 - 2010-11-14 17:57 - 00409776 _____ (Mozilla Foundation) C:\Program Files (x86)\Mozilla Thunderbird\xpcom_core.dll
2010-10-16 15:06 - 2010-11-14 17:57 - 00021168 _____ (Mozilla Foundation) C:\Program Files (x86)\Mozilla Thunderbird\plc4.dll
2010-10-16 15:06 - 2010-11-14 17:57 - 00018096 _____ (Mozilla Foundation) C:\Program Files (x86)\Mozilla Thunderbird\plds4.dll
2010-10-16 15:06 - 2010-11-14 17:57 - 00104624 _____ (Mozilla Foundation) C:\Program Files (x86)\Mozilla Thunderbird\smime3.dll
2010-10-16 15:06 - 2010-11-14 17:57 - 00088240 _____ (Mozilla Foundation) C:\Program Files (x86)\Mozilla Thunderbird\nssutil3.dll
2010-10-16 15:06 - 2010-11-14 17:57 - 00141488 _____ (Mozilla Foundation) C:\Program Files (x86)\Mozilla Thunderbird\ssl3.dll
2010-10-16 15:06 - 2010-11-14 17:57 - 00161968 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2010-10-16 15:06 - 2010-11-14 17:57 - 00021680 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll
2010-10-16 15:06 - 2010-11-14 17:57 - 00491696 _____ (sqlite.org) C:\Program Files (x86)\Mozilla Thunderbird\sqlite3.dll
2010-10-16 15:06 - 2010-11-14 17:57 - 00719024 _____ (Mozilla Foundation) C:\Program Files (x86)\Mozilla Thunderbird\MOZCPP19.dll
2011-11-14 19:57 - 2010-11-20 06:27 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll
2011-11-14 19:59 - 2010-11-20 06:27 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2010-04-17 07:55 - 2010-04-17 07:55 - 00120176 _____ (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\psdprotect.dll
2013-09-01 17:43 - 2013-09-01 17:43 - 00008704 _____ () C:\Users\xxxxxxx\AppData\Local\Temp\nst51AF.tmp\newadvsplash.dll
2011-11-14 19:59 - 2010-11-20 06:25 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2013-08-25 11:01 - 2013-08-25 11:02 - 03551640 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00134888 _____ (AVAST Software) C:\Program Files\AVAST Software\Avast\aswJsFlt.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00380528 _____ (AVAST Software) C:\PROGRA~1\AVASTS~1\Avast\aswCmnBS.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00116848 _____ (AVAST Software) C:\PROGRA~1\AVASTS~1\Avast\aswCmnOS.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00206440 _____ (AVAST Software) C:\PROGRA~1\AVASTS~1\Avast\aswCmnIS.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00902720 _____ (AVAST Software) C:\PROGRA~1\AVASTS~1\Avast\Aavm4h.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00149272 _____ (AVAST Software) C:\PROGRA~1\AVASTS~1\Avast\AavmRpch.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00943408 _____ (AVAST Software) C:\PROGRA~1\AVASTS~1\Avast\ashBase.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00051952 _____ (AVAST Software) C:\PROGRA~1\AVASTS~1\Avast\aswEngLdr.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00156512 _____ (AVAST Software) C:\PROGRA~1\AVASTS~1\Avast\ashTask.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00682824 _____ (AVAST Software) C:\PROGRA~1\AVASTS~1\Avast\aswAux.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00260536 _____ (AVAST Software) C:\PROGRA~1\AVASTS~1\Avast\aswProperty.dll
2013-05-25 09:42 - 2013-05-09 10:58 - 00073064 _____ (AVAST Software) C:\PROGRA~1\AVASTS~1\Avast\avastIP.dll

==================== Alternate Data Streams (whitelisted) ==========



==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (09/01/2013 00:51:56 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: ePowerTray.exe, Version: 5.2.3003.0, Zeitstempel: 0x4bd10412
Name des fehlerhaften Moduls: ePowerTray.exe, Version: 5.2.3003.0, Zeitstempel: 0x4bd10412
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000163d5
ID des fehlerhaften Prozesses: 0x1594
Startzeit der fehlerhaften Anwendung: 0xePowerTray.exe0
Pfad der fehlerhaften Anwendung: ePowerTray.exe1
Pfad des fehlerhaften Moduls: ePowerTray.exe2
Berichtskennung: ePowerTray.exe3

Error: (09/01/2013 00:33:40 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: ePowerTray.exe, Version: 5.2.3003.0, Zeitstempel: 0x4bd10412
Name des fehlerhaften Moduls: ePowerTray.exe, Version: 5.2.3003.0, Zeitstempel: 0x4bd10412
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000163d5
ID des fehlerhaften Prozesses: 0x1b90
Startzeit der fehlerhaften Anwendung: 0xePowerTray.exe0
Pfad der fehlerhaften Anwendung: ePowerTray.exe1
Pfad des fehlerhaften Moduls: ePowerTray.exe2
Berichtskennung: ePowerTray.exe3

Error: (09/01/2013 00:22:46 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: ePowerTray.exe, Version: 5.2.3003.0, Zeitstempel: 0x4bd10412
Name des fehlerhaften Moduls: ePowerTray.exe, Version: 5.2.3003.0, Zeitstempel: 0x4bd10412
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000163d5
ID des fehlerhaften Prozesses: 0x1424
Startzeit der fehlerhaften Anwendung: 0xePowerTray.exe0
Pfad der fehlerhaften Anwendung: ePowerTray.exe1
Pfad des fehlerhaften Moduls: ePowerTray.exe2
Berichtskennung: ePowerTray.exe3


System errors:
=============
Error: (09/01/2013 02:56:17 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR7 gefunden.

Error: (09/01/2013 02:56:16 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR7 gefunden.

Error: (09/01/2013 02:56:13 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR7 gefunden.

Error: (09/01/2013 02:55:36 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR6 gefunden.

Error: (09/01/2013 02:55:33 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR6 gefunden.

Error: (09/01/2013 00:49:11 PM) (Source: DCOM) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (09/01/2013 00:19:34 PM) (Source: DCOM) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}


Microsoft Office Sessions:
=========================
Error: (09/01/2013 00:51:56 PM) (Source: Application Error)(User: )
Description: ePowerTray.exe5.2.3003.04bd10412ePowerTray.exe5.2.3003.04bd10412c000000500000000000163d5159401cea70141a427d6C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exeC:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe84ba3aa7-12f4-11e3-8cff-001e101f9843

Error: (09/01/2013 00:33:40 PM) (Source: Application Error)(User: )
Description: ePowerTray.exe5.2.3003.04bd10412ePowerTray.exe5.2.3003.04bd10412c000000500000000000163d51b9001cea6feaaee1dd5C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exeC:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exef6fa8947-12f1-11e3-ac75-001e101fabdd

Error: (09/01/2013 00:22:46 PM) (Source: Application Error)(User: )
Description: ePowerTray.exe5.2.3003.04bd10412ePowerTray.exe5.2.3003.04bd10412c000000500000000000163d5142401cea6fd3146cb01C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exeC:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe7124516c-12f0-11e3-ac75-001e101fabdd


CodeIntegrity Errors:
===================================
  Date: 2013-09-01 11:12:58.818
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-01 11:12:58.537
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-09 16:42:12.838
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-09 16:42:12.678
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-09 16:42:12.458
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-09 16:42:12.245
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-09 16:39:15.520
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-09 16:39:04.897
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-09 16:39:04.737
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-09 16:39:04.527
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 44%
Total physical RAM: 3766.69 MB
Available physical RAM: 2081.32 MB
Total Pagefile: 7531.56 MB
Available Pagefile: 5152.66 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:292.1 GB) (Free:227.09 GB) NTFS
Drive e: (Daten) (Fixed) (Total:290.97 GB) (Free:80.52 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596 GB) (Disk ID: 2C0EAF26)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=292 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=291 GB) - (Type=OF Extended)

==================== End Of Log ============================
Rest ist in Arbeit....
__________________

Geändert von Pechvogel44 (02.09.2013 um 19:35 Uhr)

Alt 02.09.2013, 19:48   #3
M-K-D-B
/// TB-Ausbilder
 
DuckDuckGo läßt sich nicht enfernen - Standard

DuckDuckGo läßt sich nicht enfernen


Servus,


Zitat:
Zitat von Pechvogel44 Beitrag anzeigen
Rest ist in Arbeit....
Ok.
__________________
Alt 02.09.2013, 20:10   #4
Pechvogel44
 
DuckDuckGo läßt sich nicht enfernen - Standard

DuckDuckGo läßt sich nicht enfernen


Zitat:
Zitat von M-K-D-B Beitrag anzeigen
Servus,



Ok.
Hallo Mathias,

und weiter geht's:

Code:
ATTFilter
SystemLook 30.07.11 by jpshortstuff
Log created at 21:14 on 02/09/2013 by ADMIN
Administrator - Elevation successful

========== filefind ==========

Searching for "*Ask.com*"
No files found.

