|
Log-Analyse und Auswertung: Windows 7, Polizei Virus mit Firefox eingefangenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
10.01.2014, 17:23 | #1 |
| Windows 7, Polizei Virus mit Firefox eingefangen Hallo Ich habe mir beim surfen mit Mozilla Firefox den Virus eingefangen. Es tauchte auf einmal ein neues Fenster auf wo denn die bekannte Seite zu sehen war und wo man aufgefordert wird Geld zu bezahlen. Ich konnte die Seite durch einfaches schließe des Browsers nicht verlassen sondern erst mit dem task Manager ließ sich dann die Seite schließen. Zwar läuft jetzt alles wieder normal und mein Antiviren Programm konnte auch nichts finden, trotzdem bin ich misstrauisch und wollte hier um Rat fragen. |
10.01.2014, 17:37 | #2 |
/// TB-Ausbilder | Windows 7, Polizei Virus mit Firefox eingefangenMein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen. Bitte beachte folgende Hinweise:
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
|
10.01.2014, 17:52 | #3 |
| Windows 7, Polizei Virus mit Firefox eingefangen FRST Logfile:
__________________FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 10-01-2014 Ran by Boddin (administrator) on BODDIN-PC on 10-01-2014 17:46:41 Running from C:\Users\Boddin\Downloads Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avfwsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe (APN LLC.) C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe () C:\Program Files\Comodo\Dragon\dragon_updater.exe (Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe (Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avmailc.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Elaborate Bytes AG) C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe (Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe (APN) C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe () C:\Program Files\RocketDock\RocketDock.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe (Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe (APN LLC.) C:\Users\Boddin\AppData\Local\VNT\vntldr.exe (Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Dropbox, Inc.) C:\Users\Boddin\AppData\Roaming\Dropbox\bin\Dropbox.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\APSDaemon.exe (Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe (Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe (Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreamsDownloader.exe (Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jucheck.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Google Inc.) C:\Users\Boddin\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Boddin\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Boddin\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Boddin\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Boddin\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Boddin\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Boddin\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Boddin\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Boddin\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Boddin\AppData\Local\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation) HKLM\...\Run: [VirtualCloneDrive] - C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [85160 2009-06-17] (Elaborate Bytes AG) HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM\...\Run: [hpqSRMon] - C:\Program Files\HP\Digital Imaging\bin\HpqSRmon.exe [150528 2008-07-22] (Hewlett-Packard) HKLM\...\Run: [] - [x] HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM\...\Run: [CIS_{81EFDD93-DBBE-415B-BE6E-49B9664E3E82}] - "C:\ProgramData\cisE1E9.exe" --PostUninstall {81EFDD93-DBBE-415B-BE6E-49B9664E3E82} HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.) HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.) HKLM\...\Run: [ApnTBMon] - C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1778640 2013-12-20] (APN) HKLM\...\Run: [VNT] - C:\Program Files\VNT\vntldr.exe [202192 2013-12-20] (APN LLC.) HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [684600 2014-01-03] (Avira Operations GmbH & Co. KG) HKCU\...\Run: [RocketDock] - C:\Program Files\RocketDock\RocketDock.exe [495616 2007-09-02] () HKCU\...\Run: [iCloudServices] - C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-09-14] (Apple Inc.) HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-09-15] (Apple Inc.) HKCU\...\Run: [TomTomHOME.exe] - C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [248208 2013-03-22] (TomTom) HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [20549280 2013-10-21] (Skype Technologies S.A.) HKCU\...\Run: [Google Update] - C:\Users\Boddin\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-05-31] (Google Inc.) MountPoints2: {bdeadb87-77ef-11e1-a31f-001bfcfde896} - I:\Autorun.exe HKU\UpdatusUser\...\Run: [ROC_JAN2013_TB] - "C:\Program Files\AVG Secure Search\ROC_JAN2013_TB.exe" /PROMPT /CMPID=JAN2013_TB AppInit_DLLs: [ ] () Startup: C:\Users\Boddin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Boddin\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.yahoo.com?fr=fp-comodo HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xD4DF6176603FCD01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE URLSearchHook: HKCU - (No Name) - {7e111a5c-3d11-4f56-9463-5310c3c69025} - No File SearchScopes: HKCU - {8EEAC88A-079B-4b2c-80C1-7836F79EB40A} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-comodo BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) BHO: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.) BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO: No Name - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - No File BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.) Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.) Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Winsock: Catalog5 05 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.) Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 33 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1 Tcpip\..\Interfaces\{A33675A3-FA9B-4AAA-A074-91D1FB84C8FB}: [NameServer]156.154.70.22,156.154.71.22 FireFox: ======== FF ProfilePath: C:\Users\Boddin\AppData\Roaming\Mozilla\Firefox\Profiles\vddu4vvk.default FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml FF Homepage: hxxp://www.google.de/ FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin: @java.com/DTPlugin,version=10.13.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.13.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin: @videolan.org/vlc,version=2.0.6 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Boddin\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Boddin\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF SearchPlugin: C:\Users\Boddin\AppData\Roaming\Mozilla\Firefox\Profiles\vddu4vvk.default\searchplugins\11-suche.xml FF SearchPlugin: C:\Users\Boddin\AppData\Roaming\Mozilla\Firefox\Profiles\vddu4vvk.default\searchplugins\conduit.xml FF SearchPlugin: C:\Users\Boddin\AppData\Roaming\Mozilla\Firefox\Profiles\vddu4vvk.default\searchplugins\englische-ergebnisse.xml FF SearchPlugin: C:\Users\Boddin\AppData\Roaming\Mozilla\Firefox\Profiles\vddu4vvk.default\searchplugins\gmx-suche.xml FF SearchPlugin: C:\Users\Boddin\AppData\Roaming\Mozilla\Firefox\Profiles\vddu4vvk.default\searchplugins\lastminute.xml FF SearchPlugin: C:\Users\Boddin\AppData\Roaming\Mozilla\Firefox\Profiles\vddu4vvk.default\searchplugins\webde-suche.xml FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\avg-secure-search.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: ProxTube - Unblock YouTube - C:\Users\Boddin\AppData\Roaming\Mozilla\Firefox\Profiles\vddu4vvk.default\Extensions\ich@maltegoetz.de FF Extension: Qualys BrowserCheck - C:\Users\Boddin\AppData\Roaming\Mozilla\Firefox\Profiles\vddu4vvk.default\Extensions\{7D2FB79E-E58C-4DB5-A36F-AC1C73967F4D} FF Extension: SaveFrom.net helper - C:\Users\Boddin\AppData\Roaming\Mozilla\Firefox\Profiles\vddu4vvk.default\Extensions\helper@savefrom.net.xpi FF Extension: WEB.DE MailCheck - C:\Users\Boddin\AppData\Roaming\Mozilla\Firefox\Profiles\vddu4vvk.default\Extensions\toolbar@web.de.xpi FF Extension: Avira SearchFree Toolbar plus Web Protection - C:\Users\Boddin\AppData\Roaming\Mozilla\Firefox\Profiles\vddu4vvk.default\Extensions\toolbar_AVIRA-V7C@apn.ask.com.xpi FF Extension: NoScript - C:\Users\Boddin\AppData\Roaming\Mozilla\Firefox\Profiles\vddu4vvk.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF HKLM\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff\ FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 Chrome: ======= CHR HomePage: hxxp://www.google.com/ CHR Plugin: (Shockwave Flash) - C:\Users\Boddin\AppData\Local\Google\Chrome\User Data\PepperFlash\11.5.31.138\pepflashplayer.dll No File CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Users\Boddin\AppData\Local\Google\Chrome\Application\32.0.1700.72\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Users\Boddin\AppData\Local\Google\Chrome\Application\32.0.1700.72\pdf.dll () CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Java(TM) Platform SE 7 U7) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () CHR Plugin: (Google Update) - C:\Users\Boddin\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_146.dll No File CHR Plugin: (Java Deployment Toolkit 7.0.70.11) - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) CHR Extension: (Google Translate) - C:\Users\Boddin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb\1.2.5_0 CHR Extension: (YouTube) - C:\Users\Boddin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Adblock Plus) - C:\Users\Boddin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.7.2_0 CHR Extension: (Google Search) - C:\Users\Boddin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (AdBlock) - C:\Users\Boddin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0 CHR Extension: (YouTube Downloader: MP3 / HD Video Download) - C:\Users\Boddin\AppData\Local\Google\Chrome\User Data\Default\Extensions\hokfcbmfpgeajcgkaeigohghnkhjmcbj\13.0_0 CHR Extension: (Autodesk Homestyler) - C:\Users\Boddin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdmmkfaghgcicheaimnpffeeekheafkb\2.6_0 CHR Extension: (Web Zoom) - C:\Users\Boddin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkdlogcbnmlbmdgoajdflmijmbmikokj\1.0_0 CHR Extension: (Skype Click to Call) - C:\Users\Boddin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.3.0.11079_0 CHR Extension: (Google Wallet) - C:\Users\Boddin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_1 CHR Extension: (Avira SearchFree Toolbar plus Web Protection) - C:\Users\Boddin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pcoohmdcpejoeggdnihdfhohjgdbllgm\30.1_0 CHR Extension: (Gmail) - C:\Users\Boddin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx CHR HKLM\...\Chrome\Extension: [nlafpokblfobdnjhhggocaanijghemnd] - C:\Users\Boddin\AppData\Local\CRE\nlafpokblfobdnjhhggocaanijghemnd.crx CHR HKLM\...\Chrome\Extension: [pcoohmdcpejoeggdnihdfhohjgdbllgm] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7C\CRX\ToolbarCR.crx CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx CHR HKCU\...\Chrome\Extension: [nlafpokblfobdnjhhggocaanijghemnd] - C:\Users\Boddin\AppData\Local\CRE\nlafpokblfobdnjhhggocaanijghemnd.crx CHR StartMenuInternet: Google Chrome - C:\Users\Boddin\AppData\Local\Google\Chrome\Application\chrome.exe ========================== Services (Whitelisted) ================= R2 AntiVirFirewallService; C:\Program Files\Avira\AntiVir Desktop\avfwsvc.exe [1012280 2014-01-03] (Avira Operations GmbH & Co. KG) R2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc.exe [896056 2014-01-03] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440376 2014-01-03] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440376 2014-01-03] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2014-01-03] (Avira Operations GmbH & Co. KG) R2 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-12-20] (APN LLC.) R2 DragonUpdater; C:\Program Files\Comodo\Dragon\dragon_updater.exe [2098880 2014-01-08] () R2 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.) ==================== Drivers (Whitelisted) ==================== R3 avfwim; C:\Windows\System32\DRIVERS\avfwim.sys [92448 2014-01-03] (Avira GmbH) R1 avfwot; C:\Windows\System32\DRIVERS\avfwot.sys [113024 2014-01-03] (Avira GmbH) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2014-01-03] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2014-01-03] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2014-01-03] (Avira Operations GmbH & Co. KG) R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [26024 2009-12-17] (Elaborate Bytes AG) S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [94304 2013-06-08] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [574560 2013-12-29] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [25696 2013-10-17] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [25696 2013-10-17] (Kaspersky Lab ZAO) R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [45024 2013-05-14] (Kaspersky Lab ZAO) R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH) U4 kl1; system32\DRIVERS\kl1.sys [x] U4 klpd; system32\DRIVERS\klpd.sys [x] U4 kneps; system32\DRIVERS\kneps.sys [x] S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x] S3 tsusbhub; system32\drivers\tsusbhub.sys [x] S3 VGPU; System32\drivers\rdvgkmd.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-10 17:46 - 2014-01-10 17:47 - 00022097 _____ C:\Users\Boddin\Downloads\FRST.txt 2014-01-10 17:46 - 2014-01-10 17:46 - 00000000 ____D C:\FRST 2014-01-10 17:45 - 2014-01-10 17:45 - 01066141 _____ (Farbar) C:\Users\Boddin\Downloads\FRST.exe 2014-01-10 17:43 - 2014-01-10 17:43 - 00000114 _____ C:\Users\Boddin\Downloads\fritz.mittwoch.2.pls 2014-01-09 19:46 - 2014-01-09 19:46 - 00048392 _____ (COMODO CA Limited) C:\Windows\system32\certsentry.dll 2014-01-09 19:46 - 2014-01-09 19:46 - 00000000 ____D C:\first_launch 2014-01-03 17:32 - 2014-01-03 17:32 - 00069240 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2014-01-02 11:31 - 2014-01-02 11:31 - 00002221 _____ C:\Users\Public\Desktop\Free AVI Video Converter.lnk 2014-01-02 11:30 - 2014-01-02 11:31 - 00000000 ___RD C:\Users\Public\Desktop\DVDVideoSoft 2014-01-02 11:29 - 2014-01-02 11:29 - 27454776 _____ (DVDVideoSoft Ltd. ) C:\Users\Boddin\Downloads\FreeAVIVideoConverter.exe 2014-01-01 21:54 - 2014-01-01 21:54 - 00000000 ____D C:\Users\Boddin\AppData\Roaming\Avira 2014-01-01 21:53 - 2014-01-01 21:53 - 00002016 _____ C:\Users\Public\Desktop\Avira Control Center.lnk 2014-01-01 21:52 - 2014-01-03 17:32 - 00135648 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2014-01-01 21:52 - 2014-01-03 17:32 - 00113024 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwot.sys 2014-01-01 21:52 - 2014-01-03 17:32 - 00092448 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwim.sys 2014-01-01 21:52 - 2014-01-03 17:32 - 00090400 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-01-01 21:52 - 2014-01-03 17:32 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2014-01-01 21:52 - 2014-01-01 21:52 - 00000000 ____D C:\ProgramData\Avira 2014-01-01 21:52 - 2014-01-01 21:52 - 00000000 ____D C:\Program Files\Avira 2014-01-01 21:52 - 2012-08-27 15:50 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys 2014-01-01 21:33 - 2014-01-01 21:33 - 00000000 ____D C:\Users\Boddin\Downloads\Avira Internet Security 2013 2014-01-01 21:10 - 2014-01-01 21:13 - 00000000 ____D C:\Users\Boddin\Downloads\Avira Internet Security Suite 2014 v14.0.1.179 2014-01-01 20:15 - 2014-01-01 20:15 - 135988266 _____ C:\Users\Boddin\Downloads\Avira_Internet_Security_Suite_2014_v14.0.1.179.rar 2014-01-01 19:47 - 2014-01-01 19:47 - 00015839 _____ C:\Users\Boddin\Desktop\HelloWorld.exe 2014-01-01 19:47 - 2014-01-01 19:47 - 00000853 _____ C:\Users\Boddin\Desktop\Makefile.win 2014-01-01 19:31 - 2014-01-01 19:35 - 00000000 ____D C:\Users\Boddin\Desktop\HelloWorld 2013-12-31 17:28 - 2013-12-05 20:43 - 00000000 ____D C:\Users\Boddin\Downloads\__MACOSX 2013-12-31 11:55 - 2013-09-15 20:35 - 00000000 ____D C:\Users\Boddin\Downloads\[320.MP3] Club Music 01 (2013) [iTunes Edition] 2013-12-30 16:15 - 2014-01-01 19:24 - 00000000 ____D C:\Dev-Cpp 2013-12-30 16:15 - 2013-12-30 16:16 - 00000000 ____D C:\Users\Boddin\AppData\Roaming\Dev-Cpp 2013-12-30 16:13 - 2013-12-30 16:14 - 09326468 _____ C:\Users\Boddin\Downloads\devcpp-4.9.9.2_setup.exe 2013-12-30 15:39 - 2013-12-30 16:15 - 00000000 ____D C:\Users\Boddin\AppData\Roaming\Notepad++ 2013-12-30 15:39 - 2013-12-30 15:39 - 00000000 ____D C:\Users\Boddin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++ 2013-12-30 15:39 - 2013-12-30 15:39 - 00000000 ____D C:\Program Files\Notepad++ 2013-12-30 15:38 - 2013-12-30 15:38 - 07549839 _____ C:\Users\Boddin\Downloads\npp.6.5.2.Installer.exe 2013-12-30 15:18 - 2013-12-30 15:18 - 00000000 ____D C:\Users\Boddin\AppData\Local\VNT 2013-12-30 15:18 - 2013-12-30 15:18 - 00000000 ____D C:\ProgramData\AskPartnerNetwork 2013-12-30 15:18 - 2013-12-30 15:18 - 00000000 ____D C:\ProgramData\APN 2013-12-30 15:18 - 2013-12-30 15:18 - 00000000 ____D C:\Program Files\VNT 2013-12-30 15:18 - 2013-12-30 15:18 - 00000000 ____D C:\Program Files\AskPartnerNetwork 2013-12-30 12:19 - 2012-10-25 12:42 - 00587096 _____ (Kaspersky Lab) C:\Windows\system32\Drivers\SET7406.tmp 2013-12-30 12:19 - 2012-08-13 18:24 - 00075096 _____ (Kaspersky Lab) C:\Windows\system32\Drivers\SETBBD0.tmp 2013-12-30 12:12 - 2012-10-25 12:42 - 00587096 _____ (Kaspersky Lab) C:\Windows\system32\Drivers\SET32E2.tmp 2013-12-30 12:12 - 2012-08-13 18:24 - 00075096 _____ (Kaspersky Lab) C:\Windows\system32\Drivers\SETA4D7.tmp 2013-12-30 01:31 - 2012-10-25 12:42 - 00587096 _____ (Kaspersky Lab) C:\Windows\system32\Drivers\SET9E03.tmp 2013-12-30 01:31 - 2012-08-13 18:24 - 00075096 _____ (Kaspersky Lab) C:\Windows\system32\Drivers\SET1786.tmp 2013-12-30 01:16 - 2012-10-25 12:42 - 00587096 _____ (Kaspersky Lab) C:\Windows\system32\Drivers\SETBB23.tmp 2013-12-30 01:16 - 2012-08-13 18:24 - 00075096 _____ (Kaspersky Lab) C:\Windows\system32\Drivers\SET4EFA.tmp 2013-12-30 01:11 - 2013-12-30 12:35 - 00000000 ___HD C:\kleaner.tmp 2013-12-30 01:10 - 2013-12-30 12:30 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files 2013-12-29 12:45 - 2013-12-29 12:59 - 00574560 ____N (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys 2013-12-29 12:45 - 2013-06-08 20:18 - 00094304 ____N (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys 2013-12-28 22:03 - 2013-12-28 22:03 - 98633040 _____ (Apple Inc.) C:\Users\Boddin\Downloads\iTunesSetup (1).exe 2013-12-28 21:57 - 2013-12-28 21:56 - 00262560 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2013-12-28 21:56 - 2013-12-28 21:56 - 00174496 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2013-12-28 21:56 - 2013-12-28 21:56 - 00174496 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2013-12-28 21:56 - 2013-12-28 21:56 - 00094112 