|
Log-Analyse und Auswertung: immer wieder "Page not found"Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
11.01.2014, 09:14 | #1 |
| immer wieder "Page not found" Hallo! Ich habe folgendes Problem: Seit einiger Zeit bekomme ich auf einigen Seiten bei Firefox die Yahoo-Seite "Page not found" angezeigt und der erste Link ist meistens genau das, wohin ich gerade wollte. Es sind immer die gleichen Seiten, es passiert in verschiedenen Browsern (im IE kommt 503 Page not found), die Seiten funktionieren aber bei anderen (inkl. meiner Mitbewohner, die das gleiche Netz benutzen) ganz normal. Cache und Cookies gelöscht, Firefox neu gestartet. Danach ging es für ca. einen Tag und danach fing es wieder an. Auch wieder die gleichen Seiten. Avast zeigt nichts an. Mit Malwarebytes habe ich im November schonmal 3 Sachen gefunden, aber "erfolgreich gelöscht". Danach nichts mehr. (Letzte Logdatei ist verschwunden, lasse gerade nochmal durchlaufen) Ich habe Laut der Anleitung bereits mit Defogger "disabled" und FRST durchlaufen lassen. GMER bricht allerdings immer nach ca. 2 Minuten ab mit der Meldung "GMER funktioniert nicht mehr.". Habe alle Programme im Hintergrund geschlossen und Internetverbindung getrennt. Hilfe! Ich muss dringend auf die Uniseite, sonst ist die nächste Klausurenphase in Gefahr. Logs hier: Malewarebytes: Malwarebytes Anti-Malware 1.65.1.1000 www.malwarebytes.org Datenbank Version: v2012.11.26.03 Windows Vista Service Pack 2 x86 NTFS Internet Explorer 9.0.8112.16421 Samsung SA 11 :: SAMSUNGSA11-PC [Administrator] 26.11.2012 13:12:38 mbam-log-2012-11-26 (13-12-38).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|G:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 587555 Laufzeit: 5 Stunde(n), 17 Minute(n), 25 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 1 HKCU\SOFTWARE\CLASSES\CLSID\{42AEDC87-2188-41FD-B9A3-0C966FEABEC1}\INPROCSERVER32 (Trojan.Zaccess) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 1 HKCU\SOFTWARE\CLASSES\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InprocServer32| (Trojan.Zaccess) -> Daten: C:\Users\Samsung SA 11\AppData\Local\{3819f8a5-bd1b-a330-301d-fda6677fd30b}\n. -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 3 C:\Users\Samsung SA 11\AppData\Local\{3819f8a5-bd1b-a330-301d-fda6677fd30b}\n (Trojan.Dropper.PE4) -> Löschen bei Neustart. C:\Users\Samsung SA 11\AppData\Local\{3819f8a5-bd1b-a330-301d-fda6677fd30b}\U\800000cb.@ (Rootkit.0Access) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Roaming\Upkoup\uxge.exe (Trojan.Phex.THAGen1) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) FRST: Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 10-01-2014 Ran by Samsung SA 11 (administrator) on SAMSUNGSA11-PC on 10-01-2014 22:59:26 Running from C:\Users\Samsung SA 11\Downloads Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Windows\System32\SLsvc.exe (Cisco Systems, Inc.) C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (B.H.A Corporation) C:\Windows\System32\bgsvcgen.exe (Microsoft Corp.) C:\Program Files\Microsoft\BingDesktop\BingDesktopUpdater.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (AnchorFree Inc.) C:\Program Files\Hotspot Shield\bin\cmw_srv.exe () C:\Program Files\Hotspot Shield\bin\hsswd.exe (Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe (PC Tools) C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe () C:\Program Files\CyberLink\Shared Files\RichVideo.exe (Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (TOSHIBA CORPORATION) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe (Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Samsung Magic Doctor\MagicDoctorKbdHk.exe (SAMSUNG Electronics co., LTD.) C:\Program Files\Samsung\EBM\EasyBatteryMgr3.exe (SAMSUNG Electronics) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe (Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe (Realtek Semiconductor) C:\Windows\RtHDVCpl.exe (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Cyberlink Corp.) C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe () C:\Windows\Samsung\PanelMgr\SSMMgr.exe () C:\Windows\twain_32\Samsung\CLX3170\Scan2Pc.exe ( TOSHIBA CORPORATION) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\ItSecMng.exe (Adobe Systems Inc.) C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe (Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe (PC Tools) C:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exe (hxxp://www.PEEPLEware.com) C:\Program Files\RemoteX\RemoteXUser.exe (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe () C:\Program Files\DivX\DivX Update\DivXUpdate.exe (Cisco Systems, Inc.) C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Spotify Ltd) C:\Users\Samsung SA 11\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 6510 series\Bin\ScanToPCActivationApp.exe (TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (hxxp://www.PEEPLEware.com) C:\Program Files\RemoteX\remotex.exe (AnchorFree Inc.) C:\Program Files\Hotspot Shield\bin\HSSCP.exe (TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe (Microsoft Corporation) C:\Windows\System32\msiexec.exe (Dropbox, Inc.) C:\Users\Samsung SA 11\AppData\Roaming\Dropbox\bin\Dropbox.exe (Microsoft Corporation) C:\Windows\System32\sdclt.exe (Microsoft Corporation) C:\Windows\System32\conime.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe () C:\Program Files\OpenIt\Open It!\openit.exe () C:\Users\Samsung SA 11\Downloads\Defogger.exe (AnchorFree Inc.) C:\Program Files\Hotspot Shield\bin\af_proxy_cmd.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe (Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe (Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation) HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [6111232 2008-04-17] (Realtek Semiconductor) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1029416 2007-10-26] (Synaptics, Inc.) HKLM\...\Run: [RemoteControl] - C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [71216 2007-03-14] (Cyberlink Corp.) HKLM\...\Run: [LanguageShortcut] - C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [52256 2007-01-08] () HKLM\...\Run: [Samsung PanelMgr] - C:\Windows\Samsung\PanelMgr\SSMMgr.exe [524288 2008-08-11] () HKLM\...\Run: [3170 Scan2PC] - C:\Windows\twain_32\Samsung\CLX3170\Scan2Pc.exe [495616 2008-08-07] () HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup HKLM\...\Run: [NvMediaCenter] - RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit HKLM\...\Run: [ITSecMng] - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\ItSecMng.exe [75136 2007-09-28] ( TOSHIBA CORPORATION) HKLM\...\Run: [AdobeCS4ServiceManager] - C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated) HKLM\...\Run: [Adobe Acrobat Speed Launcher] - C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrobat_sl.exe [44128 2013-05-08] (Adobe Systems Incorporated) HKLM\...\Run: [Acrobat Assistant 8.0] - C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe [642664 2013-05-08] (Adobe Systems Inc.) HKLM\...\Run: [Adobe_ID0ENQBO] - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4Tray.exe [378224 2008-08-15] (Adobe Systems Incorporated) HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM\...\Run: [AppleSyncNotifier] - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-10-06] (Apple Inc.) HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM\...\Run: [HP Software Update] - C:\Program Files\HP\HP Software Update\hpwuschd2.exe [49208 2011-03-24] (Hewlett-Packard) HKLM\...\Run: [DivXMediaServer] - C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-09-11] (DivX, LLC) HKLM\...\Run: [SSDMonitor] - C:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exe [105120 2012-08-21] (PC Tools) HKLM\...\Run: [RemoteX] - C:\Program Files\RemoteX\RemoteXUser.exe [185344 2011-02-14] (hxxp://www.PEEPLEware.com) HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.) HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.) HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2014-01-03] (AVAST Software) HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM\...\Run: [DivXUpdate] - C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] () HKLM\...\Run: [BingDesktop] - C:\Program Files\Microsoft\BingDesktop\BingDesktop.exe [2258056 2013-09-22] (Microsoft Corp.) HKLM\...\Run: [20131121] - C:\Program Files\AVAST Software\Avast\Setup\emupdate\da0d85ba-d4b4-4362-bbf4-bdecea87cd2d.exe [180184 2013-11-24] (AVAST Software) HKLM\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [707984 2013-10-10] (Cisco Systems, Inc.) HKLM\...\Run: [mobilegeni daemon] - C:\Program Files\Mobogenie\DaemonProcess.exe HKLM\...\Runonce: [Del10717159] - cmd.exe /Q /D /c del "C:\Users\SAMSUN~1\AppData\Local\Temp\0.del" HKLM\...\Runonce: [Del10731246] - cmd.exe /Q /D /c del "C:\Users\SAMSUN~1\AppData\Local\Temp\0.del" HKCU\...\Run: [AdobeBridge] - [x] HKCU\...\Run: [Spotify Web Helper] - C:\Users\Samsung SA 11\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1140736 2013-10-12] (Spotify Ltd) HKCU\...\Run: [HP Photosmart 6510 series (NET)] - C:\Program Files\HP\HP Photosmart 6510 series\Bin\ScanToPCActivationApp.exe [1804648 2011-09-16] (Hewlett-Packard Co.) HKCU\...\Run: [NextLive] - C:\Windows\system32\rundll32.exe "C:\Users\Samsung SA 11\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l HKCU\...\Runonce: [Del10717159] - cmd.exe /Q /D /c del "C:\Users\SAMSUN~1\AppData\Local\Temp\0.del" HKCU\...\Runonce: [Del10731246] - cmd.exe /Q /D /c del "C:\Users\SAMSUN~1\AppData\Local\Temp\0.del" HKCU\...0c966feabec1\InprocServer32: [Default-shell32] ATTENTION! ====> ZeroAccess? MountPoints2: {5038b1d2-8589-11de-b144-001377a9d66d} - F:\LaunchU3.exe -a MountPoints2: {aa6003d8-a2ef-11de-b0cc-001377a9d66d} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL DXGDIALOG.EXE MountPoints2: {fec71164-90b6-11de-b5d3-001377a9d66d} - G:\LaunchU3.exe -a HKU\Administrator\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [ 2008-03-17] (Hewlett-Packard Company) HKU\Administrator\...\Run: [swg] - "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" HKU\Administrator\...\Run: [AdobeBridge] - [x] HKU\Administrator\...\Run: [SearchProtect] - C:\Users\Administrator\AppData\Roaming\SearchProtect\bin\cltmng.exe [ 2013-07-11] () HKU\Default\...\Run: [WindowsWelcomeCenter] - C:\Windows\System32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation) HKU\Default User\...\Run: [WindowsWelcomeCenter] - C:\Windows\System32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation) HKU\fbwuser\...\Run: [WindowsWelcomeCenter] - C:\Windows\System32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation) HKU\Gast\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [ 2008-03-17] (Hewlett-Packard Company) HKU\Gast\...\Run: [swg] - "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" HKU\Gast\...\Run: [AdobeBridge] - [x] HKU\peter\...\Run: [WindowsWelcomeCenter] - C:\Windows\System32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation) HKU\peter\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [ 2008-03-17] (Hewlett-Packard Company) AppInit_DLLs: [ ] () Startup: C:\Users\Samsung SA 11\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Samsung SA 11\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== ProxyEnable: Internet Explorer proxy is enabled. ProxyServer: http=127.0.0.1:8555;https=127.0.0.1:8555 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.gmx.net/ HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd SearchScopes: HKCU - {DE613B81-A80A-48AE-BDBE-1E4FD61FC02B} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000031&src=kw&q={searchTerms}&locale=de_US&apn_ptnrs=TV&apn_dtid=OSJ000YYUS&apn_uid=87C37C42-0945-4AE1-8537-6ADDCCEB72EE&apn_sauid=89BC2EF4-BD4E-48DF-9EBB-955AD16A1996 SearchScopes: HKCU - {F8EAB941-D69D-49FE-AD51-E42B5EBF556A} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3279453&CUI=UN42252538902162920&UM=2 BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll (Google Inc.) BHO: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File Toolbar: HKCU - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\Samsung SA 11\AppData\Roaming\Mozilla\Firefox\Profiles\c19kcti3.default-1389390471330 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll No File FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC) FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: Adobe Acrobat - C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101799.dll (Amazon.com, Inc.) FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Hotspot Shield Helper (Please allow this installation) - C:\Program Files\Mozilla Firefox\extensions\afurladvisor@anchorfree.com FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} FF Extension: Hotspot Shield Extension - C:\Program Files\Mozilla Firefox\browser\extensions\afproxy@anchorfree.com FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF HKLM\...\Firefox\Extensions: [{000a9d1c-beef-4f90-9363-039d445309b8}] - C:\Program Files\Google\Google Gears\Firefox\ FF Extension: Google Gears - C:\Program Files\Google\Google Gears\Firefox\ FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF FF HKLM\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files\Hewlett-Packard\SmartPrint\QPExtension FF Extension: SmartPrintButton - C:\Program Files\Hewlett-Packard\SmartPrint\QPExtension Chrome: ======= CHR HomePage: hxxp://www.google.com CHR RestoreOnStartup: "hxxp://www.google.com" CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\23.0.1271.97\PepperFlash\pepflashplayer.dll No File CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\23.0.1271.97\gcswf32.dll No File CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_271.dll No File CHR Plugin: (Remoting Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\23.0.1271.97\ppGoogleNaClPluginChrome.dll No File CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\23.0.1271.97\pdf.dll No File CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Java Deployment Toolkit 6.0.310.5) - C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll No File CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) CHR Plugin: (2007 Microsoft Office system) - C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll No File CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll No File CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) CHR Plugin: (DivX Plus Web Player) - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll No File CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () CHR Plugin: (Windows Presentation Foundation) - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) CHR Extension: (avast! WebRep) - C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1456_0 CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0 ========================== Services (Whitelisted) ================= S3 Adobe Version Cue CS4; C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [284016 2008-08-15] (Adobe Systems Incorporated) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-03] (AVAST Software) R2 bgsvcgen; C:\Windows\System32\bgsvcgen.exe [122512 2006-12-28] (B.H.A Corporation) R2 BingDesktopUpdate; C:\Program Files\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-09-22] (Microsoft Corp.) S2 gupdate1ca087358465a06; C:\Program Files\Google\Update\GoogleUpdate.exe [133104 2009-07-19] (Google Inc.) R2 hshld; C:\Program Files\Hotspot Shield\bin\cmw_srv.exe [906024 2013-11-27] (AnchorFree Inc.) S3 HssTrayService; C:\Program Files\Hotspot Shield\bin\HssTrayService.EXE [78512 2013-11-13] () R2 HssWd; C:\Program Files\Hotspot Shield\bin\hsswd.exe [555304 2013-11-27] () S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.0.285\McCHSvc.exe [234776 2012-09-05] (McAfee, Inc.) R2 PCToolsSSDMonitorSvc; C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe [794272 2012-08-21] (PC Tools) R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [272024 2006-12-19] () R2 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.) R2 vpnagent; C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe [558480 2013-10-10] (Cisco Systems, Inc.) S3 WLSetupSvc; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [266240 2007-10-25] (Microsoft Corporation) R2 __RemoteX__; C:\Program Files\RemoteX\RemoteX.exe [271360 2011-02-14] (hxxp://www.PEEPLEware.com) S2 McShield; C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe [x] S3 McSysmon; C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe [x] ==================== Drivers (Whitelisted) ==================== S3 acsint; C:\Windows\System32\DRIVERS\acsint.sys [40304 2013-10-10] (Cisco Systems, Inc.) S3 acsmux; C:\Windows\System32\DRIVERS\acsmux.sys [58736 2013-10-10] (Cisco Systems, Inc.) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-01-03] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr.sys [54832 2014-01-03] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49944 2013-11-13] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [775952 2014-01-03] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [410528 2014-01-03] (AVAST Software) R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [57672 2014-01-03] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [180248 2014-01-03] () S3 AVerAF35; C:\Windows\System32\Drivers\AVerAF35.sys [474880 2009-10-19] (AVerMedia TECHNOLOGIES, Inc.) R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [37664 2013-11-12] (AVG Technologies) R1 cdrbsdrv; C:\Windows\System32\Drivers\cdrbsdrv.sys [33408 2006-02-20] (B.H.A Corporation) S3 ECS_Loader_220; C:\Windows\System32\Drivers\ECS_Loader_220.sys [15616 2005-10-31] (WideView Technology Inc.) R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [39624 2013-11-13] (AnchorFree Inc.) R2 KMDFMEMIO; C:\Windows\System32\DRIVERS\kmdfmemio.sys [13312 2007-05-23] (SAMSUNG ELECTRONICS CO., LTD.) S3 taphss; C:\Windows\System32\DRIVERS\taphss.sys [33512 2012-08-01] (AnchorFree Inc) R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [37064 2013-04-24] (Anchorfree Inc.) R3 VMC302; C:\Windows\System32\Drivers\VMC302.sys [242560 2008-04-05] (Vimicro Corporation) S3 w800bus; C:\Windows\System32\DRIVERS\w800bus.sys [60768 2005-06-13] (MCCI) S3 IpInIp; system32\DRIVERS\ipinip.sys [x] S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x] S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-10 22:59 - 2014-01-10 22:59 - 00026518 _____ C:\Users\Samsung SA 11\Downloads\FRST.txt 2014-01-10 22:59 - 2014-01-10 22:59 - 00000000 ____D C:\FRST 2014-01-10 22:57 - 2014-01-10 22:57 - 01066141 _____ (Farbar) C:\Users\Samsung SA 11\Downloads\FRST.exe 2014-01-10 22:55 - 2014-01-10 22:55 - 01932166 _____ (Farbar) C:\Users\Samsung SA 11\Downloads\FRST64.exe 2014-01-10 22:54 - 2014-01-10 22:55 - 00000488 _____ C:\Users\Samsung SA 11\Downloads\defogger_disable.log 2014-01-10 22:54 - 2014-01-10 22:54 - 00000000 _____ C:\Users\Samsung SA 11\defogger_reenable 2014-01-10 22:52 - 2014-01-10 22:52 - 00000000 ____D C:\Users\Samsung SA 11\Documents\Optimizer Pro 2014-01-10 22:51 - 2014-01-10 22:51 - 00050477 _____ C:\Users\Samsung SA 11\Downloads\Defogger.exe 2014-01-10 22:48 - 2014-01-10 22:51 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Local\Mobogenie 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 ____D C:\Users\Samsung SA 11\Documents\Mobogenie 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\newnext.me 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\0D0S1L2Z1P1B 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Local\genienext 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Local\cache 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 ____D C:\Users\Samsung SA 11\.android 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 _____ C:\Users\Samsung SA 11\daemonprocess.txt 2014-01-10 22:47 - 2014-01-10 22:51 - 00000000 ____D C:\Program Files\Mobogenie 2014-01-10 22:46 - 2014-01-10 22:52 - 00000000 ____D C:\Program Files\Optimizer Pro 2014-01-10 22:46 - 2014-01-10 22:46 - 00000314 _____ C:\Windows\Tasks\Digital Sites.job 2014-01-10 22:46 - 2014-01-10 22:46 - 00000310 _____ C:\Windows\Tasks\FoxTab.job 2014-01-10 22:46 - 2014-01-10 22:46 - 00000102 _____ C:\Users\Samsung SA 11\AppData\Roaming\WB.CFG 2014-01-10 22:46 - 2014-01-10 22:46 - 00000005 _____ C:\Users\Samsung SA 11\AppData\Roaming\WBPU-TTL.DAT 2014-01-10 22:46 - 2014-01-10 22:46 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\FoxTab 2014-01-10 22:46 - 2014-01-10 22:46 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\DigitalSites 2014-01-10 22:46 - 2014-01-10 22:46 - 00000000 ____D C:\Program Files\OpenIt 2014-01-10 22:46 - 2014-01-10 22:46 - 00000000 ____D C:\Program Files\Foxtab 2014-01-10 22:44 - 2014-01-10 22:44 - 00668936 _____ ( ) C:\Users\Samsung SA 11\Downloads\ZipExtractorSetup(1).exe 2014-01-10 22:44 - 2014-01-10 22:44 - 00377856 _____ C:\Users\Samsung SA 11\Downloads\jt3jpstr.exe 2014-01-10 22:43 - 2014-01-10 22:43 - 00668936 _____ ( ) C:\Users\Samsung SA 11\Downloads\ZipExtractorSetup.exe 2014-01-09 13:31 - 2014-01-09 13:31 - 04223268 _____ C:\ProgramData\SamPCFax000009500000 2014-01-03 18:56 - 2014-01-03 18:56 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AviSynth 2.5 2014-01-03 18:56 - 2014-01-03 18:56 - 00000000 ____D C:\Program Files\XviD 2014-01-03 18:56 - 2014-01-03 18:56 - 00000000 ____D C:\Program Files\AviSynth 2.5 2014-01-03 18:55 - 2014-01-09 09:05 - 00000000 ____D C:\Program Files\Gabest 2014-01-03 18:48 - 2014-01-03 19:18 - 00000551 _____ C:\Users\Samsung SA 11\AppData\Roaming\AutoGK.ini 2014-01-03 18:46 - 2014-01-03 19:19 - 00000000 ____D C:\Program Files\AutoGK 2014-01-03 18:44 - 2014-01-03 18:45 - 12341641 _____ C:\Users\Samsung SA 11\Downloads\AutoGordianKnot.2.55.Setup.exe 2013-12-20 15:31 - 2013-12-20 15:31 - 23867560 _____ (Mozilla) C:\Users\Samsung SA 11\Downloads\Firefox Setup 26.0.exe 2013-12-20 13:34 - 2013-12-20 13:35 - 00283096 _____ (Mozilla) C:\Users\Samsung SA 11\Downloads\Firefox Setup Stub 26.0.exe 2013-12-16 22:46 - 2013-12-16 22:46 - 00002073 _____ C:\Users\Public\Desktop\Google Earth.lnk 2013-12-13 09:13 - 2013-11-15 00:13 - 12344320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-13 09:13 - 2013-11-14 23:50 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-13 09:13 - 2013-11-14 23:50 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-13 09:13 - 2013-11-14 23:43 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-13 09:13 - 2013-11-14 23:42 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-13 09:13 - 2013-11-14 23:42 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-13 09:13 - 2013-11-14 23:41 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-13 09:13 - 2013-11-14 23:40 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-13 09:13 - 2013-11-14 23:38 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-13 09:13 - 2013-11-14 23:38 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-13 09:13 - 2013-11-14 23:38 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-13 09:13 - 2013-11-14 23:37 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-13 09:13 - 2013-11-14 23:36 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-13 09:13 - 2013-11-14 23:36 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-13 09:13 - 2013-11-14 23:35 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-13 09:13 - 2013-11-14 23:32 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-12 09:30 - 2013-10-30 03:12 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll 2013-12-12 09:30 - 2013-10-30 02:43 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2013-12-12 09:30 - 2013-10-30 01:43 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2013-12-12 09:30 - 2013-10-30 01:35 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-12-12 09:30 - 2013-10-22 08:19 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-12-12 09:30 - 2013-10-11 03:08 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2013-12-12 09:30 - 2013-10-11 03:08 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2013-12-12 09:30 - 2013-10-11 03:08 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wshcon.dll 2013-12-12 09:30 - 2013-10-11 01:35 - 00155648 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2013-12-12 09:30 - 2013-10-11 01:35 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2013-12-11 20:03 - 2013-11-13 11:47 - 00039624 _____ (AnchorFree Inc.) C:\Windows\system32\Drivers\hssdrv6.sys ==================== One Month Modified Files and Folders ======= 2014-01-10 22:59 - 2014-01-10 22:59 - 00026518 _____ C:\Users\Samsung SA 11\Downloads\FRST.txt 2014-01-10 22:59 - 2014-01-10 22:59 - 00000000 ____D C:\FRST 2014-01-10 22:59 - 2006-11-02 12:18 - 00000000 ___RD C:\Users\Public 2014-01-10 22:57 - 2014-01-10 22:57 - 01066141 _____ (Farbar) C:\Users\Samsung SA 11\Downloads\FRST.exe 2014-01-10 22:55 - 2014-01-10 22:55 - 01932166 _____ (Farbar) C:\Users\Samsung SA 11\Downloads\FRST64.exe 2014-01-10 22:55 - 2014-01-10 22:54 - 00000488 _____ C:\Users\Samsung SA 11\Downloads\defogger_disable.log 2014-01-10 22:54 - 2014-01-10 22:54 - 00000000 _____ C:\Users\Samsung SA 11\defogger_reenable 2014-01-10 22:54 - 2008-11-03 16:17 - 00000000 ____D C:\Users\Samsung SA 11 2014-01-10 22:52 - 2014-01-10 22:52 - 00000000 ____D C:\Users\Samsung SA 11\Documents\Optimizer Pro 2014-01-10 22:52 - 2014-01-10 22:46 - 00000000 ____D C:\Program Files\Optimizer Pro 2014-01-10 22:51 - 2014-01-10 22:51 - 00050477 _____ C:\Users\Samsung SA 11\Downloads\Defogger.exe 2014-01-10 22:51 - 2014-01-10 22:48 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Local\Mobogenie 2014-01-10 22:51 - 2014-01-10 22:47 - 00000000 ____D C:\Program Files\Mobogenie 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 ____D C:\Users\Samsung SA 11\Documents\Mobogenie 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\newnext.me 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\0D0S1L2Z1P1B 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Local\genienext 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Local\cache 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 ____D C:\Users\Samsung SA 11\.android 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 _____ C:\Users\Samsung SA 11\daemonprocess.txt 2014-01-10 22:46 - 2014-01-10 22:46 - 00000314 _____ C:\Windows\Tasks\Digital Sites.job 2014-01-10 22:46 - 2014-01-10 22:46 - 00000310 _____ C:\Windows\Tasks\FoxTab.job 2014-01-10 22:46 - 2014-01-10 22:46 - 00000102 _____ C:\Users\Samsung SA 11\AppData\Roaming\WB.CFG 2014-01-10 22:46 - 2014-01-10 22:46 - 00000005 _____ C:\Users\Samsung SA 11\AppData\Roaming\WBPU-TTL.DAT 2014-01-10 22:46 - 2014-01-10 22:46 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\FoxTab 2014-01-10 22:46 - 2014-01-10 22:46 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\DigitalSites 2014-01-10 22:46 - 2014-01-10 22:46 - 00000000 ____D C:\Program Files\OpenIt 2014-01-10 22:46 - 2014-01-10 22:46 - 00000000 ____D C:\Program Files\Foxtab 2014-01-10 22:44 - 2014-01-10 22:44 - 00668936 _____ ( ) C:\Users\Samsung SA 11\Downloads\ZipExtractorSetup(1).exe 2014-01-10 22:44 - 2014-01-10 22:44 - 00377856 _____ C:\Users\Samsung SA 11\Downloads\jt3jpstr.exe 2014-01-10 22:43 - 2014-01-10 22:43 - 00668936 _____ ( ) C:\Users\Samsung SA 11\Downloads\ZipExtractorSetup.exe 2014-01-10 22:43 - 2009-07-19 14:29 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-01-10 22:28 - 2012-04-05 07:54 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-01-10 22:28 - 2008-09-15 09:38 - 01972939 _____ C:\Windows\WindowsUpdate.log 2014-01-10 21:48 - 2006-11-02 13:47 - 00004784 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-10 21:48 - 2006-11-02 13:47 - 00004784 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-10 20:27 - 2012-09-14 18:28 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\Dropbox 2014-01-10 20:00 - 2009-04-24 15:42 - 00000416 ____H C:\Windows\Tasks\SupBackGroundTask.job 2014-01-10 19:53 - 2013-08-09 18:53 - 00000943 _____ C:\Users\Samsung SA 11\Desktop\Dropbox.lnk 2014-01-10 19:53 - 2013-08-09 18:49 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-01-10 19:50 - 2009-02-14 22:28 - 00154873 _____ C:\ProgramData\nvModes.001 2014-01-10 19:49 - 2013-04-14 09:59 - 00000000 ____D C:\Program Files\RemoteX 2014-01-10 19:48 - 2012-12-18 16:31 - 00000288 _____ C:\Windows\Tasks\RMAutoUpdate.job 2014-01-10 19:48 - 2009-07-19 14:29 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-01-10 19:48 - 2008-11-03 16:17 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite 2014-01-10 19:48 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-10 09:31 - 2008-07-09 07:09 - 00000012 _____ C:\Windows\bthservsdp.dat 2014-01-10 09:31 - 2006-11-02 14:01 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2014-01-09 18:59 - 2012-12-18 16:31 - 00000288 _____ C:\Windows\Tasks\RMSchedule.job 2014-01-09 16:17 - 2013-10-15 12:41 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\vlc 2014-01-09 13:31 - 2014-01-09 13:31 - 04223268 _____ C:\ProgramData\SamPCFax000009500000 2014-01-09 13:31 - 2009-01-10 19:23 - 00010863 _____ C:\Users\Samsung SA 11\AppData\Roaming\SmarThruOptions.xml 2014-01-09 12:22 - 2013-01-17 08:24 - 00112226 _____ C:\Windows\PFRO.log 2014-01-09 12:22 - 2008-12-25 12:57 - 00000000 ____D C:\Program Files\Google 2014-01-09 09:08 - 2011-11-20 11:09 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrettspielWelt 2014-01-09 09:06 - 2009-10-31 14:31 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Local\Deployment 2014-01-09 09:05 - 2014-01-03 18:55 - 00000000 ____D C:\Program Files\Gabest 2014-01-09 09:02 - 2008-12-25 13:07 - 00000767 _____ C:\Users\Samsung SA 11\Documents\Meine freigegebenen Ordner.lnk 2014-01-09 09:01 - 2008-12-25 13:01 - 00000000 ____D C:\Program Files\Windows Live 2014-01-09 08:59 - 2012-10-10 12:08 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Local\Conduit 2014-01-09 08:59 - 2008-12-25 12:57 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Local\Google 2014-01-09 08:59 - 2008-12-25 12:57 - 00000000 ____D C:\ProgramData\Google 2014-01-09 08:58 - 2009-09-28 17:49 - 00000000 ____D C:\Program Files\Electronic Arts 2014-01-05 12:54 - 2013-03-09 12:49 - 00004994 _____ C:\Windows\setupact.log 2014-01-03 19:19 - 2014-01-03 18:46 - 00000000 ____D C:\Program Files\AutoGK 2014-01-03 19:18 - 2014-01-03 18:48 - 00000551 _____ C:\Users\Samsung SA 11\AppData\Roaming\AutoGK.ini 2014-01-03 19:02 - 2013-04-09 21:57 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\DVDVideoSoft 2014-01-03 18:56 - 2014-01-03 18:56 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AviSynth 2.5 2014-01-03 18:56 - 2014-01-03 18:56 - 00000000 ____D C:\Program Files\XviD 2014-01-03 18:56 - 2014-01-03 18:56 - 00000000 ____D C:\Program Files\AviSynth 2.5 2014-01-03 18:45 - 2014-01-03 18:44 - 12341641 _____ C:\Users\Samsung SA 11\Downloads\AutoGordianKnot.2.55.Setup.exe 2014-01-03 18:20 - 2013-11-13 22:47 - 00001873 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2014-01-03 18:19 - 2013-11-13 22:34 - 00180248 _____ C:\Windows\system32\Drivers\aswVmm.sys 2014-01-03 18:19 - 2011-05-04 13:06 - 00775952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2014-01-03 18:19 - 2011-05-04 13:06 - 00410528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2014-01-03 18:19 - 2011-05-04 13:06 - 00067824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-01-03 18:19 - 2011-05-04 13:06 - 00057672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys 2014-01-03 18:19 - 2011-05-04 13:06 - 00054832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr.sys 2014-01-03 18:19 - 2011-05-04 13:05 - 00270240 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-01-03 18:19 - 2011-05-04 13:05 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2013-12-21 21:30 - 2006-11-02 11:33 - 01582492 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-21 20:26 - 2012-05-03 19:48 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2013-12-20 15:32 - 2013-11-17 20:11 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-12-20 15:32 - 2010-03-28 13:31 - 00000846 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-12-20 15:31 - 2013-12-20 15:31 - 23867560 _____ (Mozilla) C:\Users\Samsung SA 11\Downloads\Firefox Setup 26.0.exe 2013-12-20 13:35 - 2013-12-20 13:34 - 00283096 _____ (Mozilla) C:\Users\Samsung SA 11\Downloads\Firefox Setup Stub 26.0.exe 2013-12-16 23:31 - 2013-04-09 21:58 - 00000000 ____D C:\Program Files\SearchProtect 2013-12-16 22:46 - 2013-12-16 22:46 - 00002073 _____ C:\Users\Public\Desktop\Google Earth.lnk 2013-12-16 12:40 - 2012-11-26 13:09 - 00000906 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-12-16 12:40 - 2012-11-26 13:09 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware 2013-12-13 09:45 - 2006-11-02 13:47 - 02327496 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-13 09:21 - 2008-07-08 15:40 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-12-13 09:19 - 2013-08-15 14:43 - 00000000 ____D C:\Windows\system32\MRT 2013-12-13 09:15 - 2006-11-02 11:24 - 88123800 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe 2013-12-11 20:28 - 2012-04-05 07:54 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2013-12-11 20:28 - 2011-06-01 12:13 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2013-12-11 20:03 - 2013-07-13 23:31 - 00000913 _____ C:\Users\Public\Desktop\Hotspot Shield.lnk 2013-12-11 20:03 - 2012-10-10 12:04 - 00000000 ____D C:\Program Files\Hotspot Shield 2013-12-11 20:02 - 2013-01-14 17:43 - 00006271 _____ C:\Windows\certutil.log ZeroAccess: C:\Users\Samsung SA 11\AppData\Local\{3819f8a5-bd1b-a330-301d-fda6677fd30b} C:\Users\Samsung SA 11\AppData\Local\{3819f8a5-bd1b-a330-301d-fda6677fd30b}\@ C:\Users\Samsung SA 11\AppData\Local\{3819f8a5-bd1b-a330-301d-fda6677fd30b}\U\00000001.@ Some content of TEMP: ==================== C:\Users\Samsung SA 11\AppData\Local\Temp\APNSetup.exe C:\Users\Samsung SA 11\AppData\Local\Temp\DivXSetup.exe C:\Users\Samsung SA 11\AppData\Local\Temp\jre-7u13-windows-i586-iftw.exe C:\Users\Samsung SA 11\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe C:\Users\Samsung SA 11\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe C:\Users\Samsung SA 11\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe C:\Users\Samsung SA 11\AppData\Local\Temp\Last.fm-2.1.30.exe C:\Users\Samsung SA 11\AppData\Local\Temp\oi_{FC126A76-E39E-413E-A2CD-64982E96CD99}.exe C:\Users\Samsung SA 11\AppData\Local\Temp\SkypeSetup.exe C:\Users\Samsung SA 11\AppData\Local\Temp\tbDVD0.dll C:\Users\Samsung SA 11\AppData\Local\Temp\tbHot0.dll C:\Users\Samsung SA 11\AppData\Local\Temp\UNINSTALL.EXE C:\Users\Samsung SA 11\AppData\Local\Temp\vlc-2.1.2-win32.exe C:\Users\Samsung SA 11\AppData\Local\Temp\WZCPlugin_VISTA.