Searching for "*Ask Toolbar*"
C:\AdwCleaner\Quarantine\C\Windows\System32\Tasks\Scheduled Update for Ask Toolbar.vir	--a---- 3808 bytes	[18:53 16/09/2012]	[21:56 07/02/2013] CBFD53DFDC6AE7B4F90AD0CC6F353BF8

Searching for "*Ask Search*"
No files found.

Searching for "*SoftonicDownloader*"
No files found.

Searching for "*Conduit*"
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\iSyncConduit.dll	--a---- 1207392 bytes	[10:43 06/12/2012]	[10:43 06/12/2012] C963B2DECF0872C4A79D4E5E97062E8C
C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wuxxxxx.defaultx\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\components\ConduitAutoCompleteSearch.xpt	--a---- 166 bytes	[20:38 20/12/2010]	[20:38 20/12/2010] 806EA6CC4DCBF88A20AA3331BCDC9918
C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wuxxxxx.defaultx\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\components\ConduitToolbar.idl	--a---- 148 bytes	[20:38 20/12/2010]	[20:38 20/12/2010] 0A9AAEB4839D78CB03740D8A8EF0D863
C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wuxxxxx.defaultx\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\components\ConduitToolbar.xpt	--a---- 136 bytes	[20:38 20/12/2010]	[20:38 20/12/2010] 4822F1CBA7EE2F77496FDCE234D32C20
C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wuxxxxx.defaultx\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\searchplugin\conduit.gif	--a---- 173 bytes	[20:38 20/12/2010]	[20:38 20/12/2010] 225B6898AE7D6E0CE88B3FE57BD750F2
C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wuxxxxx.defaultx\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\searchplugin\conduit.PNG	--a---- 255 bytes	[20:38 20/12/2010]	[20:38 20/12/2010] AF3A51D0B8D6F04EE33307A654560DBE
C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wuxxxxx.defaultx\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\searchplugin\conduit.xml	--a---- 931 bytes	[20:38 20/12/2010]	[20:38 20/12/2010] 27321E5730943A3A73EA8699E9EBB540
C:\Users\AppData\LocalLow\Conduit\Community Alerts\Feeds\http___alerts_conduit-services_com_root_666138_661999_DE.xml	--a---- 182 bytes	[20:38 20/12/2010]	[20:38 20/12/2010] 09537830AF4F5ED99783297FA09DC218
C:\Users\xxxxxxx\AppData\LocalLow\Conduit\Community Alerts\Feeds\http___alerts_conduit-services_com_root_1006347_1002062_DE.xml	--a---- 184 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 97113968FFCE93788CE025CD390A27C1
C:\Users\xxxxxxx\AppData\LocalLow\Conduit\Community Alerts\Feeds\http___alerts_conduit-services_com_root_666138_661999_DE.xml	--a---- 182 bytes	[14:15 26/12/2010]	[14:15 26/12/2010] 09537830AF4F5ED99783297FA09DC218
C:\Users\xxxxxxx\AppData\LocalLow\Conduit\Toolbar\Facebook\http___facebook_conduit-services_com_Settings_ashx_locale=de-de&browserType=IE&toolbarVersion=5_5_3_2.xml	--a---- 11092 bytes	[12:14 14/01/2011]	[18:12 02/04/2011] DFE1156D289BCE111E7C1EEA48E3EC78
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634062498888125000_png.png	--a---- 509 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 40ECBDFF6DF6593ACDEAD0021DCC7336
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634062499232812500_png.png	--a---- 670 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] D9CE725CB6F7C294C96BDF01D653A8D5
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634072035335451250_png.png	--a---- 623 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 0A4D5304331171BE0EBAA12DB0706726
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634084042422158750_png.png	--a---- 1255 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 9E8DF6405FF11276857592FE66436A9E
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634084971246361250_png.png	--a---- 1526 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 7BA55E9BB92E4627EA667C7E8787B35C
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_b7889fd7-df2c-48c3-bd9e-8456e2016654Rss-rss01x16blue_gif-rss16Images-633988161463742500_gif.gif	--a---- 427 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] DE38BD848E7E916050B57C8FF00C9D80
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_b7889fd7-df2c-48c3-bd9e-8456e2016654Rss-rss01x16blue_gif-rss16Images-633988162125930000_gif.gif	--a---- 427 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] DE38BD848E7E916050B57C8FF00C9D80
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_b7889fd7-df2c-48c3-bd9e-8456e2016654Rss-rss01x16green_gif-rss16Images-633988159593125000_gif.gif	--a---- 428 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] FC707EC713D600572DE988236BDD3A84
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_b7889fd7-df2c-48c3-bd9e-8456e2016654Rss-rss01x16green_gif-rss16Images-633988160488906250_gif.gif	--a---- 428 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] FC707EC713D600572DE988236BDD3A84
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_b7889fd7-df2c-48c3-bd9e-8456e2016654Rss-rss01x16grey_gif-rss16Images-633988160722031250_gif.gif	--a---- 434 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 0BADAB39E32A083649569D477A58E5EC
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_b7889fd7-df2c-48c3-bd9e-8456e2016654Rss-rss01x16_gif-rss16Images-633988153360618750_gif.gif	--a---- 433 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 310391CF3C98762DE1251AC2FED42D16
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_Menu-silkset_accept_gif-Silk_1-634051179887806250_gif.gif	--a---- 403 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 87B062CE740BE13817F46B8F381E8A2B
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Events_png.png	--a---- 705 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 70B83DCDF7A6FA34240E1AA1D23EE535
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Friends_png.png	--a---- 746 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 2AE805114215925E00858FD2FEFF1439
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Groups_png.png	--a---- 669 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 6CFEA2D0DB786FDB4D72C1C1DE036822
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Home_png.png	--a---- 338 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] DB45ACA16C515F2FD8CB3B6F5E4FC386
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Inbox_png.png	--a---- 545 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 6EB69BFCBFD422247C103705B532BFE1
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Logout_png.png	--a---- 514 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 7F396C3A400239B9B66DEC2D503D86BB
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Photos_png.png	--a---- 3355 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] EC261A170D34BE434129E71B9C2C0408
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Profile_png.png	--a---- 594 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 62C86296694EF7F41D380804A58EF5CA
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Settings_png.png	--a---- 415 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] E42D284CC0436B66C1DB4AAFFCCC1957
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Share_png.png	--a---- 461 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] B4AEAC6600360BC4148538F716453AAC
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Status_png.png	--a---- 699 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 640E17444F44717CA5039BCB7FD3551E
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_about_gif.gif	--a---- 403 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] EC3C2B4E0DEC4D880BAFF88ABBF94188
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_clear_history_gif.gif	--a---- 414 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] A9E001CBC00B06B121DFBC80707F5298
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_contact_gif.gif	--a---- 278 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 15DEF39E438E807E2F0E22D44FDC7FB7
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_help_gif.gif	--a---- 405 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 995595D4C685D659E8F03CD0A287EDDF
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_home_page_gif.gif	--a---- 405 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] AA39D8A6B65E208901EBA9F3D4728D3E
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_options_gif.gif	--a---- 361 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 464E244E7E2F27FB85E0C3AB69D72104
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_privacy_gif.gif	--a---- 425 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 6427565C7105DC497287866100F260BB
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_refresh_gif.gif	--a---- 381 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] AE7C9F67594A84B096D225601ACB0B2A
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_shrink_gif.gif	--a---- 351 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] C3EBA0237D68F665AF6D663906221092
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_tell_a_friend_gif.gif	--a---- 392 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 5E7217A3357550F9749A095631F51015
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_upgrade_gif.gif	--a---- 399 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 8BE02D510B4B2E05AD2611B1E9A0BD56
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_SearchEngines_images_search_gif.gif	--a---- 405 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 66018EAE0906C9831A821CAE5D1089BB
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_SearchEngines_news_icon_gif.gif	--a---- 371 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 84896837EDB1A78C14DB6A2F3A0AEE3A
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_searchengines_search_icon_gif.gif	--a---- 322 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 948781E4B6478290050ECA4423B89B1E
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_SearchEngines_site_search_gif.gif	--a---- 625 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] C23D4DB18B6BB4F38ECBA57AD414A5CF
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_searchengines_softonic_gif.gif	--a---- 606 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 2A1D4FB45F62D3D260F2134228FAB05E
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_SearchEngines_tfd_gif.gif	--a---- 240 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] AE5A39669C623937C0839E079E1088D5
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_SearchEngines_videosurf_gif.gif	--a---- 1035 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] 7BF61D475BF289E4900EBA788DED51C3
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_SearchEngines_video_gif.gif	--a---- 335 bytes	[18:12 02/04/2011]	[18:12 02/04/2011] 766433EF38BDA83C4FD4932027A4B9D5
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_MarketPlace_b7_54_b7889fd7-df2c-48c3-bd9e-8456e2016654_Images_Rss-rss01x16blue_gif-rss16Images-633988161463742500_gif.gif	--a---- 427 bytes	[18:12 02/04/2011]	[18:12 02/04/2011] DE38BD848E7E916050B57C8FF00C9D80
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_MarketPlace_b7_54_b7889fd7-df2c-48c3-bd9e-8456e2016654_Images_Rss-rss01x16blue_gif-rss16Images-633988162125930000_gif.gif	--a---- 427 bytes	[18:12 02/04/2011]	[18:12 02/04/2011] DE38BD848E7E916050B57C8FF00C9D80
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_MarketPlace_b7_54_b7889fd7-df2c-48c3-bd9e-8456e2016654_Images_Rss-rss01x16green_gif-rss16Images-633988159593125000_gif.gif	--a---- 428 bytes	[11:38 02/04/2011]	[11:38 02/04/2011] FC707EC713D600572DE988236BDD3A84
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_MarketPlace_b7_54_b7889fd7-df2c-48c3-bd9e-8456e2016654_Images_Rss-rss01x16green_gif-rss16Images-633988160488906250_gif.gif	--a---- 428 bytes	[11:38 02/04/2011]	[11:38 02/04/2011] FC707EC713D600572DE988236BDD3A84
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_MarketPlace_b7_54_b7889fd7-df2c-48c3-bd9e-8456e2016654_Images_Rss-rss01x16grey_gif-rss16Images-633988160722031250_gif.gif	--a---- 434 bytes	[18:12 02/04/2011]	[18:12 02/04/2011] 0BADAB39E32A083649569D477A58E5EC
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_MarketPlace_b7_54_b7889fd7-df2c-48c3-bd9e-8456e2016654_Images_Rss-rss01x16_gif-rss16Images-633988153360618750_gif.gif	--a---- 433 bytes	[11:38 02/04/2011]	[11:38 02/04/2011] 310391CF3C98762DE1251AC2FED42D16
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_MarketPlace_b7_654_b7889fd7-df2c-48c3-bd9e-8456e2016654_Appearance_634140226209507502_png.png	--a---- 1278 bytes	[12:14 14/01/2011]	[12:14 14/01/2011] FAE6AA1F72FCBCD4D1082D4D06265B7A