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2013-12-28 21:56 - 2013-12-28 21:56 - 00000000 ____D C:\Program Files\Java 2013-12-27 16:21 - 2013-12-27 16:21 - 00110856 _____ C:\Users\Ines Boddin\AppData\Local\GDIPFONTCACHEV1.DAT 2013-12-27 16:21 - 2013-12-27 16:21 - 00001425 _____ C:\Users\Ines Boddin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-12-27 16:21 - 2013-12-27 16:21 - 00000020 ___SH C:\Users\Ines Boddin\ntuser.ini 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 _SHDL C:\Users\Ines Boddin\Startmenü 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 _SHDL C:\Users\Ines Boddin\Netzwerkumgebung 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 _SHDL C:\Users\Ines Boddin\Druckumgebung 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 _SHDL C:\Users\Ines Boddin\Documents\Eigene Musik 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 _SHDL C:\Users\Ines Boddin\Documents\Eigene Bilder 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 _SHDL C:\Users\Ines Boddin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 _SHDL C:\Users\Ines Boddin\AppData\Local\Verlauf 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 ____D C:\Users\Ines Boddin\AppData\Roaming\Apple Computer 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 ____D C:\Users\Ines Boddin\AppData\Roaming\Adobe 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 ____D C:\Users\Ines Boddin\AppData\Local\VirtualStore 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 ____D C:\Users\Ines Boddin 2013-12-27 16:21 - 2013-05-14 20:49 - 00000000 ____D C:\Users\Ines Boddin\AppData\Local\Microsoft Help 2013-12-27 16:21 - 2013-01-13 11:07 - 00000000 ____D C:\Users\Ines Boddin\AppData\Roaming\TuneUp Software 2013-12-27 16:21 - 2009-07-14 05:42 - 00000000 ___RD C:\Users\Ines Boddin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2013-12-27 16:21 - 2009-07-14 05:37 - 00000000 ___RD C:\Users\Ines Boddin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2013-12-22 14:49 - 2013-12-22 14:49 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-12-18 22:33 - 2013-12-18 22:33 - 00000000 ____D C:\Users\Boddin\Desktop\Fam 2013-12-13 17:58 - 2013-12-28 21:46 - 00000000 ____D C:\Users\Boddin\Desktop\PSP flash 2013-12-11 21:44 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-11 21:44 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-11 21:44 - 2013-11-26 10:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-11 21:44 - 2013-11-26 09:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-11 21:44 - 2013-11-26 09:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-11 21:44 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-11 21:44 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-11 21:44 - 2013-11-26 09:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-11 21:44 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-11 21:44 - 2013-11-26 09:29 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-11 21:44 - 2013-11-26 09:29 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-11 21:44 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-11 21:44 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-11 21:44 - 2013-11-26 09:13 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-11 21:44 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-11 21:44 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-11 21:44 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-11 21:44 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-11 21:44 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-11 21:39 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2013-12-11 21:39 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2013-12-11 21:31 - 2013-12-11 21:24 - 84637237 _____ C:\Users\Boddin\Desktop\ROM's by G-TV.rar 2013-12-11 21:29 - 2013-12-11 21:29 - 00000000 ____D C:\Users\Boddin\AppData\Local\WinZip 2013-12-11 21:28 - 2013-12-11 21:28 - 02125184 _____ C:\Users\Boddin\Desktop\Super Mario Advance.zip 2013-12-11 13:45 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-12-11 13:45 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-12-11 13:45 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2013-12-11 13:45 - 2013-10-30 02:27 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-12-11 13:45 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-12-11 13:45 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2013-12-11 13:45 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2013-12-11 13:45 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2013-12-11 13:45 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2013-12-11 13:45 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2013-12-11 13:45 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys ==================== One Month Modified Files and Folders ======= 2014-01-10 17:47 - 2014-01-10 17:46 - 00022097 _____ C:\Users\Boddin\Downloads\FRST.txt 2014-01-10 17:46 - 2014-01-10 17:46 - 00000000 ____D C:\FRST 2014-01-10 17:45 - 2014-01-10 17:45 - 01066141 _____ (Farbar) C:\Users\Boddin\Downloads\FRST.exe 2014-01-10 17:43 - 2014-01-10 17:43 - 00000114 _____ C:\Users\Boddin\Downloads\fritz.mittwoch.2.pls 2014-01-10 17:06 - 2009-07-14 05:34 - 00014224 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-10 17:06 - 2009-07-14 05:34 - 00014224 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-10 16:59 - 2012-05-31 20:13 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1498671171-4157686230-2594831882-1001UA.job 2014-01-10 16:56 - 2012-06-01 17:38 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-01-10 16:24 - 2012-03-14 18:39 - 01654087 _____ C:\Windows\WindowsUpdate.log 2014-01-10 16:07 - 2012-03-15 14:02 - 00000000 ___RD C:\Users\Boddin\Dropbox 2014-01-10 16:07 - 2012-03-15 14:00 - 00000000 ____D C:\Users\Boddin\AppData\Roaming\Dropbox 2014-01-10 16:04 - 2013-02-08 10:55 - 00035063 _____ C:\Windows\setupact.log 2014-01-10 16:04 - 2012-05-31 21:09 - 00000000 ____D C:\ProgramData\NVIDIA 2014-01-10 16:04 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-10 01:59 - 2012-05-31 20:13 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1498671171-4157686230-2594831882-1001Core.job 2014-01-09 21:51 - 2012-03-15 13:41 - 00000000 ____D C:\Users\Boddin\AppData\Roaming\vlc 2014-01-09 19:46 - 2014-01-09 19:46 - 00048392 _____ (COMODO CA Limited) C:\Windows\system32\certsentry.dll 2014-01-09 19:46 - 2014-01-09 19:46 - 00000000 ____D C:\first_launch 2014-01-09 19:45 - 2013-02-02 03:04 - 00000000 ____D C:\Program Files\Comodo 2014-01-05 18:21 - 2012-07-15 13:22 - 00000000 ____D C:\Users\Boddin\AppData\Roaming\Skype 2014-01-05 18:01 - 2013-05-14 13:51 - 00001028 _____ C:\Users\Public\Desktop\VLC media player.lnk 2014-01-05 16:10 - 2009-11-10 19:44 - 01612484 _____ C:\Windows\system32\PerfStringBackup.INI 2014-01-03 19:30 - 2013-02-15 20:32 - 00260930 _____ C:\Windows\PFRO.log 2014-01-03 17:32 - 2014-01-03 17:32 - 00069240 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2014-01-03 17:32 - 2014-01-01 21:52 - 00135648 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2014-01-03 17:32 - 2014-01-01 21:52 - 00113024 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwot.sys 2014-01-03 17:32 - 2014-01-01 21:52 - 00092448 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwim.sys 2014-01-03 17:32 - 2014-01-01 21:52 - 00090400 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-01-03 17:32 - 2014-01-01 21:52 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2014-01-02 11:31 - 2014-01-02 11:31 - 00002221 _____ C:\Users\Public\Desktop\Free AVI Video Converter.lnk 2014-01-02 11:31 - 2014-01-02 11:30 - 00000000 ___RD C:\Users\Public\Desktop\DVDVideoSoft 2014-01-02 11:31 - 2013-08-25 15:20 - 00000000 ____D C:\Program Files\DVDVideoSoft 2014-01-02 11:30 - 2013-08-25 15:20 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft 2014-01-02 11:30 - 2013-07-11 14:45 - 00000000 ____D C:\Users\Boddin\AppData\Roaming\DVDVideoSoft 2014-01-02 11:29 - 2014-01-02 11:29 - 27454776 _____ (DVDVideoSoft Ltd. ) C:\Users\Boddin\Downloads\FreeAVIVideoConverter.exe 2014-01-01 21:54 - 2014-01-01 21:54 - 00000000 ____D C:\Users\Boddin\AppData\Roaming\Avira 2014-01-01 21:53 - 2014-01-01 21:53 - 00002016 _____ C:\Users\Public\Desktop\Avira Control Center.lnk 2014-01-01 21:52 - 2014-01-01 21:52 - 00000000 ____D C:\ProgramData\Avira 2014-01-01 21:52 - 2014-01-01 21:52 - 00000000 ____D C:\Program Files\Avira 2014-01-01 21:33 - 2014-01-01 21:33 - 00000000 ____D C:\Users\Boddin\Downloads\Avira Internet Security 2013 2014-01-01 21:13 - 2014-01-01 21:10 - 00000000 ____D C:\Users\Boddin\Downloads\Avira Internet Security Suite 2014 v14.0.1.179 2014-01-01 20:15 - 2014-01-01 20:15 - 135988266 _____ C:\Users\Boddin\Downloads\Avira_Internet_Security_Suite_2014_v14.0.1.179.rar 2014-01-01 19:47 - 2014-01-01 19:47 - 00015839 _____ C:\Users\Boddin\Desktop\HelloWorld.exe 2014-01-01 19:47 - 2014-01-01 19:47 - 00000853 _____ C:\Users\Boddin\Desktop\Makefile.win 2014-01-01 19:35 - 2014-01-01 19:31 - 00000000 ____D C:\Users\Boddin\Desktop\HelloWorld 2014-01-01 19:24 - 2013-12-30 16:15 - 00000000 ____D C:\Dev-Cpp 2014-01-01 19:13 - 2009-07-14 05:53 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-12-30 16:16 - 2013-12-30 16:15 - 00000000 ____D C:\Users\Boddin\AppData\Roaming\Dev-Cpp 2013-12-30 16:15 - 2013-12-30 15:39 - 00000000 ____D C:\Users\Boddin\AppData\Roaming\Notepad++ 2013-12-30 16:14 - 2013-12-30 16:13 - 09326468 _____ C:\Users\Boddin\Downloads\devcpp-4.9.9.2_setup.exe 2013-12-30 15:39 - 2013-12-30 15:39 - 00000000 ____D C:\Users\Boddin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++ 2013-12-30 15:39 - 2013-12-30 15:39 - 00000000 ____D C:\Program Files\Notepad++ 2013-12-30 15:38 - 2013-12-30 15:38 - 07549839 _____ C:\Users\Boddin\Downloads\npp.6.5.2.Installer.exe 2013-12-30 15:18 - 2013-12-30 15:18 - 00000000 ____D C:\Users\Boddin\AppData\Local\VNT 2013-12-30 15:18 - 2013-12-30 15:18 - 00000000 ____D C:\ProgramData\AskPartnerNetwork 2013-12-30 15:18 - 2013-12-30 15:18 - 00000000 ____D C:\ProgramData\APN 2013-12-30 15:18 - 2013-12-30 15:18 - 00000000 ____D C:\Program Files\VNT 2013-12-30 15:18 - 2013-12-30 15:18 - 00000000 ____D C:\Program Files\AskPartnerNetwork 2013-12-30 12:35 - 2013-12-30 01:11 - 00000000 ___HD C:\kleaner.tmp 2013-12-30 12:30 - 2013-12-30 01:10 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files 2013-12-29 12:59 - 2013-12-29 12:45 - 00574560 ____N (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys 2013-12-28 23:58 - 2009-07-14 03:37 - 00000000 ___RD C:\Users\Public 2013-12-28 22:58 - 2012-12-26 13:33 - 00000000 ____D C:\ProgramData\MFAData 2013-12-28 22:07 - 2013-11-02 17:52 - 00000000 ____D C:\Users\Boddin\AppData\Roaming\Samsung 2013-12-28 22:07 - 2013-11-02 17:38 - 00000000 ____D C:\Program Files\Samsung 2013-12-28 22:03 - 2013-12-28 22:03 - 98633040 _____ (Apple Inc.) C:\Users\Boddin\Downloads\iTunesSetup (1).exe 2013-12-28 21:56 - 2013-12-28 21:57 - 00262560 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2013-12-28 21:56 - 2013-12-28 21:56 - 00174496 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2013-12-28 21:56 - 2013-12-28 21:56 - 00174496 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2013-12-28 21:56 - 2013-12-28 21:56 - 00094112 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2013-12-28 21:56 - 2013-12-28 21:56 - 00000000 ____D C:\Program Files\Java 2013-12-28 21:56 - 2012-10-09 16:20 - 00861088 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll 2013-12-28 21:56 - 2012-10-09 16:20 - 00782240 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll 2013-12-28 21:46 - 2013-12-13 17:58 - 00000000 ____D C:\Users\Boddin\Desktop\PSP flash 2013-12-27 16:23 - 2012-10-13 12:45 - 00000000 ____D C:\Users\Boddin\Desktop\René Ines 2013-12-27 16:21 - 2013-12-27 16:21 - 00110856 _____ C:\Users\Ines Boddin\AppData\Local\GDIPFONTCACHEV1.DAT 2013-12-27 16:21 - 2013-12-27 16:21 - 00001425 _____ C:\Users\Ines Boddin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-12-27 16:21 - 2013-12-27 16:21 - 00000020 ___SH C:\Users\Ines Boddin\ntuser.ini 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 _SHDL C:\Users\Ines Boddin\Startmenü 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 _SHDL C:\Users\Ines Boddin\Netzwerkumgebung 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 _SHDL C:\Users\Ines Boddin\Druckumgebung 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 _SHDL C:\Users\Ines Boddin\Documents\Eigene Musik 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 _SHDL C:\Users\Ines Boddin\Documents\Eigene Bilder 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 _SHDL C:\Users\Ines Boddin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 _SHDL C:\Users\Ines Boddin\AppData\Local\Verlauf 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 ____D C:\Users\Ines Boddin\AppData\Roaming\Apple Computer 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 ____D C:\Users\Ines Boddin\AppData\Roaming\Adobe 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 ____D C:\Users\Ines Boddin\AppData\Local\VirtualStore 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 ____D C:\Users\Ines Boddin 2013-12-27 15:31 - 2012-03-14 19:11 - 00000000 ____D C:\Program Files\Microsoft Office 2013-12-23 17:08 - 2012-06-03 15:36 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2013-12-22 14:49 - 2013-12-22 14:49 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-12-18 22:33 - 2013-12-18 22:33 - 00000000 ____D C:\Users\Boddin\Desktop\Fam 2013-12-17 16:36 - 2013-07-02 13:18 - 00000000 ____D C:\Users\Boddin\Documents\Betriebskosten + Wasserabrechnung 2012 2013-12-13 19:57 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache 2013-12-11 22:42 - 2009-07-14 05:33 - 00418920 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-11 22:39 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\de-DE 2013-12-11 21:43 - 2012-03-14 19:11 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-12-11 21:42 - 2013-08-14 20:09 - 00000000 ____D C:\Windows\system32\MRT 2013-12-11 21:40 - 2009-10-14 03:21 - 88123800 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-12-11 21:29 - 2013-12-11 21:29 - 00000000 ____D C:\Users\Boddin\AppData\Local\WinZip 2013-12-11 21:28 - 2013-12-11 21:28 - 02125184 _____ C:\Users\Boddin\Desktop\Super Mario Advance.zip 2013-12-11 21:24 - 2013-12-11 21:31 - 84637237 _____ C:\Users\Boddin\Desktop\ROM's by G-TV.rar Some content of TEMP: ==================== C:\Users\Boddin\AppData\Local\Temp\AskSLib.dll C:\Users\Boddin\AppData\Local\Temp\avgnt.exe C:\Users\Boddin\AppData\Local\Temp\cislicense.exe C:\Users\Boddin\AppData\Local\Temp\jna1009448300389727926.dll C:\Users\Boddin\AppData\Local\Temp\jna1482527917980031031.dll C:\Users\Boddin\AppData\Local\Temp\jna1689208180654510155.dll C:\Users\Boddin\AppData\Local\Temp\jna18504103164491134.dll C:\Users\Boddin\AppData\Local\Temp\jna2375711929410550737.dll C:\Users\Boddin\AppData\Local\Temp\jna2603670300477171612.dll C:\Users\Boddin\AppData\Local\Temp\jna2612867527777358389.dll C:\Users\Boddin\AppData\Local\Temp\jna2768509923478426047.dll C:\Users\Boddin\AppData\Local\Temp\jna2778395239726022803.dll C:\Users\Boddin\AppData\Local\Temp\jna3188809611103946332.dll C:\Users\Boddin\AppData\Local\Temp\jna3258473575060881760.dll C:\Users\Boddin\AppData\Local\Temp\jna3663089987268725961.dll C:\Users\Boddin\AppData\Local\Temp\jna3928556838916937960.dll C:\Users\Boddin\AppData\Local\Temp\jna3966477794202970721.dll C:\Users\Boddin\AppData\Local\Temp\jna4275911158455247009.dll C:\Users\Boddin\AppData\Local\Temp\jna4345360241005940466.dll C:\Users\Boddin\AppData\Local\Temp\jna4601596382661369066.dll C:\Users\Boddin\AppData\Local\Temp\jna4940923919819491086.dll C:\Users\Boddin\AppData\Local\Temp\jna516305687466179140.dll C:\Users\Boddin\AppData\Local\Temp\jna6109332104058596734.dll C:\Users\Boddin\AppData\Local\Temp\jna6142856878790281015.dll C:\Users\Boddin\AppData\Local\Temp\jna6643358609701332018.dll C:\Users\Boddin\AppData\Local\Temp\jna6735973160621900501.dll C:\Users\Boddin\AppData\Local\Temp\jna7583005520441403845.dll C:\Users\Boddin\AppData\Local\Temp\jna7824915885458688469.dll C:\Users\Boddin\AppData\Local\Temp\jna7995157198854424059.dll C:\Users\Boddin\AppData\Local\Temp\jna8307466939674415505.dll C:\Users\Boddin\AppData\Local\Temp\jna8436144098397182463.dll C:\Users\Boddin\AppData\Local\Temp\jna8689055892898731012.dll C:\Users\Boddin\AppData\Local\Temp\jna90024270107469678.dll C:\Users\Boddin\AppData\Local\Temp\jna9016159669941359362.dll C:\Users\Boddin\AppData\Local\Temp\jna905880614067271241.dll C:\Users\Boddin\AppData\Local\Temp\jna946056831263716857.dll C:\Users\Boddin\AppData\Local\Temp\Offercast_AVIRAV7_.exe C:\Users\Boddin\AppData\Local\Temp\SkypeSetup.exe C:\Users\Boddin\AppData\Local\Temp\vlc-2.0.6-win32.exe C:\Users\Boddin\AppData\Local\Temp\vlc-2.1.2-win32.exe C:\Users\Boddin\AppData\Local\Temp\xmlUpdater.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-09 23:22 ==================== End Of Log ============================ --- --- --- Addition.txt: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 10-01-2014 Ran by Boddin at 2014-01-10 17:48:39 Running from C:\Users\Boddin\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== 32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden Adobe Flash Player 11 ActiveX (Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Flash Player 11 Plugin (Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Reader XI (11.0.05) - Deutsch (Version: 11.0.05 - Adobe Systems Incorporated) AIO_CDB_ProductContext (Version: 130.0.365.000 - Hewlett-Packard) Hidden AIO_CDB_Software (Version: 130.0.365.000 - Hewlett-Packard) Hidden AIO_Scan (Version: 130.0.421.000 - Hewlett-Packard) Hidden Apple Application Support (Version: 2.3.6 - Apple Inc.) Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.) Apple Software Update (Version: 2.1.3.127 - Apple Inc.) Avira Internet Security (Version: 14.0.2.286 - Avira) Avira SearchFree Toolbar (Version: 12.10.0.2951 - APN, LLC) Bonjour (Version: 3.0.0.10 - Apple Inc.) BufferChm (Version: 130.0.331.000 - Hewlett-Packard) Hidden CCleaner (Version: 3.16 - Piriform) CdCoverCreator 2.5.3 (Version: 2.5.3 - thyanté Software) Comodo Dragon (Version: 31.0.0.0 - COMODO) Copy (Version: 130.0.428.000 - Hewlett-Packard) Hidden Counter-Strike: Source (Version: - Valve) Counter-Strike: Source (Version: 1.0.0.0 - Valve) D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden Desktop Icon für Amazon (Version: 1.0.1 (de) - ) Destinations (Version: 130.0.0.0 - Hewlett-Packard) Hidden Dev-C++ 5 beta 9 release (4.9.9.2) (Version: - ) DeviceDiscovery (Version: 130.0.465.000 - Hewlett-Packard) Hidden DocProc (Version: 13.0.0.0 - Hewlett-Packard) Hidden Doppelkopf XXL (Version: - ) Dropbox (Version: 2.0.22 - Dropbox, Inc.) F300 (Version: 130.0.365.000 - Hewlett-Packard) Hidden F300_Help (Version: 82.0.242.000 - Hewlett-Packard) Hidden F300Trb (Version: 82.0.242.000 - Hewlett-Packard) Hidden Fax (Version: 130.0.418.000 - Hewlett-Packard) Hidden Fotogalerie (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Free Audio Converter version 5.0.28.812 (Version: 5.0.28.812 - DVDVideoSoft Ltd.) Free AVI Video Converter version 5.0.29.925 (Version: 5.0.29.925 - DVDVideoSoft Ltd.) Google Chrome (Version: 32.0.1700.72 - Google Inc.) GPBaseService2 (Version: 130.0.371.000 - Hewlett-Packard) Hidden HP Customer Participation Program 13.0 (Version: 13.0 - HP) HP Imaging Device Functions 13.0 (Version: 13.0 - HP) HP Photosmart Essential 3.5 (Version: 3.5 - HP) HP Photosmart Officejet and Deskjet All-In-One Driver Software 13.0 Rel. B (Version: 13.0 - HP) HP Smart Web Printing 4.51 (Version: 4.51 - HP) HP Solution Center 13.0 (Version: 13.0 - HP) HP Update (Version: 5.003.001.001 - Hewlett-Packard) HPDiagnosticAlert (Version: 1.00.0000 - Microsoft) Hidden HPPhotoGadget (Version: 130.0.282.000 - Hewlett-Packard) Hidden HPPhotoSmartDiscLabelContent1 (Version: 2.04.0000 - Hewlett-Packard) Hidden HPPhotosmartEssential (Version: 2.04.0000 - Hewlett-Packard) Hidden HPProductAssistant (Version: 130.0.371.000 - Hewlett-Packard) Hidden HPSSupply (Version: 130.0.371.000 - Hewlett-Packard) Hidden iCloud (Version: 3.0.2.163 - Apple Inc.) iTunes (Version: 11.1.3.8 - Apple Inc.) Java 7 Update 13 (Version: 7.0.130 - Oracle) Java Auto Updater (Version: 2.1.9.0 - Sun Microsystems, Inc.) Hidden JDownloader 0.9 (Version: 0.9 - AppWork GmbH) MarketResearch (Version: 130.0.374.000 - Hewlett-Packard) Hidden Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office File Validation Add-In (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Groove MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1 - Microsoft Corporation) Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation) Movie Maker (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Mozilla Firefox 26.0 (x86 de) (Version: 26.0 - Mozilla) Mozilla Maintenance Service (Version: 26.0 - Mozilla) MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT110 (Version: 16.4.1108.0727 - Microsoft) Hidden MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0 - Microsoft Corporation) Network (Version: 130.0.572.000 - Hewlett-Packard) Hidden Notepad++ (Version: 6.5.2 - Notepad++ Team) NVIDIA 3D Vision Treiber 311.06 (Version: 311.06 - NVIDIA Corporation) NVIDIA Grafiktreiber 311.06 (Version: 311.06 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.108.688 - NVIDIA Corporation) Hidden NVIDIA PhysX (Version: 9.12.0213 - NVIDIA Corporation) Hidden NVIDIA PhysX-Systemsoftware 9.12.0213 (Version: 9.12.0213 - NVIDIA Corporation) NVIDIA Stereoscopic 3D Driver (Version: 7.17.13.1106 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 311.06 (Version: 311.06 - NVIDIA Corporation) Hidden NVIDIA Update 1.11.3 (Version: 1.11.3 - NVIDIA Corporation) NVIDIA Update Components (Version: 1.11.3 - NVIDIA Corporation) Hidden OCR Software by I.R.I.S. 13.0 (Version: 13.0 - HP) Paint.NET v3.5.10 (Version: 3.60.0 - dotPDN LLC) PDFCreator (Version: 1.4.0 - Frank Heindörfer, Philip Chinery) Photo Gallery (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden PS3 Media Server (Version: 1.50.0 - PS3 Media Server) Reason 4.0 (Version: 4.0 - Propellerhead Software AB) RocketDock 1.3.5 (Version: - Punk Software) Safari (Version: 5.34.57.2 - Apple Inc.) Scan (Version: 13.0.0.0 - Hewlett-Packard) Hidden Shop for HP Supplies (Version: 13.0 - HP) Skat (Version: - madcat Software GmbH) Skat 9.0 (Version: 9.0.4.45 - Peter Heinlein) Skype Click to Call (Version: 6.3.11079 - Skype Technologies S.A.) Skype™ 6.10 (Version: 6.10.104 - Skype Technologies S.A.) SmartWebPrinting (Version: 130.0.457.000 - Hewlett-Packard) Hidden SolutionCenter (Version: 130.0.373.000 - Hewlett-Packard) Hidden Status (Version: 130.0.469.000 - Hewlett-Packard) Hidden Steam(TM) (Version: 1.0.0.0 - Valve) Steinberg Cubase 5 (Version: 5.1.0 - Steinberg Media Technologies GmbH) Steinberg Drum Loop Expansion 01 (Version: 1.0.0.1 - Steinberg Media Technologies GmbH) Steinberg Groove Agent ONE Content (Version: 1.0.0.003 - Steinberg Media Technologies GmbH) Steinberg HALionOne (Version: 1.1.0.457 - Steinberg Media Technologies GmbH) Steinberg HALionOne Additional Content Set 01 (Version: 1.0.0.001 - Steinberg Media Technologies GmbH) Steinberg HALionOne Expression Set (Version: 1.0.1.0 - Steinberg Media Technologies GmbH) Steinberg HALionOne GM Drum Set (Version: 1.0.1.457 - Steinberg Media Technologies GmbH) Steinberg HALionOne GM Set (Version: 1.0.1.457 - Steinberg Media Technologies GmbH) Steinberg HALionOne Pro Set (Version: 1.0.1.457 - Steinberg Media Technologies GmbH) Steinberg HALionOne Studio Drum Set (Version: 1.0.1.457 - Steinberg Media Technologies GmbH) Steinberg HALionOne Studio Set (Version: 1.0.1.457 - Steinberg Media Technologies GmbH) Steinberg LoopMash Content (Version: 1.0.0.005 - Steinberg Media Technologies GmbH) Steinberg REVerence Content 01 (Version: 1.0.0.006 - Steinberg Media Technologies GmbH) TomTom HOME (Version: 2.9.5 - Ihr Firmenname) TomTom HOME Visual Studio Merge Modules (Version: 1.0.2 - TomTom International B.V.) Tony Hawk's Pro Skater 3® (Version: 1.0 - Activision Publishing, Inc.) Toolbox (Version: 130.0.648.000 - Hewlett-Packard) Hidden TrayApp (Version: 130.0.422.000 - Hewlett-Packard) Hidden UnloadSupport (Version: 11.0.0 - Hewlett-Packard) Hidden Update for 2007 Microsoft Office System (KB967642) (Version: - Microsoft) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (Version: 3 - Microsoft Corporation) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2850085) 32-Bit Edition (Version: - Microsoft) Update für Microsoft Office Excel 2007 Help (KB963678) (Version: - Microsoft) Update für Microsoft Office Outlook 2007 Help (KB963677) (Version: - Microsoft) Update für Microsoft Office Powerpoint 2007 Help (KB963669) (Version: - Microsoft) Update für Microsoft Office Word 2007 Help (KB963665) (Version: - Microsoft) VirtualCloneDrive (Version: - Elaborate Bytes) Visual Studio 2012 x86 Redistributables (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) VLC media player 2.1.2 (Version: 2.1.2 - VideoLAN) WebReg (Version: 130.0.132.017 - Hewlett-Packard) Hidden Windows Live Communications Platform (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Essentials (Version: 16.4.3505.0912 - Microsoft Corporation) Windows Live Essentials (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden Windows Live Installer (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Photo Common (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live PIMT Platform (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live SOXE (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live UX Platform (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden WinRAR 4.11 (32-Bit) (Version: 4.11.0 - win.rar GmbH) WinZip 16.0 (Version: 16.0.9715 - WinZip Computing, S.L. ) ==================== Restore Points ========================= 09-01-2014 22:29:44 Geplanter Prüfpunkt ==================== Hosts content: ========================== 2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {82B65B98-D37E-422E-A9F9-14409D6F33ED} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated) Task: {8DA24FB0-EAA8-4CBD-A963-19F9964DBDE6} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-10] (Adobe Systems Incorporated) Task: {A0427DDB-53CF-49B4-B5C9-864EE490789B} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1498671171-4157686230-2594831882-1001UA => C:\Users\Boddin\AppData\Local\Google\Update\GoogleUpdate.exe [2012-05-31] (Google Inc.) Task: {C75B7FD9-A950-4771-B6A9-EFA70AFFB34F} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1498671171-4157686230-2594831882-1001Core => C:\Users\Boddin\AppData\Local\Google\Update\GoogleUpdate.exe [2012-05-31] (Google Inc.) Task: {CFBDB313-B94C-4B3B-B486-4595AE0714ED} - System32\Tasks\Google Updater and Installer => C:\Users\Boddin\AppData\Local\Google\Update\GoogleUpdate.exe [2012-05-31] (Google Inc.) Task: {DB24BAA0-DFDC-4F4C-87BF-C8D3D50CF25E} - System32\Tasks\HP-Online-Aktualisierungsprogramm => C:\Program Files\HP\HP Software Update\hpwuschd2.exe [2011-05-10] (Hewlett-Packard) Task: {E3AEB397-EB39-460B-8D5E-D6C764FB945D} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-07-03] (Sun Microsystems, Inc.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1498671171-4157686230-2594831882-1001Core.job => C:\Users\Boddin\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1498671171-4157686230-2594831882-1001UA.job => C:\Users\Boddin\AppData\Local\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2012-03-14 19:26 - 2007-09-02 13:57 - 00069632 _____ () C:\Program Files\RocketDock\RocketDock.dll 2012-02-20 20:29 - 2012-02-20 20:29 - 00087912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2012-02-20 20:28 - 2012-02-20 20:28 - 01242472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2013-09-14 01:51 - 2013-09-14 01:51 - 00087952 _____ () C:\Program Files\Common Files\Apple\Internet Services\zlib1.dll 2013-09-14 01:50 - 2013-09-14 01:50 - 01242952 _____ () C:\Program Files\Common Files\Apple\Internet Services\libxml2.dll 2013-03-13 21:48 - 2013-03-13 21:48 - 24978944 _____ () C:\Users\Boddin\AppData\Roaming\Dropbox\bin\libcef.dll 2013-12-22 14:49 - 2013-12-22 14:49 - 03559024 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll 2014-01-08 02:03 - 2014-01-07 05:04 - 00715544 _____ () C:\Users\Boddin\AppData\Local\Google\Chrome\Application\32.0.1700.72\libglesv2.dll 2014-01-08 02:03 - 2014-01-07 05:04 - 00100120 _____ () C:\Users\Boddin\AppData\Local\Google\Chrome\Application\32.0.1700.72\libegl.dll 2014-01-08 02:03 - 2014-01-07 05:05 - 04055320 _____ () C:\Users\Boddin\AppData\Local\Google\Chrome\Application\32.0.1700.72\pdf.dll 2014-01-08 02:03 - 2014-01-07 05:05 - 00399640 _____ () C:\Users\Boddin\AppData\Local\Google\Chrome\Application\32.0.1700.72\ppGoogleNaClPluginChrome.dll 2014-01-08 02:03 - 2014-01-07 05:04 - 01634584 _____ () C:\Users\Boddin\AppData\Local\Google\Chrome\Application\32.0.1700.72\ffmpegsumo.dll 2014-01-08 02:03 - 2014-01-07 05:05 - 13615896 _____ () C:\Users\Boddin\AppData\Local\Google\Chrome\Application\32.0.1700.72\PepperFlash\pepflashplayer.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\Users\Boddin\Desktop\14.jpg:com.dropbox.attributes AlternateDataStreams: C:\Users\Boddin\Desktop\2010-06-10 13.19.55.jpg:com.dropbox.attributes ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (01/06/2014 00:21:15 AM) (Source: MsiInstaller) (User: NT-AUTORITÄT) Description: Product: Skype Click to Call -- Error 1609. An error occurred while applying security settings. Users is not a valid user or group. This could be a problem with the package, or a problem connecting to a domain controller on the network. Check your network connection and click Retry, or Cancel to end the install. Unable to locate the user's SID, system error 1332(NULL)(NULL)(NULL)(NULL)(NULL) Error: (01/05/2014 04:36:19 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: RocketDock.exe, Version: 0.0.0.0, Zeitstempel: 0x46db07ea Name des fehlerhaften Moduls: DVSShellContextMenuExtension.dll, Version: 1.0.0.1, Zeitstempel: 0x5242ec17 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000a7d8 ID des fehlerhaften Prozesses: 0xc18 Startzeit der fehlerhaften Anwendung: 0xRocketDock.exe0 Pfad der fehlerhaften Anwendung: RocketDock.exe1 Pfad des fehlerhaften Moduls: RocketDock.exe2 Berichtskennung: RocketDock.exe3 Error: (01/04/2014 02:38:06 PM) (Source: ESENT) (User: ) Description: wuaueng.dll (1148) SUS20ClientDataStore: Versuch, in Datei "C:\Windows\SoftwareDistribution\DataStore\Logs\tmp.edb" bei Offset 0 (0x0000000000000000) für 98304 (0x00018000) Bytes zu schreiben, ist nach wuaueng.dll0 Sekunden mit Systemfehler 112 (0x00000070): "Es steht nicht genug Speicherplatz auf dem Datenträger zur Verfügung. " fehlgeschlagen. Fehler -1808 (0xfffff8f0) bei Schreiboperation. Wenn dieser Zustand andauert, ist die Datei möglicherweise beschädigt und muss aus einer vorherigen Sicherung wiederhergestellt werden. Error: (01/03/2014 00:18:52 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_170.exe, Version: 11.9.900.170, Zeitstempel: 0x529b79bf Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000 ID des fehlerhaften Prozesses: 0x196c Startzeit der fehlerhaften Anwendung: 0xFlashPlayerPlugin_11_9_900_170.exe0 Pfad der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_170.exe1 Pfad des fehlerhaften Moduls: FlashPlayerPlugin_11_9_900_170.exe2 Berichtskennung: FlashPlayerPlugin_11_9_900_170.exe3 Error: (01/03/2014 10:44:52 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.0.6.0, Zeitstempel: 0x516ae039 Name des fehlerhaften Moduls: vlc.exe, Version: 2.0.6.0, Zeitstempel: 0x516ae039 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00001d3c ID des fehlerhaften Prozesses: 0x1be4 Startzeit der fehlerhaften Anwendung: 0xvlc.exe0 Pfad der fehlerhaften Anwendung: vlc.exe1 Pfad des fehlerhaften Moduls: vlc.exe2 Berichtskennung: vlc.exe3 Error: (01/02/2014 04:13:42 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 26.0.0.5087, Zeitstempel: 0x52a0d273 Name des fehlerhaften Moduls: xul.dll, Version: 26.0.0.5087, Zeitstempel: 0x52a0d20a Ausnahmecode: 0xc0000005 Fehleroffset: 0x0014e1a8 ID des fehlerhaften Prozesses: 0x11d0 Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0 Pfad der fehlerhaften Anwendung: firefox.exe1 Pfad des fehlerhaften Moduls: firefox.exe2 Berichtskennung: firefox.exe3 Error: (12/28/2013 11:43:32 PM) (Source: MsiInstaller) (User: Boddin-PC) Description: Programm: Kaspersky Internet Security -- Fehler 1922. Der Dienst Kaspersky Anti-Virus Service (AVP) kann nicht entfernt werden. Stellen Sie sicher, dass Sie über Rechte zum Entfernen von Systemdiensten verfügen. Error: (12/28/2013 11:42:19 PM) (Source: MsiInstaller) (User: Boddin-PC) Description: Programm: Kaspersky Internet Security -- Fehler 1922. Der Dienst Kaspersky Anti-Virus Service (AVP) kann nicht entfernt werden. Stellen Sie sicher, dass Sie über Rechte zum Entfernen von Systemdiensten verfügen. Error: (12/28/2013 08:20:11 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: ApplePhotoStreams.exe, Version: 7.12.44.1, Zeitstempel: 0x516e136b Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb10c6 Ausnahmecode: 0xe06d7363 Fehleroffset: 0x0000812f ID des fehlerhaften Prozesses: 0x4b4 Startzeit der fehlerhaften Anwendung: 0xApplePhotoStreams.exe0 Pfad der fehlerhaften Anwendung: ApplePhotoStreams.exe1 Pfad des fehlerhaften Moduls: ApplePhotoStreams.exe2 Berichtskennung: ApplePhotoStreams.exe3 Error: (12/28/2013 08:03:14 PM) (Source: MsiInstaller) (User: NT-AUTORITÄT) Description: Product: Skype Click to Call -- Error 1609. An error occurred while applying security settings. Users is not a valid user or group. This could be a problem with the package, or a problem connecting to a domain controller on the network. Check your network connection and click Retry, or Cancel to end the install. Unable to locate the user's SID, system error 1332(NULL)(NULL)(NULL)(NULL)(NULL) System errors: ============= Error: (01/10/2014 04:06:57 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: %%1069 Error: (01/10/2014 04:06:57 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: %%1330 Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC). Error: (01/09/2014 07:42:07 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: %%1069 Error: (01/09/2014 07:42:07 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: %%1330 Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC). Error: (01/08/2014 07:55:19 PM) (Source: DCOM) (User: ) Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF} Error: (01/08/2014 01:59:02 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: %%1069 Error: (01/08/2014 01:59:02 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: %%1330 Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC). Error: (01/08/2014 07:24:29 AM) (Source: volsnap) (User: ) Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte. Error: (01/07/2014 08:46:28 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: %%1069 Error: (01/07/2014 08:46:28 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: %%1330 Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC). Microsoft Office Sessions: ========================= CodeIntegrity Errors: =================================== Date: 2013-12-30 01:16:46.726 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-12-30 01:16:46.716 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-12-30 01:16:40.694 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-12-30 01:16:40.679 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-12-30 01:16:40.232 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-12-30 01:16:40.212 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-12-30 01:10:47.822 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-12-30 01:10:47.812 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-12-30 01:10:47.502 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-12-30 01:10:47.492 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 71% Total physical RAM: 2046.55 MB Available physical RAM: 587.46 MB Total Pagefile: 4093.11 MB Available Pagefile: 1680.86 MB Total Virtual: 2047.88 MB Available Virtual: 1891.13 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:298.09 GB) (Free:71.45 GB) NTFS Drive j: (Daten) (Fixed) (Total:111.79 GB) (Free:17.21 GB) NTFS ==>[System with boot components (obtained from reading drive)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 112 GB) (Disk ID: FAE1D7B7) Partition 1: (Active) - (Size=112 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows XP) (Size: 298 GB) (Disk ID: 4F575F10) Partition 1: (Not Active) - (Size=298 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
10.01.2014, 20:25 | #4 |
/// TB-Ausbilder | Windows 7, Polizei Virus mit Firefox eingefangen Servus, Scan mit Combofix
|
10.01.2014, 20:57 | #5 |
| Windows 7, Polizei Virus mit Firefox eingefangen Ich hab ganz vergessen mich für die schnelle Antwort zu bedanken vielen Dank Also bei mir hat Combofix nicht weiter gemeckert Code:
