|
Plagegeister aller Art und deren Bekämpfung: Werbefenster öffnen sich bei FirefoxWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
22.01.2014, 02:09 | #1 |
| Werbefenster öffnen sich bei Firefox Liebes Trojaner-Board-Team, es tut mir leid, dass ich keine Logfiles poste, aber ich habe mittlerweile soviele Antivirenscanner und Spywareprogramme installiert, dass ich den Überblick verloren habe. Mein Problem: Wenn ich in Firefox einen Tab öffne, öffnen sich ständig andere Werbefenster oder -Tabs. Außerdem werde ich laufend aufgefordert, Java oder meinen Media Player oder ähnliches zu aktualisieren. Auch poppt bei jedem geöffneten Tab eine Werbeeinblendung von "RightCopoun" auf. Anfangs habe ich Spyhunter installiert, der auch viele Fehler gefunden hat. Um diese zu beheben, hätte ich das Programm aber kaufen müssen. Da ich dann irgendwo gelesen hatte, dass Spyhunter selbst das Problem ist, habe ich es wieder deinstalliert und diverse andere Scanner laufen lassen. Welchen soll ich nun nehmen, damit Ihr mit dem Ergebnis etwas anfangen könnt? Über Hilfe würde ich mich sehr freuen. Bin etwas verzweifelt. Beste Grüße Josi |
22.01.2014, 02:13 | #2 |
/// TB-Ausbilder | Werbefenster öffnen sich bei Firefox Hi,
__________________mach bitte einen FRST-Scan: Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
22.01.2014, 12:03 | #3 |
| Werbefenster öffnen sich bei Firefox FRST Logfile:
__________________FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 21-01-2014 Ran by XX (administrator) on XX-PC on 22-01-2014 02:26:10 Running from C:\Users\XX\Desktop Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgrsx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcsrvx.exe (Lenovo) C:\Windows\System32\ibmpmsvc.exe (Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe (SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore.exe (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgfws.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgidsagent.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgwdsvc.exe (Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe () C:\Program Files\Motorola\MotoHelper\MotoHelperService.exe (Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe () C:\Windows\System32\PSIService.exe (Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe () C:\Program Files\Motorola\MotoHelper\MotoHelperAgent.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgnsx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgemcx.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgui.exe (Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE (Spotify Ltd) C:\Users\XX\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (Dropbox, Inc.) C:\Users\XX\AppData\Roaming\Dropbox\bin\Dropbox.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE () C:\Program Files\SparkleShare\SparkleShare.exe (Rocket Division Software) C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe (AVG) C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe (Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe (Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe (AVG) C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesApp32.exe () C:\Program Files\SparkleShare\msysgit\bin\ssh-agent.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcsrvx.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation) HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [AVG_UI] - C:\Program Files\AVG\AVG2014\avgui.exe [4956176 2013-11-07] (AVG Technologies CZ, s.r.o.) HKLM\...\Run: [SDTray] - C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.) HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X] HKCU\...\Run: [OfficeSyncProcess] - C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE [720064 2013-04-22] (Microsoft Corporation) HKCU\...\Run: [Spotify Web Helper] - C:\Users\XX\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104384 2013-08-04] (Spotify Ltd) HKCU\...\Run: [SUPERAntiSpyware] - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [5625624 2014-01-06] (SUPERAntiSpyware) HKCU\...409d6c4515e9\InprocServer32: [Default-shell32] <==== ATTENTION! MountPoints2: E - E:\iLinker.exe MountPoints2: {80c11bca-18d7-11e1-9f4b-806e6f6e6963} - E:\AUTORUN.EXE MountPoints2: {94310bc2-0ee0-11e3-9890-0016d3cc412f} - E:\iLinker.exe Startup: C:\Users\XX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\XX\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\XX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) Startup: C:\Users\XX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SparkleShare.lnk ShortcutTarget: SparkleShare.lnk -> C:\Program Files\SparkleShare\SparkleShare.exe () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x5F522D0CAD89CD01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de SearchScopes: HKLM - DefaultScope value is missing. BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer) BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} https://sslvpn.landtag-bw.de/dana-cached/sc/JuniperSetupClient.cab Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) ShellExecuteHooks: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [115440 2013-05-07] (SuperAdBlocker.com) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\rwyk3m6g.default FF SearchEngineOrder.user_pref("browser.search.order.1", "");: user_pref("browser.search.order.1", ""); FF SearchEngineOrder.user_pref("browser.search.order.1,S", "");: user_pref("browser.search.order.1,S", ""); FF SearchEngineOrder.3: Bing FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32.dll () FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin: @real.com/nppl3260;version=15.0.0.198 - c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprjplug;version=15.0.0.198 - c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.0.198 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprphtml5videoshim;version=15.0.0.198 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprpjplug;version=15.0.0.198 - c:\program files\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 - C:\Program Files\Lightspark 0.5.3-git\nplightsparkplugin.dll No File FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101753.dll (Amazon.com, Inc.) FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml FF Extension: SimaRtComppare - C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\rwyk3m6g.default\Extensions\0qwtoma@rpekoxp.net [2013-12-24] FF Extension: wEbbsaaver - C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\rwyk3m6g.default\Extensions\amtx484@cp-ooie.com [2013-12-24] FF Extension: Recorder Toolbar - C:\Program Files\Mozilla Firefox\extensions\{10743931-94DF-476f-A987-4391233C17A2} [2013-02-27] FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-11-28] FF HKLM\...\Firefox\Extensions: [ext@flash-Enhancer.com] - C:\Program Files\AmiExt\flashEnhancer\ff FF HKCU\...\Firefox\Extensions: [{33044118-6597-4D2F-ABEA-7974BB185379}] - C:\Users\XX\AppData\Roaming\16001.015 FF Extension: Java Link Helper - C:\Users\XX\AppData\Roaming\16001.015 [2012-11-26] FF HKCU\...\Firefox\Extensions: [{48d99c73-1969-4275-b409-3bffc15bc112}] - C:\Program Files\Re-markit\150.xpi Chrome: ======= CHR HomePage: hxxp://www.google.com CHR DefaultSearchProvider: nationzoom CHR DefaultSearchURL: hxxp://www.google.com CHR DefaultNewTabURL: CHR Extension: (Google Docs) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-20] CHR Extension: (Google Drive) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-20] CHR Extension: (YouTube) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-20] CHR Extension: (Google-Suche) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-20] CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2013-12-16] CHR Extension: (Google Wallet) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-17] CHR Extension: (Google Mail) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-20] CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2011-11-28] CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ========================== Services (Whitelisted) ================= R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [120088 2013-10-10] (SUPERAntiSpyware.com) S2 05837205; C:\ProgramData\Browser faster\BrowserfasterSvc.dll [180048 2013-12-28] () R2 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-26] (Avira Operations GmbH & Co. KG) R2 avgfws; C:\Program Files\AVG\AVG2014\avgfws.exe [1358944 2013-09-24] (AVG Technologies CZ, s.r.o.) R2 AVGIDSAgent; C:\Program Files\AVG\AVG2014\avgidsagent.exe [3478544 2013-11-11] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.) R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) R2 MotoHelper; C:\Program Files\Motorola\MotoHelper\MotoHelperService.exe [226624 2011-01-27] () R2 ProtexisLicensing; C:\Windows\system32\PSIService.exe [177704 2007-06-05] () R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.) R2 StarWindServiceAE; C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe [275968 2007-05-28] (Rocket Division Software) R2 TuneUp.UtilitiesSvc; C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe [1741624 2013-12-18] (AVG) R2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2012-01-18] (Logitech Inc.) ==================== Drivers (Whitelisted) ==================== R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [120600 2013-11-05] (AVG Technologies CZ, s.r.o.) R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6x.sys [47928 2013-09-26] (AVG Technologies CZ, s.r.o.) R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [209176 2013-11-04] (AVG Technologies CZ, s.r.o.) R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [147768 2013-10-24] (AVG Technologies CZ, s.r.o.) R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [22840 2013-09-17] (AVG Technologies CZ, s.r.o.) R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [176952 2013-10-31] (AVG Technologies CZ, s.r.o.) R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [222520 2013-10-31] (AVG Technologies CZ, s.r.o.) R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [102712 2013-10-01] (AVG Technologies CZ, s.r.o.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-18] (Avira Operations GmbH & Co. KG) R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [27448 2013-09-10] (AVG Technologies CZ, s.r.o.) R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [193848 2013-08-01] (AVG Technologies CZ, s.r.o.) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-18] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-26] (Avira Operations GmbH & Co. KG) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation) S3 MBAMSwissArmy; C:\Windows\system32\drivers\mbamswissarmy.sys [40776 2014-01-21] (Malwarebytes Corporation) R1 NEOFLTR_730_23977; C:\Windows\system32\Drivers\NEOFLTR_730_23977.SYS [92264 2013-02-20] (Juniper Networks) R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [12880 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com) R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [67664 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [721904 2011-11-27] () R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-02-27] (Avira GmbH) R3 TuneUpUtilitiesDrv; C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver32.sys [12320 2013-12-16] (TuneUp Software) S3 USB28xxBGA; C:\Windows\System32\DRIVERS\emBDA.sys [579712 2009-12-01] (eMPIA Technology, Inc.) S3 USB28xxOEM; C:\Windows\System32\DRIVERS\emOEM.sys [543744 2009-12-01] (eMPIA Technology, Inc.) U3 a5kmtna6; C:\Windows\System32\Drivers\a5kmtna6.sys [0 ] (Microsoft Corporation) S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x] U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-14] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-22 02:26 - 2014-01-22 02:26 - 00018099 _____ C:\Users\XX\Desktop\FRST.txt 2014-01-22 02:25 - 2014-01-22 02:25 - 01222144 _____ (Farbar) C:\Users\XX\Desktop\FRST.exe 2014-01-22 02:25 - 2014-01-22 02:25 - 00000000 ____D C:\FRST 2014-01-21 18:23 - 2013-12-18 09:38 - 00036152 _____ (AVG) C:\Windows\system32\TURegOpt.exe 2014-01-21 18:22 - 2014-01-21 18:22 - 00002175 _____ C:\Users\Public\Desktop\AVG 1-Klick-Wartung.lnk 2014-01-21 18:22 - 2014-01-21 18:22 - 00002151 _____ C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk 2014-01-21 18:22 - 2013-12-18 09:38 - 00025400 _____ (AVG) C:\Windows\system32\authuitu.dll 2014-01-21 17:57 - 2014-01-21 17:59 - 78353784 _____ (AVG) C:\Users\XX\Downloads\avg_tuh_stf_all_2014_295 (1).exe 2014-01-21 17:57 - 2014-01-21 17:58 - 78353784 _____ (AVG) C:\Users\XX\Downloads\avg_tuh_stf_all_2014_295.exe 2014-01-21 00:13 - 2014-01-21 00:14 - 01236282 _____ C:\Users\XX\Downloads\adwcleaner.exe 2014-01-21 00:02 - 2014-01-21 00:03 - 00040776 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamswissarmy.sys 2014-01-20 19:49 - 2014-01-20 19:49 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf16104a353afe.job 2014-01-20 19:39 - 2014-01-20 19:39 - 00002197 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2014-01-20 19:33 - 2014-01-20 19:33 - 00000504 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task fb3e5a6f-b3a6-4850-b703-966e9e14f035.job 2014-01-20 19:33 - 2014-01-20 19:33 - 00000504 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task da457c5e-ce80-4c51-9dc8-70fbe63dcce0.job 2014-01-20 19:33 - 2014-01-20 19:33 - 00000000 ____D C:\Users\XX\AppData\Roaming\SUPERAntiSpyware.com 2014-01-20 19:32 - 2014-01-20 20:45 - 00000000 ____D C:\Program Files\SUPERAntiSpyware 2014-01-20 19:32 - 2014-01-20 19:32 - 00001965 _____ C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk 2014-01-20 19:32 - 2014-01-20 19:32 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com 2014-01-20 19:31 - 2014-01-20 19:31 - 29393568 _____ (SUPERAntiSpyware) C:\Users\XX\Downloads\SUPERAntiSpyware_5.7.0.1018.exe 2014-01-15 02:22 - 2014-01-15 02:22 - 00000000 ____D C:\Program Files\Common Files\Java 2014-01-15 02:21 - 2014-01-15 02:20 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-01-15 02:20 - 2014-01-15 02:20 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-01-15 02:20 - 2014-01-15 02:20 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2014-01-15 02:20 - 2014-01-15 02:20 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2014-01-15 02:19 - 2014-01-15 02:19 - 00000000 ____D C:\Program Files\Java 2014-01-15 01:40 - 2013-11-27 02:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-01-15 01:40 - 2013-11-27 02:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-01-15 01:40 - 2013-11-27 02:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-01-15 01:40 - 2013-11-27 02:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-01-15 01:40 - 2013-11-27 02:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-01-15 01:40 - 2013-11-27 02:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-01-15 01:40 - 2013-11-27 02:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-01-15 01:40 - 2013-11-26 12:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-01-15 01:40 - 2013-11-26 11:10 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-01-14 08:54 - 2014-01-14 08:54 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2014-01-14 08:52 - 2014-01-14 08:52 - 06951048 _____ (Microsoft Corporation) C:\Users\XX\Downloads\Silverlight.exe 2014-01-13 21:00 - 2014-01-13 21:00 - 00001071 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-13 21:00 - 2014-01-13 21:00 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware 2014-01-13 21:00 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-01-13 20:25 - 2014-01-13 20:26 - 00000000 ____D C:\Windows\220FB0354744483A9A0B41DF77061583.TMP 2014-01-13 20:06 - 2014-01-13 20:06 - 00000644 _____ C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job 2014-01-13 20:06 - 2014-01-13 20:06 - 00000616 _____ C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job 2014-01-13 20:06 - 2014-01-13 20:06 - 00000446 _____ C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job 2014-01-13 20:05 - 2014-01-13 20:11 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2014-01-13 20:05 - 2014-01-13 20:06 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy 2 2014-01-13 20:05 - 2013-09-20 10:49 - 00018968 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean.exe 2014-01-13 19:53 - 2014-01-13 19:54 - 40658208 _____ (Safer-Networking Ltd. ) C:\Users\XX\Downloads\spybot-2.2.25.exe 2014-01-12 13:14 - 2014-01-12 13:14 - 00000220 _____ C:\Windows\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013.job 2014-01-11 17:13 - 2014-01-11 17:13 - 00000404 _____ C:\Windows\Tasks\AVG_REG_1213b.job 2014-01-11 17:13 - 2014-01-11 17:13 - 00000386 _____ C:\Windows\Tasks\AVG_SYS_TASK_DELETE.job 2014-01-11 17:13 - 2014-01-11 17:13 - 00000000 ____D C:\ProgramData\AVG 1213b Campaign 2014-01-10 18:19 - 2014-01-15 08:09 - 00408696 _____ C:\Windows\system32\FNTCACHE.DAT 2014-01-10 15:45 - 2014-01-10 15:45 - 00109280 _____ C:\Users\XX\AppData\Local\GDIPFONTCACHEV1.DAT 2014-01-09 22:35 - 2014-01-09 22:35 - 00000000 ____D C:\Users\XX\AppData\Roaming\AVG 2014-01-09 22:27 - 2014-01-09 22:41 - 00000000 ____D C:\ProgramData\AVG 2014-01-09 22:25 - 2014-01-21 18:36 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} 2014-01-09 22:22 - 2014-01-09 22:22 - 78353832 _____ (AVG) C:\Users\XX\Downloads\avg_tuh_stf_all_2014_295_24c28.exe 2014-01-09 21:30 - 2014-01-09 21:30 - 00000212 _____ C:\Windows\Tasks\SidebarExecute.job 2014-01-09 21:30 - 2014-01-09 21:30 - 00000000 ____D C:\Users\XX\AppData\Roaming\AVG2014 2014-01-09 21:29 - 2014-01-09 21:29 - 00000951 _____ C:\Users\Public\Desktop\AVG 2014.lnk 2014-01-09 21:29 - 2014-01-09 21:29 - 00000000 ____D C:\Users\XX\AppData\Roaming\TuneUp Software 2014-01-09 21:26 - 2014-01-09 21:30 - 00000000 ____D C:\ProgramData\AVG2014 2014-01-09 21:26 - 2014-01-09 21:26 - 00000000 ___HD C:\$AVG 2014-01-09 21:25 - 2014-01-09 22:33 - 00000000 ____D C:\Program Files\AVG 2014-01-09 21:10 - 2014-01-22 01:56 - 00000000 ____D C:\ProgramData\MFAData 2014-01-09 21:10 - 2014-01-09 21:36 - 00000000 ____D C:\Users\XX\AppData\Local\Avg2014 2014-01-09 21:10 - 2014-01-09 21:10 - 00000000 ____D C:\Users\XX\AppData\Local\MFAData 2014-01-09 21:02 - 2014-01-09 21:08 - 137189352 _____ (AVG Technologies) C:\Users\XX\Downloads\avg_free_x86_all_2014_4259a6848.exe 2013-12-30 22:56 - 2013-12-30 22:56 - 00000000 ____D C:\Users\XX\AppData\Roaming\Malwarebytes 2013-12-30 22:56 - 2013-12-30 22:56 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-12-30 22:55 - 2014-01-13 20:41 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\XX\Downloads\mbam-setup-1.75.0.1300.exe 2013-12-30 21:19 - 2013-12-30 21:19 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard 2013-12-29 22:04 - 2013-12-29 22:04 - 00000000 ____D C:\ProgramData\Websteroids 2013-12-29 19:37 - 2014-01-21 00:36 - 00000000 ____D C:\AdwCleaner 2013-12-29 19:36 - 2013-12-29 19:36 - 01233962 _____ C:\Users\XX\Downloads\adwcleaner_3.016.exe 2013-12-29 19:25 - 2013-12-29 19:25 - 00001212 _____ C:\Users\XX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Create Amazing Presentations.lnk 2013-12-29 19:22 - 2013-12-31 01:05 - 00000000 ____D C:\Program Files\AmiExt 2013-12-29 19:22 - 2013-12-31 00:36 - 00000000 ____D C:\ProgramData\Updater 2013-12-29 19:19 - 2013-12-29 21:56 - 00000444 __RSH C:\ProgramData\ntuser.pol 2013-12-29 19:18 - 2013-12-29 19:48 - 00000000 ____D C:\Users\XX\AppData\Roaming\Uniblue 2013-12-29 19:18 - 2013-12-29 19:48 - 00000000 ____D C:\Program Files\Uniblue 2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 ____D C:\Users\XX\AppData\Local\cache 2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 ____D C:\Users\XX\.android 2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 _____ C:\Users\XX\daemonprocess.txt 2013-12-28 21:54 - 2014-01-13 21:30 - 00000000 ____D C:\ProgramData\Browser faster ==================== One Month Modified Files and Folders ======= 2014-01-22 02:26 - 2014-01-22 02:26 - 00018099 _____ C:\Users\XX\Desktop\FRST.txt 2014-01-22 02:25 - 2014-01-22 02:25 - 01222144 _____ (Farbar) C:\Users\XX\Desktop\FRST.exe 2014-01-22 02:25 - 2014-01-22 02:25 - 00000000 ____D C:\FRST 2014-01-22 02:25 - 2009-07-14 05:34 - 00014960 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-22 02:25 - 2009-07-14 05:34 - 00014960 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-22 01:56 - 2014-01-09 21:10 - 00000000 ____D C:\ProgramData\MFAData 2014-01-22 01:21 - 2011-11-27 10:12 - 02077567 _____ C:\Windows\WindowsUpdate.log 2014-01-22 01:16 - 2012-09-22 20:06 - 00000000 ____D C:\Users\XX\AppData\Roaming\Dropbox 2014-01-22 01:15 - 2012-09-22 20:29 - 00000000 ___RD C:\Users\XX\Dropbox 2014-01-22 01:13 - 2013-05-15 21:29 - 00000000 ____D C:\Users\XX\AppData\Roaming\sparkleshare 2014-01-22 01:12 - 2013-01-25 14:02 - 00111046 _____ C:\Windows\PFRO.log 2014-01-22 01:12 - 2012-10-25 21:47 - 00074260 _____ C:\Windows\setupact.log 2014-01-21 18:36 - 2014-01-09 22:25 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} 2014-01-21 18:22 - 2014-01-21 18:22 - 00002175 _____ C:\Users\Public\Desktop\AVG 1-Klick-Wartung.lnk 2014-01-21 18:22 - 2014-01-21 18:22 - 00002151 _____ C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk 2014-01-21 17:59 - 2014-01-21 17:57 - 78353784 _____ (AVG) C:\Users\XX\Downloads\avg_tuh_stf_all_2014_295 (1).exe 2014-01-21 17:58 - 2014-01-21 17:57 - 78353784 _____ (AVG) C:\Users\XX\Downloads\avg_tuh_stf_all_2014_295.exe 2014-01-21 00:36 - 2013-12-29 19:37 - 00000000 ____D C:\AdwCleaner 2014-01-21 00:14 - 2014-01-21 00:13 - 01236282 _____ C:\Users\XX\Downloads\adwcleaner.exe 2014-01-21 00:03 - 2014-01-21 00:02 - 00040776 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamswissarmy.sys 2014-01-20 20:45 - 2014-01-20 19:32 - 00000000 ____D C:\Program Files\SUPERAntiSpyware 2014-01-20 19:49 - 2014-01-20 19:49 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf16104a353afe.job 2014-01-20 19:39 - 2014-01-20 19:39 - 00002197 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2014-01-20 19:39 - 2013-12-16 02:09 - 00000000 ____D C:\Program Files\Google 2014-01-20 19:33 - 2014-01-20 19:33 - 00000504 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task fb3e5a6f-b3a6-4850-b703-966e9e14f035.job 2014-01-20 19:33 - 2014-01-20 19:33 - 00000504 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task da457c5e-ce80-4c51-9dc8-70fbe63dcce0.job 2014-01-20 19:33 - 2014-01-20 19:33 - 00000000 ____D C:\Users\XX\AppData\Roaming\SUPERAntiSpyware.com 2014-01-20 19:32 - 2014-01-20 19:32 - 00001965 _____ C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk 2014-01-20 19:32 - 2014-01-20 19:32 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com 2014-01-20 19:31 - 2014-01-20 19:31 - 29393568 _____ (SUPERAntiSpyware) C:\Users\XX\Downloads\SUPERAntiSpyware_5.7.0.1018.exe 2014-01-20 17:25 - 2011-11-27 10:53 - 00000000 ____D C:\Users\XX\AppData\Local\Microsoft Help 2014-01-15 08:09 - 2014-01-10 18:19 - 00408696 _____ C:\Windows\system32\FNTCACHE.DAT 2014-01-15 03:11 - 2013-07-30 06:47 - 00000000 ____D C:\Windows\system32\MRT 2014-01-15 03:02 - 2011-11-27 10:57 - 83425928 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-01-15 02:22 - 2014-01-15 02:22 - 00000000 ____D C:\Program Files\Common Files\Java 2014-01-15 02:22 - 2013-10-15 08:29 - 00000000 ____D C:\ProgramData\Oracle 2014-01-15 02:20 - 2014-01-15 02:21 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-01-15 02:20 - 2014-01-15 02:20 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-01-15 02:20 - 2014-01-15 02:20 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2014-01-15 02:20 - 2014-01-15 02:20 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2014-01-15 02:20 - 2012-09-26 11:59 - 00868264 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll 2014-01-15 02:20 - 2012-09-26 11:59 - 00790440 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll 2014-01-15 02:19 - 2014-01-15 02:19 - 00000000 ____D C:\Program Files\Java 2014-01-14 09:01 - 2013-07-05 21:17 - 00000000 ____D C:\Program Files\SuperLyrics 2014-01-14 08:54 - 2014-01-14 08:54 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2014-01-14 08:52 - 2014-01-14 08:52 - 06951048 _____ (Microsoft Corporation) C:\Users\XX\Downloads\Silverlight.exe 2014-01-13 21:55 - 2011-11-27 10:19 - 00000000 ____D C:\Users\XX 2014-01-13 21:43 - 2011-11-27 19:59 - 00000000 ____D C:\Users\XX\AppData\Local\Corel 2014-01-13 21:43 - 2011-11-27 19:57 - 00000952 ___SH C:\Windows\system32\KGyGaAvL.sys 2014-01-13 21:30 - 2013-12-28 21:54 - 00000000 ____D C:\ProgramData\Browser faster 2014-01-13 21:30 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\PLA 2014-01-13 21:00 - 2014-01-13 21:00 - 00001071 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-13 21:00 - 2014-01-13 21:00 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware 2014-01-13 20:41 - 2013-12-30 22:55 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\XX\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-13 20:26 - 2014-01-13 20:25 - 00000000 ____D C:\Windows\220FB0354744483A9A0B41DF77061583.TMP 2014-01-13 20:11 - 2014-01-13 20:05 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2014-01-13 20:06 - 2014-01-13 20:06 - 00000644 _____ C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job 2014-01-13 20:06 - 2014-01-13 20:06 - 00000616 _____ C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job 2014-01-13 20:06 - 2014-01-13 20:06 - 00000446 _____ C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job 2014-01-13 20:06 - 2014-01-13 20:05 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy 2 2014-01-13 19:54 - 2014-01-13 19:53 - 40658208 _____ (Safer-Networking Ltd. ) C:\Users\XX\Downloads\spybot-2.2.25.exe 2014-01-12 14:27 - 2011-11-27 10:23 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI 2014-01-12 13:14 - 2014-01-12 13:14 - 00000220 _____ C:\Windows\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013.job 2014-01-12 10:22 - 2013-08-05 11:58 - 00000000 ____D C:\Users\XX\AppData\Local\Audible 2014-01-11 18:13 - 2011-11-27 10:19 - 00000000 ____D C:\Users\XX\AppData\Local\VirtualStore 2014-01-11 17:13 - 2014-01-11 17:13 - 00000404 _____ C:\Windows\Tasks\AVG_REG_1213b.job 2014-01-11 17:13 - 2014-01-11 17:13 - 00000386 _____ C:\Windows\Tasks\AVG_SYS_TASK_DELETE.job 2014-01-11 17:13 - 2014-01-11 17:13 - 00000000 ____D C:\ProgramData\AVG 1213b Campaign 2014-01-10 18:19 - 2013-05-07 08:04 - 00000000 ____D C:\Users\XX\.thumbnails 2014-01-10 16:04 - 2012-09-22 20:29 - 00000970 _____ C:\Users\XX\Desktop\Dropbox.lnk 2014-01-10 16:04 - 2012-09-22 20:28 - 00000000 ____D C:\Users\XX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-01-10 15:45 - 2014-01-10 15:45 - 00109280 _____ C:\Users\XX\AppData\Local\GDIPFONTCACHEV1.DAT 2014-01-09 22:41 - 2014-01-09 22:27 - 00000000 ____D C:\ProgramData\AVG 2014-01-09 22:35 - 2014-01-09 22:35 - 00000000 ____D C:\Users\XX\AppData\Roaming\AVG 2014-01-09 22:33 - 2014-01-09 21:25 - 00000000 ____D C:\Program Files\AVG 2014-01-09 22:22 - 2014-01-09 22:22 - 78353832 _____ (AVG) C:\Users\XX\Downloads\avg_tuh_stf_all_2014_295_24c28.exe 2014-01-09 21:36 - 2014-01-09 21:10 - 00000000 ____D C:\Users\XX\AppData\Local\Avg2014 2014-01-09 21:30 - 2014-01-09 21:30 - 00000212 _____ C:\Windows\Tasks\SidebarExecute.job 2014-01-09 21:30 - 2014-01-09 21:30 - 00000000 ____D C:\Users\XX\AppData\Roaming\AVG2014 2014-01-09 21:30 - 2014-01-09 21:26 - 00000000 ____D C:\ProgramData\AVG2014 2014-01-09 21:29 - 2014-01-09 21:29 - 00000951 _____ C:\Users\Public\Desktop\AVG 2014.lnk 2014-01-09 21:29 - 2014-01-09 21:29 - 00000000 ____D C:\Users\XX\AppData\Roaming\TuneUp Software 2014-01-09 21:26 - 2014-01-09 21:26 - 00000000 ___HD C:\$AVG 2014-01-09 21:10 - 2014-01-09 21:10 - 00000000 ____D C:\Users\XX\AppData\Local\MFAData 2014-01-09 21:08 - 2014-01-09 21:02 - 137189352 _____ (AVG Technologies) C:\Users\XX\Downloads\avg_free_x86_all_2014_4259a6848.exe 2013-12-31 01:08 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\addins 2013-12-31 01:05 - 2013-12-29 19:22 - 00000000 ____D C:\Program Files\AmiExt 2013-12-31 00:36 - 2013-12-29 19:22 - 00000000 ____D C:\ProgramData\Updater 2013-12-31 00:36 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Web 2013-12-31 00:36 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Resources 2013-12-31 00:33 - 2013-12-22 17:53 - 00000000 ____D C:\ProgramData\wEbbsaaver 2013-12-31 00:33 - 2013-12-22 17:08 - 00000000 ____D C:\ProgramData\SimaRtComppare 2013-12-30 22:56 - 2013-12-30 22:56 - 00000000 ____D C:\Users\XX\AppData\Roaming\Malwarebytes 2013-12-30 22:56 - 2013-12-30 22:56 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-12-30 22:05 - 2011-11-27 10:53 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-12-30 21:19 - 2013-12-30 21:19 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard 2013-12-30 01:34 - 2011-11-27 10:20 - 00001146 _____ C:\Users\XX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-12-29 22:04 - 2013-12-29 22:04 - 00000000 ____D C:\ProgramData\Websteroids 2013-12-29 21:56 - 2013-12-29 19:19 - 00000444 __RSH C:\ProgramData\ntuser.pol 2013-12-29 19:48 - 2013-12-29 19:18 - 00000000 ____D C:\Users\XX\AppData\Roaming\Uniblue 2013-12-29 19:48 - 2013-12-29 19:18 - 00000000 ____D C:\Program Files\Uniblue 2013-12-29 19:36 - 2013-12-29 19:36 - 01233962 _____ C:\Users\XX\Downloads\adwcleaner_3.016.exe 2013-12-29 19:25 - 2013-12-29 19:25 - 00001212 _____ C:\Users\XX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Create Amazing Presentations.lnk 2013-12-29 19:19 - 2009-07-14 03:37 - 00000000 ___HD C:\Windows\system32\GroupPolicy 2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 ____D C:\Users\XX\AppData\Local\cache 2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 ____D C:\Users\XX\.android 2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 _____ C:\Users\XX\daemonprocess.txt ZeroAccess: C:\$Recycle.Bin\S-1-5-21-3209394106-3398393384-4106522146-1000\$26a220ba84cc633398379c35e8273d4a ZeroAccess: C:\$Recycle.Bin\S-1-5-18\$26a220ba84cc633398379c35e8273d4a Files to move or delete: ==================== C:\Users\XX\AppData\Roaming\skype.ini C:\ProgramData\0tbpw.pad Some content of TEMP: ==================== C:\Users\XX\AppData\Local\Temp\avgnt.exe C:\Users\XX\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-09-01 14:11 ==================== End Of Log ============================ --- --- --- --- --- --- --- --- --- --- --- --- Addition Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 21-01-2014 Ran by XX at 2014-01-22 02:27:49 Running from C:\Users\XX\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: AVG Internet Security 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9} AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} AS: AVG Internet Security 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664} FW: AVG Internet Security 2014 (Enabled) {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2} ==================== Installed Programs ====================== 7-Zip 9.20 (Version: - ) Adobe Flash Player 11 ActiveX (Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Flash Player 11 Plugin (Version: 11.1.102.55 - Adobe Systems Incorporated) Adobe Reader 8.1.2 - Deutsch (Version: 8.1.2 - Adobe Systems Incorporated) Amazon MP3-Downloader 1.0.17 (Version: 1.0.17 - Amazon Services LLC) Apple Application Support (Version: 2.1.5 - Apple Inc.) Apple Software Update (Version: 2.1.3.127 - Apple Inc.) ArcSoft ShowBiz (Version: - ArcSoft) Audacity 1.3.13 (Unicode) (Version: - Audacity Team) AudibleManager (Version: 2007522016.48.56.9309554 - Audible, Inc.) AVG 2014 (Version: 14.0.3681 - AVG Technologies) Hidden AVG 2014 (Version: 14.0.4259 - AVG Technologies) Hidden AVG 2014 (Version: 2014.0.4259 - AVG Technologies) AVG PC TuneUp 2014 (de-DE) (Version: 14.0.1001.295 - AVG) Hidden AVG PC TuneUp 2014 (Version: 14.0.1001.295 - AVG) AVG PC TuneUp 2014 (Version: 14.0.1001.295 - AVG) Hidden Avira Free Antivirus (Version: 14.0.2.286 - Avira) CCleaner (Version: 3.23 - Piriform) Corel Paint Shop Pro Photo X2 (Version: 12.010.0000 - Corel Corporation) Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (Version: - Microsoft) Deutsch - Custom (Version: 1.0.3.40 - Company) Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.) FileZilla Client 3.7.1.1 (Version: 3.7.1.1 - Tim Kosse) Filzip 3.06 (Version: 3.0.6 - Philipp Engel) FormatFactory 3.1.1 (Version: 3.1.1 - Free Time) Free YouTube to MP3 Converter version 3.12.0.128 (Version: 3.12.0.128 - DVDVideoSoft Ltd.) GIMP 2.8.4 (Version: 2.8.4 - The GIMP Team) Google Chrome (Version: 32.0.1700.76 - Google Inc.) Google Update Helper (Version: 1.3.22.3 - Google Inc.) Hidden Intel(R) Graphics Media Accelerator Driver (Version: 8.15.10.1930 - Intel Corporation) Intel(R) TV Wizard (Version: - Intel Corporation) IrfanView (remove only) (Version: 4.32 - Irfan Skiljan) Java 7 Update 40 (Version: 7.0.400 - Oracle) Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden Juniper Networks Host Checker (HKCU Version: 7.3.0.23977 - Juniper Networks) Juniper Networks Secure Application Manager (Version: 7.3.0.23977 - Juniper Networks) Juniper Networks, Inc. Setup Client (HKCU Version: 7.3.4.32787 - Juniper Networks, Inc.) Key Mapper (Version: 1.0.2 - Rose Hill Solutions) KODAK Create@Home Software (für dm) (Version: 7.6.1392 - Eastman Kodak Company) LAME v3.98.3 for Audacity (Version: - ) Lenovo ThinkVantage Toolbox (Version: 6.0.5802.24 - PC-Doctor, Inc.) Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300 - Malwarebytes Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft Keyboard Layout Creator 1.4 (Version: 1.4.6000 - Microsoft Corp.) Microsoft Office 2010 Service Pack 1 (SP1) (Version: - Microsoft) Hidden Microsoft Office Access MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Groove MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Professional Plus 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation) MotoHelper 2.0.45 Driver 5.0.0 (Version: 2.0.45 - Motorola) MotoHelper MergeModules (Version: 1.2.0 - Motorola) Hidden Motorola Mobile Drivers Installation 5.0.0 (Version: 5.0.0 - Motorola Inc.) Hidden Mozilla Firefox 16.0.2 (x86 de) (Version: 16.0.2 - Mozilla) Mozilla Maintenance Service (Version: 24.2.0 - Mozilla) Mozilla Thunderbird 24.2.0 (x86 de) (Version: 24.2.0 - Mozilla) MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0 - Microsoft Corporation) PDF24 Creator 5.2.0 (Version: - PDF24.org) PDFCreator (Version: 1.6.2 - pdfforge) Qtrax Player (HKCU Version: - portal.qtrax.com) QuickTime (Version: 7.71.80.42 - Apple Inc.) RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden SaveByClick (Version: 1.0 - SaveByClick) <==== ATTENTION Skype™ 6.3 (Version: 6.3.107 - Skype Technologies S.A.) xxx xxx (Version: 4.4.0 - xxx GmbH & Co. KG) SparkleShare (Version: 1.0.0 - SparkleShare) Spotify (HKCU Version: 0.9.1.57.ge7405149 - Spotify AB) Spybot - Search & Destroy (Version: 2.2.25 - Safer-Networking Ltd.) StreamTransport version: 1.0.2.2171 (Version: - ) SUPERAntiSpyware (Version: 5.7.1018 - SUPERAntiSpyware.com) ThinkPad Power Management Driver (Version: 1.43 - ) TreeSize Free V2.7 (Version: 2.7 - JAM Software) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3 - Microsoft Corporation) Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2494150) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2553065) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2566458) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (Version: - Microsoft) Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (Version: - Microsoft) Updater (Version: 2.6.53 - Creative Island Media, LLC) USB Video/Audio Device Driver (Version: 1.00.0000 - Ihr Firmenname) Visual Studio 2012 x86 Redistributables (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) VLC media player 1.1.11 (Version: 1.1.11 - VideoLAN) ==================== Restore Points ========================= 20-01-2014 20:04:33 20.02.14 21-01-2014 16:59:14 AVG PC TuneUp 2014 wird entfernt 21-01-2014 17:03:25 AVG PC TuneUp 2014 (de-DE) wird entfernt 21-01-2014 17:15:54 AVG PC TuneUp 2014 wird installiert ==================== Hosts content: ========================== 2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {0885E870-83C3-4F12-A0BF-6FD45A2498FE} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\PC-Doctor\uaclauncher.exe [2011-03-31] (PC-Doctor, Inc.) Task: {2CB84D8E-D9D2-4359-956F-E473D828B94F} - System32\Tasks\PCDEventLauncher => C:\Program Files\PC-Doctor\sessionchecker.exe [2011-03-31] (PC-Doctor, Inc.) Task: {36F211C8-7321-42D7-BDE1-810C22345365} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3209394106-3398393384-4106522146-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2011-11-08] (RealNetworks, Inc.) Task: {5E8008A4-49B8-4B23-BE92-48CE97603B44} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-09-24] (Piriform Ltd) Task: {7E5019A1-DAF8-41C0-9831-422BDDC64E04} - System32\Tasks\{F0566F61-5A90-4EF4-86D7-D7AC4D7A72BB} => Firefox.exe hxxp://ui.skype.com/ui/0/6.3.0.105/de/abandoninstall?source=lightinstaller&page=tsInstall Task: {832F7DE9-2342-469D-A014-337F65028019} - System32\Tasks\MT66 Software Update => C:\Program Files\Common Files\MT66 Software Update\UpdateClient.exe Task: {882FA565-A9E1-444D-B23C-AF7AC99A4BE2} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3209394106-3398393384-4106522146-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2011-11-08] (RealNetworks, Inc.) Task: {8AAE035D-A9CC-4B5C-9C50-B5189C6F81A6} - System32\Tasks\{A7244EDB-6CB7-4E28-89AA-8F7014BCA92A} => C:\ProgramData\BetterSoft\SaveByClick\SaveByClick.exe <==== ATTENTION Task: {DA061B9D-4A6A-4956-BF03-CFF37A0A0C77} - System32\Tasks\SystemToolsDailyTest => C:\Program Files\PC-Doctor\uaclauncher.exe [2011-03-31] (PC-Doctor, Inc.