C:\Users\xxxxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\3udiwpab.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\components\ConduitAutoCompleteSearch.xpt	--a---- 166 bytes	[21:49 20/12/2010]	[21:49 20/12/2010] 806EA6CC4DCBF88A20AA3331BCDC9918
C:\Users\xxxxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\3udiwpab.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\components\ConduitToolbar.idl	--a---- 148 bytes	[21:49 20/12/2010]	[21:49 20/12/2010] 0A9AAEB4839D78CB03740D8A8EF0D863
C:\Users\xxxxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\3udiwpab.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\components\ConduitToolbar.xpt	--a---- 136 bytes	[21:49 20/12/2010]	[21:49 20/12/2010] 4822F1CBA7EE2F77496FDCE234D32C20
C:\Users\xxxxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\3udiwpab.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\searchplugin\conduit.gif	--a---- 173 bytes	[21:49 20/12/2010]	[21:49 20/12/2010] 225B6898AE7D6E0CE88B3FE57BD750F2
C:\Users\xxxxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\3udiwpab.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\searchplugin\conduit.PNG	--a---- 255 bytes	[21:49 20/12/2010]	[21:49 20/12/2010] AF3A51D0B8D6F04EE33307A654560DBE
C:\Users\xxxxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\3udiwpab.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\searchplugin\conduit.xml	--a---- 931 bytes	[21:49 20/12/2010]	[21:49 20/12/2010] 27321E5730943A3A73EA8699E9EBB540
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\DOMStore\XCZY1X32\storage.conduit[1].xml	--a---- 13 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M\contextmenu_toolbar_conduit-services_com[1].txt	--a---- 5624 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 008A9ED67B706E1C56569441ADD9BB72
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M\settings_toolbar_conduit-services_com[1].txt	--a---- 30583 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 2CC546F241698F48F9C760EAFBADDBDD
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M\translation_toolbar_conduit-services_com[1].txt	--a---- 101383 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 334D941427950794DB906645975AFF25
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5\appsmetadata_toolbar_conduit-services_com[1].txt	--a---- 81 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] EB6EEE69B578EF10A521BFF0F98DA037
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5\contextmenu_toolbar_conduit-services_com[1].txt	--a---- 5625 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 9270590F46BFBAF0C0247EDF65291797
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5\contextmenu_toolbar_conduit-services_com[2].txt	--a---- 7158 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 975C952D94CC90E3174437C36DD068BF
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA\contextmenu_toolbar_conduit-services_com[1].txt	--a---- 6691 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 22C13F28D75B95B054B566E3EFD671B6
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Conduit\Community Alerts\Feeds\http___alerts_conduit-services_com_root_1006347_1002062_DE.xml	--a---- 184 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 76C284659F77056211BD059E8BE790DA
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Conduit\Toolbar\Facebook\http___facebook_conduit-services_com_Settings_ashx_locale=de-de&browserType=IE&toolbarVersion=6_3_8_0.xml	--a---- 11092 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] DFE1156D289BCE111E7C1EEA48E3EC78
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634062498888125000_png.png	--a---- 509 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 40ECBDFF6DF6593ACDEAD0021DCC7336
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634062499232812500_png.png	--a---- 670 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] D9CE725CB6F7C294C96BDF01D653A8D5
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634084042422158750_png.png	--a---- 1255 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 9E8DF6405FF11276857592FE66436A9E
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634449636811350000_png.png	--a---- 529 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 810FDF4A283DB1CFFFF73828531AC0D7
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634450328731600000_gif.gif	--a---- 751 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 37EFC5213E8D077F0D53566FCAB2F422
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634450329932693750_png.png	--a---- 543 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 79525287B3FA7899A4F6F9DA3961B984
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634450333556443750_gif.gif	--a---- 779 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 94223BBE299C4CB066F1825D6873D9D4
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_images_634450514020931251_24PX_png.png	--a---- 1245 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 7872C86EF94AFD26D7D5CB7B3035FE56
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_Menu-silkset_accept_gif-Silk_1-634450335085812500_gif.gif	--a---- 778 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 77BEF4D5D2C3A1919EBCE6A325F3AB66
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_About_png.png	--a---- 821 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 99D5F75C338F2A877CBF891E0F18746E
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Browse_png.png	--a---- 729 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] F2291FAB46ED9291A1A2FFE9F88E9D84
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Contact_png.png	--a---- 531 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] A847C5F6CE2C700048749892DD2E0619
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Hide_png.png	--a---- 669 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] FED9E00C76F647EE6A0B7CC684C89F0C
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_LikeIcon_png.png	--a---- 263 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 36BD416D16391EFAAAFB2C3C54EAE986
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_MoreFromPublisher_png.png	--a---- 734 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 943ADFD9E0DF1507F7BC419802BF4303
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_More_png.png	--a---- 562 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 36C6FB9C84D4AF5C5D7C5B277A0E4A01
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Options_png.png	--a---- 493 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 275C9DA2D536F18F528C80E050C3D705
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Privacy_png.png	--a---- 706 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 3AD88BD8E832DA39FAAEDF07AD595F94
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Refresh_png.png	--a---- 674 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 650731EEF807C292E699779B12CBE552
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Upgrade_png.png	--a---- 607 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 9B4D914888BCFFCBAE6757A0E450551C
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Events_png.png	--a---- 705 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 70B83DCDF7A6FA34240E1AA1D23EE535
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Friends_png.png	--a---- 746 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 2AE805114215925E00858FD2FEFF1439
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Groups_png.png	--a---- 669 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 6CFEA2D0DB786FDB4D72C1C1DE036822
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Home_png.png	--a---- 338 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] DB45ACA16C515F2FD8CB3B6F5E4FC386
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Inbox_png.png	--a---- 545 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 6EB69BFCBFD422247C103705B532BFE1
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Logout_png.png	--a---- 514 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 7F396C3A400239B9B66DEC2D503D86BB
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Photos_png.png	--a---- 3355 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] EC261A170D34BE434129E71B9C2C0408
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Profile_png.png	--a---- 594 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 62C86296694EF7F41D380804A58EF5CA
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Settings_png.png	--a---- 415 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] E42D284CC0436B66C1DB4AAFFCCC1957
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Share_png.png	--a---- 461 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] B4AEAC6600360BC4148538F716453AAC
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Status_png.png	--a---- 699 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 640E17444F44717CA5039BCB7FD3551E
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_ClientImages_radio_gif.gif	--a---- 419 bytes	[21:17 11/11/2011]	[21:17 11/11/2011] 01B83C91554738F6AFFB7895BBBA73FB
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_about_gif.gif	--a---- 403 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] EC3C2B4E0DEC4D880BAFF88ABBF94188
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_clear_history_gif.gif	--a---- 414 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] A9E001CBC00B06B121DFBC80707F5298
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_contact_gif.gif	--a---- 278 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 15DEF39E438E807E2F0E22D44FDC7FB7
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_help_gif.gif	--a---- 405 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 995595D4C685D659E8F03CD0A287EDDF
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_options_gif.gif	--a---- 361 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 464E244E7E2F27FB85E0C3AB69D72104
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_privacy_gif.gif	--a---- 425 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 6427565C7105DC497287866100F260BB
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_refresh_gif.gif	--a---- 381 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] AE7C9F67594A84B096D225601ACB0B2A
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_shrink_gif.gif	--a---- 351 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] C3EBA0237D68F665AF6D663906221092
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_upgrade_gif.gif	--a---- 399 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 8BE02D510B4B2E05AD2611B1E9A0BD56
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_SearchEngines_images_search_gif.gif	--a---- 405 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 66018EAE0906C9831A821CAE5D1089BB
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_SearchEngines_news_icon_gif.gif	--a---- 371 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 84896837EDB1A78C14DB6A2F3A0AEE3A
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_searchengines_search_icon_gif.gif	--a---- 322 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 948781E4B6478290050ECA4423B89B1E
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_searchengines_softonic_gif.gif	--a---- 606 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 2A1D4FB45F62D3D260F2134228FAB05E
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_SearchEngines_tfd_gif.gif	--a---- 240 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] AE5A39669C623937C0839E079E1088D5
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_SearchEngines_video_gif.gif	--a---- 335 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 766433EF38BDA83C4FD4932027A4B9D5
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___weather_conduit_com_images_weather_Default_sunny_night_gif.gif	--a---- 204 bytes	[21:17 11/11/2011]	[21:17 11/11/2011] 5EBD213E8A460652C883CBF68C152B5B
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=GottenApps&locale=de-de.xml	--a---- 7158 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 975C952D94CC90E3174437C36DD068BF
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=OtherApps&locale=de-de.xml	--a---- 5625 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 9270590F46BFBAF0C0247EDF65291797
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=SharedApps&locale=de-de.xml	--a---- 6691 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 22C13F28D75B95B054B566E3EFD671B6
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=Toolbar&locale=de-de.xml	--a---- 5624 bytes	[21:16 11/11/2011]	[21:16 11/11/2011] 008A9ED67B706E1C56569441ADD9BB72