ATTFilter ComboFix 14-01-08.03 - Boddin 10.01.2014 20:39:08.1.2 - x86 Microsoft Windows 7 Ultimate 6.1.7601.1.1252.49.1031.18.2047.1091 [GMT 1:00] ausgeführt von:: c:\users\Boddin\Desktop\ComboFix.exe AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . C:\install.exe c:\users\Boddin\4.0 J:\resycled . . ((((((((((((((((((((((( Dateien erstellt von 2013-12-10 bis 2014-01-10 )))))))))))))))))))))))))))))) . . 2014-01-10 19:48 . 2014-01-10 19:49 -------- d-----w- c:\users\Boddin\AppData\Local\temp 2014-01-10 19:48 . 2014-01-10 19:48 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp 2014-01-10 19:48 . 2014-01-10 19:48 -------- d-----w- c:\users\Default\AppData\Local\temp 2014-01-10 16:46 . 2014-01-10 16:46 -------- d-----w- C:\FRST 2014-01-09 18:46 . 2014-01-09 18:46 -------- d-----w- C:\first_launch 2014-01-09 18:46 . 2014-01-09 18:46 48392 ----a-w- c:\windows\system32\certsentry.dll 2014-01-03 16:32 . 2014-01-03 16:32 69240 ----a-w- c:\windows\system32\drivers\avnetflt.sys 2014-01-01 20:54 . 2014-01-01 20:54 -------- d-----w- c:\users\Boddin\AppData\Roaming\Avira 2014-01-01 20:52 . 2014-01-03 16:32 92448 ----a-w- c:\windows\system32\drivers\avfwim.sys 2014-01-01 20:52 . 2014-01-03 16:32 90400 ----a-w- c:\windows\system32\drivers\avgntflt.sys 2014-01-01 20:52 . 2014-01-03 16:32 37352 ----a-w- c:\windows\system32\drivers\avkmgr.sys 2014-01-01 20:52 . 2014-01-03 16:32 135648 ----a-w- c:\windows\system32\drivers\avipbb.sys 2014-01-01 20:52 . 2014-01-03 16:32 113024 ----a-w- c:\windows\system32\drivers\avfwot.sys 2014-01-01 20:52 . 2014-01-01 20:52 -------- d-----w- c:\programdata\Avira 2014-01-01 20:52 . 2014-01-01 20:52 -------- d-----w- c:\program files\Avira 2013-12-30 15:15 . 2013-12-30 15:16 -------- d-----w- c:\users\Boddin\AppData\Roaming\Dev-Cpp 2013-12-30 15:15 . 2014-01-01 18:24 -------- d-----w- C:\Dev-Cpp 2013-12-30 14:39 . 2013-12-30 15:15 -------- d-----w- c:\users\Boddin\AppData\Roaming\Notepad++ 2013-12-30 14:39 . 2013-12-30 14:39 -------- d-----w- c:\program files\Notepad++ 2013-12-30 14:18 . 2013-12-30 14:18 -------- d-----w- c:\users\Boddin\AppData\Local\VNT 2013-12-30 14:18 . 2013-12-30 14:18 -------- d-----w- c:\program files\VNT 2013-12-30 14:18 . 2013-12-30 14:18 -------- d-----w- c:\programdata\AskPartnerNetwork 2013-12-30 14:18 . 2013-12-30 14:18 -------- d-----w- c:\program files\AskPartnerNetwork 2013-12-30 14:18 . 2013-12-30 14:18 -------- d-----w- c:\programdata\APN 2013-12-30 11:19 . 2012-10-25 11:42 587096 ----a-w- c:\windows\system32\drivers\SET7406.tmp 2013-12-30 11:19 . 2012-08-13 17:24 75096 ----a-w- c:\windows\system32\drivers\SETBBD0.tmp 2013-12-30 11:12 . 2012-10-25 11:42 587096 ----a-w- c:\windows\system32\drivers\SET32E2.tmp 2013-12-30 11:12 . 2012-08-13 17:24 75096 ----a-w- c:\windows\system32\drivers\SETA4D7.tmp 2013-12-30 00:31 . 2012-10-25 11:42 587096 ----a-w- c:\windows\system32\drivers\SET9E03.tmp 2013-12-30 00:31 . 2012-08-13 17:24 75096 ----a-w- c:\windows\system32\drivers\SET1786.tmp 2013-12-30 00:16 . 2012-10-25 11:42 587096 ----a-w- c:\windows\system32\drivers\SETBB23.tmp 2013-12-30 00:16 . 2012-08-13 17:24 75096 ----a-w- c:\windows\system32\drivers\SET4EFA.tmp 2013-12-30 00:11 . 2013-12-30 11:35 -------- d-----w- C:\kleaner.tmp 2013-12-30 00:10 . 2013-12-30 11:30 -------- d-----w- c:\programdata\Kaspersky Lab Setup Files 2013-12-29 16:33 . 2013-12-04 02:57 7760024 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A4F16A9C-C73C-431F-B28F-42BB9A30B510}\mpengine.dll 2013-12-29 11:45 . 2013-06-08 19:18 94304 ------w- c:\windows\system32\drivers\klflt.sys 2013-12-28 20:56 . 2013-12-28 20:56 94112 ----a-w- c:\windows\system32\WindowsAccessBridge.dll 2013-12-28 20:56 . 2013-12-28 20:56 -------- d-----w- c:\program files\Java 2013-12-27 15:21 . 2013-12-27 15:21 -------- d-----w- c:\users\Ines Boddin 2013-12-27 14:31 . 2013-12-27 14:31 -------- d-----w- c:\program files\Microsoft 2013-12-11 20:39 . 2013-05-10 04:56 12625408 ----a-w- c:\windows\system32\wmploc.DLL 2013-12-11 20:39 . 2013-05-10 03:48 164864 ----a-w- c:\program files\Windows Media Player\wmplayer.exe 2013-12-11 20:29 . 2013-12-11 20:29 -------- d-----w- c:\users\Boddin\AppData\Local\WinZip . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-12-28 20:56 . 2012-10-09 15:20 861088 ----a-w- c:\windows\system32\npDeployJava1.dll 2013-12-28 20:56 . 2012-10-09 15:20 782240 ----a-w- c:\windows\system32\deployJava1.dll 2013-12-10 21:56 . 2012-06-01 16:38 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2013-12-10 21:56 . 2012-06-01 16:38 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2013-11-28 15:46 . 2013-11-28 15:46 646144 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe 2013-11-28 15:46 . 2013-11-28 15:46 194048 ----a-w- c:\windows\system32\elshyph.dll 2013-11-28 15:45 . 2013-11-28 15:45 645120 ----a-w- c:\windows\system32\jsIntl.dll 2013-11-28 15:45 . 2013-11-28 15:45 71680 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe 2013-11-28 15:45 . 2013-11-28 15:45 182272 ----a-w- c:\windows\system32\msls31.dll 2013-11-28 15:45 . 2013-11-28 15:45 62464 ----a-w- c:\windows\system32\tdc.ocx 2013-11-28 15:45 . 2013-11-28 15:45 34816 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll 2013-11-28 15:45 . 2013-11-28 15:45 337408 ----a-w- c:\windows\system32\html.iec 2013-11-28 15:45 . 2013-11-28 15:45 1051136 ----a-w- c:\windows\system32\mshtmlmedia.dll 2013-11-28 15:45 . 2013-11-28 15:45 24576 ----a-w- c:\windows\system32\licmgr10.dll 2013-11-28 15:45 . 2013-11-28 15:45 151552 ----a-w- c:\windows\system32\iexpress.exe 2013-11-28 15:45 . 2013-11-28 15:45 139264 ----a-w- c:\windows\system32\wextract.exe 2013-11-28 15:45 . 2013-11-28 15:45 454656 ----a-w- c:\windows\system32\vbscript.dll 2013-11-28 15:45 . 2013-11-28 15:45 13312 ----a-w- c:\windows\system32\mshta.exe 2013-11-28 15:45 . 2013-11-28 15:45 61952 ----a-w- c:\windows\system32\MshtmlDac.dll 2013-11-28 15:45 . 2013-11-28 15:45 36352 ----a-w- c:\windows\system32\imgutil.dll 2013-11-28 15:45 . 2013-11-28 15:45 111616 ----a-w- c:\windows\system32\IEAdvpack.dll 2013-11-28 15:45 . 2013-11-28 15:45 74240 ----a-w- c:\windows\system32\SetIEInstalledDate.exe 2013-11-28 15:45 . 2013-11-28 15:45 48640 ----a-w- c:\windows\system32\mshtmler.dll 2013-11-28 15:45 . 2013-11-28 15:45 86016 ----a-w- c:\windows\system32\iesysprep.dll 2013-11-26 11:25 . 2009-10-14 02:21 230048 ------w- c:\windows\system32\MpSigStub.exe 2013-11-23 18:26 . 2013-12-11 12:45 417792 ----a-w- c:\windows\system32\WMPhoto.dll 2013-11-12 02:07 . 2013-12-11 12:45 2048 ----a-w- c:\windows\system32\tzres.dll 2013-10-30 02:19 . 2013-12-11 12:45 301568 ----a-w- c:\windows\system32\msieftp.dll 2013-10-30 01:27 . 2013-12-11 12:45 2349056 ----a-w- c:\windows\system32\win32k.sys 2013-10-19 01:36 . 2013-12-11 12:45 159232 ----a-w- c:\windows\system32\imagehlp.dll 2013-10-17 14:47 . 2013-10-17 14:47 25696 ----a-w- c:\windows\system32\drivers\klmouflt.sys 2013-10-17 14:47 . 2013-10-17 14:47 25696 ----a-w- c:\windows\system32\drivers\klkbdflt.sys . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{41564952-412D-5637-4300-7A786E7484D7}] 2013-12-20 21:02 12240 ----a-w- c:\program files\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] "{41564952-412D-5637-4300-7A786E7484D7}"= "c:\program files\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll" [2013-12-20 12240] . [HKEY_CLASSES_ROOT\clsid\{41564952-412d-5637-4300-7a786e7484d7}] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2013-05-25 00:36 130736 ----a-w- c:\users\Boddin\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2013-05-25 00:36 130736 ----a-w- c:\users\Boddin\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2013-05-25 00:36 130736 ----a-w- c:\users\Boddin\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RocketDock"="c:\program files\RocketDock\RocketDock.exe" [2007-09-02 495616] "iCloudServices"="c:\program files\Common Files\Apple\Internet Services\iCloudServices.exe" [2013-09-14 59720] "ApplePhotoStreams"="c:\program files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe" [2013-09-15 59720] "TomTomHOME.exe"="c:\program files\TomTom HOME 2\TomTomHOMERunner.exe" [2013-03-22 248208] "Skype"="c:\program files\Skype\Phone\Skype.exe" [2013-10-21 20549280] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040] "VirtualCloneDrive"="c:\program files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2009-06-17 85160] "APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720] "hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-07-22 150528] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2013-11-01 152392] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848] "ApnTBMon"="c:\program files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" [2013-12-20 1778640] "VNT"="c:\program files\VNT\vntldr.exe" [2013-12-20 202192] "avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2014-01-03 684600] . c:\users\Boddin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Dropbox.lnk - c:\users\Boddin\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2013-5-25 27776968] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2009-9-20 270336] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKLM\~\startupfolder\C:^Users^Boddin^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk] path=c:\users\Boddin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk backup=c:\windows\pss\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk.Startup backupExtension=.Startup . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam] 2012-08-05 13:37 1353080 ----a-w- c:\program files\Steam\Steam.exe . [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "Google Update"="c:\users\Boddin\AppData\Local\Google\Update\GoogleUpdate.exe" /c . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "HP Software Update"=c:\program files\HP\HP Software Update\HPWuSchd2.exe "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" . R2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-10-02 3064000] R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-09-05 171680] R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2013-11-26 108032] R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl.sys [2011-08-02 18432] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 15872] R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224] R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x] R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x] R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [2012-03-15 1343400] R4 klflt;klflt;c:\windows\system32\DRIVERS\klflt.sys [2013-06-08 94304] S1 avfwot;avfwot;c:\windows\system32\DRIVERS\avfwot.sys [2014-01-03 113024] S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2014-01-03 37352] S1 kltdi;kltdi;c:\windows\system32\DRIVERS\kltdi.sys [2013-05-14 45024] S2 AntiVirFirewallService;Avira FireWall;c:\program files\Avira\AntiVir Desktop\avfwsvc.exe [2014-01-03 1012280] S2 AntiVirMailService;Avira Email Schutz;c:\program files\Avira\AntiVir Desktop\avmailc.exe [2014-01-03 896056] S2 AntiVirSchedulerService;Avira Planer;c:\program files\Avira\AntiVir Desktop\sched.exe [2014-01-03 440376] S2 AntiVirWebService;Avira Browser-Schutz;c:\program files\Avira\AntiVir Desktop\AVWEBGRD.EXE [2014-01-03 1011768] S2 APNMCP;Ask Aktualisierungsdienst;c:\program files\AskPartnerNetwork\Toolbar\apnmcp.exe [2013-12-20 166352] S2 DragonUpdater;COMODO Dragon Update Service;c:\program files\Comodo\Dragon\dragon_updater.exe [2014-01-08 2098880] S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-01-18 383264] S2 TomTomHOMEService;TomTomHOMEService;c:\program files\TomTom HOME 2\TomTomHOMEService.exe [2013-03-22 93072] S3 avfwim;AvFw Packet Filter Miniport;c:\windows\system32\DRIVERS\avfwim.sys [2014-01-03 92448] S3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\DRIVERS\klkbdflt.sys [2013-10-17 25696] S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys [2013-10-17 25696] . . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12 HPService REG_MULTI_SZ HPSLPSVC hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc . Inhalt des "geplante Tasks" Ordners . 2014-01-10 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-01 21:56] . 2014-01-10 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1498671171-4157686230-2594831882-1001Core.job - c:\users\Boddin\AppData\Local\Google\Update\GoogleUpdate.exe [2012-05-31 19:13] . 2014-01-10 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1498671171-4157686230-2594831882-1001UA.job - c:\users\Boddin\AppData\Local\Google\Update\GoogleUpdate.exe [2012-05-31 19:13] . . ------- Zusätzlicher Suchlauf ------- . uStart Page = hxxp://de.yahoo.com?fr=fp-comodo uInternet Settings,ProxyOverride = *.local IE: Nach Microsoft E&xel exportieren - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 IE: {{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - LSP: c:\program files\Avira\AntiVir Desktop\avsda.dll TCP: DhcpNameServer = 192.168.2.1 192.168.2.1 TCP: Interfaces\{A33675A3-FA9B-4AAA-A074-91D1FB84C8FB}: NameServer = 156.154.70.22,156.154.71.22 FF - ProfilePath - c:\users\Boddin\AppData\Roaming\Mozilla\Firefox\Profiles\vddu4vvk.default\ FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?SSPV=FFOB10&ctid=CT2736476&SearchSource=3&q={searchTerms} FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/ FF - ExtSQL: !HIDDEN! 2012-06-06 15:36; smartwebprinting@hp.com; c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 . - - - - Entfernte verwaiste Registrierungseinträge - - - - . URLSearchHooks-{7e111a5c-3d11-4f56-9463-5310c3c69025} - (no file) BHO-{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - (no file) HKLM-Run-CIS_{81EFDD93-DBBE-415B-BE6E-49B9664E3E82} - c:\programdata\cisE1E9.exe MSConfigStartUp-Zune Launcher - c:\program files\Zune\ZuneLauncher.exe . . . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}] @DACL=(02 0000) @="Java Plug-in 10.13.2" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.0_03" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.0_04" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.0_05" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_01" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_01" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_02" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_02" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_03" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_03" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_04" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_04" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_05" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_05" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_06" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_06" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_07" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_07" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_08" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_08" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_09" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_09" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_10" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_10" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_11" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_11" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_12" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_12" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_13" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_13" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_14" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_14" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_15" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_15" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_16" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_16" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_17" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_17" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_18" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_18" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_19" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_19" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_20" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_20" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_21" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_21" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.0" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.0" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.0_01" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.0_01" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.0_02" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.0_02" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.0_03" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.0_03" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.0_04" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.0_04" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_01" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_01" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_02" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_02" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_03" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_03" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_04" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_04" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_05" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_05" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_06" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_06" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_07" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_07" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_01" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_01" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_02" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_02" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_03" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_03" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_04" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_04" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_05" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_05" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_06" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_06" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_07" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_07" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_08" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_08" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_09" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_09" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_10" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_10" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_11" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_11" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_12" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_12" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_13" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_13" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_14" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_14" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_15" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_15" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_16" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_16" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_17" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_17" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_18" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_18" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_19" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_19" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_20" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_20" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_21" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_21" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_22" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_22" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_23" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_23" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_24" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_24" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_25" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_25" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_26" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_26" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_27" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_27" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_28" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_28" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_29" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_29" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_30" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_30" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_31" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_31" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_32" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_32" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_33" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_33" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_34" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_34" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_35" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_35" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_36" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_36" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_37" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_37" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_38" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_38" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_39" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_39" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_40" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_40" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_41" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_41" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_01" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_01" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_01" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_02" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_02" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_02" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_03" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_03" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_03" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_04" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_04" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_04" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_05" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_05" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_05" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_06" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_06" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_06" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_07" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_07" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_07" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_08" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_08" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_08" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_09" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_09" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_09" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_10" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_10" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_10" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_11" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_11" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_11" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_12" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_12" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_12" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_13" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_13" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_13" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_14" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_14" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_14" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_15" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_15" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_15" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_16" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_16" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_16" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_17" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_17" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_17" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_18" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_18" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_18" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_19" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_19" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_19" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_20" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_20" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_20" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_21" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_21" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_21" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_22" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_22" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_22" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_23" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_23" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_23" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_24" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_24" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_24" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_25" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_25" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_25" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_26" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_26" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_26" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_27" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_27" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_27" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_28" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_28" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_28" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_29" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_29" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_29" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_30" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_30" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_30" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_31" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_31" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_31" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_32" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_32" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_32" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_33" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_33" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_33" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_34" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_34" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_34" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_35" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_35" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_35" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_36" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_36" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_36" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_37" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_37" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_37" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_38" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_38" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_38" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_39" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_39" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_39" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_01" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_01" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_01" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_02" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_02" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_02" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_03" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_03" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_03" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_04" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_04" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_04" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_05" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_05" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_05" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_06" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_06" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_06" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_07" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_07" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_07" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_08" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_08" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_08" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_09" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_09" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_09" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_10" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_10" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_10" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_11" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_11" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_11" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_12" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_12" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_12" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_13" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_13" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_13" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_14" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_14" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_14" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_15" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_15" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_15" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_16" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_16" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_16" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_17" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_17" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_17" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_18" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_18" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_18" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_19" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_19" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_19" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_20" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_20" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_20" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_21" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_21" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_21" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_22" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_22" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_22" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_23" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_23" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_23" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_24" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_24" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_24" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_25" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_25" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_25" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_26" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_26" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_26" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_27" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_27" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_27" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_28" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_28" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_28" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_29" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_29" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_29" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_30" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_30" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_30" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_31" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_31" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_31" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_32" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_32" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_32" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_33" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_33" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_33" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_34" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_34" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_34" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_35" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_35" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_35" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_36" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_36" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_36" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_37" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_37" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_37" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_38" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_38" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_38" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_39" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_39" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_39" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_01" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_01" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_01" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_02" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_02" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_02" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_03" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_03" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_03" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_04" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_04" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_04" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_05" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_05" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_05" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_06" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_06" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_06" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_07" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_07" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_07" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_08" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_08" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_08" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_09" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_09" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_09" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_10" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_10" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_10" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_11" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_11" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_11" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_12" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_12" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_12" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_13" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_13" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_13" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-0017-0000-FFFF-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 10.13.2" . [HKEY_USERS\S-1-5-21-1498671171-4157686230-2594831882-1001_Classes\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}] @DACL=(02 0000) @="Java Plug-in 1.3.0_02" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Zeit der Fertigstellung: 2014-01-10 20:50:53 ComboFix-quarantined-files.txt 2014-01-10 19:50 . Vor Suchlauf: 12 Verzeichnis(se), 76.228.251.648 Bytes frei Nach Suchlauf: 19 Verzeichnis(se), 78.250.299.392 Bytes frei . - - End Of File - - 13CDD5CC4158A9764362608558224215 8F558EB6672622401DA993E1E865C861 |
11.01.2014, 10:41 | #6 |
/// TB-Ausbilder | Windows 7, Polizei Virus mit Firefox eingefangen Servus, Schritt 1 Downloade Dir bitte AdwCleaner auf deinen Desktop.