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\AVG_REG_1213b.job => C:\ProgramData\AVG 1213b Campaign\AVG-Secure-Search-Update-1213b.exe Task: C:\Windows\Tasks\AVG_SYS_TASK_DELETE.job => C:\ProgramData\AVG 1213b Campaign\AVG-Secure-Search-Update-1213b.exe Task: C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf16104a353afe.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\Launch 8613.job => C:\Program Files\Audible\Bin\Manager.exe Task: C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job => C:\Program Files\PC-Doctor\uaclauncher.exe Task: C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe Task: C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe Task: C:\Windows\Tasks\SidebarExecute.job => C:\Program Files\Windows Sidebar\sidebar.exe Task: C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task da457c5e-ce80-4c51-9dc8-70fbe63dcce0.job => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe Task: C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task fb3e5a6f-b3a6-4850-b703-966e9e14f035.job => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe Task: C:\Windows\Tasks\SystemToolsDailyTest.job => C:\Program Files\PC-Doctor\uaclauncher.exe Task: C:\Windows\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013.job => C:\Program Files\AVG\AVG PC TuneUp\OneClick.exe ==================== Loaded Modules (whitelisted) ============= 2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2013-06-27 21:12 - 2013-06-27 21:12 - 00093696 _____ () C:\Program Files\FileZilla FTP Client\fzshellext.dll 2014-01-13 20:05 - 2013-05-16 10:55 - 00113496 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2014-01-13 20:05 - 2013-05-16 10:55 - 00416600 _____ () C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl 2011-11-27 11:57 - 2004-09-08 13:45 - 00368128 _____ () C:\Program Files\Filzip\fzshext.dll 2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\XX\AppData\Roaming\Dropbox\bin\libcef.dll 2012-12-02 17:22 - 2012-12-02 17:22 - 01325053 _____ () C:\Program Files\SparkleShare\msysgit\bin\msys-crypto-0.9.8.dll 2012-10-27 17:21 - 2012-10-27 17:21 - 02295264 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll 2011-11-27 12:20 - 2011-11-27 12:20 - 08527008 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\ProgramData\TEMP:373E1720 ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (01/20/2014 10:01:05 PM) (Source: Application Hang) (User: ) Description: Programm xxx.exe, Version 4.4.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 15c4 Startzeit: 01cf160e25b85277 Endzeit: 3195 Anwendungspfad: C:\Users\XX\AppData\Local\Apps\xxx440\xxx.exe Berichts-ID: d115b556-8215-11e3-bc59-0016d3cc412f Error: (01/15/2014 02:31:12 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: java.exe, Version: 7.0.400.43, Zeitstempel: 0x521c3bf2 Name des fehlerhaften Moduls: jsoundds.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x521c4698 Ausnahmecode: 0xc0000005 Fehleroffset: 0x6bd72e42 ID des fehlerhaften Prozesses: 0x1120 Startzeit der fehlerhaften Anwendung: 0xjava.exe0 Pfad der fehlerhaften Anwendung: java.exe1 Pfad des fehlerhaften Moduls: java.exe2 Berichtskennung: java.exe3 Error: (01/15/2014 00:58:41 AM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Die E/A-Schreibvorgänge können während des Schattenkopie-Erstellungszeitraums auf Volume "C:\" nicht gespeichert werden. Der Volumeindex im Schattenkopiesatz ist 0. Fehlerdetails: Offen[0x00000000, Der Vorgang wurde erfolgreich beendet. ], Leerung[0x00000000, Der Vorgang wurde erfolgreich beendet. ], Freigabe[0x80042314, Der Schattenkopieanbieter hat beim Warten auf den Schreibvorgang auf das Volume, von dem eine Schattenkopie erstellt wird, das Zeitlimit überschritten. Ursache hierfür könnte eine durch eine Anwendung oder einen Systemdienst verursachte hohe Aktivität auf dem Volume sein. Wiederholen Sie den Vorgang später, wenn das Volume nicht so stark ausgelastet ist. ], Ausführung[0x00000000, Der Vorgang wurde erfolgreich beendet. ]. Vorgang: Asynchroner Vorgang wird ausgeführt Kontext: Aktueller Status: DoSnapshotSet Error: (01/15/2014 00:58:41 AM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Die Schattenkopie kann nicht zugesichert werden - Vorgang hat das Zeitlimit überschritten. Fehlerkontext: DeviceIoControl(\\?\Volume{80c11bc6-18d7-11e1-9f4b-806e6f6e6963} - 00000140,0x0053c010,008C8F40,0,008C6F30,4096,[0]). Vorgang: Schattenkopien werden übertragen Kontext: Ausführungskontext: System Provider Error: (01/15/2014 00:58:31 AM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Die E/A-Schreibvorgänge können während des Schattenkopie-Erstellungszeitraums auf Volume "C:\" nicht gespeichert werden. Der Volumeindex im Schattenkopiesatz ist 0. Fehlerdetails: Offen[0x00000000, Der Vorgang wurde erfolgreich beendet. ], Leerung[0x00000000, Der Vorgang wurde erfolgreich beendet. ], Freigabe[0x80042314, Der Schattenkopieanbieter hat beim Warten auf den Schreibvorgang auf das Volume, von dem eine Schattenkopie erstellt wird, das Zeitlimit überschritten. Ursache hierfür könnte eine durch eine Anwendung oder einen Systemdienst verursachte hohe Aktivität auf dem Volume sein. Wiederholen Sie den Vorgang später, wenn das Volume nicht so stark ausgelastet ist. ], Ausführung[0x00000000, Der Vorgang wurde erfolgreich beendet. ]. Vorgang: Asynchroner Vorgang wird ausgeführt Kontext: Aktueller Status: DoSnapshotSet Error: (01/15/2014 00:58:31 AM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Die Schattenkopie kann nicht zugesichert werden - Vorgang hat das Zeitlimit überschritten. Fehlerkontext: DeviceIoControl(\\?\Volume{80c11bc6-18d7-11e1-9f4b-806e6f6e6963} - 00000058,0x0053c010,008C6F30,0,008C8F40,4096,[0]). Vorgang: Schattenkopien werden übertragen Kontext: Ausführungskontext: System Provider Error: (01/15/2014 00:57:41 AM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Die E/A-Schreibvorgänge können während des Schattenkopie-Erstellungszeitraums auf Volume "C:\" nicht gespeichert werden. Der Volumeindex im Schattenkopiesatz ist 0. Fehlerdetails: Offen[0x00000000, Der Vorgang wurde erfolgreich beendet. ], Leerung[0x00000000, Der Vorgang wurde erfolgreich beendet. ], Freigabe[0x80042314, Der Schattenkopieanbieter hat beim Warten auf den Schreibvorgang auf das Volume, von dem eine Schattenkopie erstellt wird, das Zeitlimit überschritten. Ursache hierfür könnte eine durch eine Anwendung oder einen Systemdienst verursachte hohe Aktivität auf dem Volume sein. Wiederholen Sie den Vorgang später, wenn das Volume nicht so stark ausgelastet ist. ], Ausführung[0x00000000, Der Vorgang wurde erfolgreich beendet. ]. Vorgang: Asynchroner Vorgang wird ausgeführt Kontext: Aktueller Status: DoSnapshotSet Error: (01/15/2014 00:57:41 AM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Die Schattenkopie kann nicht zugesichert werden - Vorgang hat das Zeitlimit überschritten. Fehlerkontext: DeviceIoControl(\\?\Volume{80c11bc6-18d7-11e1-9f4b-806e6f6e6963} - 0000013C,0x0053c010,008C6F30,0,008C8F40,4096,[0]). Vorgang: Schattenkopien werden übertragen Kontext: Ausführungskontext: System Provider Error: (01/15/2014 00:57:09 AM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Die E/A-Schreibvorgänge können während des Schattenkopie-Erstellungszeitraums auf Volume "C:\" nicht gespeichert werden. Der Volumeindex im Schattenkopiesatz ist 0. Fehlerdetails: Offen[0x00000000, Der Vorgang wurde erfolgreich beendet. ], Leerung[0x00000000, Der Vorgang wurde erfolgreich beendet. ], Freigabe[0x80042314, Der Schattenkopieanbieter hat beim Warten auf den Schreibvorgang auf das Volume, von dem eine Schattenkopie erstellt wird, das Zeitlimit überschritten. Ursache hierfür könnte eine durch eine Anwendung oder einen Systemdienst verursachte hohe Aktivität auf dem Volume sein. Wiederholen Sie den Vorgang später, wenn das Volume nicht so stark ausgelastet ist. ], Ausführung[0x00000000, Der Vorgang wurde erfolgreich beendet. ]. Vorgang: Asynchroner Vorgang wird ausgeführt Kontext: Aktueller Status: DoSnapshotSet Error: (01/15/2014 00:57:09 AM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Die Schattenkopie kann nicht zugesichert werden - Vorgang hat das Zeitlimit überschritten. Fehlerkontext: DeviceIoControl(\\?\Volume{80c11bc6-18d7-11e1-9f4b-806e6f6e6963} - 00000120,0x0053c010,008C8F40,0,008C6F30,4096,[0]). Vorgang: Schattenkopien werden übertragen Kontext: Ausführungskontext: System Provider System errors: ============= Error: (01/22/2014 01:16:17 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X86 erreicht. Error: (01/21/2014 06:39:34 PM) (Source: DCOM) (User: ) Description: {3EB3C877-1F16-487C-9050-104DBCD66683} Error: (01/21/2014 05:40:18 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst AntiVirSchedulerService erreicht. Error: (01/21/2014 04:22:40 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (01/21/2014 04:22:40 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Scanner Service erreicht. Error: (01/20/2014 09:03:19 PM) (Source: VDS Basic Provider) (User: ) Description: Unerwarteter Fehler. Fehlercode: 490@01010004 Error: (01/20/2014 04:05:03 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Windows Update" wurde nicht richtig gestartet. Error: (01/17/2014 07:52:07 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (01/17/2014 07:52:07 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Scanner Service erreicht. Error: (01/16/2014 11:36:13 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Microsoft Office Sessions: ========================= Error: (01/20/2014 10:01:05 PM) (Source: Application Hang)(User: ) Description: xxx.exe4.4.0.015c401cf160e25b852773195C:\Users\XX\AppData\Local\Apps\xxx440\xxx.exed115b556-8215-11e3-bc59-0016d3cc412f Error: (01/15/2014 02:31:12 AM) (Source: Application Error)(User: ) Description: java.exe7.0.400.43521c3bf2jsoundds.dll_unloaded0.0.0.0521c4698c00000056bd72e42112001cf1190d106566dC:\Program Files\Java\jre7\bin\java.exejsoundds.dllb7316e52-7d84-11e3-bbba-0016d3cc412f Error: (01/15/2014 00:58:41 AM) (Source: VSS)(User: ) Description: C:\00x00000000, Der Vorgang wurde erfolgreich beendet. 0x00000000, Der Vorgang wurde erfolgreich beendet. 0x80042314, Der Schattenkopieanbieter hat beim Warten auf den Schreibvorgang auf das Volume, von dem eine Schattenkopie erstellt wird, das Zeitlimit überschritten. Ursache hierfür könnte eine durch eine Anwendung oder einen Systemdienst verursachte hohe Aktivität auf dem Volume sein. Wiederholen Sie den Vorgang später, wenn das Volume nicht so stark ausgelastet ist. 0x00000000, Der Vorgang wurde erfolgreich beendet. Vorgang: Asynchroner Vorgang wird ausgeführt Kontext: Aktueller Status: DoSnapshotSet Error: (01/15/2014 00:58:41 AM) (Source: VSS)(User: ) Description: DeviceIoControl(\\?\Volume{80c11bc6-18d7-11e1-9f4b-806e6f6e6963} - 00000140,0x0053c010,008C8F40,0,008C6F30,4096,[0]) Vorgang: Schattenkopien werden übertragen Kontext: Ausführungskontext: System Provider Error: (01/15/2014 00:58:31 AM) (Source: VSS)(User: ) Description: C:\00x00000000, Der Vorgang wurde erfolgreich beendet. 0x00000000, Der Vorgang wurde erfolgreich beendet. 0x80042314, Der Schattenkopieanbieter hat beim Warten auf den Schreibvorgang auf das Volume, von dem eine Schattenkopie erstellt wird, das Zeitlimit überschritten. Ursache hierfür könnte eine durch eine Anwendung oder einen Systemdienst verursachte hohe Aktivität auf dem Volume sein. Wiederholen Sie den Vorgang später, wenn das Volume nicht so stark ausgelastet ist. 0x00000000, Der Vorgang wurde erfolgreich beendet. Vorgang: Asynchroner Vorgang wird ausgeführt Kontext: Aktueller Status: DoSnapshotSet Error: (01/15/2014 00:58:31 AM) (Source: VSS)(User: ) Description: DeviceIoControl(\\?\Volume{80c11bc6-18d7-11e1-9f4b-806e6f6e6963} - 00000058,0x0053c010,008C6F30,0,008C8F40,4096,[0]) Vorgang: Schattenkopien werden übertragen Kontext: Ausführungskontext: System Provider Error: (01/15/2014 00:57:41 AM) (Source: VSS)(User: ) Description: C:\00x00000000, Der Vorgang wurde erfolgreich beendet. 0x00000000, Der Vorgang wurde erfolgreich beendet. 0x80042314, Der Schattenkopieanbieter hat beim Warten auf den Schreibvorgang auf das Volume, von dem eine Schattenkopie erstellt wird, das Zeitlimit überschritten. Ursache hierfür könnte eine durch eine Anwendung oder einen Systemdienst verursachte hohe Aktivität auf dem Volume sein. Wiederholen Sie den Vorgang später, wenn das Volume nicht so stark ausgelastet ist. 0x00000000, Der Vorgang wurde erfolgreich beendet. Vorgang: Asynchroner Vorgang wird ausgeführt Kontext: Aktueller Status: DoSnapshotSet Error: (01/15/2014 00:57:41 AM) (Source: VSS)(User: ) Description: DeviceIoControl(\\?\Volume{80c11bc6-18d7-11e1-9f4b-806e6f6e6963} - 0000013C,0x0053c010,008C6F30,0,008C8F40,4096,[0]) Vorgang: Schattenkopien werden übertragen Kontext: Ausführungskontext: System Provider Error: (01/15/2014 00:57:09 AM) (Source: VSS)(User: ) Description: C:\00x00000000, Der Vorgang wurde erfolgreich beendet. 0x00000000, Der Vorgang wurde erfolgreich beendet. 0x80042314, Der Schattenkopieanbieter hat beim Warten auf den Schreibvorgang auf das Volume, von dem eine Schattenkopie erstellt wird, das Zeitlimit überschritten. Ursache hierfür könnte eine durch eine Anwendung oder einen Systemdienst verursachte hohe Aktivität auf dem Volume sein. Wiederholen Sie den Vorgang später, wenn das Volume nicht so stark ausgelastet ist. 0x00000000, Der Vorgang wurde erfolgreich beendet. Vorgang: Asynchroner Vorgang wird ausgeführt Kontext: Aktueller Status: DoSnapshotSet Error: (01/15/2014 00:57:09 AM) (Source: VSS)(User: ) Description: DeviceIoControl(\\?\Volume{80c11bc6-18d7-11e1-9f4b-806e6f6e6963} - 00000120,0x0053c010,008C8F40,0,008C6F30,4096,[0]) Vorgang: Schattenkopien werden übertragen Kontext: Ausführungskontext: System Provider ==================== Memory info =========================== Percentage of memory in use: 80% Total physical RAM: 2006.3 MB Available physical RAM: 392.89 MB Total Pagefile: 4012.59 MB Available Pagefile: 1692.26 MB Total Virtual: 2047.88 MB Available Virtual: 1905.67 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:58.5 GB) (Free:18.39 GB) NTFS Drive d: (Volume) (Fixed) (Total:53.19 GB) (Free:13.32 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 112 GB) (Disk ID: 97979797) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=58 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=53 GB) - (Type=07 NTFS) ==================== End Of Log ============================ Danke! Ah, und noch eine Sache: ich kann keine Systemwiederherstellung mehr machen. Es sind keine Wiederherstellungspunkte mehr vorhanden, obwohl die immer da waren :-( Nochmal Danke für Eure Hilfe. LG Josi Geändert von Josefine_Jo (22.01.2014 um 02:40 Uhr) |
22.01.2014, 13:40 | #4 |
/// TB-Ausbilder | Werbefenster öffnen sich bei Firefox Ok. Hinweis: Mehrere AV-Hintergrundwächter Mir ist aufgefallen, dass du mehr als ein Antivirus-Programm mit Hintergrundwächter laufen hast:
Entscheide dich für eines dieser Programme und deinstalliere die anderen über Start -> Systemsteuerung -> Programme und Funktionen (Vista & Win 7) bzw. Start -> Systemsteuerung -> Software (Win XP). Schritt 1
Schritt 2 Downloade Dir bitte AdwCleaner auf deinen Desktop.
Schritt 3 Scan mit Combofix
Schritt 4 Starte noch einmal FRST.
__________________ cheers, Leo |
22.01.2014, 14:55 | #5 |
| Werbefenster öffnen sich bei FirefoxCode:
ATTFilter # AdwCleaner v3.017 - Bericht erstellt am 22/01/2014 um 14:00:23 # Aktualisiert 12/01/2014 von Xplode # Betriebssystem : Windows 7 Professional Service Pack 1 (32 bits) # Benutzername : XX - XX-PC # Gestartet von : C:\Users\XX\Desktop\adwcleaner.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.16428 -\\ Mozilla Firefox v16.0.2 (de) [ Datei : C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\rwyk3m6g.default\prefs.js ] Zeile gelöscht : user_pref("extensions.L4ctnd4UGjoX.scode", "(function(){try{if(window.self.location.hostname.indexOf(\"acebook.co\")>-1){return};}catch(e){};var _wlst={lsKey:\"ssjsmn2ja8ddw2a\",get:function(b,a){if(3[...] Zeile gelöscht : user_pref("extensions.V1rfVjl7TcBz.scode", "(function(){try{if(window.self.location.hostname.indexOf(\"acebook.co\")>-1){return};}catch(e){};if(window.self==window.top){var script=document.createEleme[...] -\\ Google Chrome v32.0.1700.76 [ Datei : C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\preferences ] ************************* AdwCleaner[R0].txt - [53482 octets] - [29/12/2013 19:37:31] AdwCleaner[R1].txt - [2261 octets] - [29/12/2013 20:17:43] AdwCleaner[R2].txt - [10628 octets] - [30/12/2013 01:32:01] AdwCleaner[R3].txt - [2204 octets] - [21/01/2014 00:30:12] AdwCleaner[R4].txt - [1848 octets] - [22/01/2014 13:57:02] AdwCleaner[S0].txt - [50813 octets] - [29/12/2013 19:47:34] AdwCleaner[S1].txt - [2322 octets] - [29/12/2013 20:24:16] AdwCleaner[S2].txt - [8272 octets] - [30/12/2013 01:34:19] AdwCleaner[S3].txt - [2254 octets] - [21/01/2014 00:36:16] AdwCleaner[S4].txt - [1769 octets] - [22/01/2014 14:00:23] ########## EOF - C:\AdwCleaner\AdwCleaner[S4].txt - [1829 octets] ########## Auch bin ich mir nicht sicher, ob ich wirklich alle Malewarescanner ausbekommen habe. Würde er mich auffordern, wenn ihn noch der eine oder andere Stört? Ah - jetzt passiert etwas. Dann warte ich mal noch.... Das Logfile ist zu lang. Soll ich es anhängen? |
22.01.2014, 14:58 | #6 | |
/// TB-Ausbilder | Werbefenster öffnen sich bei FirefoxZitat:
__________________ --> Werbefenster öffnen sich bei Firefox |
22.01.2014, 15:00 | #7 |