Searching for "*Babylon*"
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Mozilla Firefox\Extensions\ffxtlbr@babylon.com\defaults\preferences\babylon.js.vir	--a---- 790 bytes	[09:01 25/08/2013]	[17:07 23/08/2012] 60B791BE510FEBD82F7B030EEEE4FD7B
C:\Program Files (x86)\The Creative Assembly\Rome - Total War\data\settlement_plans\hanging_gardens_of_babylon.txt	--a---- 4180 bytes	[16:12 16/10/2010]	[14:48 27/08/2004] B273CD535924187A093DC16EB0BE42F6
C:\Program Files (x86)\The Creative Assembly\Rome - Total War\data\settlement_plans\hanging_gardens_of_babylon_battle.txt	--a---- 4180 bytes	[16:12 16/10/2010]	[14:48 27/08/2004] B273CD535924187A093DC16EB0BE42F6
C:\Program Files (x86)\The Creative Assembly\Rome - Total War\data\settlement_plans\overlays\overlay_babylon.cas	--a---- 11804 bytes	[16:15 16/10/2010]	[09:48 04/12/2002] 8448A2CC181D360CC1C5D07BCA4245E3
C:\Program Files (x86)\The Creative Assembly\Rome - Total War\data\settlement_plans\underlays\underlay_babylon.cas	--a---- 7777 bytes	[16:15 16/10/2010]	[09:49 04/12/2002] 36365EBDD546FFD6D478CE4BB9F794DD
C:\Program Files (x86)\Winamp\Plugins\Milkdrop2\presets\stahlregen + geiss + shifter - babylon.milk	--a---- 26473 bytes	[20:18 28/04/2009]	[20:18 28/04/2009] FD56279AD850D3AA87454766302DACF1
C:\Users\ADMIN.Ace\AppData\Roaming\Microsoft\Windows\Recent\Babylon.lnk	--a---- 875 bytes	[21:31 07/02/2013]	[21:31 07/02/2013] 9D836E907EC2492FD6DE8823EF29C016

Searching for "*Crossrider*"
No files found.

Searching for "*ZoneAlarm LTD Toolbar*"
No files found.

Searching for "*DuckDuckGo*"
C:\Users\xxxxi\AppData\Roaming\Mozilla\Firefox\Profiles\r6n9rara.default\searchplugins\duckduckgo.xml	--a---- 10530 bytes	[11:30 21/07/2013]	[11:30 21/07/2013] A6574189A7EDFCB62C01DA52590E0CF6
C:\Users\xxxxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\xke09otc.default-1359736880158\searchplugins\duckduckgo.xml	--a---- 10530 bytes	[10:55 31/08/2013]	[10:55 31/08/2013] A6574189A7EDFCB62C01DA52590E0CF6

========== folderfind ==========

Searching for "*Ask.com*"
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Ask.com	d------	[09:43 01/09/2013]

Searching for "*Ask Toolbar*"
No folders found.

Searching for "*Ask Search*"
No folders found.

Searching for "*SoftonicDownloader*"
No folders found.

Searching for "*Conduit*"
C:\Users\AppData\LocalLow\Conduit	d------	[19:08 03/11/2010]
C:\Users\xxxxxxx\AppData\LocalLow\Conduit	d------	[20:12 16/11/2010]
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\Repository\conduit_CT2613550_CT2613550	d------	[12:14 14/01/2011]
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Conduit	d------	[21:16 11/11/2011]
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\Repository\conduit_CT2613550_CT2613550	d------	[21:16 11/11/2011]
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\Repository\conduit_CT2613550_de-de	d------	[21:16 11/11/2011]

Searching for "*Babylon*"
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Mozilla Firefox\Extensions\ffxtlbr@babylon.com	d------	[09:43 01/09/2013]

Searching for "*Crossrider*"
No folders found.

Searching for "*ZoneAlarm LTD Toolbar*"
C:\Users\xxxxi\AppData\Roaming\CheckPoint\ZoneAlarm LTD Toolbar	d------	[06:26 12/08/2012]
C:\Users\xxxxxxx\AppData\Roaming\CheckPoint\ZoneAlarm LTD Toolbar	d------	[14:40 11/08/2012]

Searching for "*DuckDuckGo*"
No folders found.