Schritt 2 Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Schritt 3 Downloade Dir bitte Malwarebytes Anti-Malware
Bitte poste mit deiner nächsten Antwort
|
11.01.2014, 11:56 | #7 |
| Windows 7, Polizei Virus mit Firefox eingefangen Soo Adw: Code:
ATTFilter # AdwCleaner v3.016 - Bericht erstellt am 11/01/2014 um 11:08:54 # Aktualisiert 23/12/2013 von Xplode # Betriebssystem : Windows 7 Ultimate Service Pack 1 (32 bits) # Benutzername : Boddin - BODDIN-PC # Gestartet von : C:\Users\Boddin\Desktop\adwcleaner.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\Program Files\Conduit Ordner Gelöscht : C:\Program Files\Common Files\AVG Secure Search Ordner Gelöscht : C:\Users\Boddin\AppData\Local\Conduit Ordner Gelöscht : C:\Users\Boddin\AppData\LocalLow\Conduit Ordner Gelöscht : C:\Users\Boddin\AppData\Roaming\DesktopIconForAmazon Ordner Gelöscht : C:\Users\Boddin\AppData\Roaming\dvdvideosoftiehelpers Ordner Gelöscht : C:\Users\Boddin\AppData\Roaming\pdfforge Datei Gelöscht : C:\Users\Boddin\AppData\Roaming\Mozilla\Firefox\Profiles\vddu4vvk.default\searchplugins\11-suche.xml Datei Gelöscht : C:\Program Files\Mozilla Firefox\searchplugins\avg-secure-search.xml Datei Gelöscht : C:\Users\Boddin\AppData\Roaming\Mozilla\Firefox\Profiles\vddu4vvk.default\searchplugins\Conduit.xml Datei Gelöscht : C:\Users\Boddin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_images.search.conduit.com_0.localstorage-journal Datei Gelöscht : C:\Users\Boddin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.conduit.com_0.localstorage-journal Datei Gelöscht : C:\Users\Boddin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.softonic.de_0.localstorage Datei Gelöscht : C:\Users\Boddin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.softonic.de_0.localstorage-journal ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48E4-AD47-84E31C44796C}] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT2736476 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_mp3directcut (1)_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_mp3directcut (1)_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_mp3directcut_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_mp3directcut_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_rocketdock_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_rocketdock_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88} Schlüssel Gelöscht : HKCU\Software\OCS Schlüssel Gelöscht : HKCU\Software\Softonic Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartBar Schlüssel Gelöscht : HKLM\Software\AVG Security Toolbar Schlüssel Gelöscht : HKLM\Software\Conduit Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DesktopIconAmazon Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4 Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094 Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536 ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.16428 -\\ Mozilla Firefox v26.0 (de) [ Datei : C:\Users\Boddin\AppData\Roaming\Mozilla\Firefox\Profiles\vddu4vvk.default\prefs.js ] Zeile gelöscht : user_pref("browser.search.defaultthis.engineName", "Freeware.de Customized Web Search"); Zeile gelöscht : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?SSPV=FFOB10&ctid=CT2736476&SearchSource=3&q={searchTerms}"); Zeile gelöscht : user_pref("tfp.CT2736476", true); -\\ Google Chrome v [ Datei : C:\Users\Boddin\AppData\Local\Google\Chrome\User Data\Default\preferences ] ************************* AdwCleaner[R0].txt - [5520 octets] - [11/01/2014 11:06:23] AdwCleaner[S0].txt - [5455 octets] - [11/01/2014 11:08:54] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [5515 octets] ########## JRT: Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.0 (01.07.2014:1) OS: Windows 7 Ultimate x86 Ran by Boddin on 11.01.2014 at 11:18:01,56 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\apntbmon ~~~ Registry Keys ~~~ Files ~~~ Folders Successfully deleted: [Folder] "C:\ProgramData\apn" Successfully deleted: [Folder] "C:\Users\Boddin\appdata\local\cre" ~~~ FireFox Emptied folder: C:\Users\Boddin\AppData\Roaming\mozilla\firefox\profiles\vddu4vvk.default\minidumps [165 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 11.01.2014 at 11:21:51,11 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2014.01.11.03 Windows 7 Service Pack 1 x86 NTFS Internet Explorer 11.0.9600.16476 Boddin :: BODDIN-PC [Administrator] Schutz: Aktiviert 11.01.2014 11:27:34 mbam-log-2014-01-11 (11-27-34).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 269612 Laufzeit: 9 Minute(n), 36 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 1 C:\Users\Boddin\Downloads\FreeAVIVideoConverter.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) |
11.01.2014, 14:38 | #8 |
/// TB-Ausbilder | Windows 7, Polizei Virus mit Firefox eingefangen Servus, Wir spüren die letzten Reste auf, damit wir sie später entfernen können: Kontrollscan mit FRST Führe wie zuvor beschrieben einen Scan mit FRST aus. Setze dazu eine Haken bei Addition.txt rechts unten und klicke auf Scan. Es werden wieder zwei Logdateien erzeugt. Poste mir diese. Gibt es noch Probleme mit Malware? Wenn ja, welche? Wie läuft der Rechner derzeit? Bitte poste mit deiner nächsten Antwort
|
11.01.2014, 14:43 | #9 |
| Windows 7, Polizei Virus mit Firefox eingefangen Okay gut Also der Rechner läuft einwandfrei zur Zeit, es gab weder Probleme mit Maleware etc. und er wurde auch nicht langsamer FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-01-2014 02 Ran by Boddin (administrator) on BODDIN-PC on 11-01-2014 14:40:55 Running from C:\Users\Boddin\Desktop Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avfwsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe (APN LLC.) C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe () C:\Program Files\Comodo\Dragon\dragon_updater.exe (Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe (Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avmailc.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe (Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Elaborate Bytes AG) C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe (Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe () C:\Program Files\RocketDock\RocketDock.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe (Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe (Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Dropbox, Inc.) C:\Users\Boddin\AppData\Roaming\Dropbox\bin\Dropbox.exe (APN LLC.) C:\Users\Boddin\AppData\Local\VNT\vntldr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\APSDaemon.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe (Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe (Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jucheck.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\POWERPNT.EXE ==================== Registry (Whitelisted) ================== HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation) HKLM\...\Run: [VirtualCloneDrive] - C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [85160 2009-06-17] (Elaborate Bytes AG) HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM\...\Run: [hpqSRMon] - C:\Program Files\HP\Digital Imaging\bin\HpqSRmon.exe [150528 2008-07-22] (Hewlett-Packard) HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.) HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.) HKLM\...\Run: [VNT] - C:\Program Files\VNT\vntldr.exe [202192 2013-12-20] (APN LLC.) HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [684600 2014-01-03] (Avira Operations GmbH & Co. KG) HKCU\...\Run: [RocketDock] - C:\Program Files\RocketDock\RocketDock.exe [495616 2007-09-02] () HKCU\...\Run: [iCloudServices] - C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-09-14] (Apple Inc.) HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-09-15] (Apple Inc.) HKCU\...\Run: [TomTomHOME.exe] - C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [248208 2013-03-22] (TomTom) HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [20549280 2013-10-21] (Skype Technologies S.A.) HKU\UpdatusUser\...\Run: [ROC_JAN2013_TB] - "C:\Program Files\AVG Secure Search\ROC_JAN2013_TB.exe" /PROMPT /CMPID=JAN2013_TB Startup: C:\Users\Boddin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Boddin\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.yahoo.com?fr=fp-comodo HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xD4DF6176603FCD01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKCU - {8EEAC88A-079B-4b2c-80C1-7836F79EB40A} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-comodo BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) BHO: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.) BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.) Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.) Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Winsock: Catalog5 05 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.) Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 33 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1 Tcpip\..\Interfaces\{A33675A3-FA9B-4AAA-A074-91D1FB84C8FB}: [NameServer]156.154.70.22,156.154.71.22 FireFox: ======== FF ProfilePath: C:\Users\Boddin\AppData\Roaming\Mozilla\Firefox\Profiles\vddu4vvk.default FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml FF Homepage: hxxp://www.google.de/ FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin: @java.com/DTPlugin,version=10.13.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.13.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin: @videolan.org/vlc,version=2.0.6 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Boddin\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Boddin\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF SearchPlugin: C:\Users\Boddin\AppData\Roaming\Mozilla\Firefox\Profiles\vddu4vvk.default\searchplugins\englische-ergebnisse.xml FF SearchPlugin: C:\Users\Boddin\AppData\Roaming\Mozilla\Firefox\Profiles\vddu4vvk.default\searchplugins\gmx-suche.xml FF SearchPlugin: C:\Users\Boddin\AppData\Roaming\Mozilla\Firefox\Profiles\vddu4vvk.default\searchplugins\lastminute.xml FF SearchPlugin: C:\Users\Boddin\AppData\Roaming\Mozilla\Firefox\Profiles\vddu4vvk.default\searchplugins\webde-suche.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: ProxTube - Unblock YouTube - C:\Users\Boddin\AppData\Roaming\Mozilla\Firefox\Profiles\vddu4vvk.default\Extensions\ich@maltegoetz.de [2013-12-11] FF Extension: Qualys BrowserCheck - C:\Users\Boddin\AppData\Roaming\Mozilla\Firefox\Profiles\vddu4vvk.default\Extensions\{7D2FB79E-E58C-4DB5-A36F-AC1C73967F4D} [2013-01-17] FF Extension: SaveFrom.net helper - C:\Users\Boddin\AppData\Roaming\Mozilla\Firefox\Profiles\vddu4vvk.default\Extensions\helper@savefrom.net.xpi [2013-07-05] FF Extension: WEB.DE MailCheck - C:\Users\Boddin\AppData\Roaming\Mozilla\Firefox\Profiles\vddu4vvk.default\Extensions\toolbar@web.de.xpi [2013-05-20] FF Extension: Avira SearchFree Toolbar plus Web Protection - C:\Users\Boddin\AppData\Roaming\Mozilla\Firefox\Profiles\vddu4vvk.default\Extensions\toolbar_AVIRA-V7C@apn.ask.com.xpi [2013-12-20] FF Extension: NoScript - C:\Users\Boddin\AppData\Roaming\Mozilla\Firefox\Profiles\vddu4vvk.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-07-20] FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-12-22] FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-06-06] FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-06-06] Chrome: ======= CHR HomePage: hxxp://www.google.com/ CHR Plugin: (Shockwave Flash) - C:\Users\Boddin\AppData\Local\Google\Chrome\User Data\PepperFlash\11.5.31.138\pepflashplayer.dll No File CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Users\Boddin\AppData\Local\Google\Chrome\Application\32.0.1700.72\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Users\Boddin\AppData\Local\Google\Chrome\Application\32.0.1700.72\pdf.dll () CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Java(TM) Platform SE 7 U7) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () CHR Plugin: (Google Update) - C:\Users\Boddin\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_146.dll No File CHR Plugin: (Java Deployment Toolkit 7.0.70.11) - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) CHR Extension: (Google Translate) - C:\Users\Boddin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb\1.2.5_0 CHR Extension: (YouTube) - C:\Users\Boddin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Adblock Plus) - C:\Users\Boddin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.7.2_0 CHR Extension: (Google Search) - C:\Users\Boddin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (AdBlock) - C:\Users\Boddin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0 CHR Extension: (YouTube Downloader: MP3 / HD Video Download) - C:\Users\Boddin\AppData\Local\Google\Chrome\User Data\Default\Extensions\hokfcbmfpgeajcgkaeigohghnkhjmcbj\13.0_0 CHR Extension: (Autodesk Homestyler) - C:\Users\Boddin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdmmkfaghgcicheaimnpffeeekheafkb\2.6_0 CHR Extension: (Web Zoom) - C:\Users\Boddin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkdlogcbnmlbmdgoajdflmijmbmikokj\1.0_0 CHR Extension: (Skype Click to Call) - C:\Users\Boddin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.3.0.11079_0 CHR Extension: (Google Wallet) - C:\Users\Boddin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_1 CHR Extension: (Avira SearchFree Toolbar plus Web Protection) - C:\Users\Boddin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pcoohmdcpejoeggdnihdfhohjgdbllgm\30.1_0 CHR Extension: (Gmail) - C:\Users\Boddin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx CHR HKLM\...\Chrome\Extension: [nlafpokblfobdnjhhggocaanijghemnd] - C:\Users\Boddin\AppData\Local\CRE\nlafpokblfobdnjhhggocaanijghemnd.crx CHR HKLM\...\Chrome\Extension: [pcoohmdcpejoeggdnihdfhohjgdbllgm] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7C\CRX\ToolbarCR.crx CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx CHR HKCU\...\Chrome\Extension: [nlafpokblfobdnjhhggocaanijghemnd] - C:\Users\Boddin\AppData\Local\CRE\nlafpokblfobdnjhhggocaanijghemnd.crx CHR StartMenuInternet: Google Chrome - C:\Users\Boddin\AppData\Local\Google\Chrome\Application\chrome.exe ========================== Services (Whitelisted) ================= R2 AntiVirFirewallService; C:\Program Files\Avira\AntiVir Desktop\avfwsvc.exe [1012280 2014-01-03] (Avira Operations GmbH & Co. KG) R2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc.exe [896056 2014-01-03] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440376 2014-01-03] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440376 2014-01-03] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2014-01-03] (Avira Operations GmbH & Co. KG) R2 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-12-20] (APN LLC.) R2 DragonUpdater; C:\Program Files\Comodo\Dragon\dragon_updater.exe [2098880 2014-01-08] () R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) R2 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.) ==================== Drivers (Whitelisted) ==================== R3 avfwim; C:\Windows\System32\DRIVERS\avfwim.sys [92448 2014-01-03] (Avira GmbH) R1 avfwot; C:\Windows\System32\DRIVERS\avfwot.sys [113024 2014-01-03] (Avira GmbH) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2014-01-03] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2014-01-03] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2014-01-03] (Avira Operations GmbH & Co. KG) R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [26024 2009-12-17] (Elaborate Bytes AG) S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [94304 2013-06-08] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [574560 2013-12-29] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [25696 2013-10-17] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [25696 2013-10-17] (Kaspersky Lab ZAO) R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [45024 2013-05-14] (Kaspersky Lab ZAO) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation) R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH) S3 catchme; \??\C:\Users\Boddin\AppData\Local\Temp\catchme.sys [x] U4 kl1; system32\DRIVERS\kl1.sys [x] U4 klpd; system32\DRIVERS\klpd.sys [x] U4 kneps; system32\DRIVERS\kneps.sys [x] S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x] S3 tsusbhub; system32\drivers\tsusbhub.sys [x] S3 VGPU; System32\drivers\rdvgkmd.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-11 14:40 - 2014-01-11 14:42 - 00020773 _____ C:\Users\Boddin\Desktop\FRST.txt 2014-01-11 14:40 - 2014-01-11 14:40 - 00000000 ____D C:\Users\Boddin\Desktop\FRST-OlderVersion 2014-01-11 11:24 - 2014-01-11 11:24 - 00001071 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-11 11:24 - 2014-01-11 11:24 - 00000000 ____D C:\Users\Boddin\AppData\Roaming\Malwarebytes 2014-01-11 11:24 - 2014-01-11 11:24 - 00000000 ____D C:\ProgramData\Malwarebytes 2014-01-11 11:24 - 2014-01-11 11:24 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware 2014-01-11 11:24 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-01-11 11:21 - 2014-01-11 11:21 - 00000996 _____ C:\Users\Boddin\Desktop\JRT.txt 2014-01-11 11:17 - 2014-01-11 11:17 - 00000000 ____D C:\Windows\ERUNT 2014-01-11 11:15 - 2014-01-11 11:15 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Boddin\Desktop\mbam-setup-1.75.0.1300.exe 2014-01-11 11:15 - 2014-01-11 11:15 - 01037068 _____ (Thisisu) C:\Users\Boddin\Desktop\JRT.exe 2014-01-11 11:12 - 2014-01-11 11:12 - 00005595 _____ C:\Users\Boddin\Desktop\AdwCleaner[S0].txt 2014-01-11 11:06 - 2014-01-11 11:09 - 00000000 ____D C:\AdwCleaner 2014-01-11 11:01 - 2014-01-11 11:01 - 01233962 _____ C:\Users\Boddin\Desktop\adwcleaner.exe 2014-01-10 20:50 - 2014-01-10 20:50 - 00088960 _____ C:\ComboFix.txt 2014-01-10 20:33 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe 2014-01-10 20:33 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe 2014-01-10 20:33 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-01-10 20:33 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-01-10 20:33 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-01-10 20:33 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe 2014-01-10 20:33 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe 2014-01-10 20:33 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe 2014-01-10 20:32 - 2014-01-10 20:50 - 00000000 ____D C:\Qoobox 2014-01-10 20:32 - 2014-01-10 20:49 - 00000000 ____D C:\Windows\erdnt 2014-01-10 20:26 - 2014-01-10 20:26 - 05162489 ____R (Swearware) C:\Users\Boddin\Desktop\ComboFix.exe 2014-01-10 17:48 - 2014-01-10 17:49 - 00029859 _____ C:\Users\Boddin\Downloads\Addition.txt 2014-01-10 17:46 - 2014-01-11 14:40 - 00000000 ____D C:\FRST 2014-01-10 17:46 - 2014-01-10 17:49 - 00047380 _____ C:\Users\Boddin\Downloads\FRST.txt 2014-01-10 17:45 - 2014-01-11 14:40 - 01220096 _____ (Farbar) C:\Users\Boddin\Desktop\FRST.exe 2014-01-10 17:43 - 2014-01-10 17:43 - 00000114 _____ C:\Users\Boddin\Downloads\fritz.mittwoch.2.pls 2014-01-09 19:46 - 2014-01-09 19:46 - 00048392 _____ (COMODO CA Limited) C:\Windows\system32\certsentry.dll 2014-01-09 19:46 - 2014-01-09 19:46 - 00000000 ____D C:\first_launch 2014-01-03 17:32 - 2014-01-03 17:32 - 00069240 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2014-01-02 11:31 - 2014-01-02 11:31 - 00002221 _____ C:\Users\Public\Desktop\Free AVI Video Converter.lnk 2014-01-02 11:30 - 2014-01-02 11:31 - 00000000 ___RD C:\Users\Public\Desktop\DVDVideoSoft 2014-01-01 21:54 - 2014-01-01 21:54 - 00000000 ____D C:\Users\Boddin\AppData\Roaming\Avira 2014-01-01 21:53 - 2014-01-01 21:53 - 00002016 _____ C:\Users\Public\Desktop\Avira Control Center.lnk 2014-01-01 21:52 - 2014-01-03 17:32 - 00135648 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2014-01-01 21:52 - 2014-01-03 17:32 - 00113024 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwot.sys 2014-01-01 21:52 - 2014-01-03 17:32 - 00092448 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwim.sys 2014-01-01 21:52 - 2014-01-03 17:32 - 00090400 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-01-01 21:52 - 2014-01-03 17:32 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2014-01-01 21:52 - 2014-01-01 21:52 - 00000000 ____D C:\ProgramData\Avira 2014-01-01 21:52 - 2014-01-01 21:52 - 00000000 ____D C:\Program Files\Avira 2014-01-01 21:52 - 2012-08-27 15:50 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys 2014-01-01 21:33 - 2014-01-01 21:33 - 00000000 ____D C:\Users\Boddin\Downloads\Avira Internet Security 2013 2014-01-01 21:10 - 2014-01-01 21:13 - 00000000 ____D C:\Users\Boddin\Downloads\Avira Internet Security Suite 2014 v14.0.1.179 2014-01-01 20:15 - 2014-01-01 20:15 - 135988266 _____ C:\Users\Boddin\Downloads\Avira_Internet_Security_Suite_2014_v14.0.1.179.rar 2014-01-01 19:47 - 2014-01-01 19:47 - 00015839 _____ C:\Users\Boddin\Desktop\HelloWorld.exe 2014-01-01 19:47 - 2014-01-01 19:47 - 00000853 _____ C:\Users\Boddin\Desktop\Makefile.win 2014-01-01 19:31 - 2014-01-01 19:35 - 00000000 ____D C:\Users\Boddin\Desktop\HelloWorld 2013-12-31 17:28 - 2013-12-05 20:43 - 00000000 ____D C:\Users\Boddin\Downloads\__MACOSX 2013-12-31 11:55 - 2013-09-15 20:35 - 00000000 ____D C:\Users\Boddin\Downloads\[320.MP3] Club Music 01 (2013) [iTunes Edition] 2013-12-30 16:15 - 2014-01-01 19:24 - 00000000 ____D C:\Dev-Cpp 2013-12-30 16:15 - 2013-12-30 16:16 - 00000000 ____D C:\Users\Boddin\AppData\Roaming\Dev-Cpp 2013-12-30 16:13 - 2013-12-30 16:14 - 09326468 _____ C:\Users\Boddin\Downloads\devcpp-4.9.9.2_setup.exe 2013-12-30 15:39 - 2013-12-30 16:15 - 00000000 ____D C:\Users\Boddin\AppData\Roaming\Notepad++ 2013-12-30 15:39 - 2013-12-30 15:39 - 00000000 ____D C:\Users\Boddin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++ 2013-12-30 15:39 - 2013-12-30 15:39 - 00000000 ____D C:\Program Files\Notepad++ 2013-12-30 15:38 - 2013-12-30 15:38 - 07549839 _____ C:\Users\Boddin\Downloads\npp.6.5.2.Installer.exe 2013-12-30 15:18 - 2013-12-30 15:18 - 00000000 ____D C:\Users\Boddin\AppData\Local\VNT 2013-12-30 15:18 - 2013-12-30 15:18 - 00000000 ____D C:\ProgramData\AskPartnerNetwork 2013-12-30 15:18 - 2013-12-30 15:18 - 00000000 ____D C:\Program Files\VNT 2013-12-30 15:18 - 2013-12-30 15:18 - 00000000 ____D C:\Program Files\AskPartnerNetwork 2013-12-30 12:19 - 2012-10-25 12:42 - 00587096 _____ (Kaspersky Lab) C:\Windows\system32\Drivers\SET7406.tmp 2013-12-30 12:19 - 2012-08-13 18:24 - 00075096 _____ (Kaspersky Lab) C:\Windows\system32\Drivers\SETBBD0.tmp 2013-12-30 12:12 - 2012-10-25 12:42 - 00587096 _____ (Kaspersky Lab) C:\Windows\system32\Drivers\SET32E2.tmp 2013-12-30 12:12 - 2012-08-13 18:24 - 00075096 _____ (Kaspersky Lab) C:\Windows\system32\Drivers\SETA4D7.tmp 2013-12-30 01:31 - 2012-10-25 12:42 - 00587096 _____ (Kaspersky Lab) C:\Windows\system32\Drivers\SET9E03.tmp 2013-12-30 01:31 - 2012-08-13 18:24 - 00075096 _____ (Kaspersky Lab) C:\Windows\system32\Drivers\SET1786.tmp 2013-12-30 01:16 - 2012-10-25 12:42 - 00587096 _____ (Kaspersky Lab) C:\Windows\system32\Drivers\SETBB23.tmp 2013-12-30 01:16 - 2012-08-13 18:24 - 00075096 _____ (Kaspersky Lab) C:\Windows\system32\Drivers\SET4EFA.tmp 2013-12-30 01:11 - 2013-12-30 12:35 - 00000000 ____D C:\kleaner.tmp 2013-12-30 01:10 - 2013-12-30 12:30 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files 2013-12-29 12:45 - 2013-12-29 12:59 - 00574560 ____N (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys 2013-12-29 12:45 - 2013-06-08 20:18 - 00094304 ____N (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys 2013-12-28 22:03 - 2013-12-28 22:03 - 98633040 _____ (Apple Inc.) C:\Users\Boddin\Downloads\iTunesSetup (1).exe 2013-12-28 21:57 - 2013-12-28 21:56 - 00262560 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2013-12-28 21:56 - 2013-12-28 21:56 - 00174496 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2013-12-28 21:56 - 2013-12-28 21:56 - 00174496 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2013-12-28 21:56 - 2013-12-28 21:56 - 00094112 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2013-12-28 21:56 - 2013-12-28 21:56 - 00000000 ____D C:\Program Files\Java 2013-12-27 16:21 - 2013-12-27 16:21 - 00110856 _____ C:\Users\Ines Boddin\AppData\Local\GDIPFONTCACHEV1.DAT 2013-12-27 16:21 - 2013-12-27 16:21 - 00001425 _____ C:\Users\Ines Boddin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-12-27 16:21 - 2013-12-27 16:21 - 00000020 ___SH C:\Users\Ines Boddin\ntuser.ini 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 _SHDL C:\Users\Ines Boddin\Startmenü 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 _SHDL C:\Users\Ines Boddin\Netzwerkumgebung 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 _SHDL C:\Users\Ines Boddin\Druckumgebung 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 _SHDL C:\Users\Ines Boddin\Documents\Eigene Musik 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 _SHDL C:\Users\Ines Boddin\Documents\Eigene Bilder 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 _SHDL C:\Users\Ines Boddin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 _SHDL C:\Users\Ines Boddin\AppData\Local\Verlauf 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 ____D C:\Users\Ines Boddin\AppData\Roaming\Apple Computer 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 ____D C:\Users\Ines Boddin\AppData\Roaming\Adobe 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 ____D C:\Users\Ines Boddin\AppData\Local\VirtualStore 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 ____D C:\Users\Ines Boddin 2013-12-27 16:21 - 2013-05-14 20:49 - 00000000 ____D C:\Users\Ines Boddin\AppData\Local\Microsoft Help 2013-12-27 16:21 - 2013-01-13 11:07 - 00000000 ____D C:\Users\Ines Boddin\AppData\Roaming\TuneUp Software 2013-12-27 16:21 - 2009-07-14 05:42 - 00000000 ___RD C:\Users\Ines Boddin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2013-12-27 16:21 - 2009-07-14 05:37 - 00000000 ___RD C:\Users\Ines Boddin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2013-12-22 14:49 - 2013-12-22 14:49 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-12-18 22:33 - 2013-12-18 22:33 - 00000000 ____D C:\Users\Boddin\Desktop\Fam 2013-12-13 17:58 - 2013-12-28 21:46 - 00000000 ____D C:\Users\Boddin\Desktop\PSP flash ==================== One Month Modified Files and Folders ======= 2014-01-11 14:42 - 2014-01-11 14:40 - 00020773 _____ C:\Users\Boddin\Desktop\FRST.txt 2014-01-11 14:40 - 2014-01-11 14:40 - 00000000 ____D C:\Users\Boddin\Desktop\FRST-OlderVersion 2014-01-11 14:40 - 2014-01-10 17:46 - 00000000 ____D C:\FRST 2014-01-11 14:40 - 2014-01-10 17:45 - 01220096 _____ (Farbar) C:\Users\Boddin\Desktop\FRST.exe 2014-01-11 13:59 - 2012-05-31 20:13 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1498671171-4157686230-2594831882-1001UA.job 2014-01-11 13:56 - 2012-06-01 17:38 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-01-11 13:23 - 2012-03-14 18:39 - 01716034 _____ C:\Windows\WindowsUpdate.log 2014-01-11 11:52 - 2012-03-15 14:00 - 00000000 ____D C:\Users\Boddin\AppData\Roaming\Dropbox 2014-01-11 11:51 - 2012-03-15 14:02 - 00000000 ___RD C:\Users\Boddin\Dropbox 2014-01-11 11:51 - 2009-07-14 05:34 - 00014224 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-11 11:51 - 2009-07-14 05:34 - 00014224 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-11 11:46 - 2013-02-15 20:32 - 00261832 _____ C:\Windows\PFRO.log 2014-01-11 11:46 - 2013-02-08 10:55 - 00035231 _____ C:\Windows\setupact.log 2014-01-11 11:46 - 2012-05-31 21:09 - 00000000 ____D C:\ProgramData\NVIDIA 2014-01-11 11:46 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-11 11:24 - 2014-01-11 11:24 - 00001071 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-11 11:24 - 2014-01-11 11:24 - 00000000 ____D C:\Users\Boddin\AppData\Roaming\Malwarebytes 2014-01-11 11:24 - 2014-01-11 11:24 - 00000000 ____D C:\ProgramData\Malwarebytes 2014-01-11 11:24 - 2014-01-11 11:24 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware 2014-01-11 11:21 - 2014-01-11 11:21 - 00000996 _____ C:\Users\Boddin\Desktop\JRT.txt 2014-01-11 11:17 - 2014-01-11 11:17 - 00000000 ____D C:\Windows\ERUNT 2014-01-11 11:15 - 2014-01-11 11:15 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Boddin\Desktop\mbam-setup-1.75.0.1300.exe 2014-01-11 11:15 - 2014-01-11 11:15 - 01037068 _____ (Thisisu) C:\Users\Boddin\Desktop\JRT.exe 2014-01-11 11:12 - 2014-01-11 11:12 - 00005595 _____ C:\Users\Boddin\Desktop\AdwCleaner[S0].txt 2014-01-11 11:09 - 2014-01-11 11:06 - 00000000 ____D C:\AdwCleaner 2014-01-11 11:01 - 2014-01-11 