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit Additional scan result of Farbar Recovery Scan Tool (x86) Version: 10-01-2014 Ran by Samsung SA 11 at 2014-01-10 23:00:44 Running from C:\Users\Samsung SA 11\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== Update for Microsoft Office 2007 (KB2508958) (Version: - Microsoft) Acrobat.com (Version: 0.0.0 - Adobe Systems Incorporated) Hidden Acrobat.com (Version: 1.7.186 - Adobe Systems Incorporated) Adobe Acrobat 9 Pro - English, Français, Deutsch (Version: 9.5.5 - Adobe Systems) Hidden Adobe Acrobat 9.5.5 - CPSID_83708 (Version: - Adobe Systems Incorporated) Adobe AIR (Version: 3.9.0.1210 - Adobe Systems Incorporated) Adobe AIR (Version: 3.9.0.1210 - Adobe Systems Incorporated) Hidden Adobe Anchor Service CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Asset Services CS4 (Version: 4 - Adobe Systems Incorporated) Hidden Adobe Bridge CS4 (Version: 3 - Adobe Systems Incorporated) Hidden Adobe CMaps CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Color - Photoshop Specific CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Color EU Recommended Settings CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Color JA Extra Settings CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Color NA Extra Settings CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Color Video Profiles CS CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Creative Suite 4 Design Standard (Version: 4.0 - Adobe Systems Incorporated) Adobe Creative Suite 4 Design Standard (Version: 4.0 - Adobe Systems Incorporated) Hidden Adobe CSI CS4 (Version: 1 - Adobe Systems Incorporated) Hidden Adobe Default Language CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Device Central CS4 (Version: 2 - Adobe Systems Incorporated) Hidden Adobe Drive CS4 (Version: 1 - Adobe Systems Incorporated) Hidden Adobe ExtendScript Toolkit CS4 (Version: 3.0.0 - Adobe Systems Incorporated) Hidden Adobe Extension Manager CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Flash Player 11 ActiveX (Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Flash Player 11 Plugin (Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Fonts All (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Illustrator CS4 (Version: 14.0 - Adobe Systems Incorporated) Hidden Adobe InDesign CS4 (Version: 6.0 - Adobe Systems Incorporated) Hidden Adobe InDesign CS4 Application Feature Set Files (Roman) (Version: 6.0 - Adobe Systems Incorporated) Hidden Adobe InDesign CS4 Common Base Files (Version: 6.0 - Adobe Systems Incorporated) Hidden Adobe InDesign CS4 Icon Handler (Version: 6.0 - Adobe Systems Incorporated) Hidden Adobe Linguistics CS4 (Version: 4.0.0 - Adobe Systems Incorporated) Hidden Adobe Media Player (Version: 0.0.0 - Adobe Systems Incorporated) Hidden Adobe Media Player (Version: 1.1 - Adobe Systems Incorporated) Adobe Output Module (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe PDF Library Files CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden Adobe Photoshop CS4 (Version: 11.0 - Adobe Systems Incorporated) Hidden Adobe Photoshop CS4 Support (Version: 11.0 - Adobe Systems Incorporated) Hidden Adobe Reader X (10.1.8) - Deutsch (Version: 10.1.8 - Adobe Systems Incorporated) Adobe Search for Help (Version: 1.0 - Adobe Systems Incorporated) Hidden Adobe Service Manager Extension (Version: 1.0 - Adobe Systems Incorporated) Hidden Adobe Setup (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe SGM CS4 (Version: 3.0 - Adobe Systems Incorporated) Hidden Adobe SING CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Type Support CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden Adobe Update Manager CS4 (Version: 6.0.0 - Adobe Systems Incorporated) Hidden Adobe Version Cue CS4 Server (Version: 4.0 - Adobe Systems Incorporated) Hidden Adobe WinSoft Linguistics Plugin (Version: 1.1 - Adobe Systems Incorporated) Hidden Adobe XMP Panels CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden AdobeColorCommonSetCMYK (Version: 2.0 - Adobe Systems Incorporated) Hidden AdobeColorCommonSetRGB (Version: 2.0 - Adobe Systems Incorporated) Hidden Agere Systems HDA Modem (Version: - Agere Systems) Amazon MP3-Downloader 1.0.17 (Version: 1.0.17 - Amazon Services LLC) Apple Application Support (Version: 2.3.6 - Apple Inc.) Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.) Apple Software Update (Version: 2.1.3.127 - Apple Inc.) Atheros WLAN Client (Version: 1.00.000 - ) avast! Free Antivirus (Version: 9.0.2011 - Avast Software) AviSynth 2.5 (Version: - ) Bing-Desktop (Version: 1.3.322.0 - Microsoft Corporation) Bluetooth Stack for Windows by Toshiba (Version: v6.00.05 - TOSHIBA CORPORATION) Bonjour (Version: 3.0.0.10 - Apple Inc.) CCleaner (Version: 3.26 - Piriform) Cisco AnyConnect Secure Mobility Client (Version: 3.1.04072 - Cisco Systems, Inc.) Cisco AnyConnect Secure Mobility Client (Version: 3.1.04072 - Cisco Systems, Inc.) Hidden Connect (Version: 1.0.0.1 - Adobe Systems Incorporated) Hidden CyberLink DVD Suite (Version: 5.0.2403 - CyberLink Corp.) CyberLink Power2Go (Version: 5.0.3825 - CyberLink Corp.) Die Sims 2 (Version: - ) Die Sims 2: Nightlife (Version: - ) Die Sims 2: Open For Business (Version: - ) Die Sims 2: Wilde Campus-Jahre (Version: - ) Die Sims™ 2 Apartment-Leben (Version: - Electronic Arts) Die Sims™ 2 Gute Reise (Version: - Electronic Arts) Die Sims™ 2 Haustiere (Version: - ) Die Sims™ 2 Vier Jahreszeiten (Version: - ) Die Sims™ 3 (Version: 1.50.56 - Electronic Arts) Die*Sims*Mittelalter (Version: 2.0.113 - Electronic Arts) DivX Converter (Version: 7.1.0 - DivX, Inc.) DivX Plus DirectShow Filters (Version: - DivX, Inc.) DivX Version Checker (Version: 7.1.0.2 - DivX, Inc.) DivX-Setup (Version: 2.6.1.87 - DivX, LLC) dm-Fotowelt (Version: 5.0.4 - CEWE COLOR AG u Co. OHG) Dropbox (Version: 2.4.11 - Dropbox, Inc.) Easy Battery Manager (Version: 3.2.1.7 - ) Easy Display Manager (Version: 2.0.0.0 - Samsung) Easy Network Manager 3.0 (Version: 3.0.0.0 - Ihr Firmenname) Easy Network Manager 3.0 (Version: 3.0.0.0 - Ihr Firmenname) Hidden Easy SpeedUp Manager (Version: 2.0.1.0 - ) Firebird/InterBase(r) ODBC driver 2.0 (Version: 2.0 - Firebird Project) Foxtab (Version: - FoxTab) <==== ATTENTION Free YouTube to MP3 Converter version 3.12.1.320 (Version: 3.12.1.320 - DVDVideoSoft Ltd.) Google Earth (Version: 7.1.2.2041 - Google) Google Gears (Version: 0.5.3600 - Google) Google Update Helper (Version: 1.3.22.3 - Google Inc.) Hidden GPL Ghostscript 8.64 (Version: - ) Hotspot Shield 3.20 (Version: 3.20 - AnchorFree) HP Photo Creations (Version: 1.0.0.3781 - HP Photo Creations Powered by RocketLife) HP Photosmart 6510 series - Grundlegende Software für das Gerät (Version: 25.0.621.0 - Hewlett-Packard Co.) HP Photosmart 6510 series Hilfe (Version: 140.0.2.2 - Hewlett Packard) HP Photosmart Plus B210 series - Grundlegende Software für das Gerät (Version: 22.50.231.0 - Hewlett-Packard Co.) HP Photosmart Plus B210 series Hilfe (Version: 140.0.54.54 - Hewlett Packard) HP Update (Version: 5.003.000.004 - Hewlett-Packard) iCloud (Version: 2.1.2.8 - Apple Inc.) imagine digital freedom - Samsung (Version: 1.0.2.0 - Samsung Electronics Co., LTD) Intel PROSet Wireless (Version: - ) Hidden Intel(R) PROSet/Wireless WiFi-Software (Version: 12.00.2000 - Intel(R) Corporation) Intel® Matrix Storage Manager (Version: - Intel Corporation) InterVideo FilterSDK for Panasonic (Version: - InterVideo Inc.) iTunes (Version: 11.1.3.8 - Apple Inc.) IZArc 3.81 (Version: 3.81 Build 1550 - Ivan Zahariev) Java 7 Update 45 (Version: 7.0.450 - Oracle) Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden Java(TM) 6 Update 37 (Version: 6.0.370 - Oracle) K-Lite Mega Codec Pack 9.1.0 (Version: 9.1.0 - ) kuler (Version: 2.0 - Adobe Systems Incorporated) Hidden LabelPrint (Version: .2406 - CyberLink Corp.) LightScribe System Software 1.12.37.1 (Version: 1.12.37.1 - LightScribe) Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300 - Malwarebytes Corporation) McAfee Security Scan Plus (Version: 3.0.285.6 - McAfee, Inc.) Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (Version: - Microsoft Corporation) Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729 - Microsoft Corporation) Hidden Microsoft .NET Framework 3.5 SP1 (Version: - Microsoft Corporation) Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft Office 2003 Web Components (Version: 11.0.8003.0 - Microsoft Corporation) Microsoft Office 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office File Validation Add-In (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1 - Microsoft Corporation) Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Professional Plus 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Professional Plus 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Small Business Connectivity Components (Version: 2.0.7024.0 - Microsoft Corporation) Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft PhotoDraw 2000 V2 (Version: 2.00.00.1429 - Microsoft Corporation) Microsoft PowerPoint Viewer (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft SOAP Toolkit 2.0 SP2 (Version: 623.1 - Microsoft Corporation) Microsoft SQL Server Native Client (Version: 9.00.4035.00 - Microsoft Corporation) Microsoft SQL Server VSS Writer (Version: 9.00.4035.00 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (Version: 10.0.30319 - Microsoft Corporation) Microsoft WSE 3.0 Runtime (Version: 3.0.5305.0 - Microsoft Corp.) MobileMe Control Panel (Version: 3.1.8.0 - Apple Inc.) MotionSD STUDIO 1.3E (Version: - Matsushita Electric Industrial Co., Ltd.) Move Networks Media Player for Internet Explorer (Version: - ) Mozilla Firefox 26.0 (x86 de) (Version: 26.0 - Mozilla) Mozilla Maintenance Service (Version: 26.0 - Mozilla) MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0 - Microsoft Corporation) Norton Security Scan (Version: 3.7.2.5 - Symantec Corporation) NVIDIA Drivers (Version: - ) NVIDIA HD-Audiotreiber 1.3.18.0 (Version: 1.3.18.0 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.109.718 - NVIDIA Corporation) Hidden OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0 - Microsoft Corporation) Hidden PDF Settings CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden Photoshop Camera Raw (Version: 5.0 - Adobe Systems Incorporated) Hidden Play AVStation (Version: 4.1.20.50 - Ihr Firmenname) Play AVStation (Version: 4.1.20.50 - Ihr Firmenname) Hidden PlayCamera (Version: 1.0.1.7 - ) PowerDirector (Version: 5.0.3927 - CyberLink Corp.) PowerDVD (Version: 7.0.3118.0 - CyberLink Corp.) PowerProducer (Version: 085120(3.7)_Vista_SSPC - CyberLink Corp.) QuickTime (Version: 7.74.80.86 - Apple Inc.) Readiris Pro 10 (Version: - ) Realtek High Definition Audio Driver (Version: 6.0.1.5605 - Realtek Semiconductor Corp.) RemoteX Server (Version: 2.8.2 - PEEPLEware) Revo Uninstaller 1.94 (Version: 1.94 - VS Revo Group) Safari (Version: 5.34.57.2 - Apple Inc.) Samsung CLX-3170 Series (Version: - Samsung Electronics CO.,LTD) Samsung Magic Doctor (Version: 5.00 - Samsung Electronics Co., LTD) Samsung Recovery Solution III (Version: 3.0.0.5 - Samsung) Samsung Update Plus (Version: 2.0 - Samsung Electronics Co., LTD) Samsung Update Plus (Version: 2.0 - Samsung Electronics Co., LTD) Hidden SecureW2 EAP Suite 1.1.3 for Windows (Version: - ) Skype Click to Call (Version: 6.3.11079 - Skype Technologies S.A.) Skype™ 6.5 (Version: 6.5.158 - Skype Technologies S.A.) SmarThru 4 (Version: - ) SmarThru PC Fax (Version: - ) Spotify (Version: 0.9.4.185.g7545a404 - Spotify AB) Studie zur Verbesserung von HP Photosmart 6510 series Produkten (Version: 25.0.621.0 - Hewlett-Packard Co.) Studie zur Verbesserung von HP Photosmart Plus B210 series Produkten (Version: 22.50.231.0 - Hewlett-Packard Co.) Suite Shared Configuration CS4 (Version: 1.0 - Adobe Systems Incorporated) Hidden Synaptics Pointing Device Driver (Version: 10.1.2.0 - Synaptics) Uniblue DriverScanner (Version: 4.0.3.4 - Uniblue Systems Ltd) Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch) (Version: 9.00.4035.00 - Microsoft Corporation) Update for 2007 Microsoft Office System (KB967642) (Version: - Microsoft) Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (Version: 3 - Microsoft Corporation) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2850085) 32-Bit Edition (Version: - Microsoft) Update for Zip Extractor (Version: - Update for Zip Extractor) Update für Microsoft Office Excel 2007 Help (KB963678) (Version: - Microsoft) Update für Microsoft Office Outlook 2007 Help (KB963677) (Version: - Microsoft) Update für Microsoft Office Powerpoint 2007 Help (KB963669) (Version: - Microsoft) Update für Microsoft Office Word 2007 Help (KB963665) (Version: - Microsoft) User Guide (Version: 1.0 - ) VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden Vimicro UVC Camera (Version: 1.00.0000 - Vimicro Corporation) Visual Studio 2012 x86 Redistributables (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) VLC media player 2.1.0 (Version: 2.1.0 - VideoLAN) VRWriter4 (Version: 4.3 - Matsushita Electric Industrial Co., Ltd.) Hidden WIDCOMM Bluetooth Software 6.0.1.6300 (Version: 6.0.1.6300 - WIDCOMM, Inc.) Windows Live Anmelde-Assistent (Version: 5.000.818.6 - Microsoft Corporation) Windows Live installer (Version: 12.0.1471.1025 - Microsoft Corporation) XviD MPEG4 Video Codec (remove only) (Version: - ) Zip Extractor Packages (Version: - ) ==================== Restore Points ========================= Oops! Peinlich, peinlich. Das ist der Log von Malwarebytes von letzter Nacht. Nach Entfernung und Neustart gehen die besagten Seiten aber immer noch nicht. Jetzt taucht aber statt der Yahoo Seite nur noch "503 Service not available" auf. Bei anderen funktioniert es aber. Werde bis sich jemand meiner annimmt, mit iObit-Uninstaller, AdwCleanerJunkware Removal Tool, ESET Online Scanner weiter machen und hoffe, das dabei was raus kommt. Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2014.01.10.09 Windows Vista Service Pack 2 x86 NTFS Internet Explorer 9.0.8112.16421 Samsung SA 11 :: SAMSUNGSA11-PC [Administrator] 11.01.2014 00:15:46 mbam-log-2014-01-11 (00-15-46).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 614846 Laufzeit: 3 Stunde(n), 19 Minute(n), 30 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 1 C:\Users\Samsung SA 11\AppData\Roaming\newnext.me\nengine.dll (PUP.Optional.NextLive.A) -> Löschen bei Neustart. Infizierte Registrierungsschlüssel: 7 HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C} (PUP.Optional.OptimzerPro.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1} (PUP.Optional.Conduit) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Digital Sites (PUP.Optional.Updater) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\Conduit\FF (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\Conduit\ValueApps (PUP.Optional.ValueApps.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\InstallCore\1I1T1Q1S (PUP.Optional.InstallCore.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 2 HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|NextLive (PUP.Optional.NextLive.A) -> Daten: C:\Windows\system32\rundll32.exe "C:\Users\Samsung SA 11\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Daten: 0H1L1J1L1S1R1N -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 11 C:\Users\Samsung SA 11\AppData\Roaming\DigitalSites\UpdateProc (PUP.Optional.Updater) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\Documents\Optimizer Pro (PUP.Optional.OptimizerPro.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Temp\ct3279453 (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Temp\ct3279453\xpi (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Temp\ct3279453\xpi\defaults (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Temp\ct3279453\xpi\defaults\preferences (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Temp\ct3288691 (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Temp\ct3297265 (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Temp\ct3297861 (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Roaming\newnext.me (PUP.Optional.NextLive.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Roaming\newnext.me\cache (PUP.Optional.NextLive.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateien: 12 C:\Program Files\Conduit\Community Alerts\Alert.dll (PUP.Optional.Conduit) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files\Optimizer Pro\OptimizerPro.exe (PUP.Optional.OptimizerPro) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Temp\is1590112554\10677118_stp\OptimizerPro.exe (PUP.Optional.OptimizerPro.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Roaming\DigitalSites\UpdateProc\UpdateTask.exe (PUP.Optional.Updater) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Roaming\DigitalSites\UpdateProc\config.dat (PUP.Optional.Updater) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Roaming\DigitalSites\UpdateProc\prod.dat (PUP.Optional.Updater) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Roaming\DigitalSites\UpdateProc\STTL.DAT (PUP.Optional.Updater) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Roaming\DigitalSites\UpdateProc\TTL.DAT (PUP.Optional.Updater) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\Documents\Optimizer Pro\CookiesException.txt (PUP.Optional.OptimizerPro.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Roaming\newnext.me\nengine.dll (PUP.Optional.NextLive.A) -> Löschen bei Neustart. C:\Users\Samsung SA 11\AppData\Roaming\newnext.me\nengine.cookie (PUP.Optional.NextLive.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Roaming\newnext.me\cache\spark.bin (PUP.Optional.NextLive.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) |
11.01.2014, 11:15 | #2 | |
/// the machine /// TB-Ausbilder | immer wieder "Page not found" hi,
__________________So funktioniert es: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ |
11.01.2014, 12:50 | #3 |
| immer wieder "Page not found"Code:
ATTFilter ComboFix 14-01-08.03 - Samsung SA 11 11.01.2014 12:17:24.1.2 - x86 ausgeführt von:: c:\users\Samsung SA 11\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3ZYKJ8VD\ComboFix.exe . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . C:\END c:\program files\SecureW2 c:\program files\SecureW2\Uninstall.exe c:\programdata\Microsoft\Windows\Start Menu\Programs\SecureW2 c:\programdata\Microsoft\Windows\Start Menu\Programs\SecureW2\TTLS Manager.lnk c:\programdata\Microsoft\Windows\Start Menu\Programs\SecureW2\Uninstall.lnk c:\programdata\Roaming c:\programdata\Roaming\Intel\Wireless\Settings\Settings.ini c:\users\Samsung SA 11\AppData\Local\TempDIR c:\users\Samsung SA 11\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SecureW2 c:\users\Samsung SA 11\AppData\Roaming\SearchProtect c:\users\Samsung SA 11\AppData\Roaming\SearchProtect\bin\msvcp100.dll c:\users\Samsung SA 11\AppData\Roaming\SearchProtect\bin\msvcr100.dll c:\users\Samsung SA 11\AppData\Roaming\SearchProtect\bin\rep.dat c:\users\Samsung SA 11\AppData\Roaming\SearchProtect\ffprotect\abstraction.js c:\users\Samsung SA 11\AppData\Roaming\SearchProtect\ffprotect\application.js c:\users\Samsung SA 11\AppData\Roaming\SearchProtect\ffprotect\Dialogs\dialogsApi.js c:\users\Samsung SA 11\AppData\Roaming\SearchProtect\ffprotect\Dialogs\lib\jquery.min.js c:\users\Samsung SA 11\AppData\Roaming\SearchProtect\ffprotect\Dialogs\lib\json2.js c:\users\Samsung SA 11\AppData\Roaming\SearchProtect\ffprotect\Dialogs\spbd\bubble.css c:\users\Samsung SA 11\AppData\Roaming\SearchProtect\ffprotect\Dialogs\spbd\bubble.js c:\users\Samsung SA 11\AppData\Roaming\SearchProtect\ffprotect\Dialogs\spbd\images\information.png c:\users\Samsung SA 11\AppData\Roaming\SearchProtect\ffprotect\Dialogs\spbd\images\x-default-LTR.png c:\users\Samsung SA 11\AppData\Roaming\SearchProtect\ffprotect\Dialogs\spbd\images\x-default-RTL.png c:\users\Samsung SA 11\AppData\Roaming\SearchProtect\ffprotect\Dialogs\spbd\images\x-mouseover-LTR.png c:\users\Samsung SA 11\AppData\Roaming\SearchProtect\ffprotect\Dialogs\spbd\images\x-mouseover-RTL.png c:\users\Samsung SA 11\AppData\Roaming\SearchProtect\ffprotect\Dialogs\spbd\main.html c:\users\Samsung SA 11\AppData\Roaming\SearchProtect\ffprotect\Dialogs\spsd\images\ok-button.png c:\users\Samsung SA 11\AppData\Roaming\SearchProtect\ffprotect\Dialogs\spsd\images\separation-line.png c:\users\Samsung SA 11\AppData\Roaming\SearchProtect\ffprotect\Dialogs\spsd\images\warning.png c:\users\Samsung SA 11\AppData\Roaming\SearchProtect\ffprotect\Dialogs\spsd\main.html c:\users\Samsung SA 11\AppData\Roaming\SearchProtect\ffprotect\Dialogs\spsd\SearchProtector.css c:\users\Samsung SA 11\AppData\Roaming\SearchProtect\ffprotect\Dialogs\spsd\settings.js c:\users\Samsung SA 11\AppData\Roaming\SearchProtect\ffprotect\popupTransparent.xul c:\windows\IsUn0407.exe c:\windows\iun6002.exe . . ((((((((((((((((((((((((((((((((((((((( Treiber/Dienste ))))))))))))))))))))))))))))))))))))))))))))))))) . . -------\Service_vpnagent . . ((((((((((((((((((((((( Dateien erstellt von 2013-12-11 bis 2014-01-11 )))))))))))))))))))))))))))))) . . 2014-01-11 11:31 . 2014-01-11 11:31 -------- d-----w- c:\users\fbwuser\AppData\Local\temp 2014-01-11 11:31 . 2014-01-11 11:31 -------- d-----w- c:\users\Default\AppData\Local\temp 2014-01-11 11:31 . 2014-01-11 11:31 -------- d-----w- c:\users\peter\AppData\Local\temp 2014-01-11 10:18 . 2014-01-11 10:18 -------- d-----w- C:\AdwCleaner 2014-01-11 08:21 . 2014-01-11 08:21 -------- d-----w- c:\programdata\IObit 2014-01-11 08:21 . 2014-01-11 08:21 -------- d-----w- c:\users\Samsung SA 11\AppData\Roaming\IObit 2014-01-11 08:21 . 2014-01-11 08:21 -------- d-----w- c:\programdata\ProductData 2014-01-11 08:21 . 2014-01-11 08:21 -------- d-----w- c:\program files\IObit 2014-01-10 21:59 . 2014-01-10 21:59 -------- d-----w- C:\FRST 2014-01-10 21:48 . 2014-01-10 21:48 -------- d-----w- c:\users\Samsung SA 11\.android 2014-01-10 21:48 . 2014-01-10 21:48 -------- d-----w- c:\users\Samsung SA 11\AppData\Local\cache 2014-01-10 21:48 . 2014-01-10 21:51 -------- d-----w- c:\users\Samsung SA 11\AppData\Local\Mobogenie 2014-01-10 21:48 . 2014-01-10 21:48 -------- d-----w- c:\users\Samsung SA 11\AppData\Local\genienext 2014-01-10 21:47 . 2014-01-10 21:51 -------- d-----w- c:\program files\Mobogenie 2014-01-10 21:46 . 2014-01-11 07:34 -------- d-----w- c:\program files\Optimizer Pro 2014-01-10 21:46 . 2014-01-11 07:38 -------- d-----w- c:\users\Samsung SA 11\AppData\Roaming\DigitalSites 2014-01-10 21:46 . 2014-01-10 21:46 -------- d-----w- c:\program files\OpenIt 2014-01-03 17:55 . 2014-01-09 08:05 -------- d-----w- c:\program files\Gabest 2014-01-03 17:46 . 2014-01-03 18:19 -------- d-----w- c:\program files\AutoGK . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2014-01-03 17:19 . 2013-11-13 21:34 180248 ----a-w- c:\windows\system32\drivers\aswVmm.sys 2014-01-03 17:19 . 2011-05-04 12:06 57672 ----a-w- c:\windows\system32\drivers\aswTdi.sys 2014-01-03 17:19 . 2011-05-04 12:06 410528 ----a-w- c:\windows\system32\drivers\aswSP.sys 2014-01-03 17:19 . 2011-05-04 12:06 775952 ----a-w- c:\windows\system32\drivers\aswSnx.sys 2014-01-03 17:19 . 2011-05-04 12:06 54832 ----a-w- c:\windows\system32\drivers\aswRdr.sys 2014-01-03 17:19 . 2011-05-04 12:06 67824 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys 2014-01-03 17:19 . 2011-05-04 12:05 43152 ----a-w- c:\windows\avastSS.scr 2014-01-03 17:19 . 2011-05-04 12:05 270240 ----a-w- c:\windows\system32\aswBoot.exe 2013-12-11 19:28 . 2012-04-05 06:54 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2013-12-11 19:28 . 2011-06-01 11:13 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2013-12-04 02:57 . 2014-01-10 08:13 7760024 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2241BC32-2006-47C9-AA44-D363B38A4135}\mpengine.dll 2013-11-26 11:25 . 2013-11-13 21:39 230048 ------w- c:\windows\system32\MpSigStub.exe 2013-11-15 21:52 . 2013-11-15 21:52 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll 2013-11-14 22:42 . 2013-12-13 08:13 1129472 ----a-w- c:\windows\system32\wininet.dll 2013-11-14 22:38 . 2013-12-13 08:13 420864 ----a-w- c:\windows\system32\vbscript.dll 2013-11-13 21:44 . 2013-11-13 21:34 49944 ----a-w- c:\windows\system32\drivers\aswRvrt.sys 2013-11-13 10:47 . 2013-12-11 19:03 39624 ----a-w- c:\windows\system32\drivers\hssdrv6.sys 2013-11-12 17:22 . 2013-11-12 17:23 37664 ----a-w- c:\windows\system32\drivers\avgtpx86.sys 2013-10-30 02:13 . 2008-01-21 02:23 1304064 ----a-w- c:\windows\system32\WMALFXGFXDSP.dll 2013-10-30 02:12 . 2013-12-12 08:30 335360 ----a-w- c:\windows\system32\SysFxUI.dll 2013-10-30 01:43 . 2013-12-12 08:30 130048 ----a-w- c:\windows\system32\drivers\drmk.sys 2013-10-30 00:43 . 2013-12-12 08:30 167936 ----a-w- c:\windows\system32\drivers\portcls.sys 2013-10-30 00:35 . 2013-12-12 08:30 2050560 ----a-w- c:\windows\system32\win32k.sys 2013-10-22 07:19 . 2013-12-12 08:30 158208 ----a-w- c:\windows\system32\imagehlp.dll . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}] 2014-01-11 08:21 752448 ----a-w- c:\program files\IObit\IObit Uninstaller\UninstallExplorer32.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast] @="{472083B0-C522-11CF-8763-00608CC02F24}" [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}] 2014-01-03 17:19 259464 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2013-09-10 23:54 131248 ----a-w- c:\users\Samsung SA 11\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2013-09-10 23:54 131248 ----a-w- c:\users\Samsung SA 11\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2013-09-10 23:54 131248 ----a-w- c:\users\Samsung SA 11\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920] "Spotify Web Helper"="c:\users\Samsung SA 11\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2013-10-12 1140736] "HP Photosmart 6510 series (NET)"="c:\program files\HP\HP Photosmart 6510 series\Bin\ScanToPCActivationApp.exe" [2011-09-16 1804648] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="RtHDVCpl.exe" [2008-04-17 6111232] "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-10-26 1029416] "RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2007-03-14 71216] "LanguageShortcut"="c:\program files\CyberLink\PowerDVD\Language\Language.exe" [2007-01-08 52256] "Samsung PanelMgr"="c:\windows\Samsung\PanelMgr\SSMMgr.exe" [2008-08-11 524288] "3170 Scan2PC"="c:\windows\twain_32\Samsung\CLX3170\Scan2Pc.exe" [2008-08-07 495616] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-07-27 13548064] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-07-27 92704] "ITSecMng"="c:\program files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe" [2007-09-28 75136] "AdobeCS4ServiceManager"="c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712] "Adobe Acrobat Speed Launcher"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe" [2013-05-08 44128] "Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" [2013-05-08 642664] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576] "AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2011-10-05 59240] "APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720] "HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2011-03-24 49208] "DivXMediaServer"="c:\program files\DivX\DivX Media Server\DivXMediaServer.exe" [2013-09-11 450560] "SSDMonitor"="c:\program files\Common Files\PC Tools\sMonitor\SSDMonitor.exe" [2012-08-21 105120] "RemoteX"="c:\program files\RemoteX\RemoteXUser.exe" [2011-02-14 185344] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2013-05-01 421888] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2013-11-01 152392] "AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-01-03 3764024] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336] "DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2013-08-29 1861968] "BingDesktop"="c:\program files\Microsoft\BingDesktop\BingDesktop.exe" [2013-09-22 2258056] "Cisco AnyConnect Secure Mobility Agent for Windows"="c:\program files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe" [2013-10-10 707984] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf] @="Driver" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd] @="Driver" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc] @="Service" . [HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk] path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk backup=c:\windows\pss\McAfee Security Scan Plus.lnk.CommonStartup backupExtension=.CommonStartup . [HKLM\~\startupfolder\C:^Users^Samsung SA 11^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk] path=c:\users\Samsung SA 11\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk backup=c:\windows\pss\Dropbox.lnk.Startup backupExtension=.Startup . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware] "DisableMonitoring"=dword:00000001 . R3 acsint;acsint;c:\windows\system32\DRIVERS\acsint.sys [2013-10-10 40304] R3 acsmux;acsmux;c:\windows\system32\DRIVERS\acsmux.sys [2013-10-10 58736] R3 Adobe Version Cue CS4;Adobe Version Cue CS4;c:\program files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [2008-08-15 284016] . . --- Andere Dienste/Treiber im Speicher --- . *NewlyCreated* - WS2IFSL . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] bthsvcs REG_MULTI_SZ BthServ LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache . [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}] 2008-03-17 08:56 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe . Inhalt des "geplante Tasks" Ordners . 2014-01-11 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-05 19:28] . 2014-01-11 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2009-07-19 13:17] . 2014-01-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2009-07-19 13:17] . 2013-12-03 c:\windows\Tasks\Norton Security Scan for Samsung SA 11.job - c:\progra~1\NORTON~2\Engine\372~1.5\Nss.exe [2012-11-27 09:45] . 2014-01-11 c:\windows\Tasks\SupBackGroundTask.job - c:\program files\Samsung\Samsung Update Plus\SUPBackGround.exe [2008-10-27 12:26] . . ------- Zusätzlicher Suchlauf ------- . uStart Page = hxxp://www.gmx.net/ uInternet Settings,ProxyOverride = *.local uInternet Settings,ProxyServer = socks=127.0.0.1:16101 IE: An vorhandene PDF-Datei anfügen - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html IE: Bild in &Microsoft PhotoDraw öffnen - c:\progra~1\MICROS~2\Office\1031\phdintl.dll/phdContext.htm IE: In Adobe PDF konvertieren - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html IE: Linkziel an vorhandene PDF-Datei anhängen - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html IE: Linkziel in Adobe PDF konvertieren - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html IE: Nach Microsoft &Excel exportieren - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 IE: Nach Microsoft E&xel exportieren - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 IE: Save YouTube Video as MP3 - c:\program files\Common Files\DVDVideoSoft\Dll\IEContextMenuY.dll/scriptY2MP3.htm IE: SmarThru4 Capture Selection - c:\program files\SmarThru 4\WebCapture.dll2.htm IE: SmarThru4 Save as HTML - c:\program files\SmarThru 4\WebCapture.dll1.htm IE: SmarThru4 Save Selected Text - c:\program files\SmarThru 4\WebCapture.dll.htm IE: SmarThru4 Web Capture - c:\program files\SmarThru 4\WebCapture.dll TCP: DhcpNameServer = 192.168.0.1 FF - ProfilePath - c:\users\Samsung SA 11\AppData\Roaming\Mozilla\Firefox\Profiles\ozer6ss3.default-1389394289152\ . - - - - Entfernte verwaiste Registrierungseinträge - - - - . HKCU-Run-AdobeBridge - (no file) HKLM-Run-mobilegeni daemon - c:\program files\Mobogenie\DaemonProcess.exe AddRemove-SecureW2 EAP Suite - c:\program files\SecureW2\Uninstall.exe . . . ************************************************************************** Scanne versteckte Prozesse... . Scanne versteckte Autostarteinträge... . HKLM\Software\Microsoft\Windows\CurrentVersion\Run mobilegeni daemon = c:\program files\Mobogenie\DaemonProcess.exe????????????????????????????????????????????????????????????????????????????????????? . Scanne versteckte Dateien... . Scan erfolgreich abgeschlossen versteckte Dateien: . ************************************************************************** . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{5EE5E96F-3930-FB70-426E-7ED6CAD74B45}*] @Allowed: (Read) (RestrictedCode) "ianibapjhalaaepnje"=hex:6b,61,64,63,63,70,66,65,61,63,61,6f,62,6d,61,61,64,6b, 69,6b,65,6f,00,00 "hahidpjpeojcfpel"=hex:6b,61,64,63,63,70,66,65,61,63,61,6f,62,6d,61,61,64,6b, 69,6b,65,6f,00,00 . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.0_03" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.0_04" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.0_05" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_01" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_01" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_02" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_02" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_03" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_03" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_04" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_04" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_05" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_05" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_06" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_06" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_07" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_07" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_08" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_08" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_09" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_09" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_10" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_10" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_11" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_11" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_12" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_12" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_13" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_13" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_14" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_14" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_15" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_15" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_16" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_16" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_17" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_17" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_18" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_18" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_19" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_19" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_20" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_20" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_21" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_21" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.0" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.0" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.0_01" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.0_01" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.0_02" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.0_02" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.0_03" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.0_03" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.0_04" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.0_04" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_01" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_01" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_02" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_02" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_03" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_03" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_04" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_04" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_05" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_05" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_06" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_06" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_07" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_07" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_01" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_01" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_02" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_02" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_03" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_03" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_04" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_04" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_05" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_05" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_06" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_06" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_07" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_07" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_08" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_08" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_09" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_09" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_10" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_10" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_11" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_11" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_12" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_12" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_13" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_13" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_14" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_14" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_15" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_15" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_16" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_16" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_17" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_17" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_18" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_18" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_19" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_19" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_20" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_20" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_21" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_21" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_22" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_22" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_23" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_23" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_24" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_24" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_25" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_25" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_26" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_26" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_27" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_27" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_28" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_28" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_29" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_29" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_30" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_30" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_31" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_31" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_32" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_32" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_33" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_33" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_34" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_34" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_35" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_35" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_36" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_36" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_37" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_37" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_38" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_38" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_39" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_39" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_40" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_40" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_41" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_41" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_42" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_42" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_43" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_43" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_01" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_01" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_01" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_02" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_02" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_02" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_03" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_03" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_03" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_04" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_04" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_04" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_05" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_05" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_05" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_06" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_06" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_06" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_07" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_07" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_07" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_08" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_08" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_08" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_09" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_09" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_09" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_10" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_10" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_10" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_11" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_11" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_11" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_12" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_12" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_12" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_13" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_13" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_13" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_14" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_14" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_14" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_15" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_15" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_15" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_16" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_16" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_16" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_17" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_17" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_17" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_18" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_18" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_18" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_19" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_19" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_19" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_20" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_20" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_20" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_21" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_21" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_21" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_22" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_22" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_22" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_23" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_23" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_23" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_24" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_24" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_24" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_25" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_25" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_25" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_26" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_26" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_26" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_27" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_27" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_27" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_28" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_28" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_28" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_29" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_29" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_29" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_30" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_30" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_30" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_31" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_31" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_31" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_32" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_32" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_32" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_33" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_33" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_33" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_34" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_34" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_34" . |
11.01.2014, 12:51 | #4 |
| immer wieder "Page not found" Und der Rest: Code:
ATTFilter [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_35" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_35" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_35" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_36" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_36" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_36" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_37" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_37" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_37" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_38" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_38" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_38" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_39" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_39" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_39" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_40" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_40" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_40" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_41" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_41" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_41" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_42" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_42" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_42" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_43" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_43" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_43" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_44" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_44" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_44" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_45" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_45" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_45" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_46" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_46" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_46" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_47" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_47" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_47" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_48" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_48" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_48" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_49" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_49" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_49" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_50" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_50" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_50" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_51" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_51" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_51" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0052-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_52" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0052-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_52" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0052-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_52" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0053-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_53" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0053-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_53" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0053-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_53" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0054-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_54" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0054-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_54" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0054-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_54" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0055-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_55" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0055-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_55" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-0055-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_55" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_01" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_01" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_01" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_02" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_02" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_02" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_03" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_03" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_03" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_04" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_04" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_04" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_05" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_05" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_05" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_06" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_06" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_06" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_07" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_07" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_07" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_08" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_08" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_08" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_09" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_09" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_09" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_10" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_10" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_10" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_11" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_11" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_11" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_12" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_12" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_12" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_13" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_13" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_13" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_14" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_14" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_14" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_15" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_15" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_15" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_16" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_16" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_16" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_17" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_17" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_17" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_18" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_18" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_18" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_19" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_19" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_19" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_20" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_20" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_20" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_21" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_21" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_21" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_22" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_22" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_22" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_23" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_23" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_23" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_24" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_24" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_24" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_25" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_25" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_25" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_26" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_26" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_26" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_27" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_27" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_27" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_28" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_28" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_28" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_29" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_29" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_29" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_30" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_30" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_30" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_31" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_31" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_31" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_32" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_32" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_32" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_33" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_33" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_33" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_34" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_34" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_34" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_35" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_35" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_35" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_36" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_36" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_36" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_37" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_37" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_37" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_38" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_38" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_38" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_39" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_39" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_39" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_40" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_40" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_40" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_41" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_41" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_41" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_42" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_42" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_42" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_43" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_43" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_43" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_44" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_44" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_44" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_45" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_45" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_45" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_46" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_46" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_46" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_47" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_47" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_47" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_48" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_48" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_48" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_49" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_49" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_49" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_50" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_50" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_50" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_51" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_51" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_51" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0052-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_52" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0052-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_52" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0052-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_52" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0053-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_53" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0053-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_53" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0053-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_53" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0054-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_54" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0054-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_54" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0054-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_54" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0055-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_55" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0055-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_55" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0055-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_55" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0056-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_56" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0056-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_56" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0056-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_56" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0057-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_57" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0057-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_57" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0057-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_57" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0058-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_58" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0058-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_58" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0058-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_58" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0059-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_59" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0059-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_59" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0059-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_59" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0060-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_60" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0060-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_60" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0060-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_60" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0061-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_61" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0061-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_61" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0061-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_61" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0062-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_62" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0062-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_62" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0062-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_62" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0063-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_63" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0063-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_63" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0063-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_63" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0064-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_64" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0064-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_64" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0064-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_64" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0065-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_65" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0065-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_65" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-0065-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_65" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_01" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_01" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_01" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_02" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_02" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_02" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_03" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_03" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_03" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_04" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_04" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_04" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_05" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_05" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_05" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_06" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_06" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_06" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_07" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_07" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_07" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_08" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_08" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_08" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_09" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_09" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_09" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_10" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_10" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_10" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_11" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_11" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_11" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_12" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_12" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_12" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_13" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_13" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_13" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_14" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_14" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_14" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_15" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_15" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_15" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_16" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_16" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_16" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_17" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_17" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_17" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_18" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_18" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_18" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_19" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_19" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_19" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_20" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_20" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_20" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_21" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_21" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_21" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_22" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_22" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_22" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_23" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_23" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_23" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_24" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_24" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_24" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_25" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_25" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_25" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0026-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_26" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0026-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_26" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0026-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_26" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0027-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_27" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0027-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_27" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0027-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_27" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0028-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_28" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0028-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_28" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0028-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_28" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0029-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_29" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0029-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_29" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0029-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_29" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0030-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_30" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0030-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_30" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0030-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_30" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0031-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_31" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0031-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_31" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0031-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_31" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0032-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_32" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0032-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_32" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0032-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_32" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0033-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_33" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0033-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_33" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0033-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_33" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0034-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_34" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0034-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_34" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0034-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_34" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0035-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_35" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0035-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_35" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0035-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_35" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0036-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_36" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0036-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_36" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0036-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_36" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0037-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_37" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0037-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_37" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0037-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_37" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0038-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_38" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0038-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_38" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0038-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_38" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0039-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_39" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0039-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_39" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0039-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_39" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0040-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_40" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0040-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_40" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0040-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_40" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0041-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_41" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0041-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_41" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0041-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_41" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0042-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_42" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0042-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_42" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0042-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_42" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0043-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_43" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0043-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_43" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0043-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_43" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0044-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_44" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0044-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_44" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0044-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_44" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0045-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_45" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0045-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_45" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-0045-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_45" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{CAFEEFAC-0017-0000-FFFF-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0" . [HKEY_USERS\S-1-5-21-461172779-4207304561-2596746849-1003_Classes\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}] @DACL=(02 