========== regfind ==========

Searching for "Ask.com"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\Search\ask.com]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MAPI/IPM.Task]
"PreviewDetails"="prop:*System.DueDate;*System.Task.CompletionStatus;*System.Task.Owner;*System.Keywords"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\MAPI/IPM.Task]
"PreviewDetails"="prop:*System.DueDate;*System.Task.CompletionStatus;*System.Task.Owner;*System.Keywords"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Ask.com\Updater\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Ask.com\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Ask.com\assets\oobe\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Ask.com\assets\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\chrome\content\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\chrome\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\chrome\skin\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\defaults\preferences\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\defaults\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\searchplugins\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\chrome\skin\ ask_32x.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2BDF3E992C0908741B7C11F4B4E0F775]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\assets\oobe\b.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6B3BC4CF5ECE1F54BBA174C13A1AB907]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\TaskScheduler.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\UpdateTask.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\defaults\preferences\defaults.js"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BEABAA33A5E68374DBF197F2A00CD011]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\searchplugins\askcom.xml"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E656433EAEAD2EB479907D4FE70AA98E]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\chrome\content\about.js"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF\InstallProperties]
"HelpLink"="hxxp://about.ask.com/en/docs/about/index.shtml"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF\InstallProperties]
"Publisher"="Ask.com"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\AskToolbar\ButtonData\208]
"displayicon"="hxxp://apnwidgets.ask.com/widget/TWCWeather/images/weatherIcons16/alert.png"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\AskToolbar\Macro]
"InstallDir"="C:\Program Files (x86)\Ask.com\"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\SearchScopes\{7EF54776-F063-4D14-97A6-09FF4BF8935C}]
"URL"="hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=crm&q={searchTerms}&locale=de_DE&apn_ptnrs=U3&apn_dtid=OSJ000YYDE&apn_uid=1C4D2F40-200D-4D3C-B0BE-7EC20B329ED2&apn_sauid=3189768B-FED8-41C4-9B4B-4CFF582D94F5"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\SearchScopes\{7EF54776-F063-4D14-97A6-09FF4BF8935C}]
"FaviconURL"="hxxp://www.ask.com/favicon.ico"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\Search\ask.com]
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\Search\ask.com]

Searching for "Ask Toolbar"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF\InstallProperties]
"DisplayName"="Ask Toolbar"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EEE57F91-46AE-4F46-B09D-97D11ED65F6E}]
"Path"="\Scheduled Update for Ask Toolbar"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar]

Searching for "Ask Search"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\SearchScopes\{7EF54776-F063-4D14-97A6-09FF4BF8935C}]
"DisplayName"="Ask Search"

Searching for "SoftonicDownloader"
No data found.