| Werbefenster öffnen sich bei Firefox [CODE]ComboFix 14-01-22.01 - XX 22.01.2014 14:29:22.1.2 - x86 Microsoft Windows 7 Professional 6.1.7601.1.1252.49.1031.18.2006.1187 [GMT 1:00] ausgeführt von:: c:\users\XX\Desktop\ComboFix.exe AV: AVG Internet Security 2014 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9} FW: AVG Internet Security 2014 *Enabled* {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2} SP: AVG Internet Security 2014 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\program files\SuperLyrics c:\program files\SuperLyrics\chrome.crx c:\program files\SuperLyrics\chrome.manifest c:\program files\SuperLyrics\FF\chrome.manifest c:\program files\SuperLyrics\FF\chrome\content\icon.png c:\program files\SuperLyrics\FF\chrome\content\main.js c:\program files\SuperLyrics\FF\chrome\content\overlay.xul c:\program files\SuperLyrics\FF\install.rdf c:\programdata\0tbpw.pad c:\users\XX\AppData\Roaming\16001.009 c:\users\XX\AppData\Roaming\16001.009\chrome.manifest c:\users\XX\AppData\Roaming\16001.009\components\AcroFF.txt c:\users\XX\AppData\Roaming\16001.009\install.rdf c:\users\XX\AppData\Roaming\16001.010 c:\users\XX\AppData\Roaming\16001.010\chrome.manifest c:\users\XX\AppData\Roaming\16001.010\components\AcroFF.txt c:\users\XX\AppData\Roaming\16001.010\install.rdf c:\users\XX\AppData\Roaming\16001.011 c:\users\XX\AppData\Roaming\16001.011\chrome.manifest c:\users\XX\AppData\Roaming\16001.011\components\AcroFF.txt c:\users\XX\AppData\Roaming\16001.011\install.rdf c:\users\XX\AppData\Roaming\16001.012 c:\users\XX\AppData\Roaming\16001.012\chrome.manifest c:\users\XX\AppData\Roaming\16001.012\components\AcroFF.txt c:\users\XX\AppData\Roaming\16001.012\install.rdf c:\users\XX\AppData\Roaming\16001.013 c:\users\XX\AppData\Roaming\16001.013\chrome.manifest c:\users\XX\AppData\Roaming\16001.013\components\AcroFF.txt c:\users\XX\AppData\Roaming\16001.013\install.rdf c:\users\XX\AppData\Roaming\16001.014 c:\users\XX\AppData\Roaming\16001.014\chrome.manifest c:\users\XX\AppData\Roaming\16001.014\components\AcroFF.txt c:\users\XX\AppData\Roaming\16001.014\install.rdf c:\users\XX\AppData\Roaming\16001.015 c:\users\XX\AppData\Roaming\16001.015\chrome.manifest c:\users\XX\AppData\Roaming\16001.015\components\AcroFF.txt c:\users\XX\AppData\Roaming\16001.015\install.rdf c:\users\XX\AppData\Roaming\AcroIEHelpe.txt c:\users\XX\AppData\Roaming\rwyk3m6g.default.tmp c:\users\XX\AppData\Roaming\srvblck5.tmp . . ((((((((((((((((((((((( Dateien erstellt von 2013-12-22 bis 2014-01-22 )))))))))))))))))))))))))))))) . . 2014-01-22 13:41 . 2014-01-22 13:41 -------- d-----w- c:\users\XX\AppData\Local\temp 2014-01-22 13:41 . 2014-01-22 13:41 -------- d-----w- c:\users\Default\AppData\Local\temp 2014-01-22 13:01 . 2013-12-16 00:54 7760024 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{07DE38F1-BC6C-4A19-B921-ED5CF9B7ED10}\mpengine.dll 2014-01-22 01:25 . 2014-01-22 01:25 -------- d-----w- C:\FRST 2014-01-21 17:23 . 2013-12-18 08:38 36152 ----a-w- c:\windows\system32\TURegOpt.exe 2014-01-21 17:22 . 2013-12-18 08:38 25400 ----a-w- c:\windows\system32\authuitu.dll 2014-01-20 18:33 . 2014-01-20 18:33 -------- d-----w- c:\users\XX\AppData\Roaming\SUPERAntiSpyware.com 2014-01-20 18:32 . 2014-01-20 19:45 -------- d-----w- c:\program files\SUPERAntiSpyware 2014-01-20 18:32 . 2014-01-20 18:32 -------- d-----w- c:\programdata\SUPERAntiSpyware.com 2014-01-15 01:22 . 2014-01-15 01:22 -------- d-----w- c:\program files\Common Files\Java 2014-01-15 01:20 . 2014-01-15 01:20 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll 2014-01-15 01:19 . 2014-01-15 01:19 -------- d-----w- c:\program files\Java 2014-01-15 00:40 . 2013-11-26 10:10 2349056 ----a-w- c:\windows\system32\win32k.sys 2014-01-15 00:40 . 2013-11-26 11:11 240576 ----a-w- c:\windows\system32\drivers\netio.sys 2014-01-15 00:40 . 2013-11-27 01:13 43520 ----a-w- c:\windows\system32\drivers\usbehci.sys 2014-01-15 00:40 . 2013-11-27 01:13 284672 ----a-w- c:\windows\system32\drivers\usbport.sys 2014-01-15 00:40 . 2013-11-27 01:14 258560 ----a-w- c:\windows\system32\drivers\usbhub.sys 2014-01-15 00:40 . 2013-11-27 01:13 76288 ----a-w- c:\windows\system32\drivers\usbccgp.sys 2014-01-15 00:40 . 2013-11-27 01:13 20480 ----a-w- c:\windows\system32\drivers\usbohci.sys 2014-01-15 00:40 . 2013-11-27 01:13 24064 ----a-w- c:\windows\system32\drivers\usbuhci.sys 2014-01-15 00:40 . 2013-11-27 01:13 6016 ----a-w- c:\windows\system32\drivers\usbd.sys 2014-01-14 07:54 . 2014-01-14 07:54 -------- d-----w- c:\program files\Microsoft Silverlight 2014-01-13 20:00 . 2014-01-13 20:00 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2014-01-13 20:00 . 2013-04-04 13:50 22856 ----a-w- c:\windows\system32\drivers\mbam.sys 2014-01-13 19:25 . 2014-01-13 19:26 -------- d-----w- c:\windows\220FB0354744483A9A0B41DF77061583.TMP 2014-01-13 19:05 . 2014-01-22 13:15 -------- d-----w- c:\programdata\Spybot - Search & Destroy 2014-01-13 19:05 . 2014-01-22 13:16 -------- d-----w- c:\program files\Spybot - Search & Destroy 2 2014-01-11 16:13 . 2014-01-11 16:13 -------- d-----w- c:\programdata\AVG 1213b Campaign 2014-01-09 21:35 . 2014-01-09 21:35 -------- d-----w- c:\users\XX\AppData\Roaming\AVG 2014-01-09 21:27 . 2014-01-09 21:41 -------- d-----w- c:\programdata\AVG 2014-01-09 21:25 . 2014-01-21 17:36 -------- d-sh--w- c:\programdata\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} 2014-01-09 20:29 . 2014-01-09 20:29 -------- d-----w- c:\users\XX\AppData\Roaming\TuneUp Software 2014-01-09 20:26 . 2014-01-09 20:26 -------- d-----w- C:\$AVG 2014-01-09 20:25 . 2014-01-09 21:33 -------- d-----w- c:\program files\AVG 2014-01-09 20:10 . 2014-01-22 12:58 -------- d-----w- c:\programdata\MFAData 2014-01-09 20:10 . 2014-01-09 20:36 -------- d-----w- c:\users\XX\AppData\Local\Avg2014 2014-01-09 20:10 . 2014-01-09 20:10 -------- d--h--w- c:\programdata\Common Files 2014-01-09 20:10 . 2014-01-09 20:10 -------- d-----w- c:\users\XX\AppData\Local\MFAData 2013-12-30 21:56 . 2013-12-30 21:56 -------- d-----w- c:\users\XX\AppData\Roaming\Malwarebytes 2013-12-30 21:56 . 2013-12-30 21:56 -------- d-----w- c:\programdata\Malwarebytes 2013-12-30 20:19 . 2013-12-30 20:19 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard 2013-12-29 21:04 . 2013-12-29 21:04 -------- d-----w- c:\programdata\Websteroids 2013-12-29 18:37 . 2014-01-22 13:00 -------- d-----w- C:\AdwCleaner 2013-12-29 18:22 . 2013-12-31 00:05 -------- d-----w- c:\program files\AmiExt 2013-12-29 18:22 . 2013-12-30 23:36 -------- d-----w- c:\programdata\Updater 2013-12-29 18:22 . 2013-12-29 18:22 -------- d-----w- c:\program files\Uninstaller 2013-12-29 18:18 . 2013-12-29 18:18 -------- d-----w- c:\users\XX\.android 2013-12-29 18:18 . 2013-12-29 18:18 -------- d-----w- c:\users\XX\AppData\Local\cache 2013-12-29 18:18 . 2013-12-29 18:48 -------- d-----w- c:\users\XX\AppData\Roaming\Uniblue 2013-12-29 18:18 . 2013-12-29 18:48 -------- d-----w- c:\program files\Uniblue 2013-12-28 20:54 . 2014-01-13 20:30 -------- d-----w- c:\programdata\Browser faster . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2014-01-15 01:20 . 2012-09-26 10:59 790440 ----a-w- c:\windows\system32\deployJava1.dll 2014-01-15 01:20 . 2012-09-26 10:59 868264 ----a-w- c:\windows\system32\npDeployJava1.dll 2013-12-18 05:13 . 2011-11-27 10:21 231584 ------w- c:\windows\system32\MpSigStub.exe 2013-12-16 01:09 . 2013-12-16 01:09 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2013-12-16 01:09 . 2011-11-27 11:20 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2013-12-16 00:49 . 2013-12-16 00:49 71680 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe 2013-12-16 00:49 . 2013-12-16 00:49 646144 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe 2013-12-16 00:49 . 2013-12-16 00:49 645120 ----a-w- c:\windows\system32\jsIntl.dll 2013-12-16 00:49 . 2013-12-16 00:49 194048 ----a-w- c:\windows\system32\elshyph.dll 2013-12-16 00:49 . 2013-12-16 00:49 182272 ----a-w- c:\windows\system32\msls31.dll 2013-12-16 00:49 . 2013-12-16 00:49 62464 ----a-w- c:\windows\system32\tdc.ocx 2013-12-16 00:49 . 2013-12-16 00:49 34816 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll 2013-12-16 00:49 . 2013-12-16 00:49 337408 ----a-w- c:\windows\system32\html.iec 2013-12-16 00:49 . 2013-12-16 00:49 24576 ----a-w- c:\windows\system32\licmgr10.dll 2013-12-16 00:49 . 2013-12-16 00:49 151552 ----a-w- c:\windows\system32\iexpress.exe 2013-12-16 00:49 . 2013-12-16 00:49 139264 ----a-w- c:\windows\system32\wextract.exe 2013-12-16 00:49 . 2013-12-16 00:49 1051136 ----a-w- c:\windows\system32\mshtmlmedia.dll 2013-12-16 00:49 . 2013-12-16 00:49 61952 ----a-w- c:\windows\system32\MshtmlDac.dll 2013-12-16 00:49 . 2013-12-16 00:49 454656 ----a-w- c:\windows\system32\vbscript.dll 2013-12-16 00:49 . 2013-12-16 00:49 36352 ----a-w- c:\windows\system32\imgutil.dll 2013-12-16 00:49 . 2013-12-16 00:49 13312 ----a-w- c:\windows\system32\mshta.exe 2013-12-16 00:49 . 2013-12-16 00:49 111616 ----a-w- c:\windows\system32\IEAdvpack.dll 2013-12-16 00:49 . 2013-12-16 00:49 86016 ----a-w- c:\windows\system32\iesysprep.dll 2013-12-16 00:49 . 2013-12-16 00:49 74240 ----a-w- c:\windows\system32\SetIEInstalledDate.exe 2013-12-16 00:49 . 2013-12-16 00:49 48640 ----a-w- c:\windows\system32\mshtmler.dll 2013-11-26 09:23 . 2013-12-16 21:05 2724864 ----a-w- c:\windows\system32\mshtml.tlb 2013-11-26 09:22 . 2013-12-16 21:05 4096 ----a-w- c:\windows\system32\ieetwcollectorres.dll 2013-11-26 08:53 . 2013-12-16 21:05 61952 ----a-w- c:\windows\system32\iesetup.dll 2013-11-26 08:52 . 2013-12-16 21:05 51200 ----a-w- c:\windows\system32\ieetwproxystub.dll 2013-11-26 08:29 . 2013-12-16 21:05 112128 ----a-w- c:\windows\system32\ieUnatt.exe 2013-11-26 08:29 . 2013-12-16 21:05 108032 ----a-w- c:\windows\system32\ieetwcollector.exe 2013-11-26 08:28 . 2013-12-16 21:05 553472 ----a-w- c:\windows\system32\jscript9diag.dll 2013-11-26 08:16 . 2013-12-16 21:05 4243968 ----a-w- c:\windows\system32\jscript9.dll 2013-11-26 07:32 . 2013-12-16 21:05 1928192 ----a-w- c:\windows\system32\inetcpl.cpl 2013-11-26 06:33 . 2013-12-16 21:05 1820160 ----a-w- c:\windows\system32\wininet.dll 2013-11-23 18:26 . 2013-12-11 00:32 417792 ----a-w- c:\windows\system32\WMPhoto.dll 2013-11-12 02:07 . 2013-12-11 00:32 2048 ----a-w- c:\windows\system32\tzres.dll 2013-11-05 20:50 . 2013-11-05 20:50 120600 ----a-w- c:\windows\system32\drivers\avgdiskx.sys 2013-11-04 20:57 . 2013-11-04 20:57 209176 ----a-w- c:\windows\system32\drivers\avgidsdriverx.sys 2013-10-31 22:00 . 2013-10-31 22:00 176952 ----a-w- c:\windows\system32\drivers\avgldx86.sys 2013-10-31 21:30 . 2013-10-31 21:30 222520 ----a-w- c:\windows\system32\drivers\avglogx.sys 2013-10-30 02:19 . 2013-12-11 00:32 301568 ----a-w- c:\windows\system32\msieftp.dll 2013-10-24 21:28 . 2013-10-24 21:28 147768 ----a-w- c:\windows\system32\drivers\avgidshx.sys 2012-10-27 16:21 . 2012-10-27 16:21 261600 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2013-09-10 23:54 131248 ----a-w- c:\users\XX\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2013-09-10 23:54 131248 ----a-w- c:\users\XX\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2013-09-10 23:54 131248 ----a-w- c:\users\XX\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "OfficeSyncProcess"="c:\program files\Microsoft Office\Office14\MSOSYNC.EXE" [2013-04-22 720064] "Spotify Web Helper"="c:\users\XX\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2013-08-04 1104384] "SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2014-01-06 5625624] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520] "AVG_UI"="c:\program files\AVG\AVG2014\avgui.exe" [2013-11-07 4956176] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336] . [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "SPReview"="c:\windows\System32\SPReview\SPReview.exe" [2013-05-27 280576] . c:\users\XX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Dropbox.lnk - c:\users\XX\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2014-1-3 30714328] OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk - c:\program files\Microsoft Office\Office14\ONENOTEM.EXE /tsr [2013-6-25 228552] SparkleShare.lnk - c:\program files\SparkleShare\SparkleShare.exe [2012-12-6 585216] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks] "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2013-05-07 115440] . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager] BootExecute REG_MULTI_SZ autocheck autochk *\0\0sdnclean.exe . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE] @="" . [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "AlcoholAutomount"="c:\program files\Alcohol Soft\Alcohol 52\axcmd.exe" /automount . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime "IgfxTray"=c:\windows\system32\igfxtray.exe "Persistence"=c:\windows\system32\igfxpers.exe "HotKeysCmds"=c:\windows\system32\hkcmd.exe "TkBellExe"="c:\program files\real\realplayer\Update\realsched.exe" -osboot "PDFPrint"=c:\program files\PDF24\pdf24.exe "APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" "ArcSoft Connection Service"=c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe "Corel File Shell Monitor"=c:\program files\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" . R2 05837205;Browser faster;c:\windows\system32\rundll32.exe [2009-07-14 44544] R2 AVGIDSAgent;AVGIDSAgent;c:\program files\AVG\AVG2014\avgidsagent.exe [2013-11-11 3478544] R2 MBAMScheduler;MBAMScheduler;c:\program files\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-04-04 418376] R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512] R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-02-28 161384] R3 BTCFilterService;USB Networking Driver Filter Service;c:\windows\system32\DRIVERS\motfilt.sys [2009-01-29 6016] R3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [x] R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2013-11-26 108032] R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2013-04-04 22856] R3 motccgp;Motorola USB Composite Device Driver;c:\windows\system32\DRIVERS\motccgp.sys [2010-12-03 20352] R3 motccgpfl;MotCcgpFlService;c:\windows\system32\DRIVERS\motccgpfl.sys [2009-01-29 8320] R3 Motousbnet;Motorola USB Networking Driver Service;c:\windows\system32\DRIVERS\Motousbnet.sys [2010-04-01 23424] R3 motusbdevice;Motorola USB Dev Driver;c:\windows\system32\DRIVERS\motusbdevice.sys [2010-01-25 9472] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224] R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [2013-10-30 1343400] S0 AVGIDSHX;AVGIDSHX;c:\windows\system32\DRIVERS\avgidshx.sys [2013-10-24 147768] S0 Avglogx;AVG Logging Driver;c:\windows\system32\DRIVERS\avglogx.sys [2013-10-31 222520] S0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx86.sys [2013-09-09 27448] S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2011-11-27 721904] S1 Avgdiskx;AVG Disk Driver;c:\windows\system32\DRIVERS\avgdiskx.sys [2013-11-05 120600] S1 Avgfwfd;AVG network filter service;c:\windows\system32\DRIVERS\avgfwd6x.sys [2013-09-26 47928] S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdriverx.sys [2013-11-04 209176] S1 AVGIDSShim;AVGIDSShim;c:\windows\system32\DRIVERS\avgidsshimx.sys [2013-09-16 22840] S1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx86.sys [2013-10-31 176952] S1 Avgtdix;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdix.sys [2013-08-01 193848] S1 NEOFLTR_730_23977;Juniper Networks TDI Filter Driver (NEOFLTR_730_23977);c:\windows\system32\Drivers\NEOFLTR_730_23977.SYS [2013-02-20 92264] S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [2011-07-22 12880] S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2011-07-12 67664] S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE.EXE [2013-10-10 120088] S2 avgfws;AVG Firewall;c:\program files\AVG\AVG2014\avgfws.exe [2013-09-24 1358944] S2 avgwd;AVG WatchDog;c:\program files\AVG\AVG2014\avgwdsvc.exe [2013-09-24 348008] S2 MotoHelper;MotoHelper Service;c:\program files\Motorola\MotoHelper\MotoHelperService.exe [2011-01-27 226624] S2 TuneUp.UtilitiesSvc;AVG PC TuneUp Service;c:\program files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe [2013-12-18 1741624] S2 UMVPFSrv;UMVPFSrv;c:\program files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [2012-01-18 450848] S3 netw5v32;Intel(R) Wireless WiFi Link 5000-Serie - Adaptertreiber für Windows Vista 32 Bit;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168] S3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-13 207360] S3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-13 980992] S3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-13 661504] S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver32.sys [2013-12-16 12320] . . --- Andere Dienste/Treiber im Speicher --- . *NewlyCreated* - WS2IFSL *Deregistered* - MBAMSwissArmy . [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2014-01-20 18:36 1211672 ----a-w- c:\program files\Google\Chrome\Application\32.0.1700.76\Installer\chrmstp.exe . Inhalt des "geplante Tasks" Ordners . 2013-12-16 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-17 01:09] . 2014-01-11 c:\windows\Tasks\AVG_REG_1213b.job - c:\programdata\AVG 1213b Campaign\AVG-Secure-Search-Update-1213b.exe [2014-01-11 18:06] . 2014-01-11 c:\windows\Tasks\AVG_SYS_TASK_DELETE.job - c:\programdata\AVG 1213b Campaign\AVG-Secure-Search-Update-1213b.exe [2014-01-11 18:06] . 2014-01-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore1cf16104a353afe.job - c:\program files\Google\Update\GoogleUpdate.exe [2014-01-20 18:33] . 2013-09-29 c:\windows\Tasks\Launch 8613.job - c:\program files\Audible\Bin\Manager.exe [2013-09-29 11:19] . 2013-08-25 c:\windows\Tasks\PCDoctorBackgroundMonitorTask.job - c:\program files\PC-Doctor\uaclauncher.exe [2011-03-31 22:04] . 2014-01-09 c:\windows\Tasks\SidebarExecute.job - c:\program files\Windows Sidebar\sidebar.exe [2011-11-27 12:17] . 2014-01-20 c:\windows\Tasks\SUPERAntiSpyware Scheduled Task da457c5e-ce80-4c51-9dc8-70fbe63dcce0.job - c:\program files\SUPERAntiSpyware\SASTask.exe [2013-11-07 20:08] . 2014-01-20 c:\windows\Tasks\SUPERAntiSpyware Scheduled Task fb3e5a6f-b3a6-4850-b703-966e9e14f035.job - c:\program files\SUPERAntiSpyware\SASTask.exe [2013-11-07 20:08] . 2013-09-01 c:\windows\Tasks\SystemToolsDailyTest.job - c:\program files\PC-Doctor\uaclauncher.exe [2011-03-31 22:04] . 2014-01-12 c:\windows\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013.job - c:\program files\AVG\AVG PC TuneUp\OneClick.exe [2013-12-18 08:36] . . ------- Zusätzlicher Suchlauf ------- . uStart Page = hxxp://www.google.com/ mStart Page = hxxp://www.google.com IE: An OneNote s&enden - c:\progra~1\MICROS~1\Office14\ONBttnIE.dll/105 IE: Free YouTube Download - c:\program files\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm IE: Free YouTube to MP3 Converter - c:\program files\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm IE: Nach Microsoft E&xcel exportieren - c:\progra~1\MICROS~1\Office14\EXCEL.EXE/3000 TCP: DhcpNameServer = 192.168.2.1 FF - ProfilePath - c:\users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\rwyk3m6g.default\ FF - prefs.js: browser.search.defaulturl - FF - ExtSQL: 2013-12-24 14:32; 0qwtoma@rpekoxp.net; c:\users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\rwyk3m6g.default\extensions\0qwtoma@rpekoxp.net FF - ExtSQL: 2013-12-24 14:32; amtx484@cp-ooie.com; c:\users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\rwyk3m6g.default\extensions\amtx484@cp-ooie.com . - - - - Entfernte verwaiste Registrierungseinträge - - - - . AddRemove-3222956914.portal.qtrax.com - c:\program files\Microsoft Silverlight\5.1.20125.0\Silverlight.Configuration.exe . . . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.0_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.0_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.0_05" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_01" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_01" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_02" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_02" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_05" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_05" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_06" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_06" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_07" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_07" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_08" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_08" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_09" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_09" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_10" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_10" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_11" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_11" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_12" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_12" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_13" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_13" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_14" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_14" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_15" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_15" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_16" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_16" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_17" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_17" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_18" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_18" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_19" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_19" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_20" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_20" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_21" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_21" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.0" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.0" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.0_01" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.0_01" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.0_02" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.0_02" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.0_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.0_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.0_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.0_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_01" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_01" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_02" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_02" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_05" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_05" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_06" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_06" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_07" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_07" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_01" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_01" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_02" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_02" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_05" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_05" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_06" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_06" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_07" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_07" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_08" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_08" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_09" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_09" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_10" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_10" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_11" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_11" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_12" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_12" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_13" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_13" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_14" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_14" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_15" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_15" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_16" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_16" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_17" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_17" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_18" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_18" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_19" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_19" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_20" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_20" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_21" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_21" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_22" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_22" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_23" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_23" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_24" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_24" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_25" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_25" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_26" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_26" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_27" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_27" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_28" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_28" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_29" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_29" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_30" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_30" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_31" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_31" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_32" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_32" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_33" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_33" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_34" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_34" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_35" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_35" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_36" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_36" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_37" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_37" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_38" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_38" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_39" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_39" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_40" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_40" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_41" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_41" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_42" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_42" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_43" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_43" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_01" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_01" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_01" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_02" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_02" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_02" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_05" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_05" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_05" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_06" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_06" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_06" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_07" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_07" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_07" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_08" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_08" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_08" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_09" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_09" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_09" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_10" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_10" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_10" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_11" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_11" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_11" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_12" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_12" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_12" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_13" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_13" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_13" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_14" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_14" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_14" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_15" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_15" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_15" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_16" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_16" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_16" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_17" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_17" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_17" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_18" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_18" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_18" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_19" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_19" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_19" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_20" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_20" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_20" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_21" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_21" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_21" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_22" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_22" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_22" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_23" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_23" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_23" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_24" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_24" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_24" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_25" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_25" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_25" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_26" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_26" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_26" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_27" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_27" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_27" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_28" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_28" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_28" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_29" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_29" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_29" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_30" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_30" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_30" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_31" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_31" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_31" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_32" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_32" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_32" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_33" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_33" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_33" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_34" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_34" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_34" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_35" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_35" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_35" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_36" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_36" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_36" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_37" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_37" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_37" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_38" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_38" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_38" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_39" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_39" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_39" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_40" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_40" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_40" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_41" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_41" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_41" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_42" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_42" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_42" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_43" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_43" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_43" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_44" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_44" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_44" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_45" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_45" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_45" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_46" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_46" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_46" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_47" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_47" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_47" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_48" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_48" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_48" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_49" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_49" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_49" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_50" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_50" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_50" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_51" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_51" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_51" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_01" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_01" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_01" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_02" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_02" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_02" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_05" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_05" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_05" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_06" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_06" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_06" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_07" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_07" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_07" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_08" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_08" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_08" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_09" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_09" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_09" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_10" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_10" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_10" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_11" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_11" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_11" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_12" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_12" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_12" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_13" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_13" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_13" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_14" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_14" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_14" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_15" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_15" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_15" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_16" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_16" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_16" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_17" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_17" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_17" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_18" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_18" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_18" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_19" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_19" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_19" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_20" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_20" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_20" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_21" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_21" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_21" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_22" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_22" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_22" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_23" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_23" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_23" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_24" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_24" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_24" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_25" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_25" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_25" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_26" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_26" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_26" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_27" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_27" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_27" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_28" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_28" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_28" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_29" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_29" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_29" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_30" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_30" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_30" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_31" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_31" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_31" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_32" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_32" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_32" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_33" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_33" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_33" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_34" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_34" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_34" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_35" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_35" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_35" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_36" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_36" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_36" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_37" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_37" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_37" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_38" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_38" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_38" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_39" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_39" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_39" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_40" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_40" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_40" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_41" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_41" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_41" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_42" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_42" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_42" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_43" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_43" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_43" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_44" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_44" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_44" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_45" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_45" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_45" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_46" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_46" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_46" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_47" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_47" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_47" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_48" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_48" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_48" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_49" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_49" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_49" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_50" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_50" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_50" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_51" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_51" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_51" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_01" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_01" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_01" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_02" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_02" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_02" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_05" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_05" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_05" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_06" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_06" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_06" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_07" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_07" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_07" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_08" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_08" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_08" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_09" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_09" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_09" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_10" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_10" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_10" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_11" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_11" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_11" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_12" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_12" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_12" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_13" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_13" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_13" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_14" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_14" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_14" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_15" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_15" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_15" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_16" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_16" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_16" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_17" . |
22.01.2014, 15:13 | #8 |
| Werbefenster öffnen sich bei Firefox [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_17" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_17" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_18" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_18" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_18" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_19" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_19" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_19" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_20" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_20" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_20" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_21" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_21" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_21" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_22" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_22" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_22" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_23" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_23" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_23" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_24" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_24" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_24" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_25" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_25" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_25" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0026-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_26" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0026-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_26" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0026-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_26" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0027-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_27" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0027-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_27" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0027-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_27" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0028-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_28" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0028-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_28" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0028-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_28" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0029-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_29" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0029-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_29" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0029-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_29" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0030-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_30" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0030-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_30" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0030-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_30" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0031-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_31" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0031-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_31" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0031-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_31" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0032-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_32" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0032-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_32" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0032-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_32" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0033-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_33" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0033-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_33" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0033-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_33" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0034-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_34" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0034-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_34" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0034-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_34" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0035-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_35" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0035-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_35" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0035-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_35" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0036-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_36" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0036-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_36" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0036-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_36" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0037-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_37" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0037-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_37" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0037-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_37" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0038-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_38" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0038-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_38" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0038-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_38" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0039-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_39" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0039-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_39" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0039-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_39" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0040-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_40" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0040-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_40" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0040-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_40" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-FFFF-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}] @DACL=(02 0000) @="Java Plug-in 1.3.0_02" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Zeit der Fertigstellung: 2014-01-22 14:45:20 ComboFix-quarantined-files.txt 2014-01-22 13:45 . Vor Suchlauf: 7 Verzeichnis(se), 19.684.020.224 Bytes frei Nach Suchlauf: 12 Verzeichnis(se), 20.344.967.168 Bytes frei . - - End Of File - - DBA053C9071A2C06853BC63ED3C8229D A36C5E4F47E84449FF07ED3517B43A31 [/CODE] FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 22-01-2014 01 Ran by XX (administrator) on XX-PC on 22-01-2014 15:11:48 Running from C:\Users\XX\Desktop Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgrsx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcsrvx.exe (Lenovo) C:\Windows\System32\ibmpmsvc.exe (Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe (SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore.exe (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgfws.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgidsagent.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgwdsvc.exe (Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe () C:\Program Files\Motorola\MotoHelper\MotoHelperService.exe (Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe () C:\Windows\System32\PSIService.exe (Rocket Division Software) C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe (AVG) C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe () C:\Program Files\Motorola\MotoHelper\MotoHelperAgent.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgui.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE (Spotify Ltd) C:\Users\XX\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (Dropbox, Inc.) C:\Users\XX\AppData\Roaming\Dropbox\bin\Dropbox.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE () C:\Program Files\SparkleShare\SparkleShare.exe (AVG) C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesApp32.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgnsx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgemcx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcsrvx.exe () C:\Program Files\SparkleShare\msysgit\bin\ssh-agent.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation) HKLM\...\Run: [AVG_UI] - C:\Program Files\AVG\AVG2014\avgui.exe [4956176 2013-11-07] (AVG Technologies CZ, s.r.o.) HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKCU\...\Run: [OfficeSyncProcess] - C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE [720064 2013-04-22] (Microsoft Corporation) HKCU\...\Run: [Spotify Web Helper] - C:\Users\XX\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104384 2013-08-04] (Spotify Ltd) HKCU\...