0000) @="Java Plug-in 1.3.0_02" . --------------------- Durch laufende Prozesse gestartete DLLs --------------------- . - - - - - - - > 'Explorer.exe'(2524) c:\windows\system32\btmmhook.dll c:\windows\system32\btncopy.dll c:\program files\Common Files\Adobe\Adobe Drive CS4\AdobeDriveCS4_NP.dll . ------------------------ Weitere laufende Prozesse ------------------------ . c:\windows\system32\nvvsvc.exe c:\windows\system32\rundll32.exe c:\program files\AVAST Software\Avast\AvastSvc.exe c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe c:\windows\System32\bgsvcgen.exe c:\program files\Microsoft\BingDesktop\BingDesktopUpdater.exe c:\program files\Bonjour\mDNSResponder.exe c:\program files\Intel\WiFi\bin\EvtEng.exe c:\program files\Hotspot Shield\bin\cmw_srv.exe c:\program files\Hotspot Shield\bin\hsswd.exe c:\program files\Common Files\LightScribe\LSSrvc.exe c:\program files\IObit\LiveUpdate\LiveUpdate.exe c:\program files\Common Files\PC Tools\sMonitor\StartManSvc.exe c:\program files\Common Files\Intel\WirelessCommon\RegSrvc.exe c:\program files\CyberLink\Shared Files\RichVideo.exe c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe c:\program files\RemoteX\RemoteX.exe c:\program files\Samsung\Samsung Magic Doctor\MagicDoctorKbdHk.exe c:\windows\system32\conime.exe c:\program files\Hotspot Shield\bin\hsscp.exe c:\windows\RtHDVCpl.exe c:\windows\System32\rundll32.exe c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe c:\users\Samsung SA 11\AppData\Roaming\Dropbox\bin\Dropbox.exe c:\program files\iPod\bin\iPodService.exe c:\program files\HP\HP Photosmart 6510 series\Bin\HPNetworkCommunicator.exe c:\program files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe c:\program files\Synaptics\SynTP\SynTPHelper.exe c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe c:\windows\system32\sdclt.exe . ************************************************************************** . Zeit der Fertigstellung: 2014-01-11 12:44:28 - PC wurde neu gestartet ComboFix-quarantined-files.txt 2014-01-11 11:44 . Vor Suchlauf: 8.476.684.288 Bytes frei Nach Suchlauf: 16 Verzeichnis(se), 13.073.883.136 Bytes frei . - - End Of File - - 7193F3722B31304070C00C2A9E2A151D 61A349592C4728853F4A90FF78F7628E |
12.01.2014, 08:00 | #5 |
/// the machine /// TB-Ausbilder | immer wieder "Page not found" Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
12.01.2014, 14:33 | #6 |
| immer wieder "Page not found" Hi. Malwarebytes läuft jetzt gerade nochmal. Das war gestern das erste, was ich gemacht habe. (Log siehe oben). JRT und AdwCleaner von gestern (nach Malwarebytes). Hier die Logs: Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.0 (01.07.2014:1) OS: Windows Vista (TM) Home Premium x86 Ran by Samsung SA 11 on 11.01.2014 at 18:26:03,13 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services Failed to stop: [Service] hshld Successfully stopped: [Service] hsstrayservice Successfully deleted: [Service] hsstrayservice Failed to stop: [Service] hsswd ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{03E2A1F3-4402-4121-8B35-733216D61217} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\anchorfree Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduit Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\dsiteproducts Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\hotspotshield Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\optimizer pro Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\searchprotect Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\softonic Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\yahoopartnertoolbar Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\conduit Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\conduitsearchscopes Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\pricegong Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\smartbar Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\caphyon Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\conduit Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\hotspotshield Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\searchprotect Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\driverscanner Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{c2f8ca82-2bd9-4513-b2d1-08a47914c1da}_is1 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Toolbar.CT1561552 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Toolbar.CT3279453 Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{DE613B81-A80A-48AE-BDBE-1E4FD61FC02B} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{F8EAB941-D69D-49FE-AD51-E42B5EBF556A} ~~~ Files Successfully deleted: [File] "C:\Users\Samsung SA 11\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\driverscanner.lnk" ~~~ Folders Successfully deleted: [Folder] "C:\ProgramData\apn" Successfully deleted: [Folder] "C:\ProgramData\hotspot shield" Successfully deleted: [Folder] "C:\Users\Samsung SA 11\AppData\Roaming\dvdvideosoftiehelpers" Successfully deleted: [Folder] "C:\Users\Samsung SA 11\appdata\local\conduit" Successfully deleted: [Folder] "C:\Users\Samsung SA 11\appdata\locallow\boost_interprocess" Successfully deleted: [Folder] "C:\Users\Samsung SA 11\appdata\locallow\conduit" Successfully deleted: [Folder] "C:\Users\Samsung SA 11\appdata\locallow\pricegong" Successfully deleted: [Folder] "C:\Program Files\conduit" Successfully deleted: [Folder] "C:\Program Files\hotspot shield" Successfully deleted: [Folder] "C:\Program Files\icq6toolbar" Successfully deleted: [Folder] "C:\Program Files\openit" Successfully deleted: [Folder] "C:\Program Files\optimizer pro" Successfully deleted: [Folder] "C:\Program Files\searchprotect" Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\uniblue" Successfully deleted: [Empty Folder] C:\Users\Samsung SA 11\appdata\local\{3819f8a5-bd1b-a330-301d-fda6677fd30b} Successfully deleted: [Folder] "C:\ProgramData\ask" ~~~ FireFox Emptied folder: C:\Users\Samsung SA 11\AppData\Roaming\mozilla\firefox\profiles\ozer6ss3.default-1389394289152\minidumps [1 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 11.01.2014 at 18:30:49,55 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Code:
ATTFilter # AdwCleaner v3.016 - Bericht erstellt am 11/01/2014 um 18:33:06 # Aktualisiert 23/12/2013 von Xplode # Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (32 bits) # Benutzername : Samsung SA 11 - SAMSUNGSA11-PC # Gestartet von : C:\Users\Samsung SA 11\Desktop\adwcleaner_3.016.exe # Option : Löschen ***** [ Dienste ] ***** [#] Dienst Gelöscht : hshld [#] Dienst Gelöscht : hsswd ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\ProgramData\ICQ\ICQToolbar Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\hotspot shield Ordner Gelöscht : C:\Program Files\Mobogenie Ordner Gelöscht : C:\Program Files\Uniblue\DriverScanner Ordner Gelöscht : C:\Program Files\Common Files\DVDVideoSoft\TB Ordner Gelöscht : C:\Windows\system32\hotspot shield Ordner Gelöscht : C:\Users\Samsung SA 11\AppData\Local\Mobogenie Ordner Gelöscht : C:\Users\Samsung SA 11\AppData\Roaming\Uniblue\DriverScanner Ordner Gelöscht : C:\Users\Samsung SA 11\Documents\Mobogenie Ordner Gelöscht : C:\Users\Administrator\AppData\Roaming\Searchprotect Ordner Gelöscht : C:\Program Files\Mozilla Firefox\Extensions\afurladvisor@anchorfree.com Datei Gelöscht : C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\4660bumu.default\user.js ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\conduit.com Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolBar Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{87EAB409-97D7-4889-ACFA-C548FC6F3ECF} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} Schlüssel Gelöscht : HKCU\Software\OCS Schlüssel Gelöscht : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F} Schlüssel Gelöscht : HKLM\Software\DivX\Install\Setup\WizardLayout\ConduitToolbar Schlüssel Gelöscht : HKLM\Software\ICQ\ICQToolbar Schlüssel Gelöscht : HKLM\Software\Uniblue Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\hotspotshield Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{1AE46C09-2AB8-4EE5-88FB-08CD0FF7F2DF} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{C2F8CA82-2BD9-4513-B2D1-08A47914C1DA}_is1 Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\hotspotshield Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SearchProtect ***** [ Browser ] ***** -\\ Internet Explorer v9.0.8112.16526 Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search] -\\ Mozilla Firefox v26.0 (de) [ Datei : C:\Users\Samsung SA 11\AppData\Roaming\Mozilla\Firefox\Profiles\c19kcti3.default-1389390471330\prefs.js ] [ Datei : C:\Users\Samsung SA 11\AppData\Roaming\Mozilla\Firefox\Profiles\ozer6ss3.default-1389394289152\prefs.js ] [ Datei : C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\4660bumu.default\prefs.js ] -\\ Google Chrome v [ Datei : C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\preferences ] ************************* AdwCleaner[R0].txt - [4556 octets] - [11/01/2014 18:31:49] AdwCleaner[S0].txt - [4387 octets] - [11/01/2014 18:33:06] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4447 octets] ########## FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-01-2014 03 Ran by Samsung SA 11 (administrator) on SAMSUNGSA11-PC on 12-01-2014 09:46:34 Running from C:\Users\Samsung SA 11\Downloads Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Windows\System32\SLsvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (B.H.A Corporation) C:\Windows\System32\bgsvcgen.exe (Microsoft Corp.) C:\Program Files\Microsoft\BingDesktop\BingDesktopUpdater.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe (IObit) C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe (PC Tools) C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe () C:\Program Files\CyberLink\Shared Files\RichVideo.exe (Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (TOSHIBA CORPORATION) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe (Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Samsung Magic Doctor\MagicDoctorKbdHk.exe () C:\Program Files\Samsung\Samsung Update Plus\SUPBackGround.exe (SAMSUNG Electronics co., LTD.) C:\Program Files\Samsung\EBM\EasyBatteryMgr3.exe (SAMSUNG Electronics) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe (Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe (Realtek Semiconductor) C:\Windows\RtHDVCpl.exe (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Cyberlink Corp.) C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe () C:\Windows\Samsung\PanelMgr\SSMMgr.exe () C:\Windows\twain_32\Samsung\CLX3170\Scan2Pc.exe (Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrobat_sl.exe (Adobe Systems Inc.) C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe (Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe (PC Tools) C:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exe (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe () C:\Program Files\DivX\DivX Update\DivXUpdate.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Spotify Ltd) C:\Users\Samsung SA 11\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 6510 series\Bin\ScanToPCActivationApp.exe (TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe (Dropbox, Inc.) C:\Users\Samsung SA 11\AppData\Roaming\Dropbox\bin\Dropbox.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe (TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe (TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [6111232 2008-04-17] (Realtek Semiconductor) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1029416 2007-10-26] (Synaptics, Inc.) HKLM\...\Run: [RemoteControl] - C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [71216 2007-03-14] (Cyberlink Corp.) HKLM\...\Run: [LanguageShortcut] - C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [52256 2007-01-08] () HKLM\...\Run: [Samsung PanelMgr] - C:\Windows\Samsung\PanelMgr\SSMMgr.exe [524288 2008-08-11] () HKLM\...\Run: [3170 Scan2PC] - C:\Windows\twain_32\Samsung\CLX3170\Scan2Pc.exe [495616 2008-08-07] () HKLM\...\Run: [NvCplDaemon] - C:\Windows\system32\NvCpl.dll [13548064 2008-07-27] (NVIDIA Corporation) HKLM\...\Run: [NvMediaCenter] - C:\Windows\system32\NvMcTray.dll [92704 2008-07-27] (NVIDIA Corporation) HKLM\...\Run: [ITSecMng] - C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [75136 2007-09-28] ( TOSHIBA CORPORATION) HKLM\...\Run: [AdobeCS4ServiceManager] - C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated) HKLM\...\Run: [Adobe Acrobat Speed Launcher] - C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [44128 2013-05-08] (Adobe Systems Incorporated) HKLM\...\Run: [Acrobat Assistant 8.0] - C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [642664 2013-05-08] (Adobe Systems Inc.) HKLM\...\Run: [Adobe_ID0ENQBO] - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4Tray.exe [378224 2008-08-15] (Adobe Systems Incorporated) HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM\...\Run: [AppleSyncNotifier] - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-10-06] (Apple Inc.) HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM\...\Run: [HP Software Update] - C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-03-24] (Hewlett-Packard) HKLM\...\Run: [DivXMediaServer] - C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-09-11] (DivX, LLC) HKLM\...\Run: [SSDMonitor] - C:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exe [105120 2012-08-21] (PC Tools) HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.) HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.) HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2014-01-03] (AVAST Software) HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM\...\Run: [DivXUpdate] - C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] () HKLM\...\Run: [BingDesktop] - C:\Program Files\Microsoft\BingDesktop\BingDesktop.exe [2258056 2013-09-22] (Microsoft Corp.) HKLM\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [707984 2013-10-10] (Cisco Systems, Inc.) HKCU\...\Run: [Spotify Web Helper] - C:\Users\Samsung SA 11\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1140736 2013-10-12] (Spotify Ltd) HKCU\...\Run: [HP Photosmart 6510 series (NET)] - C:\Program Files\HP\HP Photosmart 6510 series\Bin\ScanToPCActivationApp.exe [1804648 2011-09-16] (Hewlett-Packard Co.) HKCU\...0c966feabec1\InprocServer32: [Default-shell32] ATTENTION! ====> ZeroAccess? HKU\Administrator\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [ 2008-03-17] (Hewlett-Packard Company) HKU\Administrator\...\Run: [swg] - "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" HKU\Administrator\...\Run: [AdobeBridge] - [x] HKU\Administrator\...\Run: [SearchProtect] - C:\Users\Administrator\AppData\Roaming\SearchProtect\bin\cltmng.exe HKU\Default\...\Run: [WindowsWelcomeCenter] - C:\Windows\system32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation) HKU\Default User\...\Run: [WindowsWelcomeCenter] - C:\Windows\system32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation) HKU\fbwuser\...\Run: [WindowsWelcomeCenter] - C:\Windows\system32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation) HKU\Gast\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [ 2008-03-17] (Hewlett-Packard Company) HKU\Gast\...\Run: [swg] - "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" HKU\Gast\...\Run: [AdobeBridge] - [x] HKU\peter\...\Run: [WindowsWelcomeCenter] - C:\Windows\system32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation) HKU\peter\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [ 2008-03-17] (Hewlett-Packard Company) Startup: C:\Users\Samsung SA 11\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Samsung SA 11\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== ProxyServer: socks=127.0.0.1:16101 HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.gmx.net/ SearchScopes: HKLM - DefaultScope value is missing. BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.) BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll (Google Inc.) BHO: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File Toolbar: HKCU - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\Samsung SA 11\AppData\Roaming\Mozilla\Firefox\Profiles\ozer6ss3.default-1389394289152 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll No File FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC) FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: Adobe Acrobat - C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101799.dll (Amazon.com, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-11-17] FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2013-11-17] FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2013-11-17] FF Extension: Hotspot Shield Extension - C:\Program Files\Mozilla Firefox\browser\extensions\afproxy@anchorfree.com [2013-12-11] FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [] FF HKLM\...\Firefox\Extensions: [{000a9d1c-beef-4f90-9363-039d445309b8}] - C:\Program Files\Google\Google Gears\Firefox\ FF Extension: Google Gears - C:\Program Files\Google\Google Gears\Firefox\ [] FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-05-04] FF HKLM\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files\Hewlett-Packard\SmartPrint\QPExtension FF Extension: SmartPrintButton - C:\Program Files\Hewlett-Packard\SmartPrint\QPExtension [2012-08-16] Chrome: ======= CHR HomePage: hxxp://www.google.com CHR RestoreOnStartup: "hxxp://www.google.com" CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\23.0.1271.97\PepperFlash\pepflashplayer.dll No File CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\23.0.1271.97\gcswf32.dll No File CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_271.dll No File CHR Plugin: (Remoting Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\23.0.1271.97\ppGoogleNaClPluginChrome.dll No File CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\23.0.1271.97\pdf.dll No File CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Java Deployment Toolkit 6.0.310.5) - C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll No File CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) CHR Plugin: (2007 Microsoft Office system) - C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll No File CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll No File CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) CHR Plugin: (DivX Plus Web Player) - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll No File CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () CHR Plugin: (Windows Presentation Foundation) - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) CHR Extension: (avast! WebRep) - C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1456_0 [2012-08-11] CHR Extension: () - C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljheddigenhleadfofeccneimcmlefp\3.0.0.0 [2014-01-11] CHR Extension: () - C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0 [2014-01-11] CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0 [2012-08-11] CHR HKLM\...\Chrome\Extension: [jljheddigenhleadfofeccneimcmlefp] - C:\Users\Samsung SA 11\AppData\Roaming\speedtest4354\speedtest4354.crx [2013-12-19] CHR HKLM\...\Chrome\Extension: [lbgfiglojokgabdbhegbpjgojgppppgf] - C:\Users\Samsung SA 11\AppData\Roaming\freegames111\freegames111.crx [2013-12-19] ========================== Services (Whitelisted) ================= S3 Adobe Version Cue CS4; C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [284016 2008-08-15] (Adobe Systems Incorporated) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-03] (AVAST Software) R2 bgsvcgen; C:\Windows\System32\bgsvcgen.exe [122512 2006-12-28] (B.H.A Corporation) R2 BingDesktopUpdate; C:\Program Files\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-09-22] (Microsoft Corp.) S2 gupdate1ca087358465a06; C:\Program Files\Google\Update\GoogleUpdate.exe [133104 2009-07-19] (Google Inc.) R2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2151744 2014-01-11] (IObit) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [235216 2013-09-06] (McAfee, Inc.) R2 PCToolsSSDMonitorSvc; C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe [794272 2012-08-21] (PC Tools) R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [272024 2006-12-19] () R2 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.) S3 WLSetupSvc; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [266240 2007-10-25] (Microsoft Corporation) S2 McShield; C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe [x] S3 McSysmon; C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe [x] ==================== Drivers (Whitelisted) ==================== S3 acsint; C:\Windows\System32\DRIVERS\acsint.sys [40304 2013-10-10] (Cisco Systems, Inc.) S3 acsmux; C:\Windows\System32\DRIVERS\acsmux.sys [58736 2013-10-10] (Cisco Systems, Inc.) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-01-03] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr.sys [54832 2014-01-03] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49944 2013-11-13] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [775952 2014-01-03] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [410528 2014-01-03] (AVAST Software) R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [57672 2014-01-03] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [180248 2014-01-03] () S3 AVerAF35; C:\Windows\System32\Drivers\AVerAF35.sys [474880 2009-10-19] (AVerMedia TECHNOLOGIES, Inc.) R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [37664 2013-11-12] (AVG Technologies) R1 cdrbsdrv; C:\Windows\System32\Drivers\cdrbsdrv.sys [33408 2006-02-20] (B.H.A Corporation) S3 ECS_Loader_220; C:\Windows\System32\Drivers\ECS_Loader_220.sys [15616 2005-10-31] (WideView Technology Inc.) R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [39624 2013-11-13] (AnchorFree Inc.) R2 KMDFMEMIO; C:\Windows\System32\DRIVERS\kmdfmemio.sys [13312 2007-05-23] (SAMSUNG ELECTRONICS CO., LTD.) S3 taphss; C:\Windows\System32\DRIVERS\taphss.sys [33512 2012-08-01] (AnchorFree Inc) R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [37064 2013-04-24] (Anchorfree Inc.) R3 VMC302; C:\Windows\System32\Drivers\VMC302.sys [242560 2008-04-05] (Vimicro Corporation) S3 w800bus; C:\Windows\System32\DRIVERS\w800bus.sys [60768 2005-06-13] (MCCI) U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [x] S3 IpInIp; system32\DRIVERS\ipinip.sys [x] S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x] S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-12 09:46 - 2014-01-12 09:46 - 00000000 ____D C:\Users\Samsung SA 11\Downloads\FRST-OlderVersion 2014-01-11 22:33 - 2014-01-11 22:33 - 04645232 _____ (Piriform Ltd) C:\Users\Samsung SA 11\Downloads\ccsetup409.exe 2014-01-11 22:13 - 2014-01-11 22:13 - 00001198 _____ C:\Users\Samsung SA 11\Desktop\Speed Test.lnk 2014-01-11 22:13 - 2014-01-11 22:13 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\speedtest4354 2014-01-11 22:13 - 2014-01-11 22:13 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter 2014-01-11 22:13 - 2014-01-11 22:13 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\freegames111 2014-01-11 22:12 - 2014-01-11 22:12 - 02142920 _____ () C:\Users\Samsung SA 11\Downloads\FreeCodecPackSetup.exe 2014-01-11 18:37 - 2014-01-11 18:37 - 00004527 _____ C:\Users\Samsung SA 11\Desktop\AdwCleaner[S0].txt 2014-01-11 18:30 - 2014-01-11 18:31 - 00004778 _____ C:\Users\Samsung SA 11\Desktop\JRT.txt 2014-01-11 18:25 - 2014-01-11 18:25 - 00000000 ____D C:\Windows\ERUNT 2014-01-11 18:21 - 2014-01-11 18:21 - 00000000 ____D C:\Users\Samsung SA 11\Desktop\rkill 2014-01-11 14:23 - 2014-01-11 14:23 - 00000000 ____D C:\Program Files\ESET 2014-01-11 12:44 - 2014-01-11 12:44 - 00126857 _____ C:\ComboFix.txt 2014-01-11 12:14 - 2014-01-11 12:44 - 00000000 ____D C:\Qoobox 2014-01-11 12:14 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe 2014-01-11 12:14 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe 2014-01-11 12:14 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-01-11 12:14 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-01-11 12:14 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-01-11 12:14 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe 2014-01-11 12:14 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe 2014-01-11 12:14 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe 2014-01-11 12:13 - 2014-01-11 12:42 - 00000000 ____D C:\Windows\erdnt 2014-01-11 11:20 - 2014-01-11 11:20 - 02347384 _____ (ESET) C:\Users\Samsung SA 11\Desktop\esetsmartinstaller_deu.exe 2014-01-11 11:20 - 2014-01-11 11:20 - 01037068 _____ (Thisisu) C:\Users\Samsung SA 11\Desktop\JRT61.exe 2014-01-11 11:18 - 2014-01-11 18:33 - 00000000 ____D C:\AdwCleaner 2014-01-11 11:18 - 2014-01-11 11:18 - 01233962 _____ C:\Users\Samsung SA 11\Desktop\adwcleaner_3.016.exe 2014-01-11 09:32 - 2014-01-11 21:53 - 00003272 _____ C:\Users\Samsung SA 11\Desktop\Rkill.txt 2014-01-11 09:32 - 2014-01-11 09:32 - 01933048 _____ (Bleeping Computer, LLC) C:\Users\Samsung SA 11\Desktop\Hilfsprogramm.exe 2014-01-11 09:21 - 2014-01-11 09:21 - 00001030 _____ C:\Users\Samsung SA 11\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk 2014-01-11 09:21 - 2014-01-11 09:21 - 00001006 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk 2014-01-11 09:21 - 2014-01-11 09:21 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\IObit 2014-01-11 09:21 - 2014-01-11 09:21 - 00000000 ____D C:\ProgramData\ProductData 2014-01-11 09:21 - 2014-01-11 09:21 - 00000000 ____D C:\ProgramData\IObit 2014-01-11 09:21 - 2014-01-11 09:21 - 00000000 ____D C:\Program Files\IObit 2014-01-10 23:00 - 2014-01-10 23:10 - 00018685 _____ C:\Users\Samsung SA 11\Downloads\Addition.txt 2014-01-10 23:00 - 2014-01-10 23:00 - 00377856 _____ C:\Users\Samsung SA 11\Downloads\gmer_2.1.19163.exe 2014-01-10 22:59 - 2014-01-12 09:47 - 00024683 _____ C:\Users\Samsung SA 11\Downloads\FRST.txt 2014-01-10 22:59 - 2014-01-12 09:46 - 00000000 ____D C:\FRST 2014-01-10 22:57 - 2014-01-12 09:46 - 01220096 _____ (Farbar) C:\Users\Samsung SA 11\Downloads\FRST.exe 2014-01-10 22:54 - 2014-01-10 22:55 - 00000488 _____ C:\Users\Samsung SA 11\Downloads\defogger_disable.log 2014-01-10 22:54 - 2014-01-10 22:54 - 00000000 _____ C:\Users\Samsung SA 11\defogger_reenable 2014-01-10 22:51 - 2014-01-10 22:51 - 00050477 _____ C:\Users\Samsung SA 11\Downloads\Defogger.exe 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Local\genienext 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Local\cache 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 ____D C:\Users\Samsung SA 11\.android 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 _____ C:\Users\Samsung SA 11\daemonprocess.txt 2014-01-10 22:46 - 2014-01-11 08:38 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\DigitalSites 2014-01-10 22:46 - 2014-01-11 00:46 - 00000147 _____ C:\Users\Samsung SA 11\AppData\Roaming\WB.CFG 2014-01-10 22:46 - 2014-01-11 00:46 - 00000005 _____ C:\Users\Samsung SA 11\AppData\Roaming\WBPU-TTL.DAT 2014-01-10 22:44 - 2014-01-10 22:44 - 00377856 _____ C:\Users\Samsung SA 11\Downloads\jt3jpstr.exe 2014-01-09 13:31 - 2014-01-09 13:31 - 04223268 _____ C:\ProgramData\SamPCFax000009500000 2014-01-03 18:55 - 2014-01-09 09:05 - 00000000 ____D C:\Program Files\Gabest 2014-01-03 18:48 - 2014-01-03 19:18 - 00000551 _____ C:\Users\Samsung SA 11\AppData\Roaming\AutoGK.ini 2014-01-03 18:46 - 2014-01-03 19:19 - 00000000 ____D C:\Program Files\AutoGK 2014-01-03 18:44 - 2014-01-03 18:45 - 12341641 _____ C:\Users\Samsung SA 11\Downloads\AutoGordianKnot.2.55.Setup.exe 2013-12-20 15:31 - 2013-12-20 15:31 - 23867560 _____ (Mozilla) C:\Users\Samsung SA 11\Downloads\Firefox Setup 26.0.exe 2013-12-20 13:34 - 2013-12-20 13:35 - 00283096 _____ (Mozilla) C:\Users\Samsung SA 11\Downloads\Firefox Setup Stub 26.0.exe 2013-12-16 22:46 - 2013-12-16 22:46 - 00002073 _____ C:\Users\Public\Desktop\Google Earth.lnk 2013-12-13 09:13 - 2013-11-15 00:13 - 12344320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-13 09:13 - 2013-11-14 23:50 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-13 09:13 - 2013-11-14 23:50 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-13 09:13 - 2013-11-14 23:43 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-13 09:13 - 2013-11-14 23:42 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-13 09:13 - 2013-11-14 23:42 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-13 09:13 - 2013-11-14 23:41 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-13 09:13 - 2013-11-14 23:40 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-13 09:13 - 2013-11-14 23:38 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-13 09:13 - 2013-11-14 23:38 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-13 09:13 - 2013-11-14 23:38 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-13 09:13 - 2013-11-14 23:37 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-13 09:13 - 2013-11-14 23:36 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-13 09:13 - 2013-11-14 23:36 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-13 09:13 - 2013-11-14 23:35 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-13 09:13 - 2013-11-14 23:32 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll ==================== One Month Modified Files and Folders ======= 2014-01-12 09:47 - 2014-01-10 22:59 - 00024683 _____ C:\Users\Samsung SA 11\Downloads\FRST.txt 2014-01-12 09:46 - 2014-01-12 09:46 - 00000000 ____D C:\Users\Samsung SA 11\Downloads\FRST-OlderVersion 2014-01-12 09:46 - 2014-01-10 22:59 - 00000000 ____D C:\FRST 2014-01-12 09:46 - 2014-01-10 22:57 - 01220096 _____ (Farbar) C:\Users\Samsung SA 11\Downloads\FRST.exe 2014-01-12 09:46 - 2008-09-15 09:38 - 02064501 _____ C:\Windows\WindowsUpdate.log 2014-01-12 09:44 - 2012-09-14 18:28 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\Dropbox 2014-01-12 09:43 - 2009-07-19 14:29 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-01-12 09:43 - 2009-02-14 22:28 - 00154873 _____ C:\ProgramData\nvModes.001 2014-01-12 09:42 - 2008-11-03 16:17 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite 2014-01-12 09:41 - 2009-07-19 14:29 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-01-12 09:41 - 2009-04-24 15:42 - 00000416 ____H C:\Windows\Tasks\SupBackGroundTask.job 2014-01-12 09:38 - 2013-01-17 08:24 - 00121250 _____ C:\Windows\PFRO.log 2014-01-12 09:38 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-12 09:38 - 2006-11-02 13:47 - 00004784 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-12 09:38 - 2006-11-02 13:47 - 00004784 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-11 23:30 - 2008-07-09 07:09 - 00000012 _____ C:\Windows\bthservsdp.dat 2014-01-11 23:30 - 2006-11-02 14:01 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2014-01-11 23:28 - 2012-04-05 07:54 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-01-11 