Searching for "Conduit"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\063A857434EDED11A893800002C0A966]
"045F27F206F16624596059B2126D46D0"="C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\iSyncConduit.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\063A857434EDED11A893800002C0A966\045F27F206F16624596059B2126D46D0]
"File"="iSyncConduit.dll"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit]
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit\Community Alerts\Data\Feeds\1002062]
"Url"="hxxp://alerts.conduit-services.com/root/1006347/1002062/DE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit\Community Alerts\Settings]
"ALPServicesServerName"="hxxp://alert.services.conduit.com"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit\Community Alerts\Settings]
"ALPClientsServerName"="hxxp://alert.client.conduit.com"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit\Community Alerts\Settings]
"AutoUpdateServerName"="hxxp://alert.storage.conduit.com"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit\Community Alerts\Settings\Services\ChannelsSettings]
"URL"="hxxp://alert.services.conduit.com/channels/?aid=EB_CHANNEL_ID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit\Community Alerts\Settings\Services\DynamicDialogs]
"URL"="hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit\Community Alerts\Settings\Services\Login]
"URL"="hxxp://alert.services.conduit.com/Alerts/AlertServices.asmx/AlertLogin"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit\Community Alerts\Settings\Services\Translation]
"URL"="hxxp://alerts.conduit-services.com/translation/?locale=EB_LOCALE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit\Community Alerts\Settings\Services\Usage]
"URL"="hxxp://alert.services.conduit.com/Alerts/AlertServices.asmx/SetAlertUsageRequest"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit\Toolbar\Facebook\InfoService\hxxp://facebook.conduit-services.com/Settings.ashx?locale=de-de&browserType=IE&toolbarVersion=6.3.8.0]
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"Server"="users.conduit.com"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"GroupingServerURL"="hxxp://grouping.services.conduit.com/"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"PrivacyPageURL"="hxxp://www.conduit.com/privacy/Default.aspx"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"DisplayTrusteSeal"="hxxp://trust.conduit.com/EB_ORIGINAL_CTID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"UsageURL"="hxxp://usage.users.conduit.com/UsersWebService.asmx/UsersRequests"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"ClientLogURL"="hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"UninstallURL"="hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550]
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppRegisterUsage]
"ServiceUrl"="hxxp://apps.usage.conduit-services.com/AppOperations/AppRegistration.ashx"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppsMetaData]
"ServiceUrl"="hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppsSettings]
"ServiceUrl"="hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_COMP_ID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppTrackingFirstTime]
"ServiceUrl"="hxxp://tracking.usage.app.conduit-services.com/FirstTime.ashx?current=EB_APPTRACKING_CURRENT_STATE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppTrackingUsage]
"ServiceUrl"="hxxp://tracking.usage.app.conduit-services.com/Usage.ashx"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppUninstallUsage]
"ServiceUrl"="hxxp://apps.usage.conduit-services.com/AppOperations/AppUninstall.ashx"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\BrowserToolbarsInfo]
"ServiceUrl"="hxxp://counting.usage.toolbar.conduit-services.com/usage.ashx"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ClientErrorLog]
"ServiceUrl"="hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx?op=ReportDiagnosticsEvent"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\DynamicDialogs]
"ServiceUrl"="hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=EB_TOOLBAR_VERSION"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\GottenAppsContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=EB_LOCALE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\HostingUsage]
"ServiceUrl"="hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\OtherAppsContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=EB_LOCALE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\SearchSettings]
"ServiceUrl"="hxxp://API.search.conduit.com/Settings/?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\SharedAppsContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=EB_LOCALE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarAppComponentUsage]
"ServiceUrl"="hxxp://component.usage.toolbar.conduit-services.com/ToolbarComponentUsage.ashx"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarAppUsage]
"ServiceUrl"="hxxp://usage.toolbar.conduit-services.com/ToolbarUsage.ashx"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarComponentUsage]
"ServiceUrl"="hxxp://component.usage.toolbar.conduit-services.com/ToolbarComponentUsage.ashx"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=EB_LOCALE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarGrouping]
"ServiceUrl"="hxxp://grouping.services.conduit.com/GroupingRequest.ctp?type=GetGroup&ctid=EB_ORIGINAL_CTID&lut=0&locale=EB_OS_LOCALE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarLogin]
"ServiceUrl"="hxxp://login.toolbar.conduit-services.com/Login.ashx"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarSettings]
"ServiceUrl"="hxxp://settings.toolbar.conduit-services.com/?ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarSettingsForPublisher]
"ServiceUrl"="hxxp://settings.publisher.toolbar.conduit-services.com/?ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarSettingsForSB]
"ServiceUrl"="hxxp://settings.smartbar.conduit-services.com/settings/?ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarSettingsPublisherForSB]
"ServiceUrl"="hxxp://settings.publisher.smartbar.conduit-services.com/settings/?ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarTranslation]
"ServiceUrl"="hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarUninstall]
"ServiceUrl"="hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarUsage]
"ServiceUrl"="hxxp://usage.toolbar.conduit-services.com/ToolbarUsage.ashx"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\UninstallDialog]
"ServiceUrl"="hxxp://UninstallDialog.conduit-services.com/view/view.aspx?ctid=EB_TOOLBAR_ID&version=EB_TOOLBAR_VERSION"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\UninstallDialogUsage]
"ServiceUrl"="hxxp://uninstalldialogusage.toolbar.conduit-services.com/Usage.ashx"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550_CT2613550]
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550_de-de]
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\1121525870]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\1139983309]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\2607372324]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\3054915312]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\3279788275]
"dbname"="conduit_CT2613550_de-de"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\3497721787]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\3658808454]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\393351170]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\916659265]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings]
"SocialDomains"="social.conduit.com;apps.conduit.com;services.apps.conduit.com"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\FeatureProtector\BrowserSearch]
"URLFromService"="hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2613550"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\FeatureProtector\BrowserSearch]
"ConduitEnabled"="TRUE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\FeatureProtector\HomePage]
"URLFromService"="hxxp://search.conduit.com?SearchSource=10&ctid=CT2613550"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\FeatureProtector\HomePage]
"ConduitEnabled"="TRUE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\MyStuff]
"AddStuffLink"="hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\MyStuff]
"ConduitEnable"="TRUE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\RadioPlayer]
"ServerUrl"="hxxp://radio.services.conduit.com/RadioRequest.ctp"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Search\Settings]
"ContextMenuSearchUrl"="hxxp://search.conduit.com/ResultsExt.aspx?q=MYSEARCHTERM&ctid=EB_CTID&octid=EB_ORIGINAL_CTID&SearchSource=8"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\SearchInNewTab]
"AboutTabsDataUrlConduit"="hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\SearchInNewTab]
"AboutTabsEnabledByConduit"="TRUE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\SearchInNewTab]
"AboutTabsUsageUrl"="hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Update]
"ModuleURL"="hxxp://ieupdate.conduit.com/ver5.7.4.0/tbedrs.dll"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Upgrade]
"ModuleURL"="hxxp://ieupgrade.conduit-download.com/IEUpgrade/ver5.7.4.0/tbedrs.dll"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Weather]
"SearchServerUrl"="hxxp://search.conduit.com/"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Weather\de-de]
"Forecast"="<FORECAST><LOCATION_ID>GMXX0007</LOCATION_ID><DAYS><DAY1><DATE>20111111</DATE><DAY>Freitag</DAY><F_MIN>29</F_MIN><F_MAX>40</F_MAX><C_MIN>-1</C_MIN><C_MAX>4</C_MAX><UV_DESCRIPTION>Niedrig</UV_DESCRIPTION><UV_INDEX>1</UV_INDEX><SUNSET>4:20 pm</SUNSET><SUNRISE>7:20 am</SUNRISE><MOONRISE>4:24 pm</MOONRISE><MOONSET>8:04 am</MOONSET><MOON_PHASE>Abnehmend vorspringend</MOON_PHASE><CONDITION_DESCRIPTION>Sonnig</CONDITION_DESCRIPTION><CONDITION_ICON>hxxp://weather.conduit.com/images/weather/Default/sunny_big.gif</CONDITION_ICON></DAY1><DAY2><DATE>20111112</DATE><DAY>Samstag</DAY><F_MIN>29</F_MIN><F_MAX>46</F_MAX><C_MIN>-1</C_MIN><C_MAX>7</C_MAX><UV_DESCRIPTION>Niedrig</UV_DESCRIPTION><UV_INDEX>1</UV_INDEX><SUNSET>4:18 pm</SUNSET><SUNRISE>7:22 am</SUNRISE><MOONRISE>5:05 pm</MOONRISE><MOONSET>9:04 am</MOONSET><MOON_PHASE>Abnehmend vorspringend</MOON_PHASE><CONDITION_DESCRIPTION>Sonnig</CONDITION_DESCRIPTIO
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Conduit]
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Conduit\Community Alerts\Data\Feeds\1002062]
"Url"="hxxp://alerts.conduit-services.com/root/1006347/1002062/DE"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Conduit\Community Alerts\Settings]
"ALPServicesServerName"="hxxp://alert.services.conduit.com"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Conduit\Community Alerts\Settings]
"ALPClientsServerName"="hxxp://alert.client.conduit.com"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Conduit\Community Alerts\Settings]
"AutoUpdateServerName"="hxxp://alert.storage.conduit.com"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Conduit\Toolbar\Facebook\InfoService\hxxp://facebook.conduit-services.com/Settings.ashx?locale=de-de&browserType=IE&toolbarVersion=5.5.3.2]
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"Server"="users.conduit.com"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"GroupingServerURL"="hxxp://grouping.services.conduit.com/"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"PrivacyPageURL"="hxxp://www.conduit.com/privacy/Default.aspx"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"TrusteURL"="hxxp://trust.conduit.com/EB_ORIGINAL_CTID"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"UsageURL"="hxxp://usage.users.conduit.com/UsersWebService.asmx/UsersRequests"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"ClientLogURL"="hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"UninstallURL"="hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"Write us link"="mailto:geremy@conduit.com"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550]
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppsMetaData]
"ServiceUrl"="hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppsSettings]
"ServiceUrl"="hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_COMP_ID"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppTrackingFirstTime]
"ServiceUrl"="hxxp://tracking.usage.app.conduit-services.com/FirstTime.ashx?current=EB_APPTRACKING_CURRENT_STATE"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppTrackingUsage]
"ServiceUrl"="hxxp://tracking.usage.app.conduit-services.com/Usage.ashx"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\BrowserToolbarsInfo]
"ServiceUrl"="hxxp://counting.usage.toolbar.conduit-services.com/usage.ashx"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ClientErrorLog]
"ServiceUrl"="hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx?op=ReportDiagnosticsEvent"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\DynamicDialogs]