11:01 - 01233962 _____ C:\Users\Boddin\Desktop\adwcleaner.exe 2014-01-10 20:50 - 2014-01-10 20:50 - 00088960 _____ C:\ComboFix.txt 2014-01-10 20:50 - 2014-01-10 20:32 - 00000000 ____D C:\Qoobox 2014-01-10 20:50 - 2009-07-14 03:37 - 00000000 ___RD C:\Users\Public 2014-01-10 20:49 - 2014-01-10 20:32 - 00000000 ____D C:\Windows\erdnt 2014-01-10 20:49 - 2009-07-14 03:04 - 00000215 _____ C:\Windows\system.ini 2014-01-10 20:48 - 2012-03-14 18:40 - 00000000 ____D C:\Users\Boddin 2014-01-10 20:26 - 2014-01-10 20:26 - 05162489 ____R (Swearware) C:\Users\Boddin\Desktop\ComboFix.exe 2014-01-10 17:49 - 2014-01-10 17:48 - 00029859 _____ C:\Users\Boddin\Downloads\Addition.txt 2014-01-10 17:49 - 2014-01-10 17:46 - 00047380 _____ C:\Users\Boddin\Downloads\FRST.txt 2014-01-10 17:43 - 2014-01-10 17:43 - 00000114 _____ C:\Users\Boddin\Downloads\fritz.mittwoch.2.pls 2014-01-10 01:59 - 2012-05-31 20:13 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1498671171-4157686230-2594831882-1001Core.job 2014-01-09 21:51 - 2012-03-15 13:41 - 00000000 ____D C:\Users\Boddin\AppData\Roaming\vlc 2014-01-09 19:46 - 2014-01-09 19:46 - 00048392 _____ (COMODO CA Limited) C:\Windows\system32\certsentry.dll 2014-01-09 19:46 - 2014-01-09 19:46 - 00000000 ____D C:\first_launch 2014-01-09 19:45 - 2013-02-02 03:04 - 00000000 ____D C:\Program Files\Comodo 2014-01-05 18:21 - 2012-07-15 13:22 - 00000000 ____D C:\Users\Boddin\AppData\Roaming\Skype 2014-01-05 18:01 - 2013-05-14 13:51 - 00001028 _____ C:\Users\Public\Desktop\VLC media player.lnk 2014-01-05 16:10 - 2009-11-10 19:44 - 01612484 _____ C:\Windows\system32\PerfStringBackup.INI 2014-01-03 17:32 - 2014-01-03 17:32 - 00069240 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2014-01-03 17:32 - 2014-01-01 21:52 - 00135648 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2014-01-03 17:32 - 2014-01-01 21:52 - 00113024 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwot.sys 2014-01-03 17:32 - 2014-01-01 21:52 - 00092448 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwim.sys 2014-01-03 17:32 - 2014-01-01 21:52 - 00090400 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-01-03 17:32 - 2014-01-01 21:52 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2014-01-02 11:31 - 2014-01-02 11:31 - 00002221 _____ C:\Users\Public\Desktop\Free AVI Video Converter.lnk 2014-01-02 11:31 - 2014-01-02 11:30 - 00000000 ___RD C:\Users\Public\Desktop\DVDVideoSoft 2014-01-02 11:31 - 2013-08-25 15:20 - 00000000 ____D C:\Program Files\DVDVideoSoft 2014-01-02 11:30 - 2013-08-25 15:20 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft 2014-01-02 11:30 - 2013-07-11 14:45 - 00000000 ____D C:\Users\Boddin\AppData\Roaming\DVDVideoSoft 2014-01-01 21:54 - 2014-01-01 21:54 - 00000000 ____D C:\Users\Boddin\AppData\Roaming\Avira 2014-01-01 21:53 - 2014-01-01 21:53 - 00002016 _____ C:\Users\Public\Desktop\Avira Control Center.lnk 2014-01-01 21:52 - 2014-01-01 21:52 - 00000000 ____D C:\ProgramData\Avira 2014-01-01 21:52 - 2014-01-01 21:52 - 00000000 ____D C:\Program Files\Avira 2014-01-01 21:33 - 2014-01-01 21:33 - 00000000 ____D C:\Users\Boddin\Downloads\Avira Internet Security 2013 2014-01-01 21:13 - 2014-01-01 21:10 - 00000000 ____D C:\Users\Boddin\Downloads\Avira Internet Security Suite 2014 v14.0.1.179 2014-01-01 20:15 - 2014-01-01 20:15 - 135988266 _____ C:\Users\Boddin\Downloads\Avira_Internet_Security_Suite_2014_v14.0.1.179.rar 2014-01-01 19:47 - 2014-01-01 19:47 - 00015839 _____ C:\Users\Boddin\Desktop\HelloWorld.exe 2014-01-01 19:47 - 2014-01-01 19:47 - 00000853 _____ C:\Users\Boddin\Desktop\Makefile.win 2014-01-01 19:35 - 2014-01-01 19:31 - 00000000 ____D C:\Users\Boddin\Desktop\HelloWorld 2014-01-01 19:24 - 2013-12-30 16:15 - 00000000 ____D C:\Dev-Cpp 2014-01-01 19:13 - 2009-07-14 05:53 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-12-30 16:16 - 2013-12-30 16:15 - 00000000 ____D C:\Users\Boddin\AppData\Roaming\Dev-Cpp 2013-12-30 16:15 - 2013-12-30 15:39 - 00000000 ____D C:\Users\Boddin\AppData\Roaming\Notepad++ 2013-12-30 16:14 - 2013-12-30 16:13 - 09326468 _____ C:\Users\Boddin\Downloads\devcpp-4.9.9.2_setup.exe 2013-12-30 15:39 - 2013-12-30 15:39 - 00000000 ____D C:\Users\Boddin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++ 2013-12-30 15:39 - 2013-12-30 15:39 - 00000000 ____D C:\Program Files\Notepad++ 2013-12-30 15:38 - 2013-12-30 15:38 - 07549839 _____ C:\Users\Boddin\Downloads\npp.6.5.2.Installer.exe 2013-12-30 15:18 - 2013-12-30 15:18 - 00000000 ____D C:\Users\Boddin\AppData\Local\VNT 2013-12-30 15:18 - 2013-12-30 15:18 - 00000000 ____D C:\ProgramData\AskPartnerNetwork 2013-12-30 15:18 - 2013-12-30 15:18 - 00000000 ____D C:\Program Files\VNT 2013-12-30 15:18 - 2013-12-30 15:18 - 00000000 ____D C:\Program Files\AskPartnerNetwork 2013-12-30 12:35 - 2013-12-30 01:11 - 00000000 ____D C:\kleaner.tmp 2013-12-30 12:30 - 2013-12-30 01:10 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files 2013-12-29 12:59 - 2013-12-29 12:45 - 00574560 ____N (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys 2013-12-28 22:58 - 2012-12-26 13:33 - 00000000 ____D C:\ProgramData\MFAData 2013-12-28 22:07 - 2013-11-02 17:52 - 00000000 ____D C:\Users\Boddin\AppData\Roaming\Samsung 2013-12-28 22:07 - 2013-11-02 17:38 - 00000000 ____D C:\Program Files\Samsung 2013-12-28 22:03 - 2013-12-28 22:03 - 98633040 _____ (Apple Inc.) C:\Users\Boddin\Downloads\iTunesSetup (1).exe 2013-12-28 21:56 - 2013-12-28 21:57 - 00262560 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2013-12-28 21:56 - 2013-12-28 21:56 - 00174496 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2013-12-28 21:56 - 2013-12-28 21:56 - 00174496 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2013-12-28 21:56 - 2013-12-28 21:56 - 00094112 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2013-12-28 21:56 - 2013-12-28 21:56 - 00000000 ____D C:\Program Files\Java 2013-12-28 21:56 - 2012-10-09 16:20 - 00861088 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll 2013-12-28 21:56 - 2012-10-09 16:20 - 00782240 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll 2013-12-28 21:46 - 2013-12-13 17:58 - 00000000 ____D C:\Users\Boddin\Desktop\PSP flash 2013-12-27 16:23 - 2012-10-13 12:45 - 00000000 ____D C:\Users\Boddin\Desktop\René Ines 2013-12-27 16:21 - 2013-12-27 16:21 - 00110856 _____ C:\Users\Ines Boddin\AppData\Local\GDIPFONTCACHEV1.DAT 2013-12-27 16:21 - 2013-12-27 16:21 - 00001425 _____ C:\Users\Ines Boddin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-12-27 16:21 - 2013-12-27 16:21 - 00000020 ___SH C:\Users\Ines Boddin\ntuser.ini 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 _SHDL C:\Users\Ines Boddin\Startmenü 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 _SHDL C:\Users\Ines Boddin\Netzwerkumgebung 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 _SHDL C:\Users\Ines Boddin\Druckumgebung 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 _SHDL C:\Users\Ines Boddin\Documents\Eigene Musik 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 _SHDL C:\Users\Ines Boddin\Documents\Eigene Bilder 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 _SHDL C:\Users\Ines Boddin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 _SHDL C:\Users\Ines Boddin\AppData\Local\Verlauf 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 ____D C:\Users\Ines Boddin\AppData\Roaming\Apple Computer 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 ____D C:\Users\Ines Boddin\AppData\Roaming\Adobe 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 ____D C:\Users\Ines Boddin\AppData\Local\VirtualStore 2013-12-27 16:21 - 2013-12-27 16:21 - 00000000 ____D C:\Users\Ines Boddin 2013-12-27 15:31 - 2012-03-14 19:11 - 00000000 ____D C:\Program Files\Microsoft Office 2013-12-23 17:08 - 2012-06-03 15:36 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2013-12-22 14:49 - 2013-12-22 14:49 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-12-18 22:33 - 2013-12-18 22:33 - 00000000 ____D C:\Users\Boddin\Desktop\Fam 2013-12-17 16:36 - 2013-07-02 13:18 - 00000000 ____D C:\Users\Boddin\Documents\Betriebskosten + Wasserabrechnung 2012 2013-12-13 19:57 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache Some content of TEMP: ==================== C:\Users\Boddin\AppData\Local\temp\avgnt.exe C:\Users\Boddin\AppData\Local\temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-09 23:22 ==================== End Of Log ============================ |
11.01.2014, 16:02 | #10 |
/// TB-Ausbilder | Windows 7, Polizei Virus mit Firefox eingefangen Servus, Wir entfernen die letzten Reste und kontrollieren nochmal alles. ESET kann länger (> 2 h) dauern. Im Anschluss daran räumen wir auf und ich gebe dir noch ein paar Tipps mit auf den Weg. Schritt 1 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter start HKU\UpdatusUser\...\Run: [ROC_JAN2013_TB] - "C:\Program Files\AVG Secure Search\ROC_JAN2013_TB.exe" /PROMPT /CMPID=JAN2013_TB CHR HKLM\...\Chrome\Extension: [nlafpokblfobdnjhhggocaanijghemnd] - C:\Users\Boddin\AppData\Local\CRE\nlafpokblfobdnjhhggocaanijghemnd.crx CHR HKCU\...\Chrome\Extension: [nlafpokblfobdnjhhggocaanijghemnd] - C:\Users\Boddin\AppData\Local\CRE\nlafpokblfobdnjhhggocaanijghemnd.crx end Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Schritt 2 Downloade dir die passende Version von HitmanPro auf deinen Desktop: HitmanPro - 32 Bit | HitmanPro - 64 Bit.
Schritt 3 ESET Online Scanner
Schritt 4 Downloade Dir bitte SecurityCheck und:
Bitte poste mit deiner nächsten Antwort
|
11.01.2014, 19:20 | #11 |
| Windows 7, Polizei Virus mit Firefox eingefangen Soo das hat etwas gedauert Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 11-01-2014 02 Ran by Boddin at 2014-01-11 16:26:38 Run:1 Running from C:\Users\Boddin\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** start HKU\UpdatusUser\...\Run: [ROC_JAN2013_TB] - "C:\Program Files\AVG Secure Search\ROC_JAN2013_TB.exe" /PROMPT /CMPID=JAN2013_TB CHR HKLM\...\Chrome\Extension: [nlafpokblfobdnjhhggocaanijghemnd] - C:\Users\Boddin\AppData\Local\CRE\nlafpokblfobdnjhhggocaanijghemnd.crx CHR HKCU\...\Chrome\Extension: [nlafpokblfobdnjhhggocaanijghemnd] - C:\Users\Boddin\AppData\Local\CRE\nlafpokblfobdnjhhggocaanijghemnd.crx end ***************** HKU\UpdatusUser\Software\Microsoft\Windows\CurrentVersion\Run\\ROC_JAN2013_TB => Value deleted successfully. HKLM\SOFTWARE\Google\Chrome\Extensions\nlafpokblfobdnjhhggocaanijghemnd => Key deleted successfully. "C:\Users\Boddin\AppData\Local\CRE\nlafpokblfobdnjhhggocaanijghemnd.crx" => File/Directory not found. HKCU\SOFTWARE\Google\Chrome\Extensions\nlafpokblfobdnjhhggocaanijghemnd => Key deleted successfully. "C:\Users\Boddin\AppData\Local\CRE\nlafpokblfobdnjhhggocaanijghemnd.crx" => File/Directory not found. ==== End of Fixlog ==== Code:
ATTFilter
Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=d25efdf44a08a64ebdd49d41f46baaee # engine=16616 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2014-01-11 05:49:39 # local_time=2014-01-11 06:49:39 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=3073 16777214 20 7 3720631 3720631 0 0 # compatibility_mode=5893 16776574 100 94 1127782 141093770 0 0 # scanned=174913 # found=0 # cleaned=0 # scan_time=7593 Code:
ATTFilter Results of screen317's Security Check version 0.99.78 Windows 7 Service Pack 1 x86 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Avira Desktop Antivirus up to date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 CCleaner Java 7 Update 13 Java version out of Date! Adobe Flash Player 11.9.900.170 Adobe Reader XI Mozilla Firefox (26.0) Google Chrome 31.0.1650.63 Google Chrome 32.0.1700.72 ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbamgui.exe Avira Antivir avgnt.exe Avira Antivir avguard.exe Malwarebytes' Anti-Malware mbamscheduler.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` |
11.01.2014, 20:34 | #12 |
/// TB-Ausbilder | Windows 7, Polizei Virus mit Firefox eingefangen Servus, Wenn du keine Probleme mehr hast, dann sind wir hier fertig. Deine Logdateien sind sauber. Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern. Schritt 1 Dein Java ist nicht mehr aktuell. Älter Versionen enthalten Sicherheitslücken, die von Malware missbraucht werden können.
Schritt 2 Ich sehe, dass du sog. Registry Cleaner auf dem System hast. In deinem Fall CCleaner. Wir empfehlen auf keinen Fall jegliche Art von Registry Cleaner. Der Grund ist ganz einfach: Die Registry ist das Hirn des Systems. Funktioniert das Hirn nicht, funktioniert der Rest nicht mehr wirklich. Wir lesen oft genug von Hilfesuchenden, dass deren System nach der Nutzung von Registry Cleanern nicht mehr booted.
Zerstörst Du die Registry, zerstörst Du Windows. Ich empfehle dir hiermit die oben genannte Software zu deinstallieren und in Zukunft auf solche Art von Software zu verzichten. Am Ende empfehle ich dir ein anderes Tool, mit dem du deine temporären Dateien entfernen kannst. Schritt 3 Die Reihenfolge ist hier entscheidend.
Schritt 4 Abschließend habe ich noch ein paar Tipps zur Absicherung deines Systems. Ich kann gar nicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti-Viren-Programm und zusätzlicher Schutz
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden. Mozilla Firefox
Performance
Was du vermeiden solltest:
Nun bleibt mir nur noch dir viel Spaß beim sicheren Surfen zu wünschen... ... und vielleicht möchtest du ja das Trojaner-Board unterstützen? Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann. |
14.01.2014, 14:03 | #13 |
/// TB-Ausbilder | Windows 7, Polizei Virus mit Firefox eingefangen Ich bin froh, dass wir helfen konnten In diesem Forum kannst du eine kurze Rückmeldung zur Bereinigung abgeben, sofern du das möchtest: Lob, Kritik und Wünsche Klicke dazu auf den Button "NEUES THEMA" und poste ein kleines Feedback. Vielen Dank! Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke mir bitte eine PM. Jeder andere bitte hier klicken und einen eigenen Thread erstellen. |
Themen zu Windows 7, Polizei Virus mit Firefox eingefangen |
antiviren, bundes-polizei-virus, eingefangen, fenster, firefox, frage, fragen, gefangen, geld, gen, konnte, manager, mozilla, neues, nichts, polizei trojaner, programm, schließe, seite, surfe, surfen, task manager, verlasse, verlassen, virus, windows, windows 7, windows 7 32bit |