22:33 - 2014-01-11 22:33 - 04645232 _____ (Piriform Ltd) C:\Users\Samsung SA 11\Downloads\ccsetup409.exe 2014-01-11 22:13 - 2014-01-11 22:13 - 00001198 _____ C:\Users\Samsung SA 11\Desktop\Speed Test.lnk 2014-01-11 22:13 - 2014-01-11 22:13 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\speedtest4354 2014-01-11 22:13 - 2014-01-11 22:13 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter 2014-01-11 22:13 - 2014-01-11 22:13 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\freegames111 2014-01-11 22:12 - 2014-01-11 22:12 - 02142920 _____ () C:\Users\Samsung SA 11\Downloads\FreeCodecPackSetup.exe 2014-01-11 22:05 - 2012-11-30 08:54 - 00001917 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk 2014-01-11 22:05 - 2010-06-25 13:12 - 00000000 ____D C:\Program Files\McAfee Security Scan 2014-01-11 22:04 - 2008-07-08 15:47 - 00000000 ____D C:\ProgramData\McAfee 2014-01-11 21:53 - 2014-01-11 09:32 - 00003272 _____ C:\Users\Samsung SA 11\Desktop\Rkill.txt 2014-01-11 18:37 - 2014-01-11 18:37 - 00004527 _____ C:\Users\Samsung SA 11\Desktop\AdwCleaner[S0].txt 2014-01-11 18:33 - 2014-01-11 11:18 - 00000000 ____D C:\AdwCleaner 2014-01-11 18:33 - 2013-04-09 21:57 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft 2014-01-11 18:33 - 2012-08-11 17:04 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\Uniblue 2014-01-11 18:33 - 2012-08-11 17:04 - 00000000 ____D C:\Program Files\Uniblue 2014-01-11 18:33 - 2011-10-04 18:08 - 00000000 ____D C:\ProgramData\ICQ 2014-01-11 18:31 - 2014-01-11 18:30 - 00004778 _____ C:\Users\Samsung SA 11\Desktop\JRT.txt 2014-01-11 18:25 - 2014-01-11 18:25 - 00000000 ____D C:\Windows\ERUNT 2014-01-11 18:21 - 2014-01-11 18:21 - 00000000 ____D C:\Users\Samsung SA 11\Desktop\rkill 2014-01-11 14:23 - 2014-01-11 14:23 - 00000000 ____D C:\Program Files\ESET 2014-01-11 12:44 - 2014-01-11 12:44 - 00126857 _____ C:\ComboFix.txt 2014-01-11 12:44 - 2014-01-11 12:14 - 00000000 ____D C:\Qoobox 2014-01-11 12:44 - 2006-11-02 12:18 - 00000000 __RHD C:\Users\Default 2014-01-11 12:44 - 2006-11-02 12:18 - 00000000 ___RD C:\Users\Public 2014-01-11 12:42 - 2014-01-11 12:13 - 00000000 ____D C:\Windows\erdnt 2014-01-11 12:36 - 2006-11-02 11:23 - 00000215 _____ C:\Windows\system.ini 2014-01-11 12:32 - 2006-11-02 11:22 - 59768832 _____ C:\Windows\system32\config\software.bak 2014-01-11 12:32 - 2006-11-02 11:22 - 45088768 _____ C:\Windows\system32\config\COMPON~3.bak 2014-01-11 12:32 - 2006-11-02 11:22 - 42729472 _____ C:\Windows\system32\config\system.bak 2014-01-11 12:32 - 2006-11-02 11:22 - 00262144 _____ C:\Windows\system32\config\security.bak 2014-01-11 12:32 - 2006-11-02 11:22 - 00262144 _____ C:\Windows\system32\config\sam.bak 2014-01-11 12:32 - 2006-11-02 11:22 - 00262144 _____ C:\Windows\system32\config\default.bak 2014-01-11 11:25 - 2009-04-30 15:06 - 00000000 ____D C:\Users\Samsung SA 11\.gimp-2.6 2014-01-11 11:20 - 2014-01-11 11:20 - 02347384 _____ (ESET) C:\Users\Samsung SA 11\Desktop\esetsmartinstaller_deu.exe 2014-01-11 11:20 - 2014-01-11 11:20 - 01037068 _____ (Thisisu) C:\Users\Samsung SA 11\Desktop\JRT61.exe 2014-01-11 11:18 - 2014-01-11 11:18 - 01233962 _____ C:\Users\Samsung SA 11\Desktop\adwcleaner_3.016.exe 2014-01-11 11:18 - 2009-04-30 14:38 - 00000000 ____D C:\Users\Samsung SA 11\.scribus 2014-01-11 09:32 - 2014-01-11 09:32 - 01933048 _____ (Bleeping Computer, LLC) C:\Users\Samsung SA 11\Desktop\Hilfsprogramm.exe 2014-01-11 09:21 - 2014-01-11 09:21 - 00001030 _____ C:\Users\Samsung SA 11\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk 2014-01-11 09:21 - 2014-01-11 09:21 - 00001006 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk 2014-01-11 09:21 - 2014-01-11 09:21 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\IObit 2014-01-11 09:21 - 2014-01-11 09:21 - 00000000 ____D C:\ProgramData\ProductData 2014-01-11 09:21 - 2014-01-11 09:21 - 00000000 ____D C:\ProgramData\IObit 2014-01-11 09:21 - 2014-01-11 09:21 - 00000000 ____D C:\Program Files\IObit 2014-01-11 08:57 - 2006-11-02 13:37 - 00000000 ____D C:\Windows\DigitalLocker 2014-01-11 08:38 - 2014-01-10 22:46 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\DigitalSites 2014-01-11 00:46 - 2014-01-10 22:46 - 00000147 _____ C:\Users\Samsung SA 11\AppData\Roaming\WB.CFG 2014-01-11 00:46 - 2014-01-10 22:46 - 00000005 _____ C:\Users\Samsung SA 11\AppData\Roaming\WBPU-TTL.DAT 2014-01-10 23:10 - 2014-01-10 23:00 - 00018685 _____ C:\Users\Samsung SA 11\Downloads\Addition.txt 2014-01-10 23:00 - 2014-01-10 23:00 - 00377856 _____ C:\Users\Samsung SA 11\Downloads\gmer_2.1.19163.exe 2014-01-10 22:55 - 2014-01-10 22:54 - 00000488 _____ C:\Users\Samsung SA 11\Downloads\defogger_disable.log 2014-01-10 22:54 - 2014-01-10 22:54 - 00000000 _____ C:\Users\Samsung SA 11\defogger_reenable 2014-01-10 22:54 - 2008-11-03 16:17 - 00000000 ____D C:\Users\Samsung SA 11 2014-01-10 22:51 - 2014-01-10 22:51 - 00050477 _____ C:\Users\Samsung SA 11\Downloads\Defogger.exe 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Local\genienext 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Local\cache 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 ____D C:\Users\Samsung SA 11\.android 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 _____ C:\Users\Samsung SA 11\daemonprocess.txt 2014-01-10 22:44 - 2014-01-10 22:44 - 00377856 _____ C:\Users\Samsung SA 11\Downloads\jt3jpstr.exe 2014-01-10 19:53 - 2013-08-09 18:53 - 00000943 _____ C:\Users\Samsung SA 11\Desktop\Dropbox.lnk 2014-01-10 19:53 - 2013-08-09 18:49 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-01-09 16:17 - 2013-10-15 12:41 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\vlc 2014-01-09 13:31 - 2014-01-09 13:31 - 04223268 _____ C:\ProgramData\SamPCFax000009500000 2014-01-09 13:31 - 2009-01-10 19:23 - 00010863 _____ C:\Users\Samsung SA 11\AppData\Roaming\SmarThruOptions.xml 2014-01-09 12:22 - 2008-12-25 12:57 - 00000000 ____D C:\Program Files\Google 2014-01-09 09:08 - 2011-11-20 11:09 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrettspielWelt 2014-01-09 09:06 - 2009-10-31 14:31 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Local\Deployment 2014-01-09 09:05 - 2014-01-03 18:55 - 00000000 ____D C:\Program Files\Gabest 2014-01-09 09:02 - 2008-12-25 13:07 - 00000767 _____ C:\Users\Samsung SA 11\Documents\Meine freigegebenen Ordner.lnk 2014-01-09 09:01 - 2008-12-25 13:01 - 00000000 ____D C:\Program Files\Windows Live 2014-01-09 08:59 - 2008-12-25 12:57 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Local\Google 2014-01-09 08:59 - 2008-12-25 12:57 - 00000000 ____D C:\ProgramData\Google 2014-01-09 08:58 - 2009-09-28 17:49 - 00000000 ____D C:\Program Files\Electronic Arts 2014-01-05 12:54 - 2013-03-09 12:49 - 00004994 _____ C:\Windows\setupact.log 2014-01-03 19:19 - 2014-01-03 18:46 - 00000000 ____D C:\Program Files\AutoGK 2014-01-03 19:18 - 2014-01-03 18:48 - 00000551 _____ C:\Users\Samsung SA 11\AppData\Roaming\AutoGK.ini 2014-01-03 19:02 - 2013-04-09 21:57 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\DVDVideoSoft 2014-01-03 18:45 - 2014-01-03 18:44 - 12341641 _____ C:\Users\Samsung SA 11\Downloads\AutoGordianKnot.2.55.Setup.exe 2014-01-03 18:20 - 2013-11-13 22:47 - 00001873 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2014-01-03 18:19 - 2013-11-13 22:34 - 00180248 _____ C:\Windows\system32\Drivers\aswVmm.sys 2014-01-03 18:19 - 2011-05-04 13:06 - 00775952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2014-01-03 18:19 - 2011-05-04 13:06 - 00410528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2014-01-03 18:19 - 2011-05-04 13:06 - 00067824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-01-03 18:19 - 2011-05-04 13:06 - 00057672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys 2014-01-03 18:19 - 2011-05-04 13:06 - 00054832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr.sys 2014-01-03 18:19 - 2011-05-04 13:05 - 00270240 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-01-03 18:19 - 2011-05-04 13:05 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2013-12-21 21:30 - 2006-11-02 11:33 - 01582492 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-21 20:26 - 2012-05-03 19:48 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2013-12-20 15:32 - 2013-11-17 20:11 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-12-20 15:32 - 2010-03-28 13:31 - 00000846 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-12-20 15:31 - 2013-12-20 15:31 - 23867560 _____ (Mozilla) C:\Users\Samsung SA 11\Downloads\Firefox Setup 26.0.exe 2013-12-20 13:35 - 2013-12-20 13:34 - 00283096 _____ (Mozilla) C:\Users\Samsung SA 11\Downloads\Firefox Setup Stub 26.0.exe 2013-12-16 22:46 - 2013-12-16 22:46 - 00002073 _____ C:\Users\Public\Desktop\Google Earth.lnk 2013-12-16 12:40 - 2012-11-26 13:09 - 00000906 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-12-16 12:40 - 2012-11-26 13:09 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware 2013-12-13 09:45 - 2006-11-02 13:47 - 02327496 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-13 09:21 - 2008-07-08 15:40 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-12-13 09:19 - 2013-08-15 14:43 - 00000000 ____D C:\Windows\system32\MRT 2013-12-13 09:15 - 2006-11-02 11:24 - 88123800 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe ZeroAccess: C:\Users\Samsung SA 11\AppData\Local\{3819f8a5-bd1b-a330-301d-fda6677fd30b} C:\Users\Samsung SA 11\AppData\Local\{3819f8a5-bd1b-a330-301d-fda6677fd30b}\@ Some content of TEMP: ==================== C:\Users\Samsung SA 11\AppData\Local\temp\BackupSetup.exe C:\Users\Samsung SA 11\AppData\Local\temp\ffdshow.exe C:\Users\Samsung SA 11\AppData\Local\temp\install_helper.exe C:\Users\Samsung SA 11\AppData\Local\temp\MatroskaSplitter.exe C:\Users\Samsung SA 11\AppData\Local\temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-12 09:47 ==================== End Of Log ============================ --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 11-01-2014 03 Ran by Samsung SA 11 at 2014-01-12 09:47:27 Running from C:\Users\Samsung SA 11\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== Update for Microsoft Office 2007 (KB2508958) (Version: - Microsoft) Acrobat.com (Version: 0.0.0 - Adobe Systems Incorporated) Hidden Acrobat.com (Version: 1.7.186 - Adobe Systems Incorporated) Adobe Acrobat 9 Pro - English, Français, Deutsch (Version: 9.5.5 - Adobe Systems) Hidden Adobe Acrobat 9.5.5 - CPSID_83708 (Version: - Adobe Systems Incorporated) Adobe AIR (Version: 3.9.0.1210 - Adobe Systems Incorporated) Adobe AIR (Version: 3.9.0.1210 - Adobe Systems Incorporated) Hidden Adobe Anchor Service CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Asset Services CS4 (Version: 4 - Adobe Systems Incorporated) Hidden Adobe Bridge CS4 (Version: 3 - Adobe Systems Incorporated) Hidden Adobe CMaps CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Color - Photoshop Specific CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Color EU Recommended Settings CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Color JA Extra Settings CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Color NA Extra Settings CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Color Video Profiles CS CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Creative Suite 4 Design Standard (Version: 4.0 - Adobe Systems Incorporated) Adobe Creative Suite 4 Design Standard (Version: 4.0 - Adobe Systems Incorporated) Hidden Adobe CSI CS4 (Version: 1 - Adobe Systems Incorporated) Hidden Adobe Default Language CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Device Central CS4 (Version: 2 - Adobe Systems Incorporated) Hidden Adobe Drive CS4 (Version: 1 - Adobe Systems Incorporated) Hidden Adobe ExtendScript Toolkit CS4 (Version: 3.0.0 - Adobe Systems Incorporated) Hidden Adobe Extension Manager CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Flash Player 11 ActiveX (Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Flash Player 11 Plugin (Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Fonts All (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Illustrator CS4 (Version: 14.0 - Adobe Systems Incorporated) Hidden Adobe InDesign CS4 (Version: 6.0 - Adobe Systems Incorporated) Hidden Adobe InDesign CS4 Application Feature Set Files (Roman) (Version: 6.0 - Adobe Systems Incorporated) Hidden Adobe InDesign CS4 Common Base Files (Version: 6.0 - Adobe Systems Incorporated) Hidden Adobe InDesign CS4 Icon Handler (Version: 6.0 - Adobe Systems Incorporated) Hidden Adobe Linguistics CS4 (Version: 4.0.0 - Adobe Systems Incorporated) Hidden Adobe Media Player (Version: 0.0.0 - Adobe Systems Incorporated) Hidden Adobe Media Player (Version: 1.1 - Adobe Systems Incorporated) Adobe Output Module (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe PDF Library Files CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden Adobe Photoshop CS4 (Version: 11.0 - Adobe Systems Incorporated) Hidden Adobe Photoshop CS4 Support (Version: 11.0 - Adobe Systems Incorporated) Hidden Adobe Reader X (10.1.8) - Deutsch (Version: 10.1.8 - Adobe Systems Incorporated) Adobe Search for Help (Version: 1.0 - Adobe Systems Incorporated) Hidden Adobe Service Manager Extension (Version: 1.0 - Adobe Systems Incorporated) Hidden Adobe Setup (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe SGM CS4 (Version: 3.0 - Adobe Systems Incorporated) Hidden Adobe SING CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Type Support CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden Adobe Update Manager CS4 (Version: 6.0.0 - Adobe Systems Incorporated) Hidden Adobe Version Cue CS4 Server (Version: 4.0 - Adobe Systems Incorporated) Hidden Adobe WinSoft Linguistics Plugin (Version: 1.1 - Adobe Systems Incorporated) Hidden Adobe XMP Panels CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden AdobeColorCommonSetCMYK (Version: 2.0 - Adobe Systems Incorporated) Hidden AdobeColorCommonSetRGB (Version: 2.0 - Adobe Systems Incorporated) Hidden Agere Systems HDA Modem (Version: - Agere Systems) Amazon MP3-Downloader 1.0.17 (Version: 1.0.17 - Amazon Services LLC) Apple Application Support (Version: 2.3.6 - Apple Inc.) Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.) Apple Software Update (Version: 2.1.3.127 - Apple Inc.) Atheros WLAN Client (Version: 1.00.000 - ) avast! Free Antivirus (Version: 9.0.2011 - Avast Software) Bing-Desktop (Version: 1.3.322.0 - Microsoft Corporation) Bluetooth Stack for Windows by Toshiba (Version: v6.00.05 - TOSHIBA CORPORATION) Bonjour (Version: 3.0.0.10 - Apple Inc.) CCleaner (Version: 3.26 - Piriform) Cisco AnyConnect Secure Mobility Client (Version: 3.1.04072 - Cisco Systems, Inc.) Cisco AnyConnect Secure Mobility Client (Version: 3.1.04072 - Cisco Systems, Inc.) Hidden Connect (Version: 1.0.0.1 - Adobe Systems Incorporated) Hidden CyberLink DVD Suite (Version: 5.0.2403 - CyberLink Corp.) CyberLink Power2Go (Version: 5.0.3825 - CyberLink Corp.) Die Sims 2 (Version: - ) Die Sims 2: Nightlife (Version: - ) Die Sims 2: Open For Business (Version: - ) Die Sims 2: Wilde Campus-Jahre (Version: - ) Die Sims™ 2 Apartment-Leben (Version: - Electronic Arts) Die Sims™ 2 Gute Reise (Version: - Electronic Arts) Die Sims™ 2 Haustiere (Version: - ) Die Sims™ 2 Vier Jahreszeiten (Version: - ) Die Sims™ 3 (Version: 1.50.56 - Electronic Arts) Die*Sims*Mittelalter (Version: 2.0.113 - Electronic Arts) DivX Converter (Version: 7.1.0 - DivX, Inc.) DivX Plus DirectShow Filters (Version: - DivX, Inc.) DivX Version Checker (Version: 7.1.0.2 - DivX, Inc.) DivX-Setup (Version: 2.6.1.87 - DivX, LLC) dm-Fotowelt (Version: 5.0.4 - CEWE COLOR AG u Co. OHG) Dropbox (Version: 2.4.11 - Dropbox, Inc.) Easy Battery Manager (Version: 3.2.1.7 - ) Easy Display Manager (Version: 2.0.0.0 - Samsung) Easy Network Manager 3.0 (Version: 3.0.0.0 - Ihr Firmenname) Easy Network Manager 3.0 (Version: 3.0.0.0 - Ihr Firmenname) Hidden Easy SpeedUp Manager (Version: 2.0.1.0 - ) ESET Online Scanner v3 (Version: - ) Firebird/InterBase(r) ODBC driver 2.0 (Version: 2.0 - Firebird Project) Free YouTube to MP3 Converter version 3.12.1.320 (Version: 3.12.1.320 - DVDVideoSoft Ltd.) Google Earth (Version: 7.1.2.2041 - Google) Google Gears (Version: 0.5.3600 - Google) Google Update Helper (Version: 1.3.22.3 - Google Inc.) Hidden GPL Ghostscript 8.64 (Version: - ) Haali Media Splitter (Version: - FreeCodecPack) HP Photo Creations (Version: 1.0.0.3781 - HP Photo Creations Powered by RocketLife) HP Photosmart 6510 series - Grundlegende Software für das Gerät (Version: 25.0.621.0 - Hewlett-Packard Co.) HP Photosmart 6510 series Hilfe (Version: 140.0.2.2 - Hewlett Packard) HP Photosmart Plus B210 series - Grundlegende Software für das Gerät (Version: 22.50.231.0 - Hewlett-Packard Co.) HP Photosmart Plus B210 series Hilfe (Version: 140.0.54.54 - Hewlett Packard) HP Update (Version: 5.003.000.004 - Hewlett-Packard) iCloud (Version: 2.1.2.8 - Apple Inc.) imagine digital freedom - Samsung (Version: 1.0.2.0 - Samsung Electronics Co., LTD) Intel PROSet Wireless (Version: - ) Hidden Intel(R) PROSet/Wireless WiFi-Software (Version: 12.00.2000 - Intel(R) Corporation) Intel® Matrix Storage Manager (Version: - Intel Corporation) InterVideo FilterSDK for Panasonic (Version: - InterVideo Inc.) IObit Uninstaller (Version: 3.0.4.922 - IObit) iTunes (Version: 11.1.3.8 - Apple Inc.) IZArc 3.81 (Version: 3.81 Build 1550 - Ivan Zahariev) Java 7 Update 45 (Version: 7.0.450 - Oracle) Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden Java(TM) 6 Update 37 (Version: 6.0.370 - Oracle) K-Lite Mega Codec Pack 9.1.0 (Version: 9.1.0 - ) kuler (Version: 2.0 - Adobe Systems Incorporated) Hidden LabelPrint (Version: .2406 - CyberLink Corp.) LightScribe System Software 1.12.37.1 (Version: 1.12.37.1 - LightScribe) Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300 - Malwarebytes Corporation) McAfee Security Scan Plus (Version: 3.8.130.10 - McAfee, Inc.) Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (Version: - Microsoft Corporation) Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729 - Microsoft Corporation) Hidden Microsoft .NET Framework 3.5 SP1 (Version: - Microsoft Corporation) Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft Office 2003 Web Components (Version: 11.0.8003.0 - Microsoft Corporation) Microsoft Office 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office File Validation Add-In (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1 - Microsoft Corporation) Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Professional Plus 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Professional Plus 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Small Business Connectivity Components (Version: 2.0.7024.0 - Microsoft Corporation) Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft PhotoDraw 2000 V2 (Version: 2.00.00.1429 - Microsoft Corporation) Microsoft PowerPoint Viewer (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft SOAP Toolkit 2.0 SP2 (Version: 623.1 - Microsoft Corporation) Microsoft SQL Server Native Client (Version: 9.00.4035.00 - Microsoft Corporation) Microsoft SQL Server VSS Writer (Version: 9.00.4035.00 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (Version: 10.0.30319 - Microsoft Corporation) Microsoft WSE 3.0 Runtime (Version: 3.0.5305.0 - Microsoft Corp.) MobileMe Control Panel (Version: 3.1.8.0 - Apple Inc.) MotionSD STUDIO 1.3E (Version: - Matsushita Electric Industrial Co., Ltd.) Move Networks Media Player for Internet Explorer (Version: - ) Mozilla Firefox 26.0 (x86 de) (Version: 26.0 - Mozilla) Mozilla Maintenance Service (Version: 26.0 - Mozilla) MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0 - Microsoft Corporation) Norton Security Scan (Version: 3.7.2.5 - Symantec Corporation) NVIDIA Drivers (Version: - ) NVIDIA HD-Audiotreiber 1.3.18.0 (Version: 1.3.18.0 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.109.718 - NVIDIA Corporation) Hidden OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0 - Microsoft Corporation) Hidden PDF Settings CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden Photoshop Camera Raw (Version: 5.0 - Adobe Systems Incorporated) Hidden Play AVStation (Version: 4.1.20.50 - Ihr Firmenname) Play AVStation (Version: 4.1.20.50 - Ihr Firmenname) Hidden PlayCamera (Version: 1.0.1.7 - ) PowerDirector (Version: 5.0.3927 - CyberLink Corp.) PowerDVD (Version: 7.0.3118.0 - CyberLink Corp.) PowerProducer (Version: 085120(3.7)_Vista_SSPC - CyberLink Corp.) QuickTime (Version: 7.74.80.86 - Apple Inc.) Readiris Pro 10 (Version: - ) Realtek High Definition Audio Driver (Version: 6.0.1.5605 - Realtek Semiconductor Corp.) Revo Uninstaller 1.94 (Version: 1.94 - VS Revo Group) Safari (Version: 5.34.57.2 - Apple Inc.) Samsung CLX-3170 Series (Version: - Samsung Electronics CO.,LTD) Samsung Magic Doctor (Version: 5.00 - Samsung Electronics Co., LTD) Samsung Recovery Solution III (Version: 3.0.0.5 - Samsung) Samsung Update Plus (Version: 2.0 - Samsung Electronics Co., LTD) Samsung Update Plus (Version: 2.0 - Samsung Electronics Co., LTD) Hidden Skype Click to Call (Version: 6.3.11079 - Skype Technologies S.A.) Skype™ 6.5 (Version: 6.5.158 - Skype Technologies S.A.) SmarThru 4 (Version: - ) SmarThru PC Fax (Version: - ) Spotify (Version: 0.9.4.185.g7545a404 - Spotify AB) Studie zur Verbesserung von HP Photosmart 6510 series Produkten (Version: 25.0.621.0 - Hewlett-Packard Co.) Studie zur Verbesserung von HP Photosmart Plus B210 series Produkten (Version: 22.50.231.0 - Hewlett-Packard Co.) Suite Shared Configuration CS4 (Version: 1.0 - Adobe Systems Incorporated) Hidden Synaptics Pointing Device Driver (Version: 10.1.2.0 - Synaptics) Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch) (Version: 9.00.4035.00 - Microsoft Corporation) Update for 2007 Microsoft Office System (KB967642) (Version: - Microsoft) Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (Version: 3 - Microsoft Corporation) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2850085) 32-Bit Edition (Version: - Microsoft) Update für Microsoft Office Excel 2007 Help (KB963678) (Version: - Microsoft) Update für Microsoft Office Outlook 2007 Help (KB963677) (Version: - Microsoft) Update für Microsoft Office Powerpoint 2007 Help (KB963669) (Version: - Microsoft) Update für Microsoft Office Word 2007 Help (KB963665) (Version: - Microsoft) User Guide (Version: 1.0 - ) VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden Vimicro UVC Camera (Version: 1.00.0000 - Vimicro Corporation) Visual Studio 2012 x86 Redistributables (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) VLC media player 2.1.0 (Version: 2.1.0 - VideoLAN) VRWriter4 (Version: 4.3 - Matsushita Electric Industrial Co., Ltd.) Hidden WIDCOMM Bluetooth Software 6.0.1.6300 (Version: 6.0.1.6300 - WIDCOMM, Inc.) Windows Live Anmelde-Assistent (Version: 5.000.818.6 - Microsoft Corporation) Windows Live installer (Version: 12.0.1471.1025 - Microsoft Corporation) ==================== Restore Points ========================= 05-01-2014 13:09:50 Geplanter Prüfpunkt 07-01-2014 15:33:26 Windows Update 09-01-2014 07:52:01 Removed Ask Toolbar 09-01-2014 07:55:04 Removed Ask Toolbar 09-01-2014 07:55:58 Removed Ask Toolbar 09-01-2014 08:00:47 Windows Live Messenger wird entfernt 09-01-2014 21:38:27 Geplanter Prüfpunkt 11-01-2014 03:24:32 Geplanter Prüfpunkt 11-01-2014 08:28:16 IObit Uninstaller restore point 11-01-2014 20:59:51 IObit Uninstaller restore point ==================== Hosts content: ========================== 2006-11-02 11:23 - 2014-01-11 12:36 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {10DB4D8D-5E4D-42BF-9274-78B6016E292E} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: {1A30A7C6-4D06-4BFA-AFB0-FAFCA1C0E21D} - System32\Tasks\McDefragTask => c:\PROGRA~1\mcafee\mqc\QcConsol.exe Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM Task: {1E315AF8-EA9F-4E45-B2E9-466DCE5BAA6C} - System32\Tasks\{DB474BF4-58DE-44DA-A33A-A4D6CEB32E30} => C:\Program Files\Skype\Phone\Skype.exe [2013-06-03] (Skype Technologies S.A.) Task: {3048F55A-A266-40E3-8960-C82CC5E9F0A2} - System32\Tasks\SamsungMagicDoctor => C:\Program Files\Samsung\Samsung Magic Doctor\MagicDoctorKbdHk.exe [2007-07-04] (Samsung Electronics Co., Ltd.) Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages Task: {3E21E1AC-D61F-4D06-85AE-7BA3CE25479D} - System32\Tasks\EasyBatteryManager => C:\Program Files\Samsung\EBM\EasyBatteryMgr3.exe [2008-04-17] (SAMSUNG Electronics co., LTD.) Task: {400F8C72-69FC-4C93-864A-962CF378A3AB} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {408A8BE8-6569-40D6-BB12-26811B5564BA} - System32\Tasks\SupBackGroundTask => C:\Program Files\Samsung\Samsung Update Plus\SUPBackGround.exe [2010-04-20] () Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation) Task: {4AE808A1-1A59-4CD9-AA45-5C7036A1BAC2} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\netsh.exe [2006-11-02] (Microsoft Corporation) Task: {56FC5C7B-173D-4CF6-8A5E-EACC301EBB6F} - System32\Tasks\EasyDisplayMgr => C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe [2008-05-22] (SAMSUNG Electronics) Task: {6B767A93-9B4D-4867-BC64-372C4752BBDF} - System32\Tasks\Norton Security Scan for Samsung SA 11 => C:\Program Files\Norton Security Scan\Engine\3.7.2.5\Nss.exe [2012-04-03] (Symantec Corporation) Task: {9AF4609C-07EF-47ED-8139-7DF3D4CDD0D0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2009-07-19] (Google Inc.) Task: {9F96614E-8020-43DC-B605-49BC002DCAD7} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-12-19] (Piriform Ltd) Task: {AF02F22D-C128-4844-99F0-B4461CED2F07} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2009-07-19] (Google Inc.) Task: {B81E3F73-0E07-4C79-A56F-69A84D6FB2EC} - System32\Tasks\HPCustParticipation HP Photosmart 6510 series => C:\Program Files\HP\HP Photosmart 6510 series\Bin\HPCustPartic.exe [2011-09-16] (Hewlett-Packard Co.) Task: {B934C0C2-DF81-46EF-8156-1F4C8CA36815} - System32\Tasks\HPCustParticipation HP Photosmart Plus B210 series => C:\Program Files\HP\HP Photosmart Plus B210 series\Bin\HPCustPartic.exe [2010-11-16] (Hewlett-Packard Co.) Task: {CE3C7B64-1AB7-4FA9-83BD-864EC211E4D1} - System32\Tasks\EasySpeedUpManager => C:\Program Files\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe [2008-04-25] (Samsung Electronics Co., Ltd.) Task: {DA8D3357-9113-40B1-81F7-4254EC09E4AC} - System32\Tasks\McQcTask => c:\PROGRA~1\mcafee\mqc\QcConsol.exe Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] () Task: {F0D3A7A9-9597-496D-9884-1577C0C9D449} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-01-03] (AVAST Software) Task: {F56886DC-7B24-4A81-9237-32A60AA0DD62} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\Norton Security Scan for Samsung SA 11.job => C:\PROGRA~1\NORTON~2\Engine\372~1.5\Nss.exe Task: C:\Windows\Tasks\SupBackGroundTask.job => C:\Program Files\Samsung\Samsung Update Plus\SUPBackGround.exe ==================== Loaded Modules (whitelisted) ============= 2008-07-08 15:32 - 2006-08-12 04:48 - 00049152 _____ () C:\Program Files\Samsung\Samsung Magic Doctor\HookDllPS2.dll 2008-06-05 18:32 - 2010-04-16 13:11 - 00155648 _____ () C:\Program Files\Samsung\Samsung Update Plus\HMXML.dll 2008-07-08 15:31 - 2006-08-12 04:48 - 00049152 _____ () C:\Program Files\Samsung\Easy Display Manager\HookDllPS2.dll 2008-07-08 15:31 - 2006-08-12 04:48 - 00049152 _____ () C:\Program Files\SAMSUNG\EasySpeedUpManager\HookDllPS2.dll 2009-01-10 19:23 - 2008-06-26 03:45 - 00155648 _____ () C:\Windows\twain_32\Samsung\CLX3170\IMFilter.dll 2009-01-10 19:23 - 2008-06-26 03:46 - 01384520 _____ () C:\Windows\twain_32\Samsung\CLX3170\ssole.dll 2009-01-10 19:23 - 2008-06-26 03:45 - 00367104 _____ () C:\Windows\twain_32\Samsung\CLX3170\NetModule.dll 2013-06-27 22:01 - 2009-02-27 15:39 - 00019968 _____ () C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.deu 2011-06-24 21:56 - 2011-06-24 21:56 - 00087328 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2011-06-24 21:56 - 2011-06-24 21:56 - 01241888 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2013-11-13 22:43 - 2013-11-13 22:44 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2013-08-29 01:25 - 2013-08-29 01:25 - 00100688 _____ () C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll 2005-07-22 21:30 - 2005-07-22 21:30 - 00065536 _____ () C:\Windows\system32\TosCommAPI.dll 2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\Samsung SA 11\AppData\Roaming\Dropbox\bin\libcef.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\Users\Samsung SA 11:zylomtest AlternateDataStreams: C:\Users\Samsung SA 11:zylomtr{000HQ7FF-AD7A-3FG3-VK8A-25GG67KOIVUV} AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1 ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Cisco Systems Service: vpnva Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (01/12/2014 09:40:02 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/11/2014 11:11:44 PM) (Source: Application Hang) (User: ) Description: Programm ccsetup409.exe, Version 2.0.0.0 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen. Prozess-ID: 1118 Anfangszeit: 01cf0f14d9ba7525 Zeitpunkt der Beendigung: 20 Error: (01/11/2014 10:41:20 PM) (Source: Windows Search Service) (User: ) Description: Eintrag <C:\USERS\SAMSUNG SA 11\APPDATA\LOCAL\{3819F8A5-BD1B-A330-301D-FDA6677FD30B}\U\00000001.@> in der Hash-Zuordnung kann nicht aktualisiert werden. Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) Error: (01/11/2014 10:40:11 PM) (Source: Windows Search Service) (User: ) Description: Eintrag <C:\USERS\SAMSUNG SA 11\APPDATA\LOCAL\{3819F8A5-BD1B-A330-301D-FDA6677FD30B}\U\00000001.@> in der Hash-Zuordnung kann nicht aktualisiert werden. Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) Error: (01/11/2014 09:59:34 PM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005. Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess. Vorgang: Generatordaten werden gesammelt Kontext: Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220} Generatorname: System Writer Generatorinstanz-ID: {69b2db54-e3ad-4121-b928-287a3e91d551} Error: (01/11/2014 09:57:00 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/11/2014 09:45:28 PM) (Source: Application Error) (User: ) Description: Fehlerhafte Anwendung gmer_2.1.19163.exe, Version 2.1.19163.0, Zeitstempel 0x515d31f0, fehlerhaftes Modul gmer_2.1.19163.exe, Version 2.1.19163.0, Zeitstempel 0x515d31f0, Ausnahmecode 0xc0000005, Fehleroffset 0x00012288, Prozess-ID 0x1bd0, Anwendungsstartzeit gmer_2.1.19163.exe0. Error: (01/11/2014 06:36:08 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 System errors: ============= Error: (01/12/2014 09:41:18 AM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT) Description: 0x80070032 Error: (01/12/2014 09:40:02 AM) (Source: Service Control Manager) (User: ) Description: SQL Server VSS Writer1 Error: (01/12/2014 09:40:02 AM) (Source: Service Control Manager) (User: ) Description: McAfee Real-time Scanner%%3 Error: (01/12/2014 09:40:02 AM) (Source: Service Control Manager) (User: ) Description: DgiVecp%%20 Error: (01/12/2014 09:40:02 AM) (Source: Service Control Manager) (User: ) Description: Parallel port driver%%1058 Error: (01/11/2014 10:04:49 PM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT) Description: 0x80070032 Error: (01/11/2014 09:57:01 PM) (Source: Service Control Manager) (User: ) Description: SQL Server VSS Writer1 Error: (01/11/2014 09:57:01 PM) (Source: Service Control Manager) (User: ) Description: McAfee Real-time Scanner%%3 Error: (01/11/2014 09:57:01 PM) (Source: Service Control Manager) (User: ) Description: DgiVecp%%20 Error: (01/11/2014 09:57:01 PM) (Source: Service Control Manager) (User: ) Description: Parallel port driver%%1058 Microsoft Office Sessions: ========================= Error: (01/09/2014 05:53:03 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 25 seconds with 0 seconds of active time. This session ended with a crash. Error: (11/18/2013 04:52:45 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 3251 seconds with 2460 seconds of active time. This session ended with a crash. Error: (07/24/2013 00:46:51 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 8629 seconds with 5520 seconds of active time. This session ended with a crash. Error: (07/09/2013 07:15:31 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 41 seconds with 0 seconds of active time. This session ended with a crash. Error: (07/09/2013 07:14:18 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 64 seconds with 60 seconds of active time. This session ended with a crash. Error: (07/09/2013 07:13:04 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 70 seconds with 60 seconds of active time. This session ended with a crash. Error: (06/23/2013 11:28:54 AM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 634 seconds with 240 seconds of active time. This session ended with a crash. Error: (06/23/2013 10:25:29 AM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 16 seconds with 0 seconds of active time. This session ended with a crash. Error: (07/10/2012 10:43:19 AM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 5192 seconds with 3480 seconds of active time. This session ended with a crash. CodeIntegrity Errors: =================================== Date: 2014-01-11 03:16:32.608 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-01-11 03:16:32.140 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-01-11 03:16:31.688 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-01-11 03:16:31.235 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-01-11 03:16:30.783 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-01-11 03:16:30.346 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-01-11 03:16:29.847 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-01-11 03:16:29.395 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-01-11 03:16:28.957 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-01-11 03:16:28.504 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 49% Total physical RAM: 3065.88 MB Available physical RAM: 1562.88 MB Total Pagefile: 6356.14 MB Available Pagefile: 4822.4 MB Total Virtual: 2047.88 MB Available Virtual: 1891.52 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:144.09 GB) (Free:8.68 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: () (Fixed) (Total:144 GB) (Free:35.54 GB) NTFS Drive e: (500DAYSOFSUMMER_F2_PAL_2) (CDROM) (Total:5.31 GB) (Free:0 GB) UDF ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 298 GB) (Disk ID: B6394A61) Partition 1: (Not Active) - (Size=10 GB) - (Type=27) Partition 2: (Active) - (Size=144 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=144 GB) - (Type=07 NTFS) ==================== End Of Log ============================ Lasse dann jetzt nochmal JRT und AdwCleaner laufen. Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2014.01.12.04 Windows Vista Service Pack 2 x86 NTFS Internet Explorer 9.0.8112.16421 Samsung SA 11 :: SAMSUNGSA11-PC [Administrator] 12.01.2014 09:56:04 mbam-log-2014-01-12 (09-56-04).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 616501 Laufzeit: 3 Stunde(n), 34 Minute(n), 12 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 2 HKLM\SOFTWARE\Google\Chrome\Extensions\jljheddigenhleadfofeccneimcmlefp (PUP.Optional.SpeedTest.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Google\Chrome\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf (PUP.Optional.FreeGames.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 6 C:\Users\Samsung SA 11\AppData\Roaming\speedtest4354 (PUP.Optional.SpeedTest.