"ServiceUrl"="hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=EB_TOOLBAR_VERSION"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\GottenAppsContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=EB_LOCALE"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\OtherAppsContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=EB_LOCALE"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\SharedAppsContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=EB_LOCALE"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarAppComponentUsage]
"ServiceUrl"="hxxp://component.usage.toolbar.conduit-services.com/ToolbarComponentUsage.ashx"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarAppUsage]
"ServiceUrl"="hxxp://usage.toolbar.conduit-services.com/ToolbarUsage.ashx"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarComponentUsage]
"ServiceUrl"="hxxp://component.usage.toolbar.conduit-services.com/ToolbarComponentUsage.ashx"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=EB_LOCALE"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarLogin]
"ServiceUrl"="hxxp://login.toolbar.conduit-services.com/Login.ashx"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarSettings]
"ServiceUrl"="hxxp://settings.toolbar.search.conduit.com/root/EB_TOOLBAR_ID/EB_ORIGINAL_CTID"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarSettingsForPublisher]
"ServiceUrl"="hxxp://settings.publisher.toolbar.conduit-services.com/?ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarTranslation]
"ServiceUrl"="hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarUsage]
"ServiceUrl"="hxxp://usage.toolbar.conduit-services.com/ToolbarUsage.ashx"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550_CT2613550]
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\169875435]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\2149621329]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\786731368]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\LanguagePack]
"LanguagePackServerUrl"="hxxp://translation.users.conduit.com/Translation.ashx"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\MyStuff]
"ServiceURL"="hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\MyStuff]
"AddStuffLink"="hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\MyStuff]
"ConduitEnable"="TRUE"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Search\Settings]
"ContextMenuSearchUrl"="hxxp://search.conduit.com/ResultsExt.aspx?q=MYSEARCHTERM&ctid=EB_CTID&octid=EB_ORIGINAL_CTID&SearchSource=8"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\SearchInNewTab]
"AboutTabsDataUrlConduit"="hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\SearchInNewTab]
"AboutTabsEnabledByConduit"="TRUE"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\SearchInNewTab]
"AboutTabsUsageUrl"="hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Update]
"ModuleURL"="hxxp://ieupdate.conduit.com/ver5.5.3.2/tbedrs.dll"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Upgrade]
"ModuleURL"="hxxp://ieupgrade.conduit-download.com/IEUpgrade/ver5.5.3.2/tbedrs.dll"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Conduit]
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\Conduit]
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\Conduit\Community Alerts\Data\Feeds\1002062]
"Url"="hxxp://alerts.conduit-services.com/root/1006347/1002062/DE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\Conduit\Community Alerts\Settings]
"ALPServicesServerName"="hxxp://alert.services.conduit.com"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\Conduit\Community Alerts\Settings]
"ALPClientsServerName"="hxxp://alert.client.conduit.com"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\Conduit\Community Alerts\Settings]
"AutoUpdateServerName"="hxxp://alert.storage.conduit.com"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\Conduit\Community Alerts\Settings\Services\ChannelsSettings]
"URL"="hxxp://alert.services.conduit.com/channels/?aid=EB_CHANNEL_ID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\Conduit\Community Alerts\Settings\Services\DynamicDialogs]
"URL"="hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\Conduit\Community Alerts\Settings\Services\Login]
"URL"="hxxp://alert.services.conduit.com/Alerts/AlertServices.asmx/AlertLogin"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\Conduit\Community Alerts\Settings\Services\Translation]
"URL"="hxxp://alerts.conduit-services.com/translation/?locale=EB_LOCALE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\Conduit\Community Alerts\Settings\Services\Usage]
"URL"="hxxp://alert.services.conduit.com/Alerts/AlertServices.asmx/SetAlertUsageRequest"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\Conduit\Toolbar\Facebook\InfoService\hxxp://facebook.conduit-services.com/Settings.ashx?locale=de-de&browserType=IE&toolbarVersion=6.3.8.0]
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"Server"="users.conduit.com"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"GroupingServerURL"="hxxp://grouping.services.conduit.com/"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"PrivacyPageURL"="hxxp://www.conduit.com/privacy/Default.aspx"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"DisplayTrusteSeal"="hxxp://trust.conduit.com/EB_ORIGINAL_CTID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"UsageURL"="hxxp://usage.users.conduit.com/UsersWebService.asmx/UsersRequests"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"ClientLogURL"="hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"UninstallURL"="hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550]
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppRegisterUsage]
"ServiceUrl"="hxxp://apps.usage.conduit-services.com/AppOperations/AppRegistration.ashx"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppsMetaData]
"ServiceUrl"="hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppsSettings]
"ServiceUrl"="hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_COMP_ID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppTrackingFirstTime]
"ServiceUrl"="hxxp://tracking.usage.app.conduit-services.com/FirstTime.ashx?current=EB_APPTRACKING_CURRENT_STATE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppTrackingUsage]
"ServiceUrl"="hxxp://tracking.usage.app.conduit-services.com/Usage.ashx"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppUninstallUsage]
"ServiceUrl"="hxxp://apps.usage.conduit-services.com/AppOperations/AppUninstall.ashx"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\BrowserToolbarsInfo]
"ServiceUrl"="hxxp://counting.usage.toolbar.conduit-services.com/usage.ashx"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ClientErrorLog]
"ServiceUrl"="hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx?op=ReportDiagnosticsEvent"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\DynamicDialogs]
"ServiceUrl"="hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=EB_TOOLBAR_VERSION"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\GottenAppsContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=EB_LOCALE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\HostingUsage]
"ServiceUrl"="hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\OtherAppsContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=EB_LOCALE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\SearchSettings]
"ServiceUrl"="hxxp://API.search.conduit.com/Settings/?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\SharedAppsContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=EB_LOCALE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarAppComponentUsage]
"ServiceUrl"="hxxp://component.usage.toolbar.conduit-services.com/ToolbarComponentUsage.ashx"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarAppUsage]
"ServiceUrl"="hxxp://usage.toolbar.conduit-services.com/ToolbarUsage.ashx"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarComponentUsage]
"ServiceUrl"="hxxp://component.usage.toolbar.conduit-services.com/ToolbarComponentUsage.ashx"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=EB_LOCALE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarGrouping]
"ServiceUrl"="hxxp://grouping.services.conduit.com/GroupingRequest.ctp?type=GetGroup&ctid=EB_ORIGINAL_CTID&lut=0&locale=EB_OS_LOCALE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarLogin]
"ServiceUrl"="hxxp://login.toolbar.conduit-services.com/Login.ashx"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarSettings]
"ServiceUrl"="hxxp://settings.toolbar.conduit-services.com/?ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarSettingsForPublisher]
"ServiceUrl"="hxxp://settings.publisher.toolbar.conduit-services.com/?ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarSettingsForSB]
"ServiceUrl"="hxxp://settings.smartbar.conduit-services.com/settings/?ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarSettingsPublisherForSB]
"ServiceUrl"="hxxp://settings.publisher.smartbar.conduit-services.com/settings/?ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarTranslation]
"ServiceUrl"="hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarUninstall]
"ServiceUrl"="hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarUsage]
"ServiceUrl"="hxxp://usage.toolbar.conduit-services.com/ToolbarUsage.ashx"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\UninstallDialog]
"ServiceUrl"="hxxp://UninstallDialog.conduit-services.com/view/view.aspx?ctid=EB_TOOLBAR_ID&version=EB_TOOLBAR_VERSION"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\UninstallDialogUsage]
"ServiceUrl"="hxxp://uninstalldialogusage.toolbar.conduit-services.com/Usage.ashx"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550_CT2613550]
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550_de-de]
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\1121525870]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\1139983309]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\2607372324]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\3054915312]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\3279788275]
"dbname"="conduit_CT2613550_de-de"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\3497721787]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\3658808454]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\393351170]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\916659265]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings]
"SocialDomains"="social.conduit.com;apps.conduit.com;services.apps.conduit.com"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\FeatureProtector\BrowserSearch]
"URLFromService"="hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2613550"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\FeatureProtector\BrowserSearch]
"ConduitEnabled"="TRUE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\FeatureProtector\HomePage]
"URLFromService"="hxxp://search.conduit.com?SearchSource=10&ctid=CT2613550"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\FeatureProtector\HomePage]
"ConduitEnabled"="TRUE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\MyStuff]
"AddStuffLink"="hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\MyStuff]
"ConduitEnable"="TRUE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\RadioPlayer]
"ServerUrl"="hxxp://radio.services.conduit.com/RadioRequest.ctp"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Search\Settings]
"ContextMenuSearchUrl"="hxxp://search.conduit.com/ResultsExt.aspx?q=MYSEARCHTERM&ctid=EB_CTID&octid=EB_ORIGINAL_CTID&SearchSource=8"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\SearchInNewTab]
"AboutTabsDataUrlConduit"="hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\SearchInNewTab]
"AboutTabsEnabledByConduit"="TRUE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\SearchInNewTab]
"AboutTabsUsageUrl"="hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Update]
"ModuleURL"="hxxp://ieupdate.conduit.com/ver5.7.4.0/tbedrs.dll"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Upgrade]
"ModuleURL"="hxxp://ieupgrade.conduit-download.com/IEUpgrade/ver5.7.4.0/tbedrs.dll"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Weather]
"SearchServerUrl"="hxxp://search.conduit.com/"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Weather\de-de]
"Forecast"="<FORECAST><LOCATION_ID>GMXX0007</LOCATION_ID><DAYS><DAY1><DATE>20111111</DATE><DAY>Freitag</DAY><F_MIN>29</F_MIN><F_MAX>40</F_MAX><C_MIN>-1</C_MIN><C_MAX>4</C_MAX><UV_DESCRIPTION>Niedrig</UV_DESCRIPTION><UV_INDEX>1</UV_INDEX><SUNSET>4:20 pm</SUNSET><SUNRISE>7:20 am</SUNRISE><MOONRISE>4:24 pm</MOONRISE><MOONSET>8:04 am</MOONSET><MOON_PHASE>Abnehmend vorspringend</MOON_PHASE><CONDITION_DESCRIPTION>Sonnig</CONDITION_DESCRIPTION><CONDITION_ICON>hxxp://weather.conduit.com/images/weather/Default/sunny_big.gif</CONDITION_ICON></DAY1><DAY2><DATE>20111112</DATE><DAY>Samstag</DAY><F_MIN>29</F_MIN><F_MAX>46</F_MAX><C_MIN>-1</C_MIN><C_MAX>7</C_MAX><UV_DESCRIPTION>Niedrig</UV_DESCRIPTION><UV_INDEX>1</UV_INDEX><SUNSET>4:18 pm</SUNSET><SUNRISE>7:22 am</SUNRISE><MOONRISE>5:05 pm</MOONRISE><MOONSET>9:04 am</MOONSET><MOON_PHASE>Abnehmend vorspringend</MOON_PHASE><CONDITION_DESCRIPTION>Sonnig</CONDITION_DESCRIPTIO