\Run: [SUPERAntiSpyware] - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [5625624 2014-01-06] (SUPERAntiSpyware) Startup: C:\Users\XX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\XX\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\XX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) Startup: C:\Users\XX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SparkleShare.lnk ShortcutTarget: SparkleShare.lnk -> C:\Program Files\SparkleShare\SparkleShare.exe () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x5F522D0CAD89CD01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de SearchScopes: HKLM - DefaultScope value is missing. BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer) BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} https://sslvpn.landtag-bw.de/dana-cached/sc/JuniperSetupClient.cab Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) ShellExecuteHooks: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [115440 2013-05-07] (SuperAdBlocker.com) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\rwyk3m6g.default FF SearchEngineOrder.user_pref("browser.search.order.1", "");: user_pref("browser.search.order.1", ""); FF SearchEngineOrder.user_pref("browser.search.order.1,S", "");: user_pref("browser.search.order.1,S", ""); FF SearchEngineOrder.3: Bing FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32.dll () FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin: @real.com/nppl3260;version=15.0.0.198 - c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprjplug;version=15.0.0.198 - c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.0.198 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprphtml5videoshim;version=15.0.0.198 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprpjplug;version=15.0.0.198 - c:\program files\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 - C:\Program Files\Lightspark 0.5.3-git\nplightsparkplugin.dll No File FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101753.dll (Amazon.com, Inc.) FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml FF Extension: SimaRtComppare - C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\rwyk3m6g.default\Extensions\0qwtoma@rpekoxp.net [2013-12-24] FF Extension: wEbbsaaver - C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\rwyk3m6g.default\Extensions\amtx484@cp-ooie.com [2013-12-24] FF Extension: Recorder Toolbar - C:\Program Files\Mozilla Firefox\extensions\{10743931-94DF-476f-A987-4391233C17A2} [2013-02-27] FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-11-28] FF HKLM\...\Firefox\Extensions: [ext@flash-Enhancer.com] - C:\Program Files\AmiExt\flashEnhancer\ff FF HKCU\...\Firefox\Extensions: [{33044118-6597-4D2F-ABEA-7974BB185379}] - C:\Users\XX\AppData\Roaming\16001.015 FF HKCU\...\Firefox\Extensions: [{48d99c73-1969-4275-b409-3bffc15bc112}] - C:\Program Files\Re-markit\150.xpi Chrome: ======= CHR HomePage: hxxp://www.google.com CHR DefaultSearchProvider: nationzoom CHR DefaultSearchURL: hxxp://www.google.com CHR DefaultNewTabURL: CHR Extension: (Google Docs) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-20] CHR Extension: (Google Drive) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-20] CHR Extension: (YouTube) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-20] CHR Extension: (Google-Suche) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-20] CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2013-12-16] CHR Extension: (Google Wallet) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-17] CHR Extension: (Google Mail) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-20] CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2011-11-28] CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ========================== Services (Whitelisted) ================= R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [120088 2013-10-10] (SUPERAntiSpyware.com) S2 05837205; C:\ProgramData\Browser faster\BrowserfasterSvc.dll [180048 2013-12-28] () R2 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) R2 avgfws; C:\Program Files\AVG\AVG2014\avgfws.exe [1358944 2013-09-24] (AVG Technologies CZ, s.r.o.) R2 AVGIDSAgent; C:\Program Files\AVG\AVG2014\avgidsagent.exe [3478544 2013-11-11] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.) R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) R2 MotoHelper; C:\Program Files\Motorola\MotoHelper\MotoHelperService.exe [226624 2011-01-27] () R2 ProtexisLicensing; C:\Windows\system32\PSIService.exe [177704 2007-06-05] () R2 StarWindServiceAE; C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe [275968 2007-05-28] (Rocket Division Software) R2 TuneUp.UtilitiesSvc; C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe [1741624 2013-12-18] (AVG) R2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2012-01-18] (Logitech Inc.) ==================== Drivers (Whitelisted) ==================== R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [120600 2013-11-05] (AVG Technologies CZ, s.r.o.) R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6x.sys [47928 2013-09-26] (AVG Technologies CZ, s.r.o.) R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [209176 2013-11-04] (AVG Technologies CZ, s.r.o.) R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [147768 2013-10-24] (AVG Technologies CZ, s.r.o.) R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [22840 2013-09-17] (AVG Technologies CZ, s.r.o.) R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [176952 2013-10-31] (AVG Technologies CZ, s.r.o.) R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [222520 2013-10-31] (AVG Technologies CZ, s.r.o.) R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [102712 2013-10-01] (AVG Technologies CZ, s.r.o.) R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [27448 2013-09-10] (AVG Technologies CZ, s.r.o.) R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [193848 2013-08-01] (AVG Technologies CZ, s.r.o.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation) R1 NEOFLTR_730_23977; C:\Windows\system32\Drivers\NEOFLTR_730_23977.SYS [92264 2013-02-20] (Juniper Networks) R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [12880 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com) R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [67664 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [721904 2011-11-27] () R3 TuneUpUtilitiesDrv; C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver32.sys [12320 2013-12-16] (TuneUp Software) S3 USB28xxBGA; C:\Windows\System32\DRIVERS\emBDA.sys [579712 2009-12-01] (eMPIA Technology, Inc.) S3 USB28xxOEM; C:\Windows\System32\DRIVERS\emOEM.sys [543744 2009-12-01] (eMPIA Technology, Inc.) U3 ab0j6xy6; C:\Windows\System32\Drivers\ab0j6xy6.sys [0 ] (Microsoft Corporation) S3 catchme; \??\C:\Users\XX\AppData\Local\Temp\catchme.sys [x] S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x] U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-14] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-22 15:11 - 2014-01-22 15:11 - 00000000 ____D C:\Users\XX\Desktop\FRST-OlderVersion 2014-01-22 14:59 - 2014-01-22 14:59 - 00010678 _____ C:\Users\XX\Desktop\CRO.zip 2014-01-22 14:47 - 2014-01-22 14:47 - 00120996 _____ C:\Users\XX\Desktop\Combo.txt 2014-01-22 14:45 - 2014-01-22 14:45 - 00120996 _____ C:\ComboFix.txt 2014-01-22 14:27 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe 2014-01-22 14:27 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe 2014-01-22 14:27 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-01-22 14:27 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-01-22 14:27 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-01-22 14:27 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe 2014-01-22 14:27 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe 2014-01-22 14:27 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe 2014-01-22 14:15 - 2014-01-22 14:15 - 00000079 _____ C:\Windows\wininit.ini 2014-01-22 14:13 - 2014-01-22 14:45 - 00000000 ____D C:\Qoobox 2014-01-22 14:13 - 2014-01-22 14:43 - 00000000 ____D C:\Windows\erdnt 2014-01-22 14:10 - 2014-01-22 14:11 - 05173757 ____R (Swearware) C:\Users\XX\Desktop\ComboFix.exe 2014-01-22 14:10 - 2014-01-22 14:10 - 00001909 _____ C:\Users\XX\Desktop\AdwCleaner[S4].txt 2014-01-22 02:27 - 2014-01-22 10:14 - 00029900 _____ C:\Users\XX\Desktop\Addition.txt 2014-01-22 02:26 - 2014-01-22 15:11 - 00015604 _____ C:\Users\XX\Desktop\FRST.txt 2014-01-22 02:25 - 2014-01-22 15:11 - 01221632 _____ (Farbar) C:\Users\XX\Desktop\FRST.exe 2014-01-22 02:25 - 2014-01-22 15:11 - 00000000 ____D C:\FRST 2014-01-21 18:23 - 2013-12-18 09:38 - 00036152 _____ (AVG) C:\Windows\system32\TURegOpt.exe 2014-01-21 18:22 - 2014-01-21 18:22 - 00002175 _____ C:\Users\Public\Desktop\AVG 1-Klick-Wartung.lnk 2014-01-21 18:22 - 2014-01-21 18:22 - 00002151 _____ C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk 2014-01-21 18:22 - 2013-12-18 09:38 - 00025400 _____ (AVG) C:\Windows\system32\authuitu.dll 2014-01-21 17:57 - 2014-01-21 17:59 - 78353784 _____ (AVG) C:\Users\XX\Downloads\avg_tuh_stf_all_2014_295 (1).exe 2014-01-21 17:57 - 2014-01-21 17:58 - 78353784 _____ (AVG) C:\Users\XX\Downloads\avg_tuh_stf_all_2014_295.exe 2014-01-21 00:13 - 2014-01-21 00:14 - 01236282 _____ C:\Users\XX\Desktop\adwcleaner.exe 2014-01-20 19:49 - 2014-01-20 19:49 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf16104a353afe.job 2014-01-20 19:39 - 2014-01-20 19:39 - 00002197 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2014-01-20 19:33 - 2014-01-20 19:33 - 00000504 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task fb3e5a6f-b3a6-4850-b703-966e9e14f035.job 2014-01-20 19:33 - 2014-01-20 19:33 - 00000504 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task da457c5e-ce80-4c51-9dc8-70fbe63dcce0.job 2014-01-20 19:33 - 2014-01-20 19:33 - 00000000 ____D C:\Users\XX\AppData\Roaming\SUPERAntiSpyware.com 2014-01-20 19:32 - 2014-01-20 20:45 - 00000000 ____D C:\Program Files\SUPERAntiSpyware 2014-01-20 19:32 - 2014-01-20 19:32 - 00001965 _____ C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk 2014-01-20 19:32 - 2014-01-20 19:32 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com 2014-01-20 19:31 - 2014-01-20 19:31 - 29393568 _____ (SUPERAntiSpyware) C:\Users\XX\Downloads\SUPERAntiSpyware_5.7.0.1018.exe 2014-01-15 02:22 - 2014-01-15 02:22 - 00000000 ____D C:\Program Files\Common Files\Java 2014-01-15 02:21 - 2014-01-15 02:20 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-01-15 02:20 - 2014-01-15 02:20 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-01-15 02:20 - 2014-01-15 02:20 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2014-01-15 02:20 - 2014-01-15 02:20 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2014-01-15 02:19 - 2014-01-15 02:19 - 00000000 ____D C:\Program Files\Java 2014-01-15 01:40 - 2013-11-27 02:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-01-15 01:40 - 2013-11-27 02:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-01-15 01:40 - 2013-11-27 02:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-01-15 01:40 - 2013-11-27 02:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-01-15 01:40 - 2013-11-27 02:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-01-15 01:40 - 2013-11-27 02:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-01-15 01:40 - 2013-11-27 02:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-01-15 01:40 - 2013-11-26 12:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-01-15 01:40 - 2013-11-26 11:10 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-01-14 08:54 - 2014-01-14 08:54 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2014-01-14 08:52 - 2014-01-14 08:52 - 06951048 _____ (Microsoft Corporation) C:\Users\XX\Downloads\Silverlight.exe 2014-01-13 21:00 - 2014-01-13 21:00 - 00001071 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-13 21:00 - 2014-01-13 21:00 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware 2014-01-13 21:00 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-01-13 20:25 - 2014-01-13 20:26 - 00000000 ____D C:\Windows\220FB0354744483A9A0B41DF77061583.TMP 2014-01-13 20:05 - 2014-01-22 14:16 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy 2 2014-01-13 20:05 - 2014-01-22 14:15 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2014-01-13 19:53 - 2014-01-13 19:54 - 40658208 _____ (Safer-Networking Ltd. ) C:\Users\XX\Downloads\spybot-2.2.25.exe 2014-01-12 13:14 - 2014-01-12 13:14 - 00000220 _____ C:\Windows\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013.job 2014-01-11 17:13 - 2014-01-11 17:13 - 00000404 _____ C:\Windows\Tasks\AVG_REG_1213b.job 2014-01-11 17:13 - 2014-01-11 17:13 - 00000386 _____ C:\Windows\Tasks\AVG_SYS_TASK_DELETE.job 2014-01-11 17:13 - 2014-01-11 17:13 - 00000000 ____D C:\ProgramData\AVG 1213b Campaign 2014-01-10 18:19 - 2014-01-15 08:09 - 00408696 _____ C:\Windows\system32\FNTCACHE.DAT 2014-01-10 15:45 - 2014-01-10 15:45 - 00109280 _____ C:\Users\XX\AppData\Local\GDIPFONTCACHEV1.DAT 2014-01-09 22:35 - 2014-01-09 22:35 - 00000000 ____D C:\Users\XX\AppData\Roaming\AVG 2014-01-09 22:27 - 2014-01-09 22:41 - 00000000 ____D C:\ProgramData\AVG 2014-01-09 22:25 - 2014-01-21 18:36 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} 2014-01-09 22:22 - 2014-01-09 22:22 - 78353832 _____ (AVG) C:\Users\XX\Downloads\avg_tuh_stf_all_2014_295_24c28.exe 2014-01-09 21:30 - 2014-01-09 21:30 - 00000212 _____ C:\Windows\Tasks\SidebarExecute.job 2014-01-09 21:30 - 2014-01-09 21:30 - 00000000 ____D C:\Users\XX\AppData\Roaming\AVG2014 2014-01-09 21:29 - 2014-01-09 21:29 - 00000951 _____ C:\Users\Public\Desktop\AVG 2014.lnk 2014-01-09 21:29 - 2014-01-09 21:29 - 00000000 ____D C:\Users\XX\AppData\Roaming\TuneUp Software 2014-01-09 21:26 - 2014-01-09 21:30 - 00000000 ____D C:\ProgramData\AVG2014 2014-01-09 21:26 - 2014-01-09 21:26 - 00000000 ____D C:\$AVG 2014-01-09 21:25 - 2014-01-09 22:33 - 00000000 ____D C:\Program Files\AVG 2014-01-09 21:10 - 2014-01-22 15:09 - 00000000 ____D C:\ProgramData\MFAData 2014-01-09 21:10 - 2014-01-09 21:36 - 00000000 ____D C:\Users\XX\AppData\Local\Avg2014 2014-01-09 21:10 - 2014-01-09 21:10 - 00000000 ____D C:\Users\XX\AppData\Local\MFAData 2014-01-09 21:02 - 2014-01-09 21:08 - 137189352 _____ (AVG Technologies) C:\Users\XX\Downloads\avg_free_x86_all_2014_4259a6848.exe 2013-12-30 22:56 - 2013-12-30 22:56 - 00000000 ____D C:\Users\XX\AppData\Roaming\Malwarebytes 2013-12-30 22:56 - 2013-12-30 22:56 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-12-30 22:55 - 2014-01-13 20:41 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\XX\Downloads\mbam-setup-1.75.0.1300.exe 2013-12-30 21:19 - 2013-12-30 21:19 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard 2013-12-29 22:04 - 2013-12-29 22:04 - 00000000 ____D C:\ProgramData\Websteroids 2013-12-29 19:37 - 2014-01-22 14:00 - 00000000 ____D C:\AdwCleaner 2013-12-29 19:36 - 2013-12-29 19:36 - 01233962 _____ C:\Users\XX\Downloads\adwcleaner_3.016.exe 2013-12-29 19:25 - 2013-12-29 19:25 - 00001212 _____ C:\Users\XX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Create Amazing Presentations.lnk 2013-12-29 19:22 - 2013-12-31 01:05 - 00000000 ____D C:\Program Files\AmiExt 2013-12-29 19:22 - 2013-12-31 00:36 - 00000000 ____D C:\ProgramData\Updater 2013-12-29 19:19 - 2013-12-29 21:56 - 00000444 __RSH C:\ProgramData\ntuser.pol 2013-12-29 19:18 - 2013-12-29 19:48 - 00000000 ____D C:\Users\XX\AppData\Roaming\Uniblue 2013-12-29 19:18 - 2013-12-29 19:48 - 00000000 ____D C:\Program Files\Uniblue 2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 ____D C:\Users\XX\AppData\Local\cache 2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 ____D C:\Users\XX\.android 2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 _____ C:\Users\XX\daemonprocess.txt 2013-12-28 21:54 - 2014-01-13 21:30 - 00000000 ____D C:\ProgramData\Browser faster ==================== One Month Modified Files and Folders ======= 2014-01-22 15:13 - 2014-01-22 02:26 - 00015604 _____ C:\Users\XX\Desktop\FRST.txt 2014-01-22 15:11 - 2014-01-22 15:11 - 00000000 ____D C:\Users\XX\Desktop\FRST-OlderVersion 2014-01-22 15:11 - 2014-01-22 02:25 - 01221632 _____ (Farbar) C:\Users\XX\Desktop\FRST.exe 2014-01-22 15:11 - 2014-01-22 02:25 - 00000000 ____D C:\FRST 2014-01-22 15:10 - 2012-09-22 20:29 - 00000000 ___RD C:\Users\XX\Dropbox 2014-01-22 15:10 - 2012-09-22 20:06 - 00000000 ____D C:\Users\XX\AppData\Roaming\Dropbox 2014-01-22 15:09 - 2014-01-09 21:10 - 00000000 ____D C:\ProgramData\MFAData 2014-01-22 15:09 - 2013-05-15 21:29 - 00000000 ____D C:\Users\XX\AppData\Roaming\sparkleshare 2014-01-22 15:08 - 2012-10-25 21:47 - 00074652 _____ C:\Windows\setupact.log 2014-01-22 15:06 - 2011-11-27 10:12 - 01211374 _____ C:\Windows\WindowsUpdate.log 2014-01-22 15:06 - 2009-07-14 05:34 - 00014960 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-22 15:06 - 2009-07-14 05:34 - 00014960 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-22 14:59 - 2014-01-22 14:59 - 00010678 _____ C:\Users\XX\Desktop\CRO.zip 2014-01-22 14:58 - 2013-01-25 14:02 - 00115508 _____ C:\Windows\PFRO.log 2014-01-22 14:47 - 2014-01-22 14:47 - 00120996 _____ C:\Users\XX\Desktop\Combo.txt 2014-01-22 14:45 - 2014-01-22 14:45 - 00120996 _____ C:\ComboFix.txt 2014-01-22 14:45 - 2014-01-22 14:13 - 00000000 ____D C:\Qoobox 2014-01-22 14:45 - 2009-07-14 03:37 - 00000000 ___RD C:\Users\Public 2014-01-22 14:43 - 2014-01-22 14:13 - 00000000 ____D C:\Windows\erdnt 2014-01-22 14:41 - 2009-07-14 03:04 - 00000215 _____ C:\Windows\system.ini 2014-01-22 14:16 - 2014-01-13 20:05 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy 2 2014-01-22 14:15 - 2014-01-22 14:15 - 00000079 _____ C:\Windows\wininit.ini 2014-01-22 14:15 - 2014-01-13 20:05 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2014-01-22 14:11 - 2014-01-22 14:10 - 05173757 ____R (Swearware) C:\Users\XX\Desktop\ComboFix.exe 2014-01-22 14:10 - 2014-01-22 14:10 - 00001909 _____ C:\Users\XX\Desktop\AdwCleaner[S4].txt 2014-01-22 14:00 - 2013-12-29 19:37 - 00000000 ____D C:\AdwCleaner 2014-01-22 13:54 - 2013-01-23 19:07 - 00000000 ____D C:\ProgramData\InstallMate 2014-01-22 10:14 - 2014-01-22 02:27 - 00029900 _____ C:\Users\XX\Desktop\Addition.txt 2014-01-21 18:36 - 2014-01-09 22:25 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} 2014-01-21 18:22 - 2014-01-21 18:22 - 00002175 _____ C:\Users\Public\Desktop\AVG 1-Klick-Wartung.lnk 2014-01-21 18:22 - 2014-01-21 18:22 - 00002151 _____ C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk 2014-01-21 17:59 - 2014-01-21 17:57 - 78353784 _____ (AVG) C:\Users\XX\Downloads\avg_tuh_stf_all_2014_295 (1).exe 2014-01-21 17:58 - 2014-01-21 17:57 - 78353784 _____ (AVG) C:\Users\XX\Downloads\avg_tuh_stf_all_2014_295.exe 2014-01-21 00:14 - 2014-01-21 00:13 - 01236282 _____ C:\Users\XX\Desktop\adwcleaner.exe 2014-01-20 20:45 - 2014-01-20 19:32 - 00000000 ____D C:\Program Files\SUPERAntiSpyware 2014-01-20 19:49 - 2014-01-20 19:49 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf16104a353afe.job 2014-01-20 19:39 - 2014-01-20 19:39 - 00002197 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2014-01-20 