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljheddigenhleadfofeccneimcmlefp (PUP.Optional.SpeedAnalysis.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljheddigenhleadfofeccneimcmlefp\3.0.0.0 (PUP.Optional.SpeedAnalysis.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf (PUP.Optional.FreeGames.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0 (PUP.Optional.FreeGames.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Roaming\freegames111 (PUP.Optional.FreeGames.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateien: 58 C:\Users\Samsung SA 11\Downloads\FreeCodecPackSetup.exe (PUP.Optional.InstallBrain.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Roaming\speedtest4354\install_helper.exe (PUP.Optional.SpeedTest.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Roaming\speedtest4354\speedtest4354.crx (PUP.Optional.SpeedTest.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Roaming\speedtest4354\speedtest4354.xpi (PUP.Optional.SpeedTest.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljheddigenhleadfofeccneimcmlefp\3.0.0.0\background.html (PUP.Optional.SpeedAnalysis.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljheddigenhleadfofeccneimcmlefp\3.0.0.0\button.js (PUP.Optional.SpeedAnalysis.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljheddigenhleadfofeccneimcmlefp\3.0.0.0\ci.bg.pack.js (PUP.Optional.SpeedAnalysis.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljheddigenhleadfofeccneimcmlefp\3.0.0.0\ci.browser.helper.js (PUP.Optional.SpeedAnalysis.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljheddigenhleadfofeccneimcmlefp\3.0.0.0\ci.content.pack.js (PUP.Optional.SpeedAnalysis.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljheddigenhleadfofeccneimcmlefp\3.0.0.0\content.js (PUP.Optional.SpeedAnalysis.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljheddigenhleadfofeccneimcmlefp\3.0.0.0\icon128.ico (PUP.Optional.SpeedAnalysis.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljheddigenhleadfofeccneimcmlefp\3.0.0.0\icon128.png (PUP.Optional.SpeedAnalysis.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljheddigenhleadfofeccneimcmlefp\3.0.0.0\icon16.ico (PUP.Optional.SpeedAnalysis.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljheddigenhleadfofeccneimcmlefp\3.0.0.0\icon16.png (PUP.Optional.SpeedAnalysis.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljheddigenhleadfofeccneimcmlefp\3.0.0.0\icon18.ico (PUP.Optional.SpeedAnalysis.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljheddigenhleadfofeccneimcmlefp\3.0.0.0\icon18.png (PUP.Optional.SpeedAnalysis.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljheddigenhleadfofeccneimcmlefp\3.0.0.0\icon24.ico (PUP.Optional.SpeedAnalysis.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljheddigenhleadfofeccneimcmlefp\3.0.0.0\icon24.png (PUP.Optional.SpeedAnalysis.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljheddigenhleadfofeccneimcmlefp\3.0.0.0\icon32.ico (PUP.Optional.SpeedAnalysis.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljheddigenhleadfofeccneimcmlefp\3.0.0.0\icon32.png (PUP.Optional.SpeedAnalysis.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljheddigenhleadfofeccneimcmlefp\3.0.0.0\icon48.ico (PUP.Optional.SpeedAnalysis.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljheddigenhleadfofeccneimcmlefp\3.0.0.0\icon48.png (PUP.Optional.SpeedAnalysis.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljheddigenhleadfofeccneimcmlefp\3.0.0.0\icon64.ico (PUP.Optional.SpeedAnalysis.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljheddigenhleadfofeccneimcmlefp\3.0.0.0\icon64.png (PUP.Optional.SpeedAnalysis.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljheddigenhleadfofeccneimcmlefp\3.0.0.0\jquery-1.9.1.min.js (PUP.Optional.SpeedAnalysis.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljheddigenhleadfofeccneimcmlefp\3.0.0.0\jquery.uuid.js (PUP.Optional.SpeedAnalysis.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljheddigenhleadfofeccneimcmlefp\3.0.0.0\manifest.json (PUP.Optional.SpeedAnalysis.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljheddigenhleadfofeccneimcmlefp\3.0.0.0\popup.js (PUP.Optional.SpeedAnalysis.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljheddigenhleadfofeccneimcmlefp\3.0.0.0\rjs.js (PUP.Optional.SpeedAnalysis.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\jljheddigenhleadfofeccneimcmlefp\3.0.0.0\settings.json (PUP.Optional.SpeedAnalysis.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0\background.html (PUP.Optional.FreeGames.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0\button.js (PUP.Optional.FreeGames.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0\ci.bg.pack.js (PUP.Optional.FreeGames.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0\ci.browser.helper.js (PUP.Optional.FreeGames.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0\ci.content.pack.js (PUP.Optional.FreeGames.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0\content.js (PUP.Optional.FreeGames.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0\icon128.ico (PUP.Optional.FreeGames.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0\icon128.png (PUP.Optional.FreeGames.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0\icon16.ico (PUP.Optional.FreeGames.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0\icon16.png (PUP.Optional.FreeGames.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0\icon18.ico (PUP.Optional.FreeGames.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0\icon18.png (PUP.Optional.FreeGames.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0\icon24.ico (PUP.Optional.FreeGames.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0\icon24.png (PUP.Optional.FreeGames.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0\icon32.ico (PUP.Optional.FreeGames.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0\icon32.png (PUP.Optional.FreeGames.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0\icon48.ico (PUP.Optional.FreeGames.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0\icon48.png (PUP.Optional.FreeGames.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0\jquery-1.9.1.min.js (PUP.Optional.FreeGames.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0\jquery.uuid.js (PUP.Optional.FreeGames.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0\manifest.json (PUP.Optional.FreeGames.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0\popup.js (PUP.Optional.FreeGames.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0\rjs.js (PUP.Optional.FreeGames.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0\settings.json (PUP.Optional.FreeGames.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Roaming\freegames111\DeskTopIcon.ico (PUP.Optional.FreeGames.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Roaming\freegames111\freegames111.crx (PUP.Optional.FreeGames.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Roaming\freegames111\freegames111.xpi (PUP.Optional.FreeGames.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Samsung SA 11\AppData\Roaming\freegames111\install_helper.exe (PUP.Optional.FreeGames.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) Code:
ATTFilter # AdwCleaner v3.016 - Bericht erstellt am 12/01/2014 um 14:13:57 # Aktualisiert 23/12/2013 von Xplode # Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (32 bits) # Benutzername : Samsung SA 11 - SAMSUNGSA11-PC # Gestartet von : C:\Users\Samsung SA 11\Desktop\adwcleaner_3.016.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search] ***** [ Browser ] ***** -\\ Internet Explorer v9.0.8112.16526 -\\ Mozilla Firefox v26.0 (de) [ Datei : C:\Users\Samsung SA 11\AppData\Roaming\Mozilla\Firefox\Profiles\c19kcti3.default-1389390471330\prefs.js ] [ Datei : C:\Users\Samsung SA 11\AppData\Roaming\Mozilla\Firefox\Profiles\ozer6ss3.default-1389394289152\prefs.js ] [ Datei : C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\4660bumu.default\prefs.js ] -\\ Google Chrome v [ Datei : C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\preferences ] ************************* AdwCleaner[R0].txt - [4556 octets] - [11/01/2014 18:31:49] AdwCleaner[R1].txt - [1409 octets] - [12/01/2014 14:12:19] AdwCleaner[S0].txt - [4527 octets] - [11/01/2014 18:33:06] AdwCleaner[S1].txt - [1330 octets] - [12/01/2014 14:13:57] ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1390 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.0 (01.07.2014:1) OS: Windows Vista (TM) Home Premium x86 Ran by Samsung SA 11 on 12.01.2014 at 14:21:35,26 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders Successfully deleted: [Empty Folder] C:\Users\Samsung SA 11\appdata\local\{3819f8a5-bd1b-a330-301d-fda6677fd30b} ~~~ FireFox Emptied folder: C:\Users\Samsung SA 11\AppData\Roaming\mozilla\firefox\profiles\ozer6ss3.default-1389394289152\minidumps [1 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 12.01.2014 at 14:26:41,24 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
13.01.2014, 10:14 | #7 |
/// the machine /// TB-Ausbilder | immer wieder "Page not found"ESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
14.01.2014, 14:51 | #8 |
| immer wieder "Page not found" Den ersten ESET-Scan habe ich nach 22h abgebrochen, einfach alle Backupdateien von der externen Festplatte gelöscht und neu gestartet. Danach keine Funden mehr. Puh. Ich komme wieder auf alle Seiten. Ich weiß nur nicht so ganz, wo die ganzen Trojaner und so herkommen. Ich mach in letzter Zeit fast gar nichts mit meinem Computer. Naja. Vielen vielen Dank für deine Hilfe! =) Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=5e928aa844406d4591d52f2870846fe8 # engine=16616 # end=finished # remove_checked=true # archives_checked=true # unwanted_checked=true # unsafe_checked=true # antistealth_checked=true # utc_time=2014-01-11 04:42:24 # local_time=2014-01-11 05:42:24 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1031 # osver=6.0.6002 NT Service Pack 2 # compatibility_mode=774 16777213 85 79 692026 58384526 0 0 # compatibility_mode=5892 16776574 100 100 35125 226991272 0 0 # scanned=302120 # found=8 # cleaned=8 # scan_time=11482 sh=93510E07EBD463BE51052EC8114EC16C5423103E ft=0 fh=0000000000000000 vn="Win32/Conduit.SearchProtect.A Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Program Files\Mozilla Firefox\components\sprotector.js" sh=77801D0E0DC02E8C50CDC73562F4D7F13FC1C18B ft=0 fh=0000000000000000 vn="Win32/Conduit.SearchProtect.A Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Program Files\SearchProtect\ffprotect\application.js" sh=77801D0E0DC02E8C50CDC73562F4D7F13FC1C18B ft=0 fh=0000000000000000 vn="Win32/Conduit.SearchProtect.A Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Qoobox\Quarantine\C\Users\Samsung SA 11\AppData\Roaming\SearchProtect\ffprotect\application.js.vir" sh=37DFB7F69D9AF38EE2044BA92162F2584A44758C ft=1 fh=9b36e8dc4bdb24c0 vn="Win32/Conedex.R Trojaner (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Samsung SA 11\AppData\Local\{3819f8a5-bd1b-a330-301d-fda6677fd30b}\U\00000001.@" sh=941E6BBBFF604A1FB3A495E89F0DB6E1BDAF2ABE ft=0 fh=0000000000000000 vn="JS/SecurityDisabler.A.Gen Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Samsung SA 11\Desktop\Alte Firefox-Daten\0pav7egt.default\prefs.js" sh=7125F4660C55922BCC5198D24CD933CC8DFBA74B ft=0 fh=0000000000000000 vn="JS/SecurityDisabler.A.Gen Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Samsung SA 11\Desktop\Alte Firefox-Daten\0pav7egt.default\prefs.js.bak" sh=183212E144C79635F4B35D3EBF338ECF87C74F9C ft=0 fh=0000000000000000 vn="JS/SecurityDisabler.A.Gen Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Samsung SA 11\Desktop\Alte Firefox-Daten\0pav7egt.default\prefs.js.new" sh=90E663206F7CA8F7D8CC9DC0A814FE6D35BD488D ft=0 fh=0000000000000000 vn="JS/SecurityDisabler.A.Gen Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Samsung SA 11\Desktop\Alte Firefox-Daten\0pav7egt.default\user.js" ESETSmartInstaller@High as downloader log: Can not open internetESETSmartInstaller@High as downloader log: Can not open internet# version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=5e928aa844406d4591d52f2870846fe8 # engine=16628 # end=stopped # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2014-01-14 09:49:40 # local_time=2014-01-14 10:49:40 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1031 # osver=6.0.6002 NT Service Pack 2 # compatibility_mode=774 16777213 85 79 922862 58618962 0 0 # compatibility_mode=5892 16776574 100 100 265961 227225708 0 0 # scanned=333989 # found=15 # cleaned=0 # scan_time=80025 sh=F8BB63EACE25381C36E4F032FDA627AA8DAE925C ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="G:\SAMSUNGSA11-PC\Backup Set 2012-07-10 184301\Backup Files 2012-07-10 184301\Backup files 324.zip" sh=249452034C2293A0040BF87BF4716E949C6F70F0 ft=0 fh=0000000000000000 vn="Variante von Win32/Sirefef.FL Trojaner" ac=I fn="G:\SAMSUNGSA11-PC\Backup Set 2012-07-10 184301\Backup Files 2012-07-11 071826\Backup files 1.zip" sh=89C1A70BAFE35B3B76CDCB6E50071187C9682F45 ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="G:\SAMSUNGSA11-PC\Backup Set 2012-07-10 184301\Backup Files 2012-07-22 191203\Backup files 17.zip" sh=D91CA2A7147823F3C9F93C007D4195107DCFC778 ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="G:\SAMSUNGSA11-PC\Backup Set 2012-07-10 184301\Backup Files 2012-07-30 133651\Backup files 3.zip" sh=E6508FE35FA54E627129796E8AC2A4F142D5E283 ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="G:\SAMSUNGSA11-PC\Backup Set 2012-07-10 184301\Backup Files 2012-08-05 190049\Backup files 3.zip" sh=479636A420B81275C379758AEAEC4260BC8AC694 ft=0 fh=0000000000000000 vn="Win32/Conedex.K Trojaner" ac=I fn="G:\SAMSUNGSA11-PC\Backup Set 2012-07-10 184301\Backup Files 2012-08-23 190808\Backup files 3.zip" sh=8839F389C05C7032C7168C3E20313B28181CAF30 ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="G:\SAMSUNGSA11-PC\Backup Set 2012-07-10 184301\Backup Files 2012-09-10 153945\Backup files 3.zip" sh=7C96BA25C26B31A0B6A1A1C88C592C8DFFC1D65C ft=0 fh=0000000000000000 vn="Win32/Sirefef.FL Trojaner" ac=I fn="G:\SAMSUNGSA11-PC\Backup Set 2012-07-10 184301\Backup Files 2012-09-17 154910\Backup files 4.zip" sh=DEFA1532D3AFD1E84A728F1A3DC1590037212AAC ft=0 fh=0000000000000000 vn="Win32/Sirefef.FL Trojaner" ac=I fn="G:\SAMSUNGSA11-PC\Backup Set 2012-07-10 184301\Backup Files 2012-09-24 142306\Backup files 2.zip" sh=C7D574A132F7F33B10338AC30BACB2AC54D7C28D ft=0 fh=0000000000000000 vn="Win32/Conedex.P Trojaner" ac=I fn="G:\SAMSUNGSA11-PC\Backup Set 2012-07-10 184301\Backup Files 2012-09-30 190003\Backup files 2.zip" sh=41B3DB41425A305D3F87D9009FE49C096C232A96 ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="G:\SAMSUNGSA11-PC\Backup Set 2012-07-10 184301\Backup Files 2012-10-28 190006\Backup files 1.zip" sh=9089A4ACE4004078DD2489F21F4EAA21881DAF2D ft=0 fh=0000000000000000 vn="Win32/Conedex.R Trojaner" ac=I fn="G:\SAMSUNGSA11-PC\Backup Set 2012-07-10 184301\Backup Files 2012-11-13 130302\Backup files 5.zip" sh=4C215A8B2760047331E9CAF2CE3AAE4EBC0A6EBE ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="G:\SAMSUNGSA11-PC\Backup Set 2012-12-10 201026\Backup Files 2013-01-13 150228\Backup files 114.zip" sh=8D6B1C6E3C47B62C2A5A49DFC74958E397A6785C ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="G:\SAMSUNGSA11-PC\Backup Set 2013-04-16 083042\Backup Files 2013-04-16 083042\Backup files 384.zip" sh=182F8291101C9400A08E4B7D5EDC275664F40FE8 ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="G:\SAMSUNGSA11-PC\Backup Set 2013-09-13 161132\Backup Files 2013-09-13 161132\Backup files 445.zip" ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=5e928aa844406d4591d52f2870846fe8 # engine=16643 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2014-01-14 01:13:28 # local_time=2014-01-14 02:13:28 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1031 # osver=6.0.6002 NT Service Pack 2 # compatibility_mode=774 16777213 85 79 935090 58631190 0 0 # compatibility_mode=5892 16776574 100 100 278189 227237936 0 0 # scanned=330089 # found=0 # cleaned=0 # scan_time=11990 Code:
ATTFilter Results of screen317's Security Check version 0.99.78 Windows Vista Service Pack 2 x86 (UAC is enabled) Internet Explorer 9 Internet Explorer 8 ``````````````Antivirus/Firewall Check:`````````````` WMI entry may not exist for antivirus; attempting automatic update. `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 CCleaner Java(TM) 6 Update 37 Java 7 Update 45 Adobe Flash Player 11.9.900.170 Adobe Reader 10.1.8 Adobe Reader out of Date! Mozilla Firefox (26.0) ````````Process Check: objlist.exe by Laurent```````` AVAST Software Avast AvastSvc.exe AVAST Software Avast AvastUI.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: % ````````````````````End of Log`````````````````````` FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-01-2014 02 Ran by Samsung SA 11 (administrator) on SAMSUNGSA11-PC on 14-01-2014 14:47:30 Running from C:\Users\Samsung SA 11\Downloads\FRST-OlderVersion Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Windows\System32\SLsvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (B.H.A Corporation) C:\Windows\System32\bgsvcgen.exe (Microsoft Corp.) C:\Program Files\Microsoft\BingDesktop\BingDesktopUpdater.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe (IObit) C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe (PC Tools) C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe () C:\Program Files\CyberLink\Shared Files\RichVideo.exe (Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (TOSHIBA CORPORATION) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe (Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Samsung Magic Doctor\MagicDoctorKbdHk.exe (SAMSUNG Electronics co., LTD.) C:\Program Files\Samsung\EBM\EasyBatteryMgr3.exe (SAMSUNG Electronics) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe (Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe (Realtek Semiconductor) C:\Windows\RtHDVCpl.exe (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Cyberlink Corp.) C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe () C:\Windows\Samsung\PanelMgr\SSMMgr.exe () C:\Windows\twain_32\Samsung\CLX3170\Scan2Pc.exe (Adobe Systems Inc.) C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe (Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe (PC Tools) C:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exe (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe () C:\Program Files\DivX\DivX Update\DivXUpdate.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Spotify Ltd) C:\Users\Samsung SA 11\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 6510 series\Bin\ScanToPCActivationApp.exe (TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe (Dropbox, Inc.) C:\Users\Samsung SA 11\AppData\Roaming\Dropbox\bin\Dropbox.exe (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe (TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 6510 series\Bin\HPNetworkCommunicator.exe (Microsoft Corporation) C:\Windows\System32\conime.exe (Microsoft Corporation) C:\Windows\System32\sdclt.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [6111232 2008-04-17] (Realtek Semiconductor) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1029416 2007-10-26] (Synaptics, Inc.) HKLM\...\Run: [RemoteControl] - C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [71216 2007-03-14] (Cyberlink Corp.) HKLM\...\Run: [LanguageShortcut] - C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [52256 2007-01-08] () HKLM\...\Run: [Samsung PanelMgr] - C:\Windows\Samsung\PanelMgr\SSMMgr.exe [524288 2008-08-11] () HKLM\...\Run: [3170 Scan2PC] - C:\Windows\twain_32\Samsung\CLX3170\Scan2Pc.exe [495616 2008-08-07] () HKLM\...\Run: [NvCplDaemon] - C:\Windows\system32\NvCpl.dll [13548064 2008-07-27] (NVIDIA Corporation) HKLM\...\Run: [NvMediaCenter] - C:\Windows\system32\NvMcTray.dll [92704 2008-07-27] (NVIDIA Corporation) HKLM\...\Run: [ITSecMng] - C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [75136 2007-09-28] ( TOSHIBA CORPORATION) HKLM\...\Run: [AdobeCS4ServiceManager] - C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated) HKLM\...\Run: [Adobe Acrobat Speed Launcher] - C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [44128 2013-05-08] (Adobe Systems Incorporated) HKLM\...\Run: [Acrobat Assistant 8.0] - C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [642664 2013-05-08] (Adobe Systems Inc.) HKLM\...\Run: [Adobe_ID0ENQBO] - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4Tray.exe [378224 2008-08-15] (Adobe Systems Incorporated) HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM\...\Run: [AppleSyncNotifier] - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-10-06] (Apple Inc.) HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM\...\Run: [HP Software Update] - C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-03-24] (Hewlett-Packard) HKLM\...\Run: [DivXMediaServer] - C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-09-11] (DivX, LLC) HKLM\...\Run: [SSDMonitor] - C:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exe [105120 2012-08-21] (PC Tools) HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.) HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.) HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2014-01-03] (AVAST Software) HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM\...\Run: [DivXUpdate] - C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] () HKLM\...\Run: [BingDesktop] - C:\Program Files\Microsoft\BingDesktop\BingDesktop.exe [2258056 2013-09-22] (Microsoft Corp.) HKLM\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [707984 2013-10-10] (Cisco Systems, Inc.) HKCU\...\Run: [Spotify Web Helper] - C:\Users\Samsung SA 11\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1140736 2013-10-12] (Spotify Ltd) HKCU\...\Run: [HP Photosmart 6510 series (NET)] - C:\Program Files\HP\HP Photosmart 6510 series\Bin\ScanToPCActivationApp.exe [1804648 2011-09-16] (Hewlett-Packard Co.) HKCU\...0c966feabec1\InprocServer32: [Default-shell32] ATTENTION! ====> ZeroAccess? HKU\Administrator\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [ 2008-03-17] (Hewlett-Packard Company) HKU\Administrator\...\Run: [swg] - "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" HKU\Administrator\...\Run: [AdobeBridge] - [x] HKU\Administrator\...\Run: [SearchProtect] - C:\Users\Administrator\AppData\Roaming\SearchProtect\bin\cltmng.exe HKU\Default\...\Run: [WindowsWelcomeCenter] - C:\Windows\system32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation) HKU\Default User\...\Run: [WindowsWelcomeCenter] - C:\Windows\system32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation) HKU\fbwuser\...\Run: [WindowsWelcomeCenter] - C:\Windows\system32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation) HKU\Gast\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [ 2008-03-17] (Hewlett-Packard Company) HKU\Gast\...\Run: [swg] - "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" HKU\Gast\...\Run: [AdobeBridge] - [x] HKU\peter\...\Run: [WindowsWelcomeCenter] - C:\Windows\system32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation) HKU\peter\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [ 2008-03-17] (Hewlett-Packard Company) Startup: C:\Users\Samsung SA 11\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Samsung SA 11\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== ProxyServer: socks=127.0.0.1:16101 HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.gmx.net/ SearchScopes: HKLM - DefaultScope value is missing. BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.) BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll (Google Inc.) BHO: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File Toolbar: HKCU - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\Samsung SA 11\AppData\Roaming\Mozilla\Firefox\Profiles\ozer6ss3.default-1389394289152 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll No File FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC) FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: Adobe Acrobat - C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101799.dll (Amazon.com, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-11-17] FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2013-11-17] FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2013-11-17] FF Extension: Hotspot Shield Extension - C:\Program Files\Mozilla Firefox\browser\extensions\afproxy@anchorfree.com [2013-12-11] FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [] FF HKLM\...\Firefox\Extensions: [{000a9d1c-beef-4f90-9363-039d445309b8}] - C:\Program Files\Google\Google Gears\Firefox\ FF Extension: Google Gears - C:\Program Files\Google\Google Gears\Firefox\ [] FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-05-04] FF HKLM\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files\Hewlett-Packard\SmartPrint\QPExtension FF Extension: SmartPrintButton - C:\Program Files\Hewlett-Packard\SmartPrint\QPExtension [2012-08-16] Chrome: ======= CHR HomePage: hxxp://www.google.com CHR RestoreOnStartup: "hxxp://www.google.com" CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\23.0.1271.97\PepperFlash\pepflashplayer.dll No File CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\23.0.1271.97\gcswf32.dll No File CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_271.dll No File CHR Plugin: (Remoting Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\23.0.1271.97\ppGoogleNaClPluginChrome.dll No File CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\23.0.1271.97\pdf.dll No File CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Java Deployment Toolkit 6.0.310.5) - C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll No File CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) CHR Plugin: (2007 Microsoft Office system) - C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll No File CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll No File CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) CHR Plugin: (DivX Plus Web Player) - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll No File CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () CHR Plugin: (Windows Presentation Foundation) - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) CHR Extension: (avast! WebRep) - C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1456_0 [2012-08-11] CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0 [2012-08-11] ========================== Services (Whitelisted) ================= S3 Adobe Version Cue CS4; C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [284016 2008-08-15] (Adobe Systems Incorporated) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-03] (AVAST Software) R2 bgsvcgen; C:\Windows\System32\bgsvcgen.exe [122512 2006-12-28] (B.H.A Corporation) R2 BingDesktopUpdate; C:\Program Files\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-09-22] (Microsoft Corp.) S2 gupdate1ca087358465a06; C:\Program Files\Google\Update\GoogleUpdate.exe [133104 2009-07-19] (Google Inc.) R2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2151744 2014-01-11] (IObit) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [235216 2013-09-06] (McAfee, Inc.) R2 PCToolsSSDMonitorSvc; C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe [794272 2012-08-21] (PC Tools) R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [272024 2006-12-19] () R2 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.) S3 WLSetupSvc; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [266240 2007-10-25] (Microsoft Corporation) S2 McShield; C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe [x] S3 McSysmon; C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe [x] ==================== Drivers (Whitelisted) ==================== S3 acsint; C:\Windows\System32\DRIVERS\acsint.sys [40304 2013-10-10] (Cisco Systems, Inc.) S3 acsmux; C:\Windows\System32\DRIVERS\acsmux.sys [58736 2013-10-10] (Cisco Systems, Inc.) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-01-03] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr.sys [54832 2014-01-03] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49944 2013-11-13] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [775952 2014-01-03] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [410528 2014-01-03] (AVAST Software) R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [57672 2014-01-03] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [180248 2014-01-03] () S3 AVerAF35; C:\Windows\System32\Drivers\AVerAF35.sys [474880 2009-10-19] (AVerMedia TECHNOLOGIES, Inc.) R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [37664 2013-11-12] (AVG Technologies) R1 cdrbsdrv; C:\Windows\System32\Drivers\cdrbsdrv.sys [33408 2006-02-20] (B.H.A Corporation) S3 ECS_Loader_220; C:\Windows\System32\Drivers\ECS_Loader_220.sys [15616 2005-10-31] (WideView Technology Inc.) R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [39624 2013-11-13] (AnchorFree Inc.) R2 KMDFMEMIO; C:\Windows\System32\DRIVERS\kmdfmemio.sys [13312 2007-05-23] (SAMSUNG ELECTRONICS CO., LTD.) S3 taphss; C:\Windows\System32\DRIVERS\taphss.sys [33512 2012-08-01] (AnchorFree Inc) R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [37064 2013-04-24] (Anchorfree Inc.) R3 VMC302; C:\Windows\System32\Drivers\VMC302.sys [242560 2008-04-05] (Vimicro Corporation) S3 w800bus; C:\Windows\System32\DRIVERS\w800bus.sys [60768 2005-06-13] (MCCI) U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [x] S3 IpInIp; system32\DRIVERS\ipinip.sys [x] S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x] S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-14 14:32 - 2014-01-14 14:32 - 00987410 _____ C:\Users\Samsung SA 11\Downloads\SecurityCheck.exe 2014-01-12 14:26 - 2014-01-12 14:26 - 00000911 _____ C:\Users\Samsung SA 11\Desktop\JRT.txt 2014-01-12 14:20 - 2014-01-12 14:20 - 00001470 _____ C:\Users\Samsung SA 11\Desktop\AdwCleaner[S1].txt 2014-01-12 12:21 - 2014-01-12 12:21 - 00002107 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk 2014-01-12 12:21 - 2014-01-12 12:21 - 00001032 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk 2014-01-12 12:18 - 2014-01-12 12:18 - 34008992 _____ (DVDVideoSoft Ltd. ) C:\Users\Samsung SA 11\Downloads\FreeYouTubeToMP3Converter.exe 2014-01-12 09:46 - 2014-01-14 14:47 - 00000000 ____D C:\Users\Samsung SA 11\Downloads\FRST-OlderVersion 2014-01-11 22:33 - 2014-01-11 22:33 - 04645232 _____ (Piriform Ltd) C:\Users\Samsung SA 11\Downloads\ccsetup409.exe 2014-01-11 22:13 - 2014-01-11 22:13 - 00001198 _____ C:\Users\Samsung SA 11\Desktop\Speed Test.lnk 2014-01-11 22:13 - 2014-01-11 22:13 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter 2014-01-11 18:37 - 2014-01-11 18:37 - 00004527 _____ C:\Users\Samsung SA 11\Desktop\AdwCleaner[S0].txt 2014-01-11 18:25 - 2014-01-11 18:25 - 00000000 ____D C:\Windows\ERUNT 2014-01-11 18:21 - 2014-01-11 18:21 - 00000000 ____D C:\Users\Samsung SA 11\Desktop\rkill 2014-01-11 12:44 - 2014-01-11 12:44 - 00126857 _____ C:\ComboFix.txt 2014-01-11 12:14 - 2014-01-11 12:44 - 00000000 ____D C:\Qoobox 2014-01-11 12:14 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe 2014-01-11 12:14 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe 2014-01-11 12:14 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-01-11 12:14 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-01-11 12:14 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-01-11 12:14 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe 2014-01-11 12:14 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe 2014-01-11 12:14 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe 2014-01-11 12:13 - 2014-01-11 12:42 - 00000000 ____D C:\Windows\erdnt 2014-01-11 11:20 - 2014-01-11 11:20 - 02347384 _____ (ESET) C:\Users\Samsung SA 11\Desktop\esetsmartinstaller_deu.exe 2014-01-11 11:20 - 2014-01-11 11:20 - 01037068 _____ (Thisisu) C:\Users\Samsung SA 11\Desktop\JRT61.exe 2014-01-11 11:18 - 2014-01-12 14:13 - 00000000 ____D C:\AdwCleaner 2014-01-11 11:18 - 2014-01-11 11:18 - 01233962 _____ C:\Users\Samsung SA 11\Desktop\adwcleaner_3.016.exe 2014-01-11 09:32 - 2014-01-11 21:53 - 00003272 _____ C:\Users\Samsung SA 11\Desktop\Rkill.txt 2014-01-11 09:32 - 2014-01-11 09:32 - 01933048 _____ (Bleeping Computer, LLC) C:\Users\Samsung SA 11\Desktop\Hilfsprogramm.exe 2014-01-11 09:21 - 2014-01-11 09:21 - 00001030 _____ C:\Users\Samsung SA 11\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk 2014-01-11 09:21 - 2014-01-11 09:21 - 00001006 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk 2014-01-11 09:21 - 2014-01-11 09:21 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\IObit 2014-01-11 09:21 - 2014-01-11 09:21 - 00000000 ____D C:\ProgramData\ProductData 2014-01-11 09:21 - 2014-01-11 09:21 - 00000000 ____D C:\ProgramData\IObit 2014-01-11 09:21 - 2014-01-11 09:21 - 00000000 ____D C:\Program Files\IObit 2014-01-10 23:00 - 2014-01-13 12:31 - 00038721 _____ C:\Users\Samsung SA 11\Downloads\Addition.txt 2014-01-10 23:00 - 2014-01-10 23:00 - 00377856 _____ C:\Users\Samsung SA 11\Downloads\gmer_2.1.19163.exe 2014-01-10 22:59 - 2014-01-14 14:47 - 00000000 ____D C:\FRST 2014-01-10 22:59 - 2014-01-13 12:31 - 00048612 _____ C:\Users\Samsung SA 11\Downloads\FRST.txt 2014-01-10 22:57 - 2014-01-12 14:32 - 01219584 _____ (Farbar) C:\Users\Samsung SA 11\Downloads\FRST.exe 2014-01-10 22:54 - 2014-01-10 22:55 - 00000488 _____ C:\Users\Samsung SA 11\Downloads\defogger_disable.log 2014-01-10 22:54 - 2014-01-10 22:54 - 00000000 _____ C:\Users\Samsung SA 11\defogger_reenable 2014-01-10 22:51 - 2014-01-10 22:51 - 00050477 _____ C:\Users\Samsung SA 11\Downloads\Defogger.exe 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Local\genienext 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Local\cache 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 ____D C:\Users\Samsung SA 11\.android 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 _____ C:\Users\Samsung SA 11\daemonprocess.txt 2014-01-10 22:46 - 2014-01-11 08:38 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\DigitalSites 2014-01-10 22:46 - 2014-01-11 00:46 - 00000147 _____ C:\Users\Samsung SA 11\AppData\Roaming\WB.CFG 2014-01-10 22:46 - 2014-01-11 00:46 - 00000005 _____ C:\Users\Samsung SA 11\AppData\Roaming\WBPU-TTL.DAT 2014-01-10 22:44 - 2014-01-10 22:44 - 00377856 _____ C:\Users\Samsung SA 11\Downloads\jt3jpstr.exe 2014-01-09 13:31 - 2014-01-09 13:31 - 04223268 _____ C:\ProgramData\SamPCFax000009500000 2014-01-03 18:55 - 2014-01-09 09:05 - 00000000 ____D C:\Program Files\Gabest 2014-01-03 18:48 - 2014-01-03 19:18 - 00000551 _____ C:\Users\Samsung SA 11\AppData\Roaming\AutoGK.ini 2014-01-03 18:46 - 2014-01-03 19:19 - 00000000 ____D C:\Program Files\AutoGK 2014-01-03 18:44 - 2014-01-03 18:45 - 12341641 _____ C:\Users\Samsung SA 11\Downloads\AutoGordianKnot.2.55.Setup.exe 2013-12-20 15:31 - 2013-12-20 15:31 - 23867560 _____ (Mozilla) C:\Users\Samsung SA 11\Downloads\Firefox Setup 26.0.exe 2013-12-20 13:34 - 2013-12-20 13:35 - 00283096 _____ (Mozilla) C:\Users\Samsung SA 11\Downloads\Firefox Setup Stub 26.0.exe 2013-12-16 22:46 - 2013-12-16 22:46 - 00002073 _____ C:\Users\Public\Desktop\Google Earth.lnk ==================== One Month Modified Files and Folders ======= 2014-01-14 14:47 - 2014-01-12 09:46 - 00000000 ____D C:\Users\Samsung SA 11\Downloads\FRST-OlderVersion 2014-01-14 14:47 - 2014-01-10 22:59 - 00000000 ____D C:\FRST 2014-01-14 