Searching for "Babylon"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}]
"DllName"="BabylonToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}]
"DllName"="BabylonToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}]
"DllName"="BabylonToolbarTlbr.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\BabylonToolbar\Shared\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\BabylonToolbar\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\BabylonToolbar\CR\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\BabylonToolbar\FF\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\BabylonToolbar\IE\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}]
"DllName"="BabylonToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}]
"DllName"="BabylonToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}]
"DllName"="BabylonToolbarTlbr.dll"

Searching for "Crossrider"
No data found.

Searching for "ZoneAlarm LTD Toolbar"
No data found.

Searching for "DuckDuckGo"
No data found.

Searching for "         "
[HKEY_LOCAL_MACHINE\SOFTWARE\Canon\WIA\Devices\MP550 series]
"ProductId"="MP550           "
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Plugin\Microsoft.PowerShell]
"ConfigXML"="             <PlugInConfiguration xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Name="microsoft.powershell" Filename="%windir%\system32\pwrshplugin.dll" SDKVersion="1" XmlRenderingType="text" >                 <InitializationParameters>                     <Param Name="PSVersion" Value="2.0"/>                 </InitializationParameters>                 <Resources>                     <Resource ResourceUri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell" SupportsOptions="true" ExactMatch="true">                         <Security xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Uri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell" ExactMatch="true" Sddl="O:NSG:BAD:P(A;;GA;;;BA)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)"/>                         <Capability Type="Shell"/>                     </Resource>                 </Res
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\WSMAN\Plugin\Microsoft.PowerShell32]
"ConfigXML"="<PlugInConfiguration xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Name="microsoft.powershell32" Filename="%windir%\system32\pwrshplugin.dll" SDKVersion="1" XmlRenderingType="text" Architecture="32" >                         <InitializationParameters>                             <Param Name="PSVersion" Value="2.0"/>                         </InitializationParameters>                         <Resources>                             <Resource ResourceUri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell32" SupportsOptions="true" ExactMatch="true">                                 <Security xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Uri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell32" ExactMatch="true" Sddl="O:NSG:BAD:P(A;;GA;;;BA)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)"/>                                
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_APPLE&PROD_IPOD&REV_1.70#000A27002297E590&0#]
"DeviceDesc"="iPod            "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SANDISK&PROD_CRUZER&REV_8.01#432430165D808A62&0#]
"DeviceDesc"="Cruzer          "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_APPLE&PROD_IPOD&REV_1.70#000A27002297E590&0#]
"DeviceDesc"="iPod            "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SANDISK&PROD_CRUZER&REV_8.01#432430165D808A62&0#]
"DeviceDesc"="Cruzer          "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_APPLE&PROD_IPOD&REV_1.70#000A27002297E590&0#]
"DeviceDesc"="iPod            "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SANDISK&PROD_CRUZER&REV_8.01#432430165D808A62&0#]
"DeviceDesc"="Cruzer          "

-= EOF =-
Gruß und gute
Geändert von Pechvogel44 (02.09.2013 um 20:26 Uhr)

Alt 03.09.2013, 09:38   #5
M-K-D-B
/// TB-Ausbilder
 
DuckDuckGo läßt sich nicht enfernen - Standard

DuckDuckGo läßt sich nicht enfernen


Servus,



wir entfernen die letzten Reste und kontrollieren nochmal alles.


Wichtig:
Du hast deinen Benutzernamen durch xxxx unkenntlich gemacht. Vor dem Fix musst du deinen richtigen Benutzernamen für die jeweilige Stelle einfügen, sonst wird der Fix nicht funktionieren!




Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument


Code:
ATTFilter
start
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = 
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
Toolbar: HKCU - No Name - {FC2B76FC-2132-4D80-A9A3-1F5C6E49066B} -  No File
Toolbar: HKCU - No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} -  No File
FF SearchEngineOrder.1: Ask.com
FF SelectedSearchEngine: Google
FF Homepage: about:home
FF NetworkProxy: "http", "127.0.0.1"
FF NetworkProxy: "http_port", 62707
FF NetworkProxy: "type", 0
Task: {EEE57F91-46AE-4F46-B09D-97D11ED65F6E} - \Scheduled Update for Ask Toolbar No Task File
C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wuxxxxx.defaultx\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
C:\Users\xxxxxxx\AppData\LocalLow\Conduit
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit
C:\Users\xxxxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\3udiwpab.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Conduit
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit
C:\Users\xxxxi\AppData\Roaming\Mozilla\Firefox\Profiles\r6n9rara.default\searchplugins\duckduckgo.xml
C:\Users\xxxxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\xke09otc.default-1359736880158\searchplugins\duckduckgo.xml
C:\Users\xxxxxxx\AppData\Roaming\CheckPoint
Reg: reg delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\Search\ask.com" /f
Reg: reg delete "HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\AskToolbar" /f
Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF" /f
Reg: reg delete "HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit" /f
Reg: reg delete "HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit" /f
end

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.






Schritt 2
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.






Schritt 3

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset






Schritt 4
Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.





Bitte poste mit deiner nächsten Antwort
  • die Logdatei von FRST,
  • die Logdatei von MBAM,
  • die Logdatei von ESET,
  • die Logdatei von SecurityCheck.
Antwort

Themen zu DuckDuckGo läßt sich nicht enfernen
duckduckgo, enfernen, entferne, firefox, gefährlich, liebe, nervt, neustart, seite, seriös, standard, startseite, stelle, suchmaschine, suchmaschinen, troja, wirkt


« Windows7: HDvid codec v1 runtergeladen | GVU Trojaner Windows XP - kein abgesicherter Modus möglich »


Ähnliche Themen: DuckDuckGo läßt sich nicht enfernen


  1. Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht
    Log-Analyse und Auswertung - 05.08.2015 (22)
  2. Adware "Positive Finds" lässt sich in google Chrome nicht enfernen.
    Plagegeister aller Art und deren Bekämpfung - 15.02.2015 (10)
  3. DuckDuckGo lässt sich nicht aus Firefox entfernen
    Log-Analyse und Auswertung - 02.12.2014 (37)
  4. Firefox läßt sich nicht mehr öffnen - Der Vorgang wurde aufgrund von Beschränkungen auf dem Computer abgebrochen. Wenden sie sich an den Sys
    Log-Analyse und Auswertung - 05.08.2014 (17)
  5. Firefox läßt sich nicht mehr öffnen - Der Vorgang wurde aufgrund von Beschränkungen auf dem Computer abgebrochen. Wenden sie sich an den Sys
    Alles rund um Windows - 28.07.2014 (2)
  6. Wallpaper läßt sich nicht löschen
    Alles rund um Windows - 27.05.2013 (5)
  7. qvo6 läßt sich nicht etfernen
    Log-Analyse und Auswertung - 14.05.2013 (5)
  8. C:\test.exe läßt sich nicht entfernen
    Plagegeister aller Art und deren Bekämpfung - 28.02.2013 (3)
  9. Spyhunter 4 läßt sich nicht entfernen.
    Plagegeister aller Art und deren Bekämpfung - 02.05.2012 (30)
  10. sicherheitsdienstcenter läßt sich nicht starten
    Log-Analyse und Auswertung - 30.01.2011 (6)
  11. Trojaner lässt sich nicht enfernen
    Mülltonne - 05.09.2008 (2)
  12. ShlapiW32.dll läßt sich nicht entfernen
    Plagegeister aller Art und deren Bekämpfung - 09.08.2007 (6)
  13. Tr/Agent läßt sich nicht Entfernen
    Plagegeister aller Art und deren Bekämpfung - 12.06.2007 (1)
  14. Trojaner läßt sich nicht löschen
    Plagegeister aller Art und deren Bekämpfung - 21.10.2006 (3)
  15. Trojaner? lässt sich nicht enfernen !!
    Log-Analyse und Auswertung - 13.09.2005 (5)
  16. ahf.dll läßt sich nicht löschen
    Log-Analyse und Auswertung - 18.02.2005 (1)
  17. Systemwiederherstellung läßt sich nicht aktivieren !?
    Alles rund um Windows - 07.01.2005 (5)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema DuckDuckGo läßt sich nicht enfernen - Servus, Zitat: Zitat von Pechvogel44 was ist das mit dem DuckDuckGo eigentlich, bzw. was hat es mit meinem Problema auf sich? Ich bin davon ausgegangen, dass das 'ne anonyme Suchmaschine - DuckDuckGo läßt sich nicht enfernen...
Archiv
Du betrachtest: DuckDuckGo läßt sich nicht enfernen auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131