19:39 - 2013-12-16 02:09 - 00000000 ____D C:\Program Files\Google 2014-01-20 19:33 - 2014-01-20 19:33 - 00000504 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task fb3e5a6f-b3a6-4850-b703-966e9e14f035.job 2014-01-20 19:33 - 2014-01-20 19:33 - 00000504 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task da457c5e-ce80-4c51-9dc8-70fbe63dcce0.job 2014-01-20 19:33 - 2014-01-20 19:33 - 00000000 ____D C:\Users\XX\AppData\Roaming\SUPERAntiSpyware.com 2014-01-20 19:32 - 2014-01-20 19:32 - 00001965 _____ C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk 2014-01-20 19:32 - 2014-01-20 19:32 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com 2014-01-20 19:31 - 2014-01-20 19:31 - 29393568 _____ (SUPERAntiSpyware) C:\Users\XX\Downloads\SUPERAntiSpyware_5.7.0.1018.exe 2014-01-20 17:25 - 2011-11-27 10:53 - 00000000 ____D C:\Users\XX\AppData\Local\Microsoft Help 2014-01-15 08:09 - 2014-01-10 18:19 - 00408696 _____ C:\Windows\system32\FNTCACHE.DAT 2014-01-15 03:11 - 2013-07-30 06:47 - 00000000 ____D C:\Windows\system32\MRT 2014-01-15 03:02 - 2011-11-27 10:57 - 83425928 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-01-15 02:22 - 2014-01-15 02:22 - 00000000 ____D C:\Program Files\Common Files\Java 2014-01-15 02:22 - 2013-10-15 08:29 - 00000000 ____D C:\ProgramData\Oracle 2014-01-15 02:20 - 2014-01-15 02:21 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-01-15 02:20 - 2014-01-15 02:20 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-01-15 02:20 - 2014-01-15 02:20 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2014-01-15 02:20 - 2014-01-15 02:20 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2014-01-15 02:20 - 2012-09-26 11:59 - 00868264 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll 2014-01-15 02:20 - 2012-09-26 11:59 - 00790440 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll 2014-01-15 02:19 - 2014-01-15 02:19 - 00000000 ____D C:\Program Files\Java 2014-01-14 08:54 - 2014-01-14 08:54 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2014-01-14 08:52 - 2014-01-14 08:52 - 06951048 _____ (Microsoft Corporation) C:\Users\XX\Downloads\Silverlight.exe 2014-01-13 21:55 - 2011-11-27 10:19 - 00000000 ____D C:\Users\XX 2014-01-13 21:43 - 2011-11-27 19:59 - 00000000 ____D C:\Users\XX\AppData\Local\Corel 2014-01-13 21:43 - 2011-11-27 19:57 - 00000952 ___SH C:\Windows\system32\KGyGaAvL.sys 2014-01-13 21:30 - 2013-12-28 21:54 - 00000000 ____D C:\ProgramData\Browser faster 2014-01-13 21:30 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\PLA 2014-01-13 21:00 - 2014-01-13 21:00 - 00001071 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-13 21:00 - 2014-01-13 21:00 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware 2014-01-13 20:41 - 2013-12-30 22:55 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\XX\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-13 20:26 - 2014-01-13 20:25 - 00000000 ____D C:\Windows\220FB0354744483A9A0B41DF77061583.TMP 2014-01-13 19:54 - 2014-01-13 19:53 - 40658208 _____ (Safer-Networking Ltd. ) C:\Users\XX\Downloads\spybot-2.2.25.exe 2014-01-12 14:27 - 2011-11-27 10:23 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI 2014-01-12 13:14 - 2014-01-12 13:14 - 00000220 _____ C:\Windows\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013.job 2014-01-12 10:22 - 2013-08-05 11:58 - 00000000 ____D C:\Users\XX\AppData\Local\Audible 2014-01-11 18:13 - 2011-11-27 10:19 - 00000000 ____D C:\Users\XX\AppData\Local\VirtualStore 2014-01-11 17:13 - 2014-01-11 17:13 - 00000404 _____ C:\Windows\Tasks\AVG_REG_1213b.job 2014-01-11 17:13 - 2014-01-11 17:13 - 00000386 _____ C:\Windows\Tasks\AVG_SYS_TASK_DELETE.job 2014-01-11 17:13 - 2014-01-11 17:13 - 00000000 ____D C:\ProgramData\AVG 1213b Campaign 2014-01-10 18:19 - 2013-05-07 08:04 - 00000000 ____D C:\Users\XX\.thumbnails 2014-01-10 16:04 - 2012-09-22 20:29 - 00000970 _____ C:\Users\XX\Desktop\Dropbox.lnk 2014-01-10 16:04 - 2012-09-22 20:28 - 00000000 ____D C:\Users\XX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-01-10 15:45 - 2014-01-10 15:45 - 00109280 _____ C:\Users\XX\AppData\Local\GDIPFONTCACHEV1.DAT 2014-01-09 22:41 - 2014-01-09 22:27 - 00000000 ____D C:\ProgramData\AVG 2014-01-09 22:35 - 2014-01-09 22:35 - 00000000 ____D C:\Users\XX\AppData\Roaming\AVG 2014-01-09 22:33 - 2014-01-09 21:25 - 00000000 ____D C:\Program Files\AVG 2014-01-09 22:22 - 2014-01-09 22:22 - 78353832 _____ (AVG) C:\Users\XX\Downloads\avg_tuh_stf_all_2014_295_24c28.exe 2014-01-09 21:36 - 2014-01-09 21:10 - 00000000 ____D C:\Users\XX\AppData\Local\Avg2014 2014-01-09 21:30 - 2014-01-09 21:30 - 00000212 _____ C:\Windows\Tasks\SidebarExecute.job 2014-01-09 21:30 - 2014-01-09 21:30 - 00000000 ____D C:\Users\XX\AppData\Roaming\AVG2014 2014-01-09 21:30 - 2014-01-09 21:26 - 00000000 ____D C:\ProgramData\AVG2014 2014-01-09 21:29 - 2014-01-09 21:29 - 00000951 _____ C:\Users\Public\Desktop\AVG 2014.lnk 2014-01-09 21:29 - 2014-01-09 21:29 - 00000000 ____D C:\Users\XX\AppData\Roaming\TuneUp Software 2014-01-09 21:26 - 2014-01-09 21:26 - 00000000 ____D C:\$AVG 2014-01-09 21:10 - 2014-01-09 21:10 - 00000000 ____D C:\Users\XX\AppData\Local\MFAData 2014-01-09 21:08 - 2014-01-09 21:02 - 137189352 _____ (AVG Technologies) C:\Users\XX\Downloads\avg_free_x86_all_2014_4259a6848.exe 2013-12-31 01:08 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\addins 2013-12-31 01:05 - 2013-12-29 19:22 - 00000000 ____D C:\Program Files\AmiExt 2013-12-31 00:36 - 2013-12-29 19:22 - 00000000 ____D C:\ProgramData\Updater 2013-12-31 00:36 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Web 2013-12-31 00:36 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Resources 2013-12-31 00:33 - 2013-12-22 17:53 - 00000000 ____D C:\ProgramData\wEbbsaaver 2013-12-31 00:33 - 2013-12-22 17:08 - 00000000 ____D C:\ProgramData\SimaRtComppare 2013-12-30 22:56 - 2013-12-30 22:56 - 00000000 ____D C:\Users\XX\AppData\Roaming\Malwarebytes 2013-12-30 22:56 - 2013-12-30 22:56 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-12-30 22:05 - 2011-11-27 10:53 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-12-30 21:19 - 2013-12-30 21:19 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard 2013-12-30 01:34 - 2011-11-27 10:20 - 00001146 _____ C:\Users\XX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-12-29 22:04 - 2013-12-29 22:04 - 00000000 ____D C:\ProgramData\Websteroids 2013-12-29 21:56 - 2013-12-29 19:19 - 00000444 __RSH C:\ProgramData\ntuser.pol 2013-12-29 19:48 - 2013-12-29 19:18 - 00000000 ____D C:\Users\XX\AppData\Roaming\Uniblue 2013-12-29 19:48 - 2013-12-29 19:18 - 00000000 ____D C:\Program Files\Uniblue 2013-12-29 19:36 - 2013-12-29 19:36 - 01233962 _____ C:\Users\XX\Downloads\adwcleaner_3.016.exe 2013-12-29 19:25 - 2013-12-29 19:25 - 00001212 _____ C:\Users\XX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Create Amazing Presentations.lnk 2013-12-29 19:19 - 2009-07-14 03:37 - 00000000 ___HD C:\Windows\system32\GroupPolicy 2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 ____D C:\Users\XX\AppData\Local\cache 2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 ____D C:\Users\XX\.android 2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 _____ C:\Users\XX\daemonprocess.txt Files to move or delete: ==================== C:\Users\XX\AppData\Roaming\skype.ini ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-09-01 14:11 ==================== End Of Log ============================ --- --- --- |
22.01.2014, 16:45 | #9 |
/// TB-Ausbilder | Werbefenster öffnen sich bei Firefox Ok, sind die Werbefenster nach folgenden Schritten verschwunden? Schritt 1 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Ersetze in deinem Fixskript unbedingt alle XX wieder durch den richtigen Benutzernamen, sonst wird der Fix nicht funktionieren!! Code:
ATTFilter FF Extension: SimaRtComppare - C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\rwyk3m6g.default\Extensions\0qwtoma@rpekoxp.net [2013-12-24] FF Extension: wEbbsaaver - C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\rwyk3m6g.default\Extensions\amtx484@cp-ooie.com [2013-12-24] FF HKCU\...\Firefox\Extensions: [{33044118-6597-4D2F-ABEA-7974BB185379}] - C:\Users\XX\AppData\Roaming\16001.015 FF HKCU\...\Firefox\Extensions: [{48d99c73-1969-4275-b409-3bffc15bc112}] - C:\Program Files\Re-markit\150.xpi S2 05837205; C:\ProgramData\Browser faster\BrowserfasterSvc.dll [180048 2013-12-28] () C:\ProgramData\Browser faster 2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 ____D C:\Users\XX\AppData\Local\cache 2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 ____D C:\Users\XX\.android 2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 _____ C:\Users\XX\daemonprocess.txt C:\Users\XX\AppData\Roaming\skype.ini Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Schritt 2 ESET Online Scanner
__________________ cheers, Leo |
22.01.2014, 19:46 | #10 |
| Werbefenster öffnen sich bei FirefoxCode:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 22-01-2014 01 Ran by xx at 2014-01-22 17:56:55 Run:1 Running from C:\Users\xx\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** FF Extension: SimaRtComppare - C:\Users\xx\AppData\Roaming\Mozilla\Firefox\Profiles\rwyk3m6g.default\Extensions\0qwtoma@rpekoxp.net [2013-12-24] FF Extension: wEbbsaaver - C:\Users\xx\AppData\Roaming\Mozilla\Firefox\Profiles\rwyk3m6g.default\Extensions\amtx484@cp-ooie.com [2013-12-24] FF HKCU\...\Firefox\Extensions: [{33044118-6597-4D2F-ABEA-7974BB185379}] - C:\Users\xx\AppData\Roaming\16001.015 FF HKCU\...\Firefox\Extensions: [{48d99c73-1969-4275-b409-3bffc15bc112}] - C:\Program Files\Re-markit\150.xpi S2 05837205; C:\ProgramData\Browser faster\BrowserfasterSvc.dll [180048 2013-12-28] () C:\ProgramData\Browser faster 2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 ____D C:\Users\xx\AppData\Local\cache 2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 ____D C:\Users\xx\.android 2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 _____ C:\Users\xx\daemonprocess.txt C:\Users\xx\AppData\Roaming\skype.ini ***************** C:\Users\xx\AppData\Roaming\Mozilla\Firefox\Profiles\rwyk3m6g.default\Extensions\0qwtoma@rpekoxp.net => Moved successfully. C:\Users\xx\AppData\Roaming\Mozilla\Firefox\Profiles\rwyk3m6g.default\Extensions\amtx484@cp-ooie.com => Moved successfully. HKCU\Software\Mozilla\Firefox\Extensions\\{33044118-6597-4D2F-ABEA-7974BB185379} => Value deleted successfully. HKCU\Software\Mozilla\Firefox\Extensions\\{48d99c73-1969-4275-b409-3bffc15bc112} => Value deleted successfully. 05837205 => Service deleted successfully. C:\ProgramData\Browser faster => Moved successfully. C:\Users\xx\AppData\Local\cache => Moved successfully. C:\Users\xx\.android => Moved successfully. C:\Users\xx\daemonprocess.txt => Moved successfully. C:\Users\xx\AppData\Roaming\skype.ini => Moved successfully. ==== End of Fixlog ==== Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=fc65ca804fb7c34086169dac1ee2d10e # engine=16754 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2014-01-22 06:39:09 # local_time=2014-01-22 07:39:09 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=5893 16776574 100 94 23857 142047140 0 0 # scanned=162909 # found=8 # cleaned=0 # scan_time=5395 sh=AFA720CBD7D5305BFF5638D611AA39EEA12AAF57 ft=0 fh=0000000000000000 vn="Win32/Adware.AddLyrics.L application" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\LyricsPal\130.crx.vir" sh=F25A761B18D85D7C05645EC790E2CADB18BFF8DD ft=0 fh=0000000000000000 vn="Win32/Adware.AddLyrics.L application" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\LyricsPal\130.xpi.vir" sh=C5828B700B9EF61FA1534D5D18482BF12F591CBF ft=1 fh=0404da55e35b3671 vn="a variant of Win32/AdWare.SpeedingUpMyPC.D application" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\optimizer pro\OptProLauncher.exe.vir" sh=D30D21D72B50640D1C16A54D88010260DE4F65DF ft=0 fh=0000000000000000 vn="Win32/Adware.AddLyrics.L application" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\xx\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnbbffeddnekkhjmokkhdebbfbibbflc\1.130_0\cs.js.vir" sh=47F1E763FA3D370BDB499DD3BE20E7F7105DF89E ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application" ac=I fn="C:\FRST\Quarantine\0qwtoma@rpekoxp.net\content\bg.js" sh=7D159BE9E5DF85B8E0CA033D0648AEE5B4D6DA80 ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application" ac=I fn="C:\FRST\Quarantine\amtx484@cp-ooie.com\content\bg.js" sh=D8FE4C2488525A9B863AA07545D9954218A5DCAB ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application" ac=I fn="C:\ProgramData\dlblfogkeompmfdmmhfigfcbakbaklkm\bqRFqtJUyVxE.js" sh=D8FE4C2488525A9B863AA07545D9954218A5DCAB ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application" ac=I fn="C:\Users\All Users\dlblfogkeompmfdmmhfigfcbakbaklkm\bqRFqtJUyVxE.js" |
22.01.2014, 19:47 | #11 |
/// TB-Ausbilder | Werbefenster öffnen sich bei Firefox Und wie siehts jetzt aus? Erscheinen noch Werbefenster oder sonst was Störendes?
__________________ cheers, Leo |
22.01.2014, 19:51 | #12 |
| Werbefenster öffnen sich bei Firefox Nein, alles super. Er läuft auch endlich wieder richtig und bleibt nicht ständig hängen. Ist er weg :-)? |
22.01.2014, 20:01 | #13 |
/// TB-Ausbilder | Werbefenster öffnen sich bei Firefox Ja sieht gut aus. Schritt 1 Drücke die + R Taste und schreibe "notepad" in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument: Code:
ATTFilter ¨C:\ProgramData\dlblfogkeompmfdmmhfigfcbakbaklkm
Schritt 2 Lade dir TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.
Schritt 3 Dein Java ist nicht mehr aktuell. Ältere Versionen enthalten Sicherheitslücken, die von Malware zur Infizierung per Drive-by Download missbraucht werden können. Die aktuelle Version ist Java 7 Update 51.
Überleg dir also, ob du eine Java-Installation wirklich brauchst. Falls du Java weiterhin verwenden möchtest, dann:
Schritt 4 Die Version deines Adobe PDF Readers ist veraltet, wir müssen ihn updaten:
Schritt 5 Dein Flashplayer ist veraltet. Installiere folgendermassen die aktuelle Version:
Cleanup Zum Schluss werden wir jetzt noch unsere Tools (inklusive der Quarantäne-Ordner) wegräumen, die verseuchten Systemwiederherstellungspunkte löschen und alle Einstellungen wieder herrichten. Auch diese Schritte sind noch wichtig und sollten in der angegebenen Reihenfolge ausgeführt werden.
>> OK << Wir sind durch, deine Logs sehen für mich im Moment sauber aus. Ich habe dir nachfolgend ein paar Hinweise und Tipps zusammengestellt, die dazu beitragen sollen, dass du in Zukunft unsere Hilfe nicht mehr brauchen wirst. Bitte gib mir danach noch eine kurze Rückmeldung, wenn auch von deiner Seite keine Probleme oder Fragen mehr offen sind, damit ich dieses Thema als erledigt betrachten kann. Epilog: Tipps, Dos & Don'ts Aktualität von System und Software Das Betriebsystem Windows muss zwingend immer auf dem neusten Stand sein. Stelle sicher, dass die automatischen Updates aktiviert sind:
Auch die installierte Software sollte immer in der aktuellsten Version vorliegen. Speziell gilt das für den Browser, Java, Flash-Player und PDF-Reader, denn bekannte Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim blossen Besuch einer präparierten Website per Drive-by Download Malware zu installieren. Das kann sogar auf normalerweise legitimen Websites geschehen, wenn es einem Angreifer gelungen ist, seinen Code in die Seite einzuschleusen, und ist deshalb relativ unberechenbar.
Sicherheits-Software Eine Bemerkung vorneweg: Jede Softwarelösung hat ihre Schwächen. Die gesamte Verantwortung für die Sicherheit auf Software zu übertragen und einen Rundum-Schutz zu erwarten, wäre eine gefährliche Illusion. Bei unbedachtem oder bewusst risikoreichem Verhalten wird auch das beste Programm früher oder später seinen Dienst versagen (z.B. ein Virenscanner, der eine verseuchte Datei nicht erkennt). Trotzdem ist entsprechende Software natürlich wichtig und hilft dir in Kombination mit einem gut gewarteten (up-to-date) System und durchdachtem Verhalten, deinen Rechner sauber zu halten.
Es liegt in der Natur der Sache, dass die am weitesten verbreitete Anwendungs-Software auch am häufigsten von Malware-Autoren attackiert wird. Es kann daher bereits einen kleinen Sicherheitsgewinn darstellen, wenn man alternative Software (z.B. einen alternativen PDF Reader) benutzt. Anstelle des Internet Explorers kann man beispielsweise den Mozilla Firefox einsetzen, für welchen es zwei nützliche Addons zur Empfehlung gibt:
(Un-)Sicheres Verhalten im Internet Nebst unbemerkten Drive-by Installationen wird Malware aber auch oft mehr oder weniger aktiv vom Benutzer selbst installiert. Der Besuch zwielichtiger Websites kann bereits Risiken bergen. Und Downloads aus dubiosen Quellen sind immer russisches Roulette. Auch wenn der Virenscanner im Moment darin keine Bedrohung erkennt, muss das nichts bedeuten.
Oft wird auch versucht, den Benutzer mit mehr oder weniger trickreichen Methoden dazu zu bringen, eine für ihn verhängnisvolle Handlung selbst auszuführen (Überbegriff Social Engineering).
Nervige Adware (Werbung) und unnötige Toolbars werden auch meist durch den Benutzer selbst mitinstalliert.
Allgemeine Hinweise Abschliessend noch ein paar grundsätzliche Bemerkungen:
Wenn du möchtest, kannst du das Forum mit einer kleinen Spende unterstützen. Es bleibt mir nur noch, dir unbeschwertes und sicheres Surfen zu wünschen und dass wir uns hier so bald nicht wiedersehen.
__________________ cheers, Leo |
22.01.2014, 21:44 | #14 |
| Werbefenster öffnen sich bei Firefox Hallo Leo, vielen lieben Dank für alles. Es läuft jetzt alles wieder rund und ich bin glücklich. Eine Frage noch: Was meinst Du mit MBAM? Liebe Grüße Josi |
22.01.2014, 22:09 | #15 |
/// TB-Ausbilder | Werbefenster öffnen sich bei Firefox MBAM = Malwarebytes_Anti-Malware. Sorry, mein Fehler, das haben wir hier ja gar nicht eingesetzt.. Freut mich, dass wir helfen konnten. Falls du dem Forum noch Verbesserungsvorschläge, Kritik oder ein Lob mitgeben möchtest, kannst du das hier tun. Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Ich bekomme somit keine Benachrichtigung mehr über neue Antworten. Solltest du das Thema erneut brauchen, schicke mir bitte eine PM und wir machen hier weiter. Jeder andere bitte diese Anleitung lesen und einen eigenen Thread erstellen.
__________________ cheers, Leo |
Themen zu Werbefenster öffnen sich bei Firefox |
andere, deinstalliert, diverse, fehler, firefox, installiert, java, laufend, logfiles, media player, nationzoom, nationzoom entfernen, player, scan, scanner, spyhunter, spyhunter entfernen, verloren, werbefenster, win32/adware.addlyrics.l, win32/adware.multiplug.h, win32/adware.speedingupmypc.d, ähnliches, öffnen |