14:43 - 2009-07-19 14:29 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-01-14 14:32 - 2014-01-14 14:32 - 00987410 _____ C:\Users\Samsung SA 11\Downloads\SecurityCheck.exe 2014-01-14 14:28 - 2012-04-05 07:54 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-01-14 14:20 - 2006-11-02 13:47 - 00004784 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-14 14:20 - 2006-11-02 13:47 - 00004784 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-14 13:43 - 2009-07-19 14:29 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-01-14 13:20 - 2008-09-15 09:38 - 01122807 _____ C:\Windows\WindowsUpdate.log 2014-01-13 13:20 - 2009-04-24 15:42 - 00000416 ____H C:\Windows\Tasks\SupBackGroundTask.job 2014-01-13 12:31 - 2014-01-10 23:00 - 00038721 _____ C:\Users\Samsung SA 11\Downloads\Addition.txt 2014-01-13 12:31 - 2014-01-10 22:59 - 00048612 _____ C:\Users\Samsung SA 11\Downloads\FRST.txt 2014-01-13 12:31 - 2009-02-14 22:28 - 00154873 _____ C:\ProgramData\nvModes.001 2014-01-13 12:24 - 2012-09-14 18:28 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\Dropbox 2014-01-13 12:22 - 2008-11-03 16:17 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite 2014-01-13 12:19 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-12 22:35 - 2008-07-09 07:09 - 00000012 _____ C:\Windows\bthservsdp.dat 2014-01-12 22:35 - 2006-11-02 14:01 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2014-01-12 18:44 - 2010-06-29 11:04 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\Skype 2014-01-12 16:56 - 2012-12-02 14:10 - 00002379 _____ C:\Users\Public\Desktop\Skype.lnk 2014-01-12 14:32 - 2014-01-10 22:57 - 01219584 _____ (Farbar) C:\Users\Samsung SA 11\Downloads\FRST.exe 2014-01-12 14:26 - 2014-01-12 14:26 - 00000911 _____ C:\Users\Samsung SA 11\Desktop\JRT.txt 2014-01-12 14:20 - 2014-01-12 14:20 - 00001470 _____ C:\Users\Samsung SA 11\Desktop\AdwCleaner[S1].txt 2014-01-12 14:13 - 2014-01-11 11:18 - 00000000 ____D C:\AdwCleaner 2014-01-12 13:56 - 2013-01-17 08:24 - 00146428 _____ C:\Windows\PFRO.log 2014-01-12 13:56 - 2008-07-08 15:42 - 00000000 ____D C:\Windows\PCHEALTH 2014-01-12 12:22 - 2013-04-09 21:57 - 00000000 ____D C:\Program Files\DVDVideoSoft 2014-01-12 12:21 - 2014-01-12 12:21 - 00002107 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk 2014-01-12 12:21 - 2014-01-12 12:21 - 00001032 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk 2014-01-12 12:21 - 2013-04-09 21:57 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\DVDVideoSoft 2014-01-12 12:21 - 2013-04-09 21:57 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft 2014-01-12 12:18 - 2014-01-12 12:18 - 34008992 _____ (DVDVideoSoft Ltd. ) C:\Users\Samsung SA 11\Downloads\FreeYouTubeToMP3Converter.exe 2014-01-11 22:33 - 2014-01-11 22:33 - 04645232 _____ (Piriform Ltd) C:\Users\Samsung SA 11\Downloads\ccsetup409.exe 2014-01-11 22:13 - 2014-01-11 22:13 - 00001198 _____ C:\Users\Samsung SA 11\Desktop\Speed Test.lnk 2014-01-11 22:13 - 2014-01-11 22:13 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter 2014-01-11 22:05 - 2012-11-30 08:54 - 00001917 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk 2014-01-11 22:05 - 2010-06-25 13:12 - 00000000 ____D C:\Program Files\McAfee Security Scan 2014-01-11 22:04 - 2008-07-08 15:47 - 00000000 ____D C:\ProgramData\McAfee 2014-01-11 21:53 - 2014-01-11 09:32 - 00003272 _____ C:\Users\Samsung SA 11\Desktop\Rkill.txt 2014-01-11 18:37 - 2014-01-11 18:37 - 00004527 _____ C:\Users\Samsung SA 11\Desktop\AdwCleaner[S0].txt 2014-01-11 18:33 - 2012-08-11 17:04 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\Uniblue 2014-01-11 18:33 - 2012-08-11 17:04 - 00000000 ____D C:\Program Files\Uniblue 2014-01-11 18:33 - 2011-10-04 18:08 - 00000000 ____D C:\ProgramData\ICQ 2014-01-11 18:25 - 2014-01-11 18:25 - 00000000 ____D C:\Windows\ERUNT 2014-01-11 18:21 - 2014-01-11 18:21 - 00000000 ____D C:\Users\Samsung SA 11\Desktop\rkill 2014-01-11 12:44 - 2014-01-11 12:44 - 00126857 _____ C:\ComboFix.txt 2014-01-11 12:44 - 2014-01-11 12:14 - 00000000 ____D C:\Qoobox 2014-01-11 12:44 - 2006-11-02 12:18 - 00000000 __RHD C:\Users\Default 2014-01-11 12:44 - 2006-11-02 12:18 - 00000000 ___RD C:\Users\Public 2014-01-11 12:42 - 2014-01-11 12:13 - 00000000 ____D C:\Windows\erdnt 2014-01-11 12:36 - 2006-11-02 11:23 - 00000215 _____ C:\Windows\system.ini 2014-01-11 12:32 - 2006-11-02 11:22 - 59768832 _____ C:\Windows\system32\config\software.bak 2014-01-11 12:32 - 2006-11-02 11:22 - 45088768 _____ C:\Windows\system32\config\COMPON~3.bak 2014-01-11 12:32 - 2006-11-02 11:22 - 42729472 _____ C:\Windows\system32\config\system.bak 2014-01-11 12:32 - 2006-11-02 11:22 - 00262144 _____ C:\Windows\system32\config\security.bak 2014-01-11 12:32 - 2006-11-02 11:22 - 00262144 _____ C:\Windows\system32\config\sam.bak 2014-01-11 12:32 - 2006-11-02 11:22 - 00262144 _____ C:\Windows\system32\config\default.bak 2014-01-11 11:25 - 2009-04-30 15:06 - 00000000 ____D C:\Users\Samsung SA 11\.gimp-2.6 2014-01-11 11:20 - 2014-01-11 11:20 - 02347384 _____ (ESET) C:\Users\Samsung SA 11\Desktop\esetsmartinstaller_deu.exe 2014-01-11 11:20 - 2014-01-11 11:20 - 01037068 _____ (Thisisu) C:\Users\Samsung SA 11\Desktop\JRT61.exe 2014-01-11 11:18 - 2014-01-11 11:18 - 01233962 _____ C:\Users\Samsung SA 11\Desktop\adwcleaner_3.016.exe 2014-01-11 11:18 - 2009-04-30 14:38 - 00000000 ____D C:\Users\Samsung SA 11\.scribus 2014-01-11 09:32 - 2014-01-11 09:32 - 01933048 _____ (Bleeping Computer, LLC) C:\Users\Samsung SA 11\Desktop\Hilfsprogramm.exe 2014-01-11 09:21 - 2014-01-11 09:21 - 00001030 _____ C:\Users\Samsung SA 11\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk 2014-01-11 09:21 - 2014-01-11 09:21 - 00001006 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk 2014-01-11 09:21 - 2014-01-11 09:21 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\IObit 2014-01-11 09:21 - 2014-01-11 09:21 - 00000000 ____D C:\ProgramData\ProductData 2014-01-11 09:21 - 2014-01-11 09:21 - 00000000 ____D C:\ProgramData\IObit 2014-01-11 09:21 - 2014-01-11 09:21 - 00000000 ____D C:\Program Files\IObit 2014-01-11 08:57 - 2006-11-02 13:37 - 00000000 ____D C:\Windows\DigitalLocker 2014-01-11 08:38 - 2014-01-10 22:46 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\DigitalSites 2014-01-11 00:46 - 2014-01-10 22:46 - 00000147 _____ C:\Users\Samsung SA 11\AppData\Roaming\WB.CFG 2014-01-11 00:46 - 2014-01-10 22:46 - 00000005 _____ C:\Users\Samsung SA 11\AppData\Roaming\WBPU-TTL.DAT 2014-01-10 23:00 - 2014-01-10 23:00 - 00377856 _____ C:\Users\Samsung SA 11\Downloads\gmer_2.1.19163.exe 2014-01-10 22:55 - 2014-01-10 22:54 - 00000488 _____ C:\Users\Samsung SA 11\Downloads\defogger_disable.log 2014-01-10 22:54 - 2014-01-10 22:54 - 00000000 _____ C:\Users\Samsung SA 11\defogger_reenable 2014-01-10 22:54 - 2008-11-03 16:17 - 00000000 ____D C:\Users\Samsung SA 11 2014-01-10 22:51 - 2014-01-10 22:51 - 00050477 _____ C:\Users\Samsung SA 11\Downloads\Defogger.exe 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Local\genienext 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Local\cache 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 ____D C:\Users\Samsung SA 11\.android 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 _____ C:\Users\Samsung SA 11\daemonprocess.txt 2014-01-10 22:44 - 2014-01-10 22:44 - 00377856 _____ C:\Users\Samsung SA 11\Downloads\jt3jpstr.exe 2014-01-10 19:53 - 2013-08-09 18:53 - 00000943 _____ C:\Users\Samsung SA 11\Desktop\Dropbox.lnk 2014-01-10 19:53 - 2013-08-09 18:49 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-01-09 16:17 - 2013-10-15 12:41 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\vlc 2014-01-09 13:31 - 2014-01-09 13:31 - 04223268 _____ C:\ProgramData\SamPCFax000009500000 2014-01-09 13:31 - 2009-01-10 19:23 - 00010863 _____ C:\Users\Samsung SA 11\AppData\Roaming\SmarThruOptions.xml 2014-01-09 12:22 - 2008-12-25 12:57 - 00000000 ____D C:\Program Files\Google 2014-01-09 09:08 - 2011-11-20 11:09 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrettspielWelt 2014-01-09 09:06 - 2009-10-31 14:31 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Local\Deployment 2014-01-09 09:05 - 2014-01-03 18:55 - 00000000 ____D C:\Program Files\Gabest 2014-01-09 09:02 - 2008-12-25 13:07 - 00000767 _____ C:\Users\Samsung SA 11\Documents\Meine freigegebenen Ordner.lnk 2014-01-09 09:01 - 2008-12-25 13:01 - 00000000 ____D C:\Program Files\Windows Live 2014-01-09 08:59 - 2008-12-25 12:57 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Local\Google 2014-01-09 08:59 - 2008-12-25 12:57 - 00000000 ____D C:\ProgramData\Google 2014-01-09 08:58 - 2009-09-28 17:49 - 00000000 ____D C:\Program Files\Electronic Arts 2014-01-05 12:54 - 2013-03-09 12:49 - 00004994 _____ C:\Windows\setupact.log 2014-01-03 19:19 - 2014-01-03 18:46 - 00000000 ____D C:\Program Files\AutoGK 2014-01-03 19:18 - 2014-01-03 18:48 - 00000551 _____ C:\Users\Samsung SA 11\AppData\Roaming\AutoGK.ini 2014-01-03 18:45 - 2014-01-03 18:44 - 12341641 _____ C:\Users\Samsung SA 11\Downloads\AutoGordianKnot.2.55.Setup.exe 2014-01-03 18:20 - 2013-11-13 22:47 - 00001873 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2014-01-03 18:19 - 2013-11-13 22:34 - 00180248 _____ C:\Windows\system32\Drivers\aswVmm.sys 2014-01-03 18:19 - 2011-05-04 13:06 - 00775952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2014-01-03 18:19 - 2011-05-04 13:06 - 00410528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2014-01-03 18:19 - 2011-05-04 13:06 - 00067824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-01-03 18:19 - 2011-05-04 13:06 - 00057672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys 2014-01-03 18:19 - 2011-05-04 13:06 - 00054832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr.sys 2014-01-03 18:19 - 2011-05-04 13:05 - 00270240 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-01-03 18:19 - 2011-05-04 13:05 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2013-12-21 21:30 - 2006-11-02 11:33 - 01582492 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-21 20:26 - 2012-05-03 19:48 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2013-12-20 15:32 - 2013-11-17 20:11 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-12-20 15:32 - 2010-03-28 13:31 - 00000846 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-12-20 15:31 - 2013-12-20 15:31 - 23867560 _____ (Mozilla) C:\Users\Samsung SA 11\Downloads\Firefox Setup 26.0.exe 2013-12-20 13:35 - 2013-12-20 13:34 - 00283096 _____ (Mozilla) C:\Users\Samsung SA 11\Downloads\Firefox Setup Stub 26.0.exe 2013-12-16 22:46 - 2013-12-16 22:46 - 00002073 _____ C:\Users\Public\Desktop\Google Earth.lnk 2013-12-16 12:40 - 2012-11-26 13:09 - 00000906 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-12-16 12:40 - 2012-11-26 13:09 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware ZeroAccess: C:\Users\Samsung SA 11\AppData\Local\{3819f8a5-bd1b-a330-301d-fda6677fd30b} C:\Users\Samsung SA 11\AppData\Local\{3819f8a5-bd1b-a330-301d-fda6677fd30b}\@ Some content of TEMP: ==================== C:\Users\Samsung SA 11\AppData\Local\temp\BackupSetup.exe C:\Users\Samsung SA 11\AppData\Local\temp\ffdshow.exe C:\Users\Samsung SA 11\AppData\Local\temp\install_helper.exe C:\Users\Samsung SA 11\AppData\Local\temp\MatroskaSplitter.exe C:\Users\Samsung SA 11\AppData\Local\temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-14 12:39 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 13-01-2014 02 Ran by Samsung SA 11 at 2014-01-14 14:48:16 Running from C:\Users\Samsung SA 11\Downloads\FRST-OlderVersion Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== Update for Microsoft Office 2007 (KB2508958) (Version: - Microsoft) Acrobat.com (Version: 0.0.0 - Adobe Systems Incorporated) Hidden Acrobat.com (Version: 1.7.186 - Adobe Systems Incorporated) Adobe Acrobat 9 Pro - English, Français, Deutsch (Version: 9.5.5 - Adobe Systems) Hidden Adobe Acrobat 9.5.5 - CPSID_83708 (Version: - Adobe Systems Incorporated) Adobe AIR (Version: 3.9.0.1210 - Adobe Systems Incorporated) Adobe AIR (Version: 3.9.0.1210 - Adobe Systems Incorporated) Hidden Adobe Anchor Service CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Asset Services CS4 (Version: 4 - Adobe Systems Incorporated) Hidden Adobe Bridge CS4 (Version: 3 - Adobe Systems Incorporated) Hidden Adobe CMaps CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Color - Photoshop Specific CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Color EU Recommended Settings CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Color JA Extra Settings CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Color NA Extra Settings CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Color Video Profiles CS CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Creative Suite 4 Design Standard (Version: 4.0 - Adobe Systems Incorporated) Adobe Creative Suite 4 Design Standard (Version: 4.0 - Adobe Systems Incorporated) Hidden Adobe CSI CS4 (Version: 1 - Adobe Systems Incorporated) Hidden Adobe Default Language CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Device Central CS4 (Version: 2 - Adobe Systems Incorporated) Hidden Adobe Drive CS4 (Version: 1 - Adobe Systems Incorporated) Hidden Adobe ExtendScript Toolkit CS4 (Version: 3.0.0 - Adobe Systems Incorporated) Hidden Adobe Extension Manager CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Flash Player 11 ActiveX (Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Flash Player 11 Plugin (Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Fonts All (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Illustrator CS4 (Version: 14.0 - Adobe Systems Incorporated) Hidden Adobe InDesign CS4 (Version: 6.0 - Adobe Systems Incorporated) Hidden Adobe InDesign CS4 Application Feature Set Files (Roman) (Version: 6.0 - Adobe Systems Incorporated) Hidden Adobe InDesign CS4 Common Base Files (Version: 6.0 - Adobe Systems Incorporated) Hidden Adobe InDesign CS4 Icon Handler (Version: 6.0 - Adobe Systems Incorporated) Hidden Adobe Linguistics CS4 (Version: 4.0.0 - Adobe Systems Incorporated) Hidden Adobe Media Player (Version: 0.0.0 - Adobe Systems Incorporated) Hidden Adobe Media Player (Version: 1.1 - Adobe Systems Incorporated) Adobe Output Module (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe PDF Library Files CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden Adobe Photoshop CS4 (Version: 11.0 - Adobe Systems Incorporated) Hidden Adobe Photoshop CS4 Support (Version: 11.0 - Adobe Systems Incorporated) Hidden Adobe Reader X (10.1.8) - Deutsch (Version: 10.1.8 - Adobe Systems Incorporated) Adobe Search for Help (Version: 1.0 - Adobe Systems Incorporated) Hidden Adobe Service Manager Extension (Version: 1.0 - Adobe Systems Incorporated) Hidden Adobe Setup (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe SGM CS4 (Version: 3.0 - Adobe Systems Incorporated) Hidden Adobe SING CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Type Support CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden Adobe Update Manager CS4 (Version: 6.0.0 - Adobe Systems Incorporated) Hidden Adobe Version Cue CS4 Server (Version: 4.0 - Adobe Systems Incorporated) Hidden Adobe WinSoft Linguistics Plugin (Version: 1.1 - Adobe Systems Incorporated) Hidden Adobe XMP Panels CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden AdobeColorCommonSetCMYK (Version: 2.0 - Adobe Systems Incorporated) Hidden AdobeColorCommonSetRGB (Version: 2.0 - Adobe Systems Incorporated) Hidden Agere Systems HDA Modem (Version: - Agere Systems) Amazon MP3-Downloader 1.0.17 (Version: 1.0.17 - Amazon Services LLC) Apple Application Support (Version: 2.3.6 - Apple Inc.) Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.) Apple Software Update (Version: 2.1.3.127 - Apple Inc.) Atheros WLAN Client (Version: 1.00.000 - ) avast! Free Antivirus (Version: 9.0.2011 - Avast Software) Bing-Desktop (Version: 1.3.322.0 - Microsoft Corporation) Bluetooth Stack for Windows by Toshiba (Version: v6.00.05 - TOSHIBA CORPORATION) Bonjour (Version: 3.0.0.10 - Apple Inc.) CCleaner (Version: 3.26 - Piriform) Cisco AnyConnect Secure Mobility Client (Version: 3.1.04072 - Cisco Systems, Inc.) Cisco AnyConnect Secure Mobility Client (Version: 3.1.04072 - Cisco Systems, Inc.) Hidden Connect (Version: 1.0.0.1 - Adobe Systems Incorporated) Hidden CyberLink DVD Suite (Version: 5.0.2403 - CyberLink Corp.) CyberLink Power2Go (Version: 5.0.3825 - CyberLink Corp.) Die Sims 2 (Version: - ) Die Sims 2: Nightlife (Version: - ) Die Sims 2: Open For Business (Version: - ) Die Sims 2: Wilde Campus-Jahre (Version: - ) Die Sims™ 2 Apartment-Leben (Version: - Electronic Arts) Die Sims™ 2 Gute Reise (Version: - Electronic Arts) Die Sims™ 2 Haustiere (Version: - ) Die Sims™ 2 Vier Jahreszeiten (Version: - ) Die Sims™ 3 (Version: 1.50.56 - Electronic Arts) Die*Sims*Mittelalter (Version: 2.0.113 - Electronic Arts) DivX Converter (Version: 7.1.0 - DivX, Inc.) DivX Plus DirectShow Filters (Version: - DivX, Inc.) DivX Version Checker (Version: 7.1.0.2 - DivX, Inc.) DivX-Setup (Version: 2.6.1.87 - DivX, LLC) dm-Fotowelt (Version: 5.0.4 - CEWE COLOR AG u Co. OHG) Dropbox (Version: 2.4.11 - Dropbox, Inc.) Easy Battery Manager (Version: 3.2.1.7 - ) Easy Display Manager (Version: 2.0.0.0 - Samsung) Easy Network Manager 3.0 (Version: 3.0.0.0 - Ihr Firmenname) Easy Network Manager 3.0 (Version: 3.0.0.0 - Ihr Firmenname) Hidden Easy SpeedUp Manager (Version: 2.0.1.0 - ) Firebird/InterBase(r) ODBC driver 2.0 (Version: 2.0 - Firebird Project) Free YouTube to MP3 Converter version 3.12.20.1230 (Version: 3.12.20.1230 - DVDVideoSoft Ltd.) Google Earth (Version: 7.1.2.2041 - Google) Google Gears (Version: 0.5.3600 - Google) Google Update Helper (Version: 1.3.22.3 - Google Inc.) Hidden GPL Ghostscript 8.64 (Version: - ) Haali Media Splitter (Version: - FreeCodecPack) HP Photo Creations (Version: 1.0.0.3781 - HP Photo Creations Powered by RocketLife) HP Photosmart 6510 series - Grundlegende Software für das Gerät (Version: 25.0.621.0 - Hewlett-Packard Co.) HP Photosmart 6510 series Hilfe (Version: 140.0.2.2 - Hewlett Packard) HP Photosmart Plus B210 series - Grundlegende Software für das Gerät (Version: 22.50.231.0 - Hewlett-Packard Co.) HP Photosmart Plus B210 series Hilfe (Version: 140.0.54.54 - Hewlett Packard) HP Update (Version: 5.003.000.004 - Hewlett-Packard) iCloud (Version: 2.1.2.8 - Apple Inc.) imagine digital freedom - Samsung (Version: 1.0.2.0 - Samsung Electronics Co., LTD) Intel PROSet Wireless (Version: - ) Hidden Intel(R) PROSet/Wireless WiFi-Software (Version: 12.00.2000 - Intel(R) Corporation) Intel® Matrix Storage Manager (Version: - Intel Corporation) InterVideo FilterSDK for Panasonic (Version: - InterVideo Inc.) IObit Uninstaller (Version: 3.0.4.922 - IObit) iTunes (Version: 11.1.3.8 - Apple Inc.) IZArc 3.81 (Version: 3.81 Build 1550 - Ivan Zahariev) Java 7 Update 45 (Version: 7.0.450 - Oracle) Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden Java(TM) 6 Update 37 (Version: 6.0.370 - Oracle) K-Lite Mega Codec Pack 9.1.0 (Version: 9.1.0 - ) kuler (Version: 2.0 - Adobe Systems Incorporated) Hidden LabelPrint (Version: .2406 - CyberLink Corp.) LightScribe System Software 1.12.37.1 (Version: 1.12.37.1 - LightScribe) Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300 - Malwarebytes Corporation) McAfee Security Scan Plus (Version: 3.8.130.10 - McAfee, Inc.) Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (Version: - Microsoft Corporation) Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729 - Microsoft Corporation) Hidden Microsoft .NET Framework 3.5 SP1 (Version: - Microsoft Corporation) Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft Office 2003 Web Components (Version: 11.0.8003.0 - Microsoft Corporation) Microsoft Office 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office File Validation Add-In (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1 - Microsoft Corporation) Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Professional Plus 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Professional Plus 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Small Business Connectivity Components (Version: 2.0.7024.0 - Microsoft Corporation) Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft PhotoDraw 2000 V2 (Version: 2.00.00.1429 - Microsoft Corporation) Microsoft PowerPoint Viewer (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft SOAP Toolkit 2.0 SP2 (Version: 623.1 - Microsoft Corporation) Microsoft SQL Server Native Client (Version: 9.00.4035.00 - Microsoft Corporation) Microsoft SQL Server VSS Writer (Version: 9.00.4035.00 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (Version: 10.0.30319 - Microsoft Corporation) Microsoft WSE 3.0 Runtime (Version: 3.0.5305.0 - Microsoft Corp.) MobileMe Control Panel (Version: 3.1.8.0 - Apple Inc.) MotionSD STUDIO 1.3E (Version: - Matsushita Electric Industrial Co., Ltd.) Move Networks Media Player for Internet Explorer (Version: - ) Mozilla Firefox 26.0 (x86 de) (Version: 26.0 - Mozilla) Mozilla Maintenance Service (Version: 26.0 - Mozilla) MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0 - Microsoft Corporation) Norton Security Scan (Version: 3.7.2.5 - Symantec Corporation) NVIDIA Drivers (Version: - ) NVIDIA HD-Audiotreiber 1.3.18.0 (Version: 1.3.18.0 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.109.718 - NVIDIA Corporation) Hidden OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0 - Microsoft Corporation) Hidden PDF Settings CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden Photoshop Camera Raw (Version: 5.0 - Adobe Systems Incorporated) Hidden Play AVStation (Version: 4.1.20.50 - Ihr Firmenname) Play AVStation (Version: 4.1.20.50 - Ihr Firmenname) Hidden PlayCamera (Version: 1.0.1.7 - ) PowerDirector (Version: 5.0.3927 - CyberLink Corp.) PowerDVD (Version: 7.0.3118.0 - CyberLink Corp.) PowerProducer (Version: 085120(3.7)_Vista_SSPC - CyberLink Corp.) QuickTime (Version: 7.74.80.86 - Apple Inc.) Readiris Pro 10 (Version: - ) Realtek High Definition Audio Driver (Version: 6.0.1.5605 - Realtek Semiconductor Corp.) Revo Uninstaller 1.94 (Version: 1.94 - VS Revo Group) Safari (Version: 5.34.57.2 - Apple Inc.) Samsung CLX-3170 Series (Version: - Samsung Electronics CO.,LTD) Samsung Magic Doctor (Version: 5.00 - Samsung Electronics Co., LTD) Samsung Recovery Solution III (Version: 3.0.0.5 - Samsung) Samsung Update Plus (Version: 2.0 - Samsung Electronics Co., LTD) Samsung Update Plus (Version: 2.0 - Samsung Electronics Co., LTD) Hidden Skype Click to Call (Version: 6.3.11079 - Skype Technologies S.A.) Skype™ 6.5 (Version: 6.5.158 - Skype Technologies S.A.) SmarThru 4 (Version: - ) SmarThru PC Fax (Version: - ) Spotify (Version: 0.9.4.185.g7545a404 - Spotify AB) Studie zur Verbesserung von HP Photosmart 6510 series Produkten (Version: 25.0.621.0 - Hewlett-Packard Co.) Studie zur Verbesserung von HP Photosmart Plus B210 series Produkten (Version: 22.50.231.0 - Hewlett-Packard Co.) Suite Shared Configuration CS4 (Version: 1.0 - Adobe Systems Incorporated) Hidden Synaptics Pointing Device Driver (Version: 10.1.2.0 - Synaptics) Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch) (Version: 9.00.4035.00 - Microsoft Corporation) Update for 2007 Microsoft Office System (KB967642) (Version: - Microsoft) Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (Version: 3 - Microsoft Corporation) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2850085) 32-Bit Edition (Version: - Microsoft) Update für Microsoft Office Excel 2007 Help (KB963678) (Version: - Microsoft) Update für Microsoft Office Outlook 2007 Help (KB963677) (Version: - Microsoft) Update für Microsoft Office Powerpoint 2007 Help (KB963669) (Version: - Microsoft) Update für Microsoft Office Word 2007 Help (KB963665) (Version: - Microsoft) User Guide (Version: 1.0 - ) VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden Vimicro UVC Camera (Version: 1.00.0000 - Vimicro Corporation) Visual Studio 2012 x86 Redistributables (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) VLC media player 2.1.0 (Version: 2.1.0 - VideoLAN) VRWriter4 (Version: 4.3 - Matsushita Electric Industrial Co., Ltd.) Hidden WIDCOMM Bluetooth Software 6.0.1.6300 (Version: 6.0.1.6300 - WIDCOMM, Inc.) Windows Live Anmelde-Assistent (Version: 5.000.818.6 - Microsoft Corporation) Windows Live installer (Version: 12.0.1471.1025 - Microsoft Corporation) ==================== Restore Points ========================= 07-01-2014 15:33:26 Windows Update 09-01-2014 07:52:01 Removed Ask Toolbar 09-01-2014 07:55:04 Removed Ask Toolbar 09-01-2014 07:55:58 Removed Ask Toolbar 09-01-2014 08:00:47 Windows Live Messenger wird entfernt 09-01-2014 21:38:27 Geplanter Prüfpunkt 11-01-2014 03:24:32 Geplanter Prüfpunkt 11-01-2014 08:28:16 IObit Uninstaller restore point 11-01-2014 20:59:51 IObit Uninstaller restore point 14-01-2014 12:09:24 Windows Update ==================== Hosts content: ========================== 2006-11-02 11:23 - 2014-01-11 12:36 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {10DB4D8D-5E4D-42BF-9274-78B6016E292E} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: {1A30A7C6-4D06-4BFA-AFB0-FAFCA1C0E21D} - System32\Tasks\McDefragTask => c:\PROGRA~1\mcafee\mqc\QcConsol.exe Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM Task: {1E315AF8-EA9F-4E45-B2E9-466DCE5BAA6C} - System32\Tasks\{DB474BF4-58DE-44DA-A33A-A4D6CEB32E30} => C:\Program Files\Skype\Phone\Skype.exe [2013-06-03] (Skype Technologies S.A.) Task: {3048F55A-A266-40E3-8960-C82CC5E9F0A2} - System32\Tasks\SamsungMagicDoctor => C:\Program Files\Samsung\Samsung Magic Doctor\MagicDoctorKbdHk.exe [2007-07-04] (Samsung Electronics Co., Ltd.) Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages Task: {3E21E1AC-D61F-4D06-85AE-7BA3CE25479D} - System32\Tasks\EasyBatteryManager => C:\Program Files\Samsung\EBM\EasyBatteryMgr3.exe [2008-04-17] (SAMSUNG Electronics co., LTD.) Task: {400F8C72-69FC-4C93-864A-962CF378A3AB} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {408A8BE8-6569-40D6-BB12-26811B5564BA} - System32\Tasks\SupBackGroundTask => C:\Program Files\Samsung\Samsung Update Plus\SUPBackGround.exe [2010-04-20] () Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation) Task: {4AE808A1-1A59-4CD9-AA45-5C7036A1BAC2} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\netsh.exe [2006-11-02] (Microsoft Corporation) Task: {56FC5C7B-173D-4CF6-8A5E-EACC301EBB6F} - System32\Tasks\EasyDisplayMgr => C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe [2008-05-22] (SAMSUNG Electronics) Task: {6B767A93-9B4D-4867-BC64-372C4752BBDF} - System32\Tasks\Norton Security Scan for Samsung SA 11 => C:\Program Files\Norton Security Scan\Engine\3.7.2.5\Nss.exe [2012-04-03] (Symantec Corporation) Task: {9AF4609C-07EF-47ED-8139-7DF3D4CDD0D0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2009-07-19] (Google Inc.) Task: {9F96614E-8020-43DC-B605-49BC002DCAD7} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-12-19] (Piriform Ltd) Task: {AF02F22D-C128-4844-99F0-B4461CED2F07} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2009-07-19] (Google Inc.) Task: {B81E3F73-0E07-4C79-A56F-69A84D6FB2EC} - System32\Tasks\HPCustParticipation HP Photosmart 6510 series => C:\Program Files\HP\HP Photosmart 6510 series\Bin\HPCustPartic.exe [2011-09-16] (Hewlett-Packard Co.) Task: {B934C0C2-DF81-46EF-8156-1F4C8CA36815} - System32\Tasks\HPCustParticipation HP Photosmart Plus B210 series => C:\Program Files\HP\HP Photosmart Plus B210 series\Bin\HPCustPartic.exe [2010-11-16] (Hewlett-Packard Co.) Task: {CE3C7B64-1AB7-4FA9-83BD-864EC211E4D1} - System32\Tasks\EasySpeedUpManager => C:\Program Files\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe [2008-04-25] (Samsung Electronics Co., Ltd.) Task: {DA8D3357-9113-40B1-81F7-4254EC09E4AC} - System32\Tasks\McQcTask => c:\PROGRA~1\mcafee\mqc\QcConsol.exe Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] () Task: {F0D3A7A9-9597-496D-9884-1577C0C9D449} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-01-03] (AVAST Software) Task: {F56886DC-7B24-4A81-9237-32A60AA0DD62} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\Norton Security Scan for Samsung SA 11.job => C:\PROGRA~1\NORTON~2\Engine\372~1.5\Nss.exe Task: C:\Windows\Tasks\SupBackGroundTask.job => C:\Program Files\Samsung\Samsung Update Plus\SUPBackGround.exe ==================== Loaded Modules (whitelisted) ============= 2008-12-29 16:50 - 2007-06-02 21:41 - 00617472 _____ () C:\Program Files\IZArc\IZArcCM.dll 2008-07-08 15:32 - 2006-08-12 04:48 - 00049152 _____ () C:\Program Files\Samsung\Samsung Magic Doctor\HookDllPS2.dll 2008-07-08 15:31 - 2006-08-12 04:48 - 00049152 _____ () C:\Program Files\Samsung\Easy Display Manager\HookDllPS2.dll 2008-07-08 15:31 - 2006-08-12 04:48 - 00049152 _____ () C:\Program Files\SAMSUNG\EasySpeedUpManager\HookDllPS2.dll 2009-01-10 19:23 - 2008-06-26 03:45 - 00155648 _____ () C:\Windows\twain_32\Samsung\CLX3170\IMFilter.dll 2009-01-10 19:23 - 2008-06-26 03:46 - 01384520 _____ () C:\Windows\twain_32\Samsung\CLX3170\ssole.dll 2009-01-10 19:23 - 2008-06-26 03:45 - 00367104 _____ () C:\Windows\twain_32\Samsung\CLX3170\NetModule.dll 2013-06-27 22:01 - 2009-02-27 15:39 - 00019968 _____ () C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.deu 2011-06-24 21:56 - 2011-06-24 21:56 - 00087328 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2011-06-24 21:56 - 2011-06-24 21:56 - 01241888 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2013-11-13 22:43 - 2013-11-13 22:44 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2013-08-29 01:25 - 2013-08-29 01:25 - 00100688 _____ () C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll 2005-07-22 21:30 - 2005-07-22 21:30 - 00065536 _____ () C:\Windows\system32\TosCommAPI.dll 2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\Samsung SA 11\AppData\Roaming\Dropbox\bin\libcef.dll 2013-11-17 20:11 - 2013-12-05 20:36 - 03559024 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\Users\Samsung SA 11:zylomtest AlternateDataStreams: C:\Users\Samsung SA 11:zylomtr{000HQ7FF-AD7A-3FG3-VK8A-25GG67KOIVUV} AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1 ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Cisco Systems Service: vpnva Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (01/14/2014 09:22:57 AM) (Source: Application Error) (User: ) Description: Fehlerhafte Anwendung firefox.exe, Version 26.0.0.5087, Zeitstempel 0x52a0d273, fehlerhaftes Modul xul.dll, Version 26.0.0.5087, Zeitstempel 0x52a0d20a, Ausnahmecode 0xc0000005, Fehleroffset 0x0014e1a8, Prozess-ID 0xf1c, Anwendungsstartzeit firefox.exe0. Error: (01/14/2014 00:26:17 AM) (Source: Windows Search Service) (User: ) Description: Eintrag <C:\USERS\SAMSUNG SA 11\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\CYBERLINK DVD SUITE\POWERDVD\README.LNK> in der Hash-Zuordnung kann nicht aktualisiert werden. Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) Error: (01/14/2014 00:26:17 AM) (Source: Windows Search Service) (User: ) Description: Eintrag <C:\USERS\SAMSUNG SA 11\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\CYBERLINK DVD SUITE\POWERDVD\README.LNK> in der Hash-Zuordnung kann nicht aktualisiert werden. Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) Error: (01/14/2014 00:26:17 AM) (Source: Windows Search Service) (User: ) Description: Eintrag <C:\USERS\SAMSUNG SA 11\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\CYBERLINK DVD SUITE\POWERDVD\ONLINE-REGISTRIERUNG.LNK> in der Hash-Zuordnung kann nicht aktualisiert werden. Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) Error: (01/14/2014 00:26:17 AM) (Source: Windows Search Service) (User: ) Description: Eintrag <C:\USERS\SAMSUNG SA 11\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\CYBERLINK DVD SUITE\POWERDVD\ONLINE-REGISTRIERUNG.LNK> in der Hash-Zuordnung kann nicht aktualisiert werden. Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) Error: (01/14/2014 00:26:17 AM) (Source: Windows Search Service) (User: ) Description: Eintrag <C:\USERS\SAMSUNG SA 11\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\CYBERLINK DVD SUITE\POWERDVD\POWERDVD-HILFE.LNK> in der Hash-Zuordnung kann nicht aktualisiert werden. Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) Error: (01/14/2014 00:26:17 AM) (Source: Windows Search Service) (User: ) Description: Eintrag <C:\USERS\SAMSUNG SA 11\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\CYBERLINK DVD SUITE\POWERDVD\POWERDVD-HILFE.LNK> in der Hash-Zuordnung kann nicht aktualisiert werden. Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) Error: (01/14/2014 00:26:16 AM) (Source: Windows Search Service) (User: ) Description: Eintrag <C:\USERS\SAMSUNG SA 11\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\CYBERLINK DVD SUITE\POWERDVD\CYBERLINK POWERDVD.LNK> in der Hash-Zuordnung kann nicht aktualisiert werden. Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) Error: (01/14/2014 00:26:16 AM) (Source: Windows Search Service) (User: ) Description: Eintrag <C:\USERS\SAMSUNG SA 11\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\CYBERLINK DVD SUITE\POWERDVD\CYBERLINK POWERDVD.LNK> in der Hash-Zuordnung kann nicht aktualisiert werden. Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) Error: (01/14/2014 00:26:05 AM) (Source: Windows Search Service) (User: ) Description: Eintrag <C:\USERS\SAMSUNG SA 11\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\OZER6SS3.DEFAULT-1389394289152\SAFEBROWSING-TO_DELETE> in der Hash-Zuordnung kann nicht aktualisiert werden. Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) System errors: ============= Error: (01/14/2014 01:20:31 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: 0x80070643Definition Update for Windows Defender - KB915597 (Definition 1.165.1783.0){D89B0D90-5A4D-4369-A911-54C1F40C6FDF}200 Error: (01/13/2014 00:25:04 PM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT) Description: 0x80070032 Error: (01/13/2014 00:22:07 PM) (Source: DCOM) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (01/13/2014 00:21:17 PM) (Source: Service Control Manager) (User: ) Description: SQL Server VSS Writer1 Error: (01/13/2014 00:21:17 PM) (Source: Service Control Manager) (User: ) Description: McAfee Real-time Scanner%%3 Error: (01/13/2014 00:21:17 PM) (Source: Service Control Manager) (User: ) Description: DgiVecp%%20 Error: (01/13/2014 00:21:17 PM) (Source: Service Control Manager) (User: ) Description: Parallel port driver%%1058 Microsoft Office Sessions: ========================= Error: (01/09/2014 05:53:03 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 25 seconds with 0 seconds of active time. This session ended with a crash. Error: (11/18/2013 04:52:45 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 3251 seconds with 2460 seconds of active time. This session ended with a crash. Error: (07/24/2013 00:46:51 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 8629 seconds with 5520 seconds of active time. This session ended with a crash. Error: (07/09/2013 07:15:31 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 41 seconds with 0 seconds of active time. This session ended with a crash. Error: (07/09/2013 07:14:18 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 64 seconds with 60 seconds of active time. This session ended with a crash. Error: (07/09/2013 07:13:04 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 70 seconds with 60 seconds of active time. This session ended with a crash. Error: (06/23/2013 11:28:54 AM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 634 seconds with 240 seconds of active time. This session ended with a crash. Error: (06/23/2013 10:25:29 AM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 16 seconds with 0 seconds of active time. This session ended with a crash. Error: (07/10/2012 10:43:19 AM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 5192 seconds with 3480 seconds of active time. This session ended with a crash. CodeIntegrity Errors: =================================== Date: 2014-01-12 13:10:29.582 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-01-12 13:10:29.012 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-01-12 13:10:28.436 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-01-12 13:10:27.851 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-01-12 13:10:27.288 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-01-12 13:10:26.720 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-01-12 13:10:26.036 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-01-12 13:10:25.465 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-01-12 13:10:24.860 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-01-12 13:10:24.298 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 60% Total physical RAM: 3065.88 MB Available physical RAM: 1198.55 MB Total Pagefile: 6356.14 MB Available Pagefile: 4611.78 MB Total Virtual: 2047.88 MB Available Virtual: 1891.52 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:144.09 GB) (Free:8.29 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: () (Fixed) (Total:144 GB) (Free:35.35 GB) NTFS Drive e: (500DAYSOFSUMMER_F2_PAL_2) (CDROM) (Total:5.31 GB) (Free:0 GB) UDF Drive g: (Volume) (Fixed) (Total:931.51 GB) (Free:661.03 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 298 GB) (Disk ID: B6394A61) Partition 1: (Not Active) - (Size=10 GB) - (Type=27) Partition 2: (Active) - (Size=144 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=144 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: C12A7992) Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
15.01.2014, 09:37 | #9 |
/// the machine /// TB-Ausbilder | immer wieder "Page not found" Adobe updaten. Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter HKCU\...0c966feabec1\InprocServer32: [Default-shell32] ATTENTION! ====> ZeroAccess? ZeroAccess: C:\Users\Samsung SA 11\AppData\Local\{3819f8a5-bd1b-a330-301d-fda6677fd30b} C:\Users\Samsung SA 11\AppData\Local\{3819f8a5-bd1b-a330-301d-fda6677fd30b}\@ Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
15.01.2014, 10:51 | #10 |
| immer wieder "Page not found"Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 15-01-2014 Ran by Samsung SA 11 at 2014-01-15 10:48:23 Run:1 Running from C:\Users\Samsung SA 11\Downloads\FRST-OlderVersion Boot Mode: Normal ============================================== Content of fixlist: ***************** HKCU\...0c966feabec1\InprocServer32: [Default-shell32] ATTENTION! ====> ZeroAccess? ZeroAccess: C:\Users\Samsung SA 11\AppData\Local\{3819f8a5-bd1b-a330-301d-fda6677fd30b} C:\Users\Samsung SA 11\AppData\Local\{3819f8a5-bd1b-a330-301d-fda6677fd30b}\@ ***************** HKCU\Software\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1} => Key deleted successfully. C:\Users\Samsung SA 11\AppData\Local\{3819f8a5-bd1b-a330-301d-fda6677fd30b} => Moved successfully. "C:\Users\Samsung SA 11\AppData\Local\{3819f8a5-bd1b-a330-301d-fda6677fd30b}\@" => File/Directory not found. ==== End of Fixlog ==== FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 15-01-2014 Ran by Samsung SA 11 (administrator) on SAMSUNGSA11-PC on 15-01-2014 10:49:02 Running from C:\Users\Samsung SA 11\Downloads\FRST-OlderVersion Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Normal The only official downoad link fo FRST: Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) =================== (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Windows\System32\SLsvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (B.H.A Corporation) C:\Windows\System32\bgsvcgen.exe (Microsoft Corp.) C:\Program Files\Microsoft\BingDesktop\BingDesktopUpdater.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe (IObit) C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe (PC Tools) C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe () C:\Program Files\CyberLink\Shared Files\RichVideo.exe (Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (TOSHIBA CORPORATION) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe (Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Samsung Magic Doctor\MagicDoctorKbdHk.exe (SAMSUNG Electronics co., LTD.) C:\Program Files\Samsung\EBM\EasyBatteryMgr3.exe (Realtek Semiconductor) C:\Windows\RtHDVCpl.exe (SAMSUNG Electronics) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe (Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Cyberlink Corp.) C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe () C:\Windows\Samsung\PanelMgr\SSMMgr.exe () C:\Windows\twain_32\Samsung\CLX3170\Scan2Pc.exe (Adobe Systems Inc.) C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe (Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe (PC Tools) C:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exe (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe () C:\Program Files\DivX\DivX Update\DivXUpdate.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Spotify Ltd) C:\Users\Samsung SA 11\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 6510 series\Bin\ScanToPCActivationApp.exe (TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe (Dropbox, Inc.) C:\Users\Samsung SA 11\AppData\Roaming\Dropbox\bin\Dropbox.exe (TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe (TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\msiexec.exe (Microsoft Corporation) C:\Windows\System32\msiexec.exe (Microsoft Corporation) C:\Windows\System32\msiexec.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 6510 series\Bin\HPNetworkCommunicator.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [6111232 2008-04-17] (Realtek Semiconductor) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1029416 2007-10-26] (Synaptics, Inc.) HKLM\...\Run: [RemoteControl] - C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [71216 2007-03-14] (Cyberlink Corp.) HKLM\...\Run: [LanguageShortcut] - C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [52256 2007-01-08] () HKLM\...\Run: [Samsung PanelMgr] - C:\Windows\Samsung\PanelMgr\SSMMgr.exe [524288 2008-08-11] () HKLM\...\Run: [3170 Scan2PC] - C:\Windows\twain_32\Samsung\CLX3170\Scan2Pc.exe [495616 2008-08-07] () HKLM\...\Run: [NvCplDaemon] - C:\Windows\system32\NvCpl.dll [13548064 2008-07-27] (NVIDIA Corporation) HKLM\...\Run: [NvMediaCenter] - C:\Windows\system32\NvMcTray.dll [92704 2008-07-27] (NVIDIA Corporation) HKLM\...\Run: [ITSecMng] - C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [75136 2007-09-28] ( TOSHIBA CORPORATION) HKLM\...\Run: [AdobeCS4ServiceManager] - C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated) HKLM\...\Run: [Adobe Acrobat Speed Launcher] - C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [44128 2013-05-08] (Adobe Systems Incorporated) HKLM\...\Run: [Acrobat Assistant 8.0] - C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [642664 2013-05-08] (Adobe Systems Inc.) HKLM\...\Run: [Adobe_ID0ENQBO] - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4Tray.exe [378224 2008-08-15] (Adobe Systems Incorporated) HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM\...\Run: [AppleSyncNotifier] - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-10-06] (Apple Inc.) HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM\...\Run: [HP Software Update] - C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-03-24] (Hewlett-Packard) HKLM\...\Run: [DivXMediaServer] - C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-09-11] (DivX, LLC) HKLM\...\Run: [SSDMonitor] - C:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exe [105120 2012-08-21] (PC Tools) HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.) HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.) HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2014-01-03] (AVAST Software) HKLM\...\Run: [DivXUpdate] - C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] () HKLM\...\Run: [BingDesktop] - C:\Program Files\Microsoft\BingDesktop\BingDesktop.exe [2258056 2013-09-22] (Microsoft Corp.) HKLM\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [707984 2013-10-10] (Cisco Systems, Inc.) HKCU\...\Run: [Spotify Web Helper] - C:\Users\Samsung SA 11\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1140736 2013-10-12] (Spotify Ltd) HKCU\...\Run: [HP Photosmart 6510 series (NET)] - C:\Program Files\HP\HP Photosmart 6510 series\Bin\ScanToPCActivationApp.exe [1804648 2011-09-16] (Hewlett-Packard Co.) HKU\Administrator\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [ 2008-03-17] (Hewlett-Packard Company) HKU\Administrator\...\Run: [swg] - "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" HKU\Administrator\...\Run: [AdobeBridge] - [x] HKU\Administrator\...\Run: [SearchProtect] - C:\Users\Administrator\AppData\Roaming\SearchProtect\bin\cltmng.exe HKU\Default\...\Run: [WindowsWelcomeCenter] - C:\Windows\system32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation) HKU\Default User\...\Run: [WindowsWelcomeCenter] - C:\Windows\system32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation) HKU\fbwuser\...\Run: [WindowsWelcomeCenter] - C:\Windows\system32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation) HKU\Gast\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [ 2008-03-17] (Hewlett-Packard Company) HKU\Gast\...\Run: [swg] - "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" HKU\Gast\...\Run: [AdobeBridge] - [x] HKU\peter\...\Run: [WindowsWelcomeCenter] - C:\Windows\system32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation) HKU\peter\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [ 2008-03-17] (Hewlett-Packard Company) Startup: C:\Users\Samsung SA 11\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Samsung SA 11\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== ProxyServer: socks=127.0.0.1:16101 HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.gmx.net/ SearchScopes: HKLM - DefaultScope value is missing. BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.) BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit) BHO: No Name - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - No File BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll (Google Inc.) BHO: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File Toolbar: HKCU - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\Samsung SA 11\AppData\Roaming\Mozilla\Firefox\Profiles\ozer6ss3.default-1389394289152 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll No File FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC) FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: Adobe Acrobat - C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101799.dll (Amazon.com, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-11-17] FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2013-11-17] FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2013-11-17] FF Extension: Hotspot Shield Extension - C:\Program Files\Mozilla Firefox\browser\extensions\afproxy@anchorfree.com [2013-12-11] FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [] FF HKLM\...\Firefox\Extensions: [{000a9d1c-beef-4f90-9363-039d445309b8}] - C:\Program Files\Google\Google Gears\Firefox\ FF Extension: Google Gears - C:\Program Files\Google\Google Gears\Firefox\ [] FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-05-04] FF HKLM\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files\Hewlett-Packard\SmartPrint\QPExtension FF Extension: SmartPrintButton - C:\Program Files\Hewlett-Packard\SmartPrint\QPExtension [2012-08-16] Chrome: ======= CHR HomePage: hxxp://www.google.com CHR RestoreOnStartup: "hxxp://www.google.com" CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\23.0.1271.97\PepperFlash\pepflashplayer.dll No File CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\23.0.1271.97\gcswf32.dll No File CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_271.dll No File CHR Plugin: (Remoting Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\23.0.1271.97\ppGoogleNaClPluginChrome.dll No File CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\23.0.1271.97\pdf.dll No File CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Java Deployment Toolkit 6.0.310.5) - C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll No File CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) CHR Plugin: (2007 Microsoft Office system) - C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll No File CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll No File CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) CHR Plugin: (DivX Plus Web Player) - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll No File CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () CHR Plugin: (Windows Presentation Foundation) - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) CHR Extension: (avast! WebRep) - C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1456_0 [2012-08-11] CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Users\Samsung SA 11\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0 [2012-08-11] ========================== Services (Whitelisted) ================= S3 Adobe Version Cue CS4; C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [284016 2008-08-15] (Adobe Systems Incorporated) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-03] (AVAST Software) R2 bgsvcgen; C:\Windows\System32\bgsvcgen.exe [122512 2006-12-28] (B.H.A Corporation) R2 BingDesktopUpdate; C:\Program Files\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-09-22] (Microsoft Corp.) S2 gupdate1ca087358465a06; C:\Program Files\Google\Update\GoogleUpdate.exe [133104 2009-07-19] (Google Inc.) R2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2151744 2014-01-11] (IObit) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [235216 2013-09-06] (McAfee, Inc.) R2 PCToolsSSDMonitorSvc; C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe [794272 2012-08-21] (PC Tools) R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [272024 2006-12-19] () R2 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.) S3 WLSetupSvc; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [266240 2007-10-25] (Microsoft Corporation) S2 McShield; C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe [x] S3 McSysmon; C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe [x] ==================== Drivers (Whitelisted) ==================== S3 acsint; C:\Windows\System32\DRIVERS\acsint.sys [40304 2013-10-10] (Cisco Systems, Inc.) S3 acsmux; C:\Windows\System32\DRIVERS\acsmux.sys [58736 2013-10-10] (Cisco Systems, Inc.) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-01-03] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr.sys [54832 2014-01-03] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49944 2013-11-13] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [775952 2014-01-03] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [410528 2014-01-03] (AVAST Software) R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [57672 2014-01-03] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [180248 2014-01-03] () S3 AVerAF35; C:\Windows\System32\Drivers\AVerAF35.sys [474880 2009-10-19] (AVerMedia TECHNOLOGIES, Inc.) R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [37664 2013-11-12] (AVG Technologies) R1 cdrbsdrv; C:\Windows\System32\Drivers\cdrbsdrv.sys [33408 2006-02-20] (B.H.A Corporation) S3 ECS_Loader_220; C:\Windows\System32\Drivers\ECS_Loader_220.sys [15616 2005-10-31] (WideView Technology Inc.) R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [39624 2013-11-13] (AnchorFree Inc.) R2 KMDFMEMIO; C:\Windows\System32\DRIVERS\kmdfmemio.sys [13312 2007-05-23] (SAMSUNG ELECTRONICS CO., LTD.) S3 taphss; C:\Windows\System32\DRIVERS\taphss.sys [33512 2012-08-01] (AnchorFree Inc) R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [37064 2013-04-24] (Anchorfree Inc.) R3 VMC302; C:\Windows\System32\Drivers\VMC302.sys [242560 2008-04-05] (Vimicro Corporation) S3 w800bus; C:\Windows\System32\DRIVERS\w800bus.sys [60768 2005-06-13] (MCCI) U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [x] S3 IpInIp; system32\DRIVERS\ipinip.sys [x] S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x] S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-15 10:36 - 2014-01-15 10:36 - 00921000 _____ (Oracle Corporation) C:\Users\Samsung SA 11\Downloads\jxpiinstall.exe 2014-01-15 10:33 - 2014-01-15 10:33 - 18126032 _____ (Adobe Systems Inc.) C:\Users\Samsung SA 11\Downloads\AdobeAIRInstaller.exe 2014-01-14 14:32 - 2014-01-14 14:32 - 00987410 _____ C:\Users\Samsung SA 11\Downloads\SecurityCheck.exe 2014-01-12 14:26 - 2014-01-12 14:26 - 00000911 _____ C:\Users\Samsung SA 11\Desktop\JRT.txt 2014-01-12 14:20 - 2014-01-12 14:20 - 00001470 _____ C:\Users\Samsung SA 11\Desktop\AdwCleaner[S1].txt 2014-01-12 12:21 - 2014-01-12 12:21 - 00002107 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk 2014-01-12 12:21 - 2014-01-12 12:21 - 00001032 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk 2014-01-12 12:18 - 2014-01-12 12:18 - 34008992 _____ (DVDVideoSoft Ltd. ) C:\Users\Samsung SA 11\Downloads\FreeYouTubeToMP3Converter.exe 2014-01-12 09:46 - 2014-01-15 10:49 - 00000000 ____D C:\Users\Samsung SA 11\Downloads\FRST-OlderVersion 2014-01-11 22:33 - 2014-01-11 22:33 - 04645232 _____ (Piriform Ltd) C:\Users\Samsung SA 11\Downloads\ccsetup409.exe 2014-01-11 22:13 - 2014-01-11 22:13 - 00001198 _____ C:\Users\Samsung SA 11\Desktop\Speed Test.lnk 2014-01-11 22:13 - 2014-01-11 22:13 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter 2014-01-11 18:37 - 2014-01-11 18:37 - 00004527 _____ C:\Users\Samsung SA 11\Desktop\AdwCleaner[S0].txt 2014-01-11 18:25 - 2014-01-11 18:25 - 00000000 ____D C:\Windows\ERUNT 2014-01-11 18:21 - 2014-01-11 18:21 - 00000000 ____D C:\Users\Samsung SA 11\Desktop\rkill 2014-01-11 12:44 - 2014-01-11 12:44 - 00126857 _____ C:\ComboFix.txt 2014-01-11 12:14 - 2014-01-11 12:44 - 00000000 ____D C:\Qoobox 2014-01-11 12:14 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe 2014-01-11 12:14 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe 2014-01-11 12:14 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-01-11 12:14 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-01-11 12:14 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-01-11 12:14 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe 2014-01-11 12:14 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe 2014-01-11 12:14 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe 2014-01-11 12:13 - 2014-01-11 12:42 - 00000000 ____D C:\Windows\erdnt 2014-01-11 11:20 - 2014-01-11 11:20 - 02347384 _____ (ESET) C:\Users\Samsung SA 11\Desktop\esetsmartinstaller_deu.exe 2014-01-11 11:20 - 2014-01-11 11:20 - 01037068 _____ (Thisisu) C:\Users\Samsung SA 11\Desktop\JRT61.exe 2014-01-11 11:18 - 2014-01-12 14:13 - 00000000 ____D C:\AdwCleaner 2014-01-11 11:18 - 2014-01-11 11:18 - 01233962 _____ C:\Users\Samsung SA 11\Desktop\adwcleaner_3.016.exe 2014-01-11 09:32 - 2014-01-11 21:53 - 00003272 _____ C:\Users\Samsung SA 11\Desktop\Rkill.txt 2014-01-11 09:32 - 2014-01-11 09:32 - 01933048 _____ (Bleeping Computer, LLC) C:\Users\Samsung SA 11\Desktop\Hilfsprogramm.exe 2014-01-11 09:21 - 2014-01-11 09:21 - 00001030 _____ C:\Users\Samsung SA 11\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk 2014-01-11 09:21 - 2014-01-11 09:21 - 00001006 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk 2014-01-11 09:21 - 2014-01-11 09:21 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\IObit 2014-01-11 09:21 - 2014-01-11 09:21 - 00000000 ____D C:\ProgramData\ProductData 2014-01-11 09:21 - 2014-01-11 09:21 - 00000000 ____D C:\ProgramData\IObit 2014-01-11 09:21 - 2014-01-11 09:21 - 00000000 ____D C:\Program Files\IObit 2014-01-10 23:00 - 2014-01-13 12:31 - 00038721 _____ C:\Users\Samsung SA 11\Downloads\Addition.txt 2014-01-10 23:00 - 2014-01-10 23:00 - 00377856 _____ C:\Users\Samsung SA 11\Downloads\gmer_2.1.19163.exe 2014-01-10 22:59 - 2014-01-15 10:47 - 00000000 ____D C:\FRST 2014-01-10 22:59 - 2014-01-13 12:31 - 00048612 _____ C:\Users\Samsung SA 11\Downloads\FRST.txt 2014-01-10 22:57 - 2014-01-12 14:32 - 01219584 _____ (Farbar) C:\Users\Samsung SA 11\Downloads\FRST.exe 2014-01-10 22:54 - 2014-01-10 22:55 - 00000488 _____ C:\Users\Samsung SA 11\Downloads\defogger_disable.log 2014-01-10 22:54 - 2014-01-10 22:54 - 00000000 _____ C:\Users\Samsung SA 11\defogger_reenable 2014-01-10 22:51 - 2014-01-10 22:51 - 00050477 _____ C:\Users\Samsung SA 11\Downloads\Defogger.exe 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Local\genienext 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Local\cache 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 ____D C:\Users\Samsung SA 11\.android 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 _____ C:\Users\Samsung SA 11\daemonprocess.txt 2014-01-10 22:46 - 2014-01-11 08:38 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\DigitalSites 2014-01-10 22:46 - 2014-01-11 00:46 - 00000147 _____ C:\Users\Samsung SA 11\AppData\Roaming\WB.CFG 2014-01-10 22:46 - 2014-01-11 00:46 - 00000005 _____ C:\Users\Samsung SA 11\AppData\Roaming\WBPU-TTL.DAT 2014-01-10 22:44 - 2014-01-10 22:44 - 00377856 _____ C:\Users\Samsung SA 11\Downloads\jt3jpstr.exe 2014-01-09 13:31 - 2014-01-09 13:31 - 04223268 _____ C:\ProgramData\SamPCFax000009500000 2014-01-03 18:55 - 2014-01-09 09:05 - 00000000 ____D C:\Program Files\Gabest 2014-01-03 18:48 - 2014-01-03 19:18 - 00000551 _____ C:\Users\Samsung SA 11\AppData\Roaming\AutoGK.ini 2014-01-03 18:46 - 2014-01-03 19:19 - 00000000 ____D C:\Program Files\AutoGK 2014-01-03 18:44 - 2014-01-03 18:45 - 12341641 _____ C:\Users\Samsung SA 11\Downloads\AutoGordianKnot.2.55.Setup.exe 2013-12-20 15:31 - 2013-12-20 15:31 - 23867560 _____ (Mozilla) C:\Users\Samsung SA 11\Downloads\Firefox Setup 26.0.exe 2013-12-20 13:34 - 2013-12-20 13:35 - 00283096 _____ (Mozilla) C:\Users\Samsung SA 11\Downloads\Firefox Setup Stub 26.0.exe 2013-12-16 22:46 - 2013-12-16 22:46 - 00002073 _____ C:\Users\Public\Desktop\Google Earth.lnk ==================== One Month Modified Files and Folders ======= 2014-01-15 10:49 - 2014-01-12 09:46 - 00000000 ____D C:\Users\Samsung SA 11\Downloads\FRST-OlderVersion 2014-01-15 10:47 - 2014-01-10 22:59 - 00000000 ____D C:\FRST 2014-01-15 10:46 - 2009-04-24 15:42 - 00000416 ____H C:\Windows\Tasks\SupBackGroundTask.job 2014-01-15 10:43 - 2009-07-19 14:29 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-01-15 10:36 - 2014-01-15 10:36 - 00921000 _____ (Oracle Corporation) C:\Users\Samsung SA 11\Downloads\jxpiinstall.exe 2014-01-15 10:34 - 2010-01-22 13:56 - 00000000 ____D C:\Program Files\Common Files\Adobe AIR 2014-01-15 10:33 - 2014-01-15 10:33 - 18126032 _____ (Adobe Systems Inc.) C:\Users\Samsung SA 11\Downloads\AdobeAIRInstaller.exe 2014-01-15 10:31 - 2008-11-27 18:27 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Local\Adobe 2014-01-15 10:28 - 2012-04-05 07:54 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-01-15 10:27 - 2012-09-14 18:28 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\Dropbox 2014-01-15 10:26 - 2009-02-14 22:28 - 00154873 _____ C:\ProgramData\nvModes.001 2014-01-15 10:26 - 2008-11-03 16:17 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite 2014-01-15 10:25 - 2009-07-19 14:29 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-01-15 10:25 - 2008-09-15 09:38 - 01175197 _____ C:\Windows\WindowsUpdate.log 2014-01-15 10:20 - 2013-01-17 08:24 - 00147218 _____ C:\Windows\PFRO.log 2014-01-15 10:20 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-15 10:20 - 2006-11-02 13:47 - 00004784 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-15 10:20 - 2006-11-02 13:47 - 00004784 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-15 00:46 - 2008-07-09 07:09 - 00000012 _____ C:\Windows\bthservsdp.dat 2014-01-15 00:46 - 2006-11-02 14:01 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2014-01-14 20:37 - 2012-11-27 15:16 - 00000452 ____H C:\Windows\Tasks\Norton Security Scan for Samsung SA 11.job 2014-01-14 14:32 - 2014-01-14 14:32 - 00987410 _____ C:\Users\Samsung SA 11\Downloads\SecurityCheck.exe 2014-01-13 12:31 - 2014-01-10 23:00 - 00038721 _____ C:\Users\Samsung SA 11\Downloads\Addition.txt 2014-01-13 12:31 - 2014-01-10 22:59 - 00048612 _____ C:\Users\Samsung SA 11\Downloads\FRST.txt 2014-01-12 18:44 - 2010-06-29 11:04 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\Skype 2014-01-12 16:56 - 2012-12-02 14:10 - 00002379 _____ C:\Users\Public\Desktop\Skype.lnk 2014-01-12 14:32 - 2014-01-10 22:57 - 01219584 _____ (Farbar) C:\Users\Samsung SA 11\Downloads\FRST.exe 2014-01-12 14:26 - 2014-01-12 14:26 - 00000911 _____ C:\Users\Samsung SA 11\Desktop\JRT.txt 2014-01-12 14:20 - 2014-01-12 14:20 - 00001470 _____ C:\Users\Samsung SA 11\Desktop\AdwCleaner[S1].txt 2014-01-12 14:13 - 2014-01-11 11:18 - 00000000 ____D C:\AdwCleaner 2014-01-12 13:56 - 2008-07-08 15:42 - 00000000 ____D C:\Windows\PCHEALTH 2014-01-12 12:22 - 2013-04-09 21:57 - 00000000 ____D C:\Program Files\DVDVideoSoft 2014-01-12 12:21 - 2014-01-12 12:21 - 00002107 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk 2014-01-12 12:21 - 2014-01-12 12:21 - 00001032 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk 2014-01-12 12:21 - 2013-04-09 21:57 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\DVDVideoSoft 2014-01-12 12:21 - 2013-04-09 21:57 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft 2014-01-12 12:18 - 2014-01-12 12:18 - 34008992 _____ (DVDVideoSoft Ltd. ) C:\Users\Samsung SA 11\Downloads\FreeYouTubeToMP3Converter.exe 2014-01-11 22:33 - 2014-01-11 22:33 - 04645232 _____ (Piriform Ltd) C:\Users\Samsung SA 11\Downloads\ccsetup409.exe 2014-01-11 22:13 - 2014-01-11 22:13 - 00001198 _____ C:\Users\Samsung SA 11\Desktop\Speed Test.lnk 2014-01-11 22:13 - 2014-01-11 22:13 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter 2014-01-11 22:05 - 2012-11-30 08:54 - 00001917 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk 2014-01-11 22:05 - 2010-06-25 13:12 - 00000000 ____D C:\Program Files\McAfee Security Scan 2014-01-11 22:04 - 2008-07-08 15:47 - 00000000 ____D C:\ProgramData\McAfee 2014-01-11 21:53 - 2014-01-11 09:32 - 00003272 _____ C:\Users\Samsung SA 11\Desktop\Rkill.txt 2014-01-11 18:37 - 2014-01-11 18:37 - 00004527 _____ C:\Users\Samsung SA 11\Desktop\AdwCleaner[S0].txt 2014-01-11 18:33 - 2012-08-11 17:04 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\Uniblue 2014-01-11 18:33 - 2012-08-11 17:04 - 00000000 ____D C:\Program Files\Uniblue 2014-01-11 18:33 - 2011-10-04 18:08 - 00000000 ____D C:\ProgramData\ICQ 2014-01-11 18:25 - 2014-01-11 18:25 - 00000000 ____D C:\Windows\ERUNT 2014-01-11 18:21 - 2014-01-11 18:21 - 00000000 ____D C:\Users\Samsung SA 11\Desktop\rkill 2014-01-11 12:44 - 2014-01-11 12:44 - 00126857 _____ C:\ComboFix.txt 2014-01-11 12:44 - 2014-01-11 12:14 - 00000000 ____D C:\Qoobox 2014-01-11 12:44 - 2006-11-02 12:18 - 00000000 __RHD C:\Users\Default 2014-01-11 12:44 - 2006-11-02 12:18 - 00000000 ___RD C:\Users\Public 2014-01-11 12:42 - 2014-01-11 12:13 - 00000000 ____D C:\Windows\erdnt 2014-01-11 12:36 - 2006-11-02 11:23 - 00000215 _____ C:\Windows\system.ini 2014-01-11 12:32 - 2006-11-02 11:22 - 59768832 _____ C:\Windows\system32\config\software.bak 2014-01-11 12:32 - 2006-11-02 11:22 - 45088768 _____ C:\Windows\system32\config\COMPON~3.bak 2014-01-11 12:32 - 2006-11-02 11:22 - 42729472 _____ C:\Windows\system32\config\system.bak 2014-01-11 12:32 - 2006-11-02 11:22 - 00262144 _____ C:\Windows\system32\config\security.bak 2014-01-11 12:32 - 2006-11-02 11:22 - 00262144 _____ C:\Windows\system32\config\sam.bak 2014-01-11 12:32 - 2006-11-02 11:22 - 00262144 _____ C:\Windows\system32\config\default.bak 2014-01-11 11:25 - 2009-04-30 15:06 - 00000000 ____D C:\Users\Samsung SA 11\.gimp-2.6 2014-01-11 11:20 - 2014-01-11 11:20 - 02347384 _____ (ESET) C:\Users\Samsung SA 11\Desktop\esetsmartinstaller_deu.exe 2014-01-11 11:20 - 2014-01-11 11:20 - 01037068 _____ (Thisisu) C:\Users\Samsung SA 11\Desktop\JRT61.exe 2014-01-11 11:18 - 2014-01-11 11:18 - 01233962 _____ C:\Users\Samsung SA 11\Desktop\adwcleaner_3.016.exe 2014-01-11 11:18 - 2009-04-30 14:38 - 00000000 ____D C:\Users\Samsung SA 11\.scribus 2014-01-11 09:32 - 2014-01-11 09:32 - 01933048 _____ (Bleeping Computer, LLC) C:\Users\Samsung SA 11\Desktop\Hilfsprogramm.exe 2014-01-11 09:21 - 2014-01-11 09:21 - 00001030 _____ C:\Users\Samsung SA 11\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk 2014-01-11 09:21 - 2014-01-11 09:21 - 00001006 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk 2014-01-11 09:21 - 2014-01-11 09:21 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\IObit 2014-01-11 09:21 - 2014-01-11 09:21 - 00000000 ____D C:\ProgramData\ProductData 2014-01-11 09:21 - 2014-01-11 09:21 - 00000000 ____D C:\ProgramData\IObit 2014-01-11 09:21 - 2014-01-11 09:21 - 00000000 ____D C:\Program Files\IObit 2014-01-11 08:57 - 2006-11-02 13:37 - 00000000 ____D C:\Windows\DigitalLocker 2014-01-11 08:38 - 2014-01-10 22:46 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\DigitalSites 2014-01-11 00:46 - 2014-01-10 22:46 - 00000147 _____ C:\Users\Samsung SA 11\AppData\Roaming\WB.CFG 2014-01-11 00:46 - 2014-01-10 22:46 - 00000005 _____ C:\Users\Samsung SA 11\AppData\Roaming\WBPU-TTL.DAT 2014-01-10 23:00 - 2014-01-10 23:00 - 00377856 _____ C:\Users\Samsung SA 11\Downloads\gmer_2.1.19163.exe 2014-01-10 22:55 - 2014-01-10 22:54 - 00000488 _____ C:\Users\Samsung SA 11\Downloads\defogger_disable.log 2014-01-10 22:54 - 2014-01-10 22:54 - 00000000 _____ C:\Users\Samsung SA 11\defogger_reenable 2014-01-10 22:54 - 2008-11-03 16:17 - 00000000 ____D C:\Users\Samsung SA 11 2014-01-10 22:51 - 2014-01-10 22:51 - 00050477 _____ C:\Users\Samsung SA 11\Downloads\Defogger.exe 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Local\genienext 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Local\cache 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 ____D C:\Users\Samsung SA 11\.android 2014-01-10 22:48 - 2014-01-10 22:48 - 00000000 _____ C:\Users\Samsung SA 11\daemonprocess.txt 2014-01-10 22:44 - 2014-01-10 22:44 - 00377856 _____ C:\Users\Samsung SA 11\Downloads\jt3jpstr.exe 2014-01-10 19:53 - 2013-08-09 18:53 - 00000943 _____ C:\Users\Samsung SA 11\Desktop\Dropbox.lnk 2014-01-10 19:53 - 2013-08-09 18:49 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-01-09 16:17 - 2013-10-15 12:41 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\vlc 2014-01-09 13:31 - 2014-01-09 13:31 - 04223268 _____ C:\ProgramData\SamPCFax000009500000 2014-01-09 13:31 - 2009-01-10 19:23 - 00010863 _____ C:\Users\Samsung SA 11\AppData\Roaming\SmarThruOptions.xml 2014-01-09 12:22 - 2008-12-25 12:57 - 00000000 ____D C:\Program Files\Google 2014-01-09 09:08 - 2011-11-20 11:09 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrettspielWelt 2014-01-09 09:06 - 2009-10-31 14:31 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Local\Deployment 2014-01-09 09:05 - 2014-01-03 18:55 - 00000000 ____D C:\Program Files\Gabest 2014-01-09 09:02 - 2008-12-25 13:07 - 00000767 _____ C:\Users\Samsung SA 11\Documents\Meine freigegebenen Ordner.lnk 2014-01-09 09:01 - 2008-12-25 13:01 - 00000000 ____D C:\Program Files\Windows Live 2014-01-09 08:59 - 2008-12-25 12:57 - 00000000 ____D C:\Users\Samsung SA 11\AppData\Local\Google 2014-01-09 08:59 - 2008-12-25 12:57 - 00000000 ____D C:\ProgramData\Google 2014-01-09 08:58 - 2009-09-28 17:49 - 00000000 ____D C:\Program Files\Electronic Arts 2014-01-05 12:54 - 2013-03-09 12:49 - 00004994 _____ C:\Windows\setupact.log 2014-01-03 19:19 - 2014-01-03 18:46 - 00000000 ____D C:\Program Files\AutoGK 2014-01-03 19:18 - 2014-01-03 18:48 - 00000551 _____ C:\Users\Samsung SA 11\AppData\Roaming\AutoGK.ini 2014-01-03 18:45 - 2014-01-03 18:44 - 12341641 _____ C:\Users\Samsung SA 11\Downloads\AutoGordianKnot.2.55.Setup.exe 2014-01-03 18:20 - 2013-11-13 22:47 - 00001873 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2014-01-03 18:19 - 2013-11-13 22:34 - 00180248 _____ C:\Windows\system32\Drivers\aswVmm.sys 2014-01-03 18:19 - 2011-05-04 13:06 - 00775952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2014-01-03 18:19 - 2011-05-04 13:06 - 00410528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2014-01-03 18:19 - 2011-05-04 13:06 - 00067824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-01-03 18:19 - 2011-05-04 13:06 - 00057672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys 2014-01-03 18:19 - 2011-05-04 13:06 - 00054832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr.sys 2014-01-03 18:19 - 2011-05-04 13:05 - 00270240 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-01-03 18:19 - 2011-05-04 13:05 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2013-12-21 21:30 - 2006-11-02 11:33 - 01582492 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-21 20:26 - 2012-05-03 19:48 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2013-12-20 15:32 - 2013-11-17 20:11 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-12-20 15:32 - 2010-03-28 13:31 - 00000846 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-12-20 15:31 - 2013-12-20 15:31 - 23867560 _____ (Mozilla) C:\Users\Samsung SA 11\Downloads\Firefox Setup 26.0.exe 2013-12-20 13:35 - 2013-12-20 13:34 - 00283096 _____ (Mozilla) C:\Users\Samsung SA 11\Downloads\Firefox Setup Stub 26.0.exe 2013-12-16 22:46 - 2013-12-16 22:46 - 00002073 _____ C:\Users\Public\Desktop\Google Earth.lnk 2013-12-16 12:40 - 2012-11-26 13:09 - 00000906 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-12-16 12:40 - 2012-11-26 13:09 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware Some content of TEMP: ==================== C:\Users\Samsung SA 11\AppData\Local\temp\BackupSetup.exe C:\Users\Samsung SA 11\AppData\Local\temp\DivXSetup.exe C:\Users\Samsung SA 11\AppData\Local\temp\ffdshow.exe C:\Users\Samsung SA 11\AppData\Local\temp\install_helper.exe C:\Users\Samsung SA 11\AppData\Local\temp\MatroskaSplitter.exe C:\Users\Samsung SA 11\AppData\Local\temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-15 10:33 ==================== End Of Log ============================ |
16.01.2014, 08:29 | #11 |
/// the machine /// TB-Ausbilder | immer wieder "Page not found" Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter ProxyServer: socks=127.0.0.1:16101 Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
16.01.2014, 22:17 | #12 |
| immer wieder "Page not found"Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 15-01-2014 03 Ran by Samsung SA 11 at 2014-01-16 21:08:23 Run:2 Running from C:\Users\Samsung SA 11\Downloads\FRST-OlderVersion\FRST-OlderVersion Boot Mode: Normal ============================================== Content of fixlist: ***************** ProxyServer: socks=127.0.0.1:16101 ***************** HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => Value deleted successfully. ==== End of Fixlog ==== Alles funktioniert, alle Schädlinge (hoffentlich) beseitigt, alle Sicherheitstipps postwendend angewandt. =) |
17.01.2014, 17:06 | #13 |
/// the machine /// TB-Ausbilder | immer